hxxps://estevecka[.]sk/blog/oplati-sa-pestovat-cicer

Analysis

user interaction
yes
max time kernel
138s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/07/2026, 13:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://estevecka.sk/blog/oplati-sa-pestovat-cicer
Sample260713-qsm7vsct21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3104	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134284231040063834"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3892	chrome.exe
3892	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe
Token: SeShutdownPrivilege	3924	chrome.exe
Token: SeCreatePagefilePrivilege	3924	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe
3924	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 3924 wrote to memory of 3472	3924	chrome.exe	87
PID 3924 wrote to memory of 616	3924	chrome.exe	88
PID 3924 wrote to memory of 616	3924	chrome.exe	88
PID 3924 wrote to memory of 3104	3924	chrome.exe	89
PID 3924 wrote to memory of 1628	3924	chrome.exe	90
PID 3924 wrote to memory of 1628	3924	chrome.exe	90
PID 3924 wrote to memory of 3872	3924	chrome.exe	91
PID 3924 wrote to memory of 3872	3924	chrome.exe	91
PID 3924 wrote to memory of 384	3924	chrome.exe	92
PID 3924 wrote to memory of 384	3924	chrome.exe	92
PID 3924 wrote to memory of 4216	3924	chrome.exe	93
PID 3924 wrote to memory of 4216	3924	chrome.exe	93
PID 3924 wrote to memory of 1032	3924	chrome.exe	95
PID 3924 wrote to memory of 4620	3924	chrome.exe	98
PID 3924 wrote to memory of 4620	3924	chrome.exe	98
PID 3924 wrote to memory of 848	3924	chrome.exe	99
PID 3924 wrote to memory of 848	3924	chrome.exe	99
PID 3924 wrote to memory of 1724	3924	chrome.exe	103
PID 3924 wrote to memory of 1724	3924	chrome.exe	103
PID 3924 wrote to memory of 3676	3924	chrome.exe	107
PID 3924 wrote to memory of 3676	3924	chrome.exe	107
PID 3924 wrote to memory of 3448	3924	chrome.exe	109
PID 3924 wrote to memory of 3892	3924	chrome.exe	110
PID 3924 wrote to memory of 2056	3924	chrome.exe	111
PID 3924 wrote to memory of 3892	3924	chrome.exe	113

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://estevecka.sk/blog/oplati-sa-pestovat-cicer
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff95726c728,0x7ff95726c734,0x7ff95726c740
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,3314314672191290403,15694210541009409405,262144 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1548,i,3174307446887561600,9113085551082973250,524288 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,8502090323561344002,12605441205585893960,524288 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2400 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,6537997249688552989,18417739988601150113,2097152 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,10198979617429743713,3790181185595780845,2097152 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4452,i,17076099805422114680,3192688907478323533,2097152 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:2
