48c6be95a2716fbfbf7ae350257cdf6dcc757fb5621c8b7f06977c7dc54c7c2b

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/07/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TrainerV.dll
Size 25.5MB
Sample260717-3fkbnacz21
SHA256 48c6be95a2716fbfbf7ae350257cdf6dcc757fb5621c8b7f06977c7dc54c7c2b
MD5 dee40ef61f439896eba5fc39363e3281
SHA1 4c0386cbf5aab581ef7d5cb7b85c25b89a740f45
SHA512 78622f9429a315785ac2ec2e5e5cfee73b939b2098accd31775889302e0c12f07f1e3d6baf90cae1a075289885bccee923a8529801fb8e04ed2778deb96b68d9
SSDEEP 196608:lOVINFqwlulMSFpgV9vVRNAEE7dK8qjnmsllAimZ7pvULy:lUQulMSF8NXKIlAimZ7pvU
TLSH
T11E475B7DFC268985C47BF8B0E87F2E11CF693976C5A15719851082068FCA3E942E74EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery persistence privilege_escalation

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Event Triggered Execution: Accessibility Features 1 TTPs
Windows contains accessibility features that may be used by adversaries to establish persistence and/or elevate privileges.
persistence privilege_escalation

Accessibility Features
T1546.008

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1920	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288044886181925"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
5680	chrome.exe
5680	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe
Token: SeShutdownPrivilege	4648	chrome.exe
Token: SeCreatePagefilePrivilege	4648	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe
4648	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4648 wrote to memory of 4524	4648	chrome.exe	92
PID 4648 wrote to memory of 4776	4648	chrome.exe	93
PID 4648 wrote to memory of 1920	4648	chrome.exe	94
PID 4648 wrote to memory of 4776	4648	chrome.exe	93
PID 4648 wrote to memory of 2640	4648	chrome.exe	96
PID 4648 wrote to memory of 2640	4648	chrome.exe	96
PID 4648 wrote to memory of 4296	4648	chrome.exe	97
PID 4648 wrote to memory of 4016	4648	chrome.exe	98
PID 4648 wrote to memory of 4296	4648	chrome.exe	97
PID 4648 wrote to memory of 4016	4648	chrome.exe	98
PID 4648 wrote to memory of 2788	4648	chrome.exe	99
PID 4648 wrote to memory of 2788	4648	chrome.exe	99
PID 4648 wrote to memory of 1528	4648	chrome.exe	100
PID 4648 wrote to memory of 1528	4648	chrome.exe	100
PID 4648 wrote to memory of 2268	4648	chrome.exe	107
PID 4648 wrote to memory of 5748	4648	chrome.exe	144
PID 4648 wrote to memory of 5800	4648	chrome.exe	145
PID 4648 wrote to memory of 5720	4648	chrome.exe	146
PID 4648 wrote to memory of 5680	4648	chrome.exe	151

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\TrainerV.dll,#1
1⤵
PID:1016

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffe259c728,0x7fffe259c734,0x7fffe259c740
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,15700027036533648596,4266930603929261497,262144 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:4776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=2012,i,9857724328633748531,9476254466160910905,524288 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,15975454225778072802,10906862517119669599,524288 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,3653858115785760441,1781354031321382265,2097152 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,3155258708035579594,15016986108626933718,2097152 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4432,i,3458230582733164270,11094453745792899071,2097152 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:2
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,17778559799149988956,9577230675833548680,2097152 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,1768499298093919164,6438310242699022825,524288 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,6369146068440386883,17051792430668031814,524288 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:5748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5804,i,11793171067220537985,11782868852810107888,524288 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:5800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5772,i,18250448137352768381,15676986164378505771,524288 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:5720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4472,i,14940547021430606998,15499545865441092092,262144 --field-trial-handle=2092,i,9789102729457968550,6259128327989800289,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5736 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5680

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:856

C:\Windows\system32\DisplaySwitch.exe
DisplaySwitch.exe
1⤵
PID:4772

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:3184

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicePickerUserSvc
1⤵
PID:4188

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4904

C:\Windows\system32\DisplaySwitch.exe
DisplaySwitch.exe
1⤵
PID:4552

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:3368

C:\Windows\system32\DisplaySwitch.exe
DisplaySwitch.exe
1⤵
PID:5236

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:5264

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {24AC8F2B-4D4A-4C17-9607-6A4B14068F97} -Embedding
1⤵
PID:5484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Privilege Escalation

