hxxps://discord[.]gg/AhkZGUASx

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
899s
max time network
886s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
14/07/2026, 20:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://discord.gg/AhkZGUASx
Sample260714-y1ejpafw21

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	discord.com
7	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2824	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285353697388965"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1768642833-2142038154-4041560723-1000\{9F5C9588-BCB6-4ADB-96BA-9FA7C0BED456}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
4980	chrome.exe
4980	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe
Token: SeShutdownPrivilege	1720	chrome.exe
Token: SeCreatePagefilePrivilege	1720	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe
1720	chrome.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 1720 wrote to memory of 2632	1720	chrome.exe	80
PID 1720 wrote to memory of 2824	1720	chrome.exe	81
PID 1720 wrote to memory of 4020	1720	chrome.exe	82
PID 1720 wrote to memory of 4020	1720	chrome.exe	82
PID 1720 wrote to memory of 416	1720	chrome.exe	84
PID 1720 wrote to memory of 416	1720	chrome.exe	84
PID 1720 wrote to memory of 872	1720	chrome.exe	85
PID 1720 wrote to memory of 872	1720	chrome.exe	85
PID 1720 wrote to memory of 5884	1720	chrome.exe	86
PID 1720 wrote to memory of 5884	1720	chrome.exe	86
PID 1720 wrote to memory of 548	1720	chrome.exe	87
PID 1720 wrote to memory of 548	1720	chrome.exe	87
PID 1720 wrote to memory of 1464	1720	chrome.exe	89
PID 1720 wrote to memory of 1464	1720	chrome.exe	89
PID 1720 wrote to memory of 1656	1720	chrome.exe	90
PID 1720 wrote to memory of 5156	1720	chrome.exe	91
PID 1720 wrote to memory of 1656	1720	chrome.exe	90
PID 1720 wrote to memory of 4628	1720	chrome.exe	92
PID 1720 wrote to memory of 1540	1720	chrome.exe	94
PID 1720 wrote to memory of 1640	1720	chrome.exe	95
PID 1720 wrote to memory of 4836	1720	chrome.exe	96
PID 1720 wrote to memory of 4980	1720	chrome.exe	97
PID 1720 wrote to memory of 5360	1720	chrome.exe	98
PID 1720 wrote to memory of 5360	1720	chrome.exe	98

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://discord.gg/AhkZGUASx
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdcee9c728,0x7ffdcee9c734,0x7ffdcee9c740
  2⤵
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1452,i,6471197087467467439,10863808670572067961,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2124 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,11461412309741742721,9505760187196415701,262144 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2356,i,3518302243350219583,9219425303679672280,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3092 /prefetch:13
  2⤵
  PID:416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3012,i,14512540014530913531,5372925614215026646,2097152 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3112 /prefetch:1
  2⤵
  PID:872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3016,i,11457981098211774637,9311058119024132195,2097152 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4176,i,1282648876672135671,1172775829977163956,2097152 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4292 /prefetch:9
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4740,i,5764985706666131576,7543291538002397509,2097152 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4948,i,7203688752235451253,12530927487817246912,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3172 /prefetch:12
  2⤵