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5328,i,14962232905333907579,6653383561132658898,524288 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5404,i,2488728933434724416,5231359371294030844,2097152 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5764,i,15997407446868481698,18376752101632568425,2097152 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5672,i,7487204930419093877,12615563524020850744,2097152 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5832,i,15391961693394442347,5380710950659023081,2097152 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,16689319171126140251,7160398597371566078,524288 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6388,i,11736465899431571053,7129924304527952348,524288 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6396,i,10649202184632204153,7959057186489365869,524288 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5524,i,17595683763507534404,7538391519678757687,262144 --field-trial-handle=1992,i,10370221943019902715,10428036910684728540,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3892

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3144

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 fd558d38bcdb1cb40391fea4256088cb7a08a40609373e26318a89195905356a
MD5 122d587398c1bba4e6234ef0fd613093
SHA1 ae12930eab8f0c3a6e47e1f83310f9a849e5fb10
SHA512 16d374a192e13ba5f425d9c4f39c2d7f3d07ccd94a3e42addac63d275dc525c10d24017f080c6c0e506be91294aece135a0843df42bfaa026f5c30f9b460d1e1
TLSH
T173E02BAAC862AC2708FD471C65141786E754175B2F80594F763D9108CFB1A2B41C6CAC
MD5 SHA1 SHA512 TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 21KB
SHA256 3a3b6d69b30060296d3edb8c4dd9084a65e80323bdbf96735c6d28b3781c0e77
MD5 055735eabc18521054865696053dd551
SHA1 ca86b68507c2d4961b04de147822334288506eae
SHA512 67ec90648357d29ad265cfc36f979c6d6715e662b1f35e7b0d3204995346c4662c9f6817fde238ec043abfc45640519ef44f3d14d2165abecf734edd4b011aba
SSDEEP 384:aWY/tfoSH9g4xCpK2rZe0qaf6FUEX5hjeOZ3ujWvfxl6muyZ7nete7Q4tAcOawY9:XbzpKuZeTM6FUk5YOZG+/tZ7nSf2Oawi
TLSH
T10BA2E17A4E28A1853332B03A9FB13BF7A4FBC0D2E6E23EF61606794957243174275D49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 2fd05a3552fecee294bf32e20c993629b9f2ef74f9e09a7776654c93b9bead64
MD5 51c8e711cecd44792e353e8d0919025e
SHA1 d868c895c1d3b670852fe7e5da7264d417e5c87b
SHA512 f1818c51318f1b755e09e0a5fc278d67de37971b4c31faa6a96239ee296e74a54a2a5ca260b9f8dcf22b64d32cf8e992ead7a7645f6fe5e64f27de06acbcca32
TLSH
T1D231A624B1B07CBBEF08C33C79A92957333AD5E90012C75BB018EA28B9477EADD16520
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 c82dbb3f9c50b13d081953c9f43443052996629176a90606368e0a05c45e3ac6
MD5 cc9fcce8f446bc6373809c1b3fb0d3d0
SHA1 58689d42ddf44c52dde41721204d1677368698a4
SHA512 7fa3bcfb4b41c59384e5a0b4781f091b56d867967217cfbc79ff55849bd54517e5776f4bf18c002ade8e62a02d636166084e71e9bdee25e5e900884156e9d82b
SSDEEP 192:Dr0HJDJjJsJ+saaIEdC5YD8RnPe93R2Xvg5g8Nmm7UF0isPi7QX1QPl:Dr0pVjJsJ+saaIEdC5YD8RnG9B2Xvg5M
TLSH
