hxxps://bonzibuddy[.]org/download[.]html

Analysis

max time kernel
900s
max time network
864s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/07/2026, 15:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bonzibuddy.org/download.html
Sample260712-s5cb8set7s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4428	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134283449393385881"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
3056	chrome.exe
3056	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe
Token: SeShutdownPrivilege	4556	chrome.exe
Token: SeCreatePagefilePrivilege	4556	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe
4556	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4556 wrote to memory of 4204	4556	chrome.exe	85
PID 4556 wrote to memory of 2336	4556	chrome.exe	86
PID 4556 wrote to memory of 2336	4556	chrome.exe	86
PID 4556 wrote to memory of 4428	4556	chrome.exe	87
PID 4556 wrote to memory of 3704	4556	chrome.exe	88
PID 4556 wrote to memory of 3704	4556	chrome.exe	88
PID 4556 wrote to memory of 2136	4556	chrome.exe	90
PID 4556 wrote to memory of 2136	4556	chrome.exe	90
PID 4556 wrote to memory of 2496	4556	chrome.exe	91
PID 4556 wrote to memory of 2496	4556	chrome.exe	91
PID 4556 wrote to memory of 4604	4556	chrome.exe	92
PID 4556 wrote to memory of 4604	4556	chrome.exe	92
PID 4556 wrote to memory of 3992	4556	chrome.exe	93
PID 4556 wrote to memory of 1164	4556	chrome.exe	99
PID 4556 wrote to memory of 3960	4556	chrome.exe	100
PID 4556 wrote to memory of 1576	4556	chrome.exe	101
PID 4556 wrote to memory of 3056	4556	chrome.exe	107
PID 4556 wrote to memory of 3424	4556	chrome.exe	108
PID 4556 wrote to memory of 3424	4556	chrome.exe	108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bonzibuddy.org/download.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb3669c728,0x7ffb3669c734,0x7ffb3669c740
  2⤵
  PID:4204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,10539710937088328355,11396349169791829217,262144 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2220,i,4880324384569573708,9937790600905626559,524288 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,6066536821909760405,4902773564879020716,524288 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3168,i,10996315227640813096,3971720598148924328,2097152 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3164,i,13595475919388062261,13304723246888383074,2097152 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4252,i,10338062917195760594,9648250287198167544,2097152 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5316,i,13338417749983065694,17083424566999318418,524288 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5692,i,11338523642062918954,969991588805180210,524288 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,6771775793765988818,15973698439797944792,524288 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5680,i,3744332627126161768,14224425497093987674,524288 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1020,i,1001933344334198724,14581705830091337469,262144 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5756,i,11486927235598213731,17217017323857588158,524288 --field-trial-handle=1984,i,12011481689611467775,7093071526353388490,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:3424