  PID:1656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4960,i,9812894565351493603,9587648406175489957,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6012,i,15562142952605915187,12579125067000428204,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6020 /prefetch:14
  2⤵
  PID:4628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6404,i,8208584184221701928,15411442640471694311,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6372 /prefetch:14
  2⤵
  PID:1540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6392,i,15122015918821365869,15356086122881976549,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6324,i,11077352093739588472,10427886588720323562,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6256 /prefetch:14
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4424,i,1631435117399107958,17942164839605799383,262144 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5856 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3056,i,15106645117639936276,3785780810745963674,524288 --field-trial-handle=1968,i,9808316549553812291,5680753649813940557,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4308 /prefetch:14
  2⤵
  PID:5360

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5360

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 993ba663744b06896a8e06ec1fa0eb835bd523d6749d74e1acd6eeb6d16355f8
MD5 8eb79d9412162bb456ea362d3c6561ed
SHA1 62c342de81b3bb81df080b6026e55eb4af9dab99
SHA512 aadd25b45b83fea18cd307bbb937450204984ac76a3b4a9ddcaff9ac5e21f3f88a5bcbae9e606617e4867bb6e49edd56510172b6ef5250f5fe3e0942a91b0dd3
TLSH
T1A6E02BAACD20DC7B14FD0B596484468BF74413562B50599F7B3C990C8FB477A468A85C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 83f557547c27a35d16f408298c6c385ea5c83eaf3200eaf57769616bcb34d652
MD5 e397a4aad2a853f34c7ac06dc92876b2
SHA1 627219cb4276fe3ecb1eb0307dee541d56f73ed1
SHA512 31399f55b37328438824968bf0b3d0042c910527a1336761c9af365400a319b5213019e1b4d4c6fac106a54e40855767b4ab442ef09b3e71de278cb05bd1c7d1
SSDEEP 96:zFNjHe3LDD+CV9ekQLSbsyhIoW72SwQOlZ:zFNHEGCEkASbRmlOlZ
TLSH
T1A7914B8160A35841DB6E1A3AF0DC7B5C3B73443F839B1E0F66409C3C084A79A2B7E0D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 92741840f3e21782b5f4c0efcc024622c857c774226a094764c6a9b4809a4b0f
MD5 bcfa4007dd28e7555627f2db05f400f4
SHA1 42c2714d719d7467d00d703b3cc53e89eb57b2e4
SHA512 a856e662892e7723264b0212414ca27b65df983281406cef2129d9b7a994f854a77f940b749eda9bb6f326c41b046ffe77a520d0e7f7daf387046f685ae1bbb6
TLSH
T1AE51ADF387E4863DDA1192F49B157E2FCE690924031C3C7AC8D4AE5B93E2972E14078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 347b203d8370edec1c16c62296bc6aadd91b62d043075fe000c7fa8e45ab4dde
MD5 2e830a16b86bd10892321c909a0e8e06
SHA1 59fabe065d6fabe406fb463f95d38f975759c161
SHA512 f4e4444b4ffde5f4e407a2b12ce3989bd5fb8179c1066620f79c28ace7d6b30aedb006d29e1236420b2a7d9dd78a54842768ae0cf4dd4451d72024ba9479dd28
TLSH
T10B51AFF783F4863D8A1192F4EB156E2FCE690924031C3C66C8D4AE5B53E2972E14078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f98029edb3f4a87c02beb2e0c49f59bb7c2d6a7b56b74566a2838ddcbf869bfd
MD5 48d85270cbba70de7d374525dcb26561
SHA1 a277e37035a3b53374149d4180336ca81543e295
SHA512 1a2a7d7354a52cf57a37b882476c24c0593fbc86e4cc3b53774376250c963f584168d262fe765c2822dc4f91accdbcff7231dd0f6fa4d0ae0c56ea37fd3c5849
TLSH
T145518EF797B4863D8A1196F4EB156E2FCE690924031C3C76C9D4AE1B93E2972E14078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 adb15733ef7144aa00b8e4ff51e970a62f2eb1062d8b84bfbd65f8346518f768
MD5 6e1b770418f4e1df3200ec800b147f8f
SHA1 8b5ea3eea412ca1e4ef6ee73889455acbf326334
SHA512 dd33d8ad1cdcff0e3ebdd5612694abc803a2e42fb489a62fa7d89de2430b14206675298d1d5ef542ac28b045b1040ebdab2ef4f9f7e2f9e0fb1003480c0ea147
TLSH