T13FE18EF7C7E8AA2D9D2273F49B152E2FCE190924071C39A989E55F17A3F2471E10129F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2331937555eea73ee15b362843df4dca47a6944ed2b18795ab8839196f4eb851
MD5 4cf7a2accadcf9a7c17f42c1d3e50658
SHA1 cb4c8ddec04ffb67657d959bad5b303ae69a82e9
SHA512 07133702f277b77ae00685e682b0074992b264ec980958f5b524822ba6a532827ee7ed47cbd37074fac21fb74fc1e76b499b2749e3e4cfc49f0bcbf16393a39e
SSDEEP 192:KR2hUeZu1Bv7swAPRp22mY9wHsb+WNn6BnZdW28HtAlkwwaZXpc9VyIsnAUg5V:KR2hARYBX/TKwg7W5NiQaZZcL5V
TLSH
T1CE42C63EF955693B6CCBC22AFA217B57D7F5102126C01E94E6FC8A2C14EB5CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c4c7f54dbecd37f5421ffe4e49f130bb0ebbc0c03c9c4ee806ef27a16c8c4f44
MD5 511b3a818b1d72d6689f484ad04bda0d
SHA1 e62350ef68762614ca55716a31655a9f48f3f4fc
SHA512 3e48331c18aa23d0a20716d8535557f7d29615a6e12f4b05f5fada72c15255209f9d7924ae6bb62d084ac7cffabcbde0ac9b74b7613e21bff0537be21469c09e
SSDEEP 192:KR2hUeZu1dv7swmPRpU2m09wHsb+WNn6BnZdW88HtAlkwwaZXpccVyIsnAUgvV:KR2hAdYnXpjKwg7W3NiQaZZc4vV
TLSH
T1E252C62EF955293B6CDBD219FA11BB63D7F5102126D01E94E7FC8A1C28EB5CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 be86c73e896d070c1f03af7dbf036cbd9458d2e320d00be647200bcb3fce7ba6
MD5 5c88777c4f4d6ae1635ae96894b55e05
SHA1 2127ccd3cea6f38727aaac7edba90d6c082471a2
SHA512 23aadf05033029b306504af2fac2c3567d3d2b0d162f58ebc074ad543dede18bb875120fa64dc79aa33eec36609e58f78eb9a362bf2966bf4dcb587f07fc777f
SSDEEP 192:KR2hUeZu19v7spAPRp22mc9wHsb+WNn6BnZdW28HtAlkwwaZXpc9VyIsnAUge:KR2hA9YUX/HKwg7W5NiQaZZcLe
TLSH
T1CE42C63EF955693B6CCBD229FA217B57D7F5102126C01E94E6FC8A2C24EB5CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 dfff48405115deca52d3d91870fd13d585a7bdabef5e28776a7c0d9979b807fb
MD5 c88ee11d4b0e31e0bfced9d6ed851bcc
SHA1 dfaa4ff1159a095d41f56092a356ef956ae54ef6
SHA512 72e6248d1acf066d54f72efaff6069c93a959637b36d7fe2ce73430ab1ebd5f07e275286599e40f6b17845277d60c5317835fc74c6315018641f793a6a202604
SSDEEP 192:KR2hUeZu1av7swAPRp22m09wHsb+WNn6BnZdWy8HtAlkwwaZXpcwVyIsnAUgvV:KR2hA2YBX/jKwg7W1NiQaZZc0vV
TLSH
T1BC52B63EF955293B6CCAD219FA117B57D7F5102226C01E94E6F8CA1C24EB9CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\afcddf0dbd4a7c04bf717e7fb0f10299dc728162\68ccfeaa-6d6f-4b12-93d8-972c94d6dd24\index-dir\the-real-index
Size 72B
SHA256 993740efbc852b26940a7136a8241115208cf9ffed1a17ea1123428bc180b7c0
MD5 0981ed3c241ee30555ab8f78618e7ed9
SHA1 5097672ac32d3d684bb6a0de90429f7ce0293964
SHA512 0a7e6a88245fb2ee716b8ada53c66c7212e1a2aaf8b752a39ffb382c7e1a42be1dc6dc828ad6e780fcf425b7f4b1b11195065efe689695228a2145f263e4e9f2
TLSH
T1B6A0021C46500666DC55037D6A4725C0B7205865B9461F0955B045ADDC9055342B3089
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ef7c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\afcddf0dbd4a7c04bf717e7fb0f10299dc728162\68ccfeaa-6d6f-4b12-93d8-972c94d6dd24\index-dir\the-real-index~RFe58ef7c.TMP
Size 48B
SHA256 1c2169c829c25a080dd36d36f83d19714e2ba630848b0a5d773b462212f526df
MD5 815aa62bf6f50ae58b8602a4b15e3802
SHA1 d0c7462b9dc0a10ee808d9b87ec4a84cc88649b5