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4544

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 068e60c22a5ff4b08fd5cab69f3fc1eae6c7fcb68279f66a9d981fa50f47ba70
MD5 cda5a83fc73569b5e3046c2be17b41d8
SHA1 077094525d57c3a28d4a36a2ab0df42a1083aa69
SHA512 2f1c78bfa4604a88ebd77e1072614fa36e637f6777fea0ad40319b5c158a46fe66d55df014088d4719315e2c22c67434d3abbcf6dc9247fd62291e8a4e526d4f
TLSH
T18DE02B66C861DC2B14F90759A0105785E755139B2B818D4BBF3CC20C8FB16364586E2C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 07b7ebbc2b4815ebde8538c39e19586ffa6265b35cc821268c9a291ba79cbd91
MD5 a818bf782894c01c6571e069c379152e
SHA1 c77045de97d9cfab426a15d9f96b6791b5a5d8a5
SHA512 8c25c10cbcf97b5bea8d8ff1abfb513718071cc9548c63e84f82b8f4305215daf75f0aa8758288c86df927f98560e34cbb4996212c9b52948e789ca5be36fda6
TLSH
T19D418EF783B4897D8A1196F4EB156F1FCE690524032C7CA685E46E1B53F29B2D140B8E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 81dd6100d732cb042242d3e4523605f1d23381fd96d32a1d2f52076bc283e1ac
MD5 aa7ae4ebdf7b5d8b466708216c010352
SHA1 be09609180df68d670584bd921ea40d40a0ab6b7
SHA512 66882bc3bb70e5ebd7bc809b113f15f7ab579d85c85f19ab32e8e714fcc2114fce90399613f19172b781a4d9f7e3d8624e398e6f50b8c6840c37140882d71687
TLSH
T1174146F3C7EC896D890196F8AA192E1FCE790E14536C3C5788E4AE1B53E2871D25158E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bf601ebfa6791cf91af5fe0c5119a625c8b7af9438608e25cedc0c7e8322c4bb
MD5 79d3d8266b03522ecc14cb474747b86f
SHA1 7f6cc6e1b96c3d19b092a823367e3fd988767fd2
SHA512 dab2fa52613aad382fce074e59c75cc02ba385d70cb7652ad5ed2d022fabd5620ac4422441827b85e45e2c1cb418b6f47091c885acf49502549f194c37bf0341
TLSH
T17D317AF793B4997E8A1196E4AB156F1FCE690524031C3CA689E46D1B53E29B2D10078E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 519B
SHA256 27a9dc31754d31094097211b4983b57e1ee980084d5c7b34cd2fff9a714a268f
MD5 7272c8b5c1407380326c1d1733746cf9
SHA1 6db5353731f86919b49fa86fa17936fce7ca257f
SHA512 5a20e149a8a63f66327905a919c58bee0eae43f2d2ee67fe877383dcfa0b7301126d188a0340a1cae2c38ce5c773c5e88a69db6f6b6bc1e071c96bf529018a55
TLSH
T1B1F050B7E67E746B507944BB5D057C0D55B57835028268F4CE7AC16DE0851E70F13493
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f9d6560ea24f1cf4a3cc7503a28928f079a3dc801a4f1c5cd28ef30987c541b4
MD5 d1139d0cc59a2c4c85cf86059b1e1c4c
SHA1 499a3a64217c1a83a0c0b1fa2e0d0c3d60380f3a
SHA512 5b76394af6b59e93bfda2a06688eec7909b2ebf80f7abf7a6eac839dd7cd6732d4ad683b9830d5b131c2f165c009292cf0c10d7813fed3629b60fe19cb553f43
SSDEEP 192:IRI5ycMkivKv70pOPRpAd8ws9+Hsb+WNnl/kau29q2mqkwDVyIsnAUgE:IRI5nM7GgaXd8wN0282mqFE
TLSH
T19052D62EAA20697BACDED229FD51BB53D3F5202225901E84E7FCCB1C15E75CC2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8ced332b882edbbecb3b08c350ea819031293e3c804cbf02fbfb80fde584e52a
MD5 9b7e98ed5f202ffdf3e3ade539f5cf0f
SHA1 988f533384846e3f7001e1e894037c03ec4cfad5
SHA512 1d2b68e37f485e49f57897543e0adefb540c0a7d6f08fca7d701c1574770159fd9b2a6bbeae24e2252b4dd5eac2c860e7832cbcbafa9f40807e979cdc119c79d
SSDEEP 192:IRI5ncMkivKv70pAPRp2d8ws9+Hsb+WNnl/kau2Zq2mqkwAVyIsnAUge:IRI5cM7GgUX78wN02A2mqke
TLSH
T1F242C62EAA20697BACEFD226FD61B753D7F6102125911E84E7FCCA2C15E75CC212701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 183ff68a5bbf70133b60c22e34d5c8bdee92bc6655394339ecca2a9f66999c5f
MD5 adc66498dd8fe87db1efa527ca9f4a34
SHA1 2147f84398e6f7c5b38e2caff250162526e810fc