Event Triggered Execution

T1546

Accessibility Features

T1546.008

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9f041140-4f4b-4eb7-a20d-2d47656d5b2d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\9f041140-4f4b-4eb7-a20d-2d47656d5b2d.tmp
Size 233KB
SHA256 db13e4276652ff1d600e90a55454796b697d37b6ba23a22ec4e4fc1de5849ef2
MD5 b5674f823a667a8f78432b9434615fec
SHA1 c1b7910a904a28348394c862be1c17d31bb476fe
SHA512 4ec51502de78ca748857f6af0fa5e0f72141537949ac2a01adb5a94a68875f774781384ed630a2ee16b625456ca82735404ed285a68680c8c01f75b557f350c2
SSDEEP 3072:r1RQuNXGM+nVLPyRburNgCpIUNvKBc8S0qdhTmqfd7NtZL8cHQRZEQ6Spsu:ZRQuYM+nVL6RbkNgCZy6KqZ/ZLW3Exu
TLSH
T13F341233BF4A0E235EE7CF34B6931EA697F189F544B48201DEAC1BF755818852A8349D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ec94efe09352aa1d080f3989a46e22764d338c0970128ed7537c134dbcc9397a
MD5 16fafc61f57e861eea90320c7056b2ff
SHA1 af9d43c6a34e831861986d598cee3b1d21f09c75
SHA512 83cd946d2d875ad3349d259fddb6c1c1a50a15a7110184a49f9a5c0e469452d2d9f596e89999e6274ec0171081683b3d97b18cb21008dd1e97dccd03696b9ef6
TLSH
T129E02BA6CD719C3738FE071860915745EE55131A2BC0595F7A3CC30C4FF072A4186C5C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 409d3f7d6807fd9b41b3004daab017c00cdbd6f58adbce81eb00e5cec68c5350
MD5 703b5f7ea41dd2bb75aa8ecaf92d00a5
SHA1 69d0a6bbf8d8996cc70fdb576865fd5ffe52c91c
SHA512 f09bee60fd1c216b264c0dd323e6b3f5b232bb11894cf3c178b8c23112760d8bca704094b03afa530ed40c84589dcc3cbae2f653ac1d11e0ea55c07ce5c03280
TLSH
T1C5517BF7D7E4866DC91162F4AB217E2FCE390A14421C3D6688D4AF5B53E2872D20178F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0ac96ae5669a3f5f0cce17cd704145b6d5296ae0568d19b20b1ca073fb409104
MD5 fd19fe9a86db191b769c8e04e14e87e3
SHA1 cdfefe52ad1bd0db8f24c76265d962c2d2d42922
SHA512 f5f0b9f301b47ac8defa482722b73a0e1c6133fce040dd0e948f5f1a20506931897e1cfe1370d1bf874e56687748492e0e9461e0c52d5427dba933de30dae4b9
SSDEEP 192:rRKoL4HBRHkVv7hpAPRp2W95Hsb+WNn4P06G2XpzEwUj3VyIsnAUgtaJ:rRKmBl9UXtrwY0t2XpzEvjR8
TLSH
T18642C72EBD14693B6CDBC229F9227B47D7F6202125D42E84E7FC8A5C15EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 51265e2b4a1a8e2138ef21cfeb3a0c013c5dcc18988e1d786b2f2e9dc1bb0b9d
MD5 3c3c68d9dbbf682199cf56f6aaca9811
SHA1 c991d7539f53f6b09b30b020ae99d2d8b5898970
SHA512 6c90fee9655e4aa947d35def8c9b289ea8604a2d681a4b2030eb4249a52a9e4335a722a7f44913468d00be3771801538694175bdeb8ef4868866bd369e0ead99
TLSH
T154B012008941B901C86603B82542148CB1545F10960B170283F06922C829571C428150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5908c0.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5908c0.TMP
Size 96B
SHA256 9ca85297b9c687a918e155c337426f5e0a65fc44d2f1b39bc5a189712baaaa36
MD5 c8c0dbc52222ec8a9cde128008c6e942
SHA1 48c68a3683d37c2e475fde33f37318bb003e34a4
SHA512 1d479307082d0748959f8f3f0076940a439234671c41f548deee1d85b0039d4cb275906816eb56c23e17b42007c264eeebc029eefb6d7e96dcbb0b704d0e9bb0
TLSH
T150B02222C2022322C00203B023C080C8B0B0CF22CE030222A2E00EA2EC282300838220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 f467c131e10968c91e8cb0dfd9c213514ea0a9da2317d4a8631193e05152e4f4
MD5 5e4913dccb2dd13ede32f630fa5274bd
SHA1 ed55eaa30715d20879b8cbf288ed02217ea883f5
SHA512 04afc2d12140cf6131fcb8a565b54d971f047459031373afacee5fd766b1c662fb2fd0303911cb7571e0f00be9b8a8e0aa8de192356fc34caa215cb18298fd42
SSDEEP 1536:6dyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Gqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1BCC30237EBC25F335D82CB64BA534FDA97B644A99030D301AABD3BFB6C9345164424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 2f55160c7df6cabddc59bc52748ca9a332f5ba23cc482b907b7e0fa2919b33a7
MD5 83f7d4f947501ee7ad6ca20ec7398541
SHA1 af06a1606f651b49b056e9d206c8cff9372ed27f
SHA512 eb36542ad114dbeb78e8c21e1741998bc961eb4dd2aaa785afe8341f3015d758ded7c990bbcd4d2ec88f3b90b5f9ff4d254cbe1ef9f44023c8defc09d49afb82
SSDEEP 3072:c2RQuNXGM+nVLPyRburNgCpIUNvKBc8S0qdhTmqfd7NtZL8cHQRZEQ6Spsu:c2RQuYM+nVL6RbkNgCZy6KqZ/ZLW3Exu
TLSH
T1ED341233BF460E235EA7CF34B5932F664BF589F648B48205DEAC1BF715818852A8349D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 062ef42785ced6ccec173ff0fa3280a22dd4879a92d23dc650a70e7d9a8c903b
MD5 654469bcc9a18808c73a552a413f8438
SHA1 d63d11ed845e5acf1b343fcb358ea400595d7995
SHA512 720ad4477d088c4c23b8ce45b5aa501fdee5577adaac532bc247e9c48db47b45e56dbd84a2846ab8bf5410ff01cf052278a6693438a230030857914f38bf5301
SSDEEP 3072:O1RQuNXGM+nVLPyRburNgCpIUNvKBc8S0qdhTmqfd7NtZL8cHQRZEQ6Spsu:+RQuYM+nVL6RbkNgCZy6KqZ/ZLW3Exu
TLSH
T178341233BF4A0E235EA7CF34B6931EA697F189F544B48201DEAC1BF755818852A8349D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download