SHA512 34ef36e19dd58f31db10034706b1db1fefe80104ea045ac27299960b52689316b461d870558dba3c6d9c4357cd443dc901bdfaec9de67d034c19a1c96f214227
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\afcddf0dbd4a7c04bf717e7fb0f10299dc728162\e54a3cf2-803d-4bf0-b146-fd4316d9cede\index-dir\the-real-index
Size 72B
SHA256 abd3a75b40ac95c4dd86218148690e010029a40d2cd9b4eb37e9c019b350b1fd
MD5 4f37f43fa4a80899ed15f9abed766cfd
SHA1 430aedf3a2e92e9463ccc32fd55c68ac0910ea3f
SHA512 b3839883eb8f3c0d2895f6eb94d4b7c9bfc81bef1547f29fe61f4638f556e70a5c717488294994746c9fce8fef6ec53f6dd74869c22954a626418320637ecbc1
TLSH
T196A0021401901053C505037011D2129833385A9843570B1155A45A789FB6389C156051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ef7c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\afcddf0dbd4a7c04bf717e7fb0f10299dc728162\e54a3cf2-803d-4bf0-b146-fd4316d9cede\index-dir\the-real-index~RFe58ef7c.TMP
Size 48B
SHA256 49f7931fc5db368815ed728c0a0b3b1c2ae6b7cb7dbd997856dd37f9178a6d41
MD5 0a14ac2b5cef5acc2195b582e947e014
SHA1 dba73df9a22b7e40e5abdc76ba3d3e2b13c8d48b
SHA512 7ac5281181d939332fe66a7e1ce9935867eaf4bc2110264f87e285b196047ae5b11862f4ad310248f7d9c55af510f9a31f1aa59e323efde7796999907bd48ecc
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\afcddf0dbd4a7c04bf717e7fb0f10299dc728162\index.txt
Size 219B
SHA256 4a0ae0b3e144620dd3e0c84660d2662f503a2da334d3e755c1d569ada55cfc11
MD5 f9789d7afc6ba4b9d72b19484c2c0dff
SHA1 a7ff30ee1e77200187da761af96a72cef862411a
SHA512 5b9c03704b9b84d9ef365a04daf12a564b54a372b9e6338d38cb98877ba72385ca1a21a69817eef4c7746c63698bc14c85252cdf7604bbf9ea17938947b66ccf
TLSH
T1AED0A72B0AA54906F7405A8148BCFA45C72265598C61589486C55A3400E0C490BB6A61
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\afcddf0dbd4a7c04bf717e7fb0f10299dc728162\index.txt.tmp
Size 223B
SHA256 db71059691fb015f4aa157f1b225d3065f07efd57bc69f025cd7e1bf02f5ebb3
MD5 a926bb75d392799ef30f0bf4f4c56940
SHA1 bf11dddebb760dc19a941c3a8206ab4e12f76673
SHA512 18d79f1b1f4478aa8285a8dfff19571664c78a4f75c701500701ca1fa3e96de29f4341051bbd987dadce53d4f0e77508e7c533c52689ec7f5a894e65d5cbd5e0
TLSH
T158D0A72606B94845F3045A8348BCFA46C636AD148C50545446C5757410F08850BB6AA1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58a14c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\afcddf0dbd4a7c04bf717e7fb0f10299dc728162\index.txt~RFe58a14c.TMP
Size 134B
SHA256 6f5b6e0ebdd62fc3e7186060d86b47d454a9cf7d100573e0602576e660cae580
MD5 228b48cb10a60370fb146c236886d65a
SHA1 ae1b75c55c5d9e0e733c5d9e03b6a5ad3dd97dfc
SHA512 8df8f222f06b94e71c44b293c97e45c2ab20b86944993e19538a2390c5c484610c01dfd97f805b5330c075c9314f4d696d92fc88bfe3a539bce367e9ff9fa362
TLSH
T13EC02B230BB50551F300654048707945C3331C18CD50057442DC783040F004A07F8B40
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a44d971037e70288d7ed8c51655722f36af365a813ca00157d5b42a0e1860ce7
MD5 a162832a4479b13c6bf7569cf8b8e515
SHA1 4633d1596f4edfe1df08430bf4dc486d42baef84
SHA512 577e9f61c0b53e73f7f10726a6dee7695219d549d0a134341343950f62b2e79c8da3e4b246d4e11f730c5eb15c46a1e1cd217744da36ff02ead3f523affb04c6
TLSH