T14C518EF7C7E4863DDA1152F4AB157E2FCE690924031C3C6AC8D4AE5B53E2972E14078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4fa1387eed691fa0ce86f1b140c379de98a6b4c9a2a4db39e431f3a0cb11febf
MD5 f4e5f906694da74c73f6e66369906f66
SHA1 febdc89a0158a8812b20a9fa3d8243d67bcae380
SHA512 46405180886b0d7faa8c9e75709b0f105614d7cebf212f35ab3dfb58a2a9b989f47dce390dc084f37da54f216e306efbe4f6160fda99fe8b590dc8d3721ba2dd
TLSH
T140518FF797F4863D8A1192F4AB156E2FCE690924031C3C76C8D4AE5B93E2972E14078E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 857B
SHA256 a92c7db696942637a3f3bdc9a2c7406dbef9433e5bc264cf12fdb378bda54264
MD5 ea829464e7cf27142b80e067f83d0d99
SHA1 80ad3d2239d2006d08bc3eed70e3839112855e98
SHA512 9dd0a0ade44f9f95e2604176d8b6f59b71be3a29cbfe14e92a1a6ecee36719fbcb01b66ad3a01e8793bf3d5e188f5f3d35b03dcceb5e88eeabac8187ddc177bc
TLSH
T1691188D7E33EF427607889BB4C447C0959B6A8320241A8F6DBAA963DF0C88F31B02457
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 dcfc6677d38633f882149e26193a1f14ba1ea2b8c44796d9784089e79983c388
MD5 2d84a40bd4060874bf9ac99a35f266d7
SHA1 ceec77c733c511620c9006e62c22f6424f5adeb2
SHA512 abfd769c5d18a98ae3eead3f950d7f6403b4285e83757fdf7a2800012089512ed6fb03ddcee14e9f6dd9954f465f508dee2f94ea16327268705495d9bdfcbcf8
SSDEEP 192:XRuZT957MErzi/v76pAPRp2pz9wHsb+WNnSklPK12dP21MJ3wkwAaJaVyIsnAUge:XRup142UXaOw9i292WJggage
TLSH
T1EC42B72FEA50653B5CCBC629FA6177A7D7F9103121981E84EBFC8A2C15D75CC212B42B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1f87aee04cec571f2fbe1b91adc74bdf70fc65a23cb1a38badf95021cf6c55b9
MD5 c6ec293754ad83f264affe2e07dbd26e
SHA1 65bb9ae9951c71099fbbd48f47211d2aaf3f04e6
SHA512 27e2d4a1959ad5f3fe25612ea033da650d1faf46c78264a3e8339bf31f34aba3d41d1698f70e4dd73ccb702076bee636f71c602c8785deff4c66dd7159850f87
SSDEEP 192:XRuZT857MErzi/v76pQPRpGpz9wHsb+WNnSklPK12GP21MJ3wkwAaxaVyIsnAUgE:XRupm424XqOw9i2I2WJggaoE
TLSH
T16352B62FA950653B6CCBC629FA5177A7D7F9103125981F84EBFC8A2C15D75CC212B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 31a5ce04ae67b5403f3453ceb77ece590798531384f472283d145995727d92f5
MD5 b28f8d2c357e9f30dbd5f6faec9be3a8
SHA1 7045d97913533ca8a4d3fd4bcccacb31200659fb
SHA512 0c3fd52647169605cd7ffcc7ff7895b9d1008ecd2a828bc0aac93f78a5c3515c5bf2ae9dd7335970687bfc199d7d6444d158da461151c200b0fb87c211b0d77f
SSDEEP 384:sejIb7KxkXqKf/pUZNCgVLH2HfgslHH7pLuLcSj2XXODIX+ErU38xHG6QDzXU:suIb7KxkXqKf/pUZNCgVLH2HfgshH7pZ
TLSH
T17072F8676C489A370F94CA8CDC267B4FADB5024B65EDC86483FA581903D5BCF114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 0595ee9bf5bec82bfc74b05240a0157f26b4b7dcd05c2f9e50e180200067ac49
MD5 5f1335e6deddb47c39f86a5736a67153
SHA1 d01bfde77a170537246f8167c0b94d632b684df1
SHA512 119e35bcbc1e0c904f074c70b8373a42a9797f86a94ab6974b16d52009ba59731241778a58a994ef7833643d196c8ebba43156296a486dfbb8bbf58d25b0d247
TLSH
T1DBD0A74BF6151850E9AA4BA51E32157A43293C8804C5908CB113356D4845F439766FA3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 f15e4aec5c68d8493fbc325badca7cfd05f5d2ad499ce2bde3f22ef17e1e634a
MD5 01a8939a8b27521f5c556a18689c1dc7
SHA1 381ea4380aafa9aaaab8dcfb4013ddb68bc18446
SHA512 0b3c1094f91883887b7b1bbd45763ea0418b92ffad7c00f5a9b03715485e26d7b6b5e7f174446d939eb71f2efa85c911a8a728241cce0b6ea3dc6afc5775d544
TLSH
T1ADD0A74BF5151850EAAA07A65D3215BA436A2C8804C5908CA21335AD4471F43DB26FA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe583c29.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe583c29.TMP
Size 138B
SHA256 68f335c365764f6097d8f3ba01c25b1cae195b9d1152eda8fb08fd5290241835
MD5 faf68e693ab8adb05674b36eb71f6e40
SHA1 882932585acb5be99bdab66f57fae17ff8c07415
SHA512 79dfd778a15dd70e5bd6f2c861679f7438d4a05946ea38375c08149f783687c96c58e2da69268aeb2e2e75b8e74dd24438706da359f01fafa04a448470230621