SHA512 a83c82d00c5381c7f8885bc17d59f4f6012ae6a621eca8429415257175b3872c146e52296e9d9401acd8ca491d25a6447484bf9d087362a8b47c92f5cf9d1ab5
TLSH
T1C5B01244C0026581C02206F812861488B158AF10DA0F1B0743E0792688351518014150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58940d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58940d.TMP
Size 96B
SHA256 7906fee161a5b58477c09898071a59a522af7fec3e3f5748f6ea973291683e7d
MD5 352969a016c5cf27ce729e1d5a1f9ee2
SHA1 2e55748a0f977c06cb8ec38fbcb86251a24ba262
SHA512 1f225ae4c9b879ce2c62c6bcd7d0ffdd52da5601836441dca98eabba822fc22bb9ed1c385fd79d2fce46e3ff9ad7a09ff86e89efc92b670d08b4005f5d2c4ed5
TLSH
T1C2B002E5C3036A22C05207F77D9596D8B170EF25C7131216A7F85A6EDC277604E25B64
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 af1407dfebfd145b87f895559177f7a52a718e8f5d8b49343325c2c007815742
MD5 54972a03a06c5fc07503a68529bb2a2c
SHA1 8592cae8e4447023043967be55cc5d1956f84a60
SHA512 310573a18f97bd2597fcbd830f9550f82dfd17876fab54943a7fb093059af4106a675cae26e7008b8dc1312cdb237b10f6dd085b7b5185664af70318f6867a29
SSDEEP 1536:iSKzoyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICo:T2Kqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1B3C30237EBC21E339DD2DB60B5130E9697F604AA9034D301EEAD3BAB7893451A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2ba79bb2da04f02e54838d071e61c31244cd9e270c63c08f1816bc1db95ad63f
MD5 96c62ca871ce493569591b3be9bed7ee
SHA1 f7ee86d7b29858173d1ebfc32103aa4e61caad90
SHA512 be5f22b2c272040160872b095c0d14c19495da0707b211fa161bf91c99031d0a439f3807051cca893baa16ba80988a82b2673950c0ee25b4fcaf0689edcbd8f7
SSDEEP 1536:mSKzoyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICo:f2Kqfd7NtZL8cHQRZEQ6Sps3
TLSH
T121C30237EBC21E335DD2DB60B9130FD697F604AA9034D301EEAD7BAB7893591A44249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 05473a0231fe2b36e667c8bfa15fbda0b5db6504345b538a1b541512ce25e5a8
MD5 a3e38779f0dc42014f0a9023dcf78204
SHA1 48aa1e756c137e55ef4614ec5243ddc528205c4e
SHA512 92611d1324ff045ad5e83aa0d281be50fc2d684d9b029d87ed1e1135e010494b5e7b7a0ab0ade30f71b74c96b636034f5a1ac42292c5ae6810cfc4ce09cac0e5
SSDEEP 1536:brLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:9qfd7NtZL8cHQRZEQ6Sps3
TLSH
T1D6C30237EBC21F379D92CF64B9130FD6A7B644A99030D301AAAD37EB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 eb4a05c6599981a05d9f66b88273ee28b68fb86cc5e0168c5d6a06385a0b420c
MD5 162bf1c5c7e5b65881860c22d90e6d4d
SHA1 16824a0c423430ff3c6973553f08dccfa9fab4df
SHA512 9a8e7a65e358b1ac2dd42aa9971f2ff4e56910babca5db59e212799fcf377736efb3d5527b81512ecb550100183b63437a94eb76f39bec268859c317ad03431c
SSDEEP 1536:mS7lyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:f7Lqfd7NtZL8cHQRZEQ6Sps3
TLSH
T147C30237ABC21F339D93CB74B9130FD797B644AA9034D301ABAD37EB689359164424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a6fae9119457f800103fe63615f5f836fd6e47074b3b4edb8d5273c9b3c3ca0c
MD5 7f941262f38a411f02ea8372354f95bf
SHA1 9b2b137f9dfb50591135253d8bb55908da95eee0
SHA512 8d3f47276717877cde46ad5090dfb2f9eebb249b35eaea011c60264aa28ae7e6126ee73c2f86a6761b35b7923e3182f6ffa294a7785c6e1a3d4f600c2ae2a95c
SSDEEP 1536:3S7lyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:C7Lqfd7NtZL8cHQRZEQ6Sps3
TLSH
T19CC30237ABC21F335D93CB74B9130FD797B644A99034D301ABAD37EB689359164424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download