T17AB012108041D102C04602F011421498B1789F509B0E3B0193F0A972E82A16180D9061
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 858dd60508339de637131230c67ca35f0703464d7a1ebe08b4754ce2bfccda08
MD5 1e57c962b7de15971338f13de39be1bc
SHA1 672196f7ebe99ecdac99746bf5b701424771bc01
SHA512 06e279f6535d17d7ff9d418920b94429e552069873546a3d98ce6608dfd22f116232c85c6ce013c313ebe4ce0a7580c8ec1a5e89db5af7107d057f37fcd54ea4
TLSH
T193C09B05C9016301C01503B519B5E45C7355AF56D50D2748D6E45D2F7836531C115151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589342.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589342.TMP
Size 96B
SHA256 0462519418361c827a47519f1ad8bcc1f86e6276fd4dc45bed68f2a27aad347e
MD5 6b3e1c3a8fef0810ddac4eeebf0bf43f
SHA1 26791ad2ce422ecf2befe1b8f44c01c8e5baa144
SHA512 7d93fc48bb2645b9dae06419ed7cc2e5f0ce148f0fe859dbc07f3673fd6679e4848879a87daab7ffd25653caa0a2141a8600a958d1f4b87869ca9c3606acf418
TLSH
T16FB02208C00AA202C0C203F0FBC2A0C83820CF2AC203020282F02EA2CC333B000A8020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e6f8f756bd46f536cc737ecafc830f784557ce7b8ed70e052ac7797de1f0f957
MD5 f67bcf9d90e4b9b445aa164112a46c7b
SHA1 e25fe6886f8efba10e1520f95514711bd10db8be
SHA512 2174d13cfd29810eb741d086fe3ea7982911582fdc047928428edc7ec657ad3c021621262a5c9c270480ccf504befd27a3b282030c52ac8b31776b2e01df6a52
SSDEEP 3072:SGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:lm7Rkm1tYpBeh2BAoK
TLSH
T1B6C3123B5D65A83759B5BB5EB08E0A2F1EF149A6CD20DE52C8D85B0837E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 05380b4842fb2430eebebe6c6133ba210baa622aa6ecefa2f78da19a54facb75
MD5 830962aa82ad45439f78d42f17d25e3a
SHA1 b3100dc18c6f94a84fe1035f4ab9328e1e798a92
SHA512 2c9b69c97f1357432842ec37e7ce6e85fadb3ff3488274a09b9a70f67bcafede46ff8cd177339aac472e99708e2046c54067e92d620ac4617e917f4a7e497045
SSDEEP 3072:nGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Gm7Rkm1tYpBeh2BAoK
TLSH
T1A2C3123B5D75A83759B9BB0EB08E0A2F1EF149A6D920DE42C8D85A0837FD6CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9d25fc8cd4d5b0ba28a9171987747ce3042e13d1adba11a229aac8fa601f605f
MD5 f32c755e105edae0e080767ab44b0ea2
SHA1 37bc2e5ca157e59e875254d9f9dcd3f2ff51fad1
SHA512 bca3d33384e16873924ec58554cf644a4f6cc2a0f1d23d7596eb930258e5991323888198c7f13a1ffa09b635f1214a5a689b1febc004f190aab15183c294d798
SSDEEP 3072:bGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Cm7Rkm1tYpBeh2BAoK
TLSH
T1D9C3123B5D65E9779979A70EB08E0B1F1EF149A2D920DE92C8D86B0437F97C90A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 fb0415a27e056b4fd8717ffe46bc1d00b04aed1892fcee3f5310f749e43a09d0
MD5 65db517dc57be92e8d089eaf19da16ed
SHA1 a3138f7ba4f5ae7aad8696556fa08079bf031030
SHA512 77cba2ffca40fa17311c7c9a19498d489bbd738bfd54562b3d3a05ae6afe24aa841854742371cd9ad284a8ca536e71514f078e7973745c31fe698b5c4fb11188
SSDEEP 3072:pGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Im7Rkm1tYpBeh2BAoK
TLSH
T1A0C3123B5D65E83759B5BB5EB08E0A2F1EF149A6CD20DE52C8D85B0437E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download