TLSH
T10AC09B57F54408119F6507954B32556D871F3DCC4CCAD49DE02335591475E17A305FB5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 829b702b8fd05e999c2f14106c3c4fbde894daa65ec73d3c5d4da0b05db131a3
MD5 1da86b85bb872f429d96908a4200d717
SHA1 ed4e288b3a8ad945e8c014ead91e286043b704c6
SHA512 94131978a019b5ba30d47fc37faa154c04d5ef6fb3e34e3eee31ff25df16ac7d21d45cc78dff0a3daf8cae7cf633882a305eb8a7f5cc51722d983440ede3aa65
TLSH
T135B01251C0029101C0D602F4214354CC7114DF11D60B170243E87B279E3619188140A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58817f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58817f.TMP
Size 96B
SHA256 9cf0dd192ff08cd9e079ef7ad54fa9c87d29298a5a1da26b77cb25fc009e0819
MD5 440cd87f0da1d19dd0a0adf8ecd01348
SHA1 787abf585adcae0a551ef333d662a36de6c8621a
SHA512 7c9f49bc790825aca46c92971df95761d2088ad2e517b431a31eb56b44517c17177317557068a9be6bc61dd93edcdd42d6aa7343a0209c675d183d31b923e22f
TLSH
T1B2B02222C003B202C08203F0388088E83030CF22C203230AA2F00AABEC2A2300828220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 46abd0235b4d1304c2e27811033b18d8b472e4c216fbe4eafd9e73ef22eaf533
MD5 997ed7d87b961d8c0aeaddc5f88c9f3b
SHA1 60c0555f29a87c4303554cb8fd639815785670f7
SHA512 50f5981c923b368273f6b5538830439e85627365dc43330c8fe2280e1d3b0ab8485b1a8a9279149c1773354034394a401e197f6ab8e8de2846e2f291e01a136c
SSDEEP 3072:dNzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:d5WDfxA3OnjrYQ9EU0/hEg
TLSH
T155C302A15C39BD660CF8EE98B40D3E60AFF46C9B91875DC3A2E81F4C14FA5C8117A931
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 166KB
SHA256 0c53481513bd86c558d03cf82228415baaddad1e4ee91269f9a7933eaa8f33e6
MD5 8e6270110ad47fdd5449437ed9ac9b64
SHA1 ef0746edfc487b010d8bdb0d55c6523b03131409
SHA512 5a64c18a516608367cbef36f24b108567456b3b934e322fc2172b3c8c3f91cbb0845ebc4d166fe32bc70754d4362cf0ac8663d76ba0e0a26e59b97dcfcda87b2
SSDEEP 3072:31dkmFEIWfr82LDxzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:7kW2PVWDfxA3OnjrYQ9EU0/hEg
TLSH
T1E2F312A20C37FE590CF8EE54B04C39B47AE4A96A51DB9CD672EC0B4C14EF8C51179971
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 38ae4d9b4f18bf4d7f2b619c6d1d3bb691b88db405fb6c07afc6cc08d291205c
MD5 e50fb4742eab8627f5c2506b0cc822bc
SHA1 4300a79e7036f518eaacb2741edb4e7e780b86a8
SHA512 886e1343b4a2b9f5d3eb8eb02e9f969a1cc483a36c2bafcac5cfe2b5a9b8815d7a15226c8ea9eadb8b698cd4d89840c6419e4eccd3a54a8152e1f474575b740f
SSDEEP 3072:szWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:iWDfxA3OnjrYQ9EU0/hEg
TLSH
T19CC302A15C35BD660CB8EE99B44C3F60BFF4AD9A91879DC362ED1B4C24FA5C81139930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 26ab19c92b6ca4cc119acbdb5b804b639c5a786c6f7bce88fe8c38aa546e408c
MD5 233f3485489338be748bbb15fc2e45cc
SHA1 c4fe665af9e80784af6c14c0b75b043e56fddb85
SHA512 9ca96b7752af45a429edee4ac7d259d11d941e4273d561906ff7de0dd503c6e8743f81fece6172395650dda818fc68a1c949415aa9407496336d4e578b3fb565
SSDEEP 3072:fizWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:f4WDfxA3OnjrYQ9EU0/hEg
TLSH
T18FC302A15C39FC660CF8EE95B40D3A60AFF46C9A92479DC3A2E91F4C14FB5C8117A970
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 80936686d3048c757778d460efcfc13de2bc14fc2573c83d396928f91e373465
MD5 79aafc939878afeb4c8413304d130fa6
SHA1 c6ff0cdbef0f159609dada9ffa64948ca2f39f32
SHA512 2d0eb2505298162a8263f4957523e0efde4ea46b4b2b39773805c6c3bc80c4eb8b7358a58311b227b13363a6fb26b6e1c89ebf38b3e93b23740d6cd393c4f351
SSDEEP 3072:QizWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:Q4WDfxA3OnjrYQ9EU0/hEg
TLSH
T10DC302A15C39FC660CF8EE95B40D3A60AFF46C9A92479DC3A2E91F4C14FB5C81179930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download