hxxps://discord[.]com/channels/1374108923782631490/1374110655954817135/1468472487070404845

Analysis

user interaction
yes
max time kernel
46s
max time network
42s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/07/2026, 04:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://discord.com/channels/1374108923782631490/1374110655954817135/1468472487070404845
Sample260719-e6v9vaev7x

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
3	discord.com
5	discord.com
11	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3668	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134289092353357487"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{BE7F2D6C-6957-4959-9D89-080B5BA00A00}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4884	chrome.exe
4884	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe
Token: SeShutdownPrivilege	4884	chrome.exe
Token: SeCreatePagefilePrivilege	4884	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe
4884	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4884 wrote to memory of 4232	4884	chrome.exe	87
PID 4884 wrote to memory of 1112	4884	chrome.exe	88
PID 4884 wrote to memory of 1112	4884	chrome.exe	88
PID 4884 wrote to memory of 3668	4884	chrome.exe	89
PID 4884 wrote to memory of 3164	4884	chrome.exe	90
PID 4884 wrote to memory of 3164	4884	chrome.exe	90
PID 4884 wrote to memory of 1712	4884	chrome.exe	92
PID 4884 wrote to memory of 1712	4884	chrome.exe	92
PID 4884 wrote to memory of 540	4884	chrome.exe	93
PID 4884 wrote to memory of 540	4884	chrome.exe	93
PID 4884 wrote to memory of 4300	4884	chrome.exe	94
PID 4884 wrote to memory of 4300	4884	chrome.exe	94
PID 4884 wrote to memory of 1260	4884	chrome.exe	95
PID 4884 wrote to memory of 1260	4884	chrome.exe	95
PID 4884 wrote to memory of 1724	4884	chrome.exe	97
PID 4884 wrote to memory of 2188	4884	chrome.exe	98
PID 4884 wrote to memory of 2188	4884	chrome.exe	98
PID 4884 wrote to memory of 3300	4884	chrome.exe	101
PID 4884 wrote to memory of 5344	4884	chrome.exe	106
PID 4884 wrote to memory of 5344	4884	chrome.exe	106
PID 4884 wrote to memory of 5376	4884	chrome.exe	107
PID 4884 wrote to memory of 5376	4884	chrome.exe	107
PID 4884 wrote to memory of 5848	4884	chrome.exe	111
PID 4884 wrote to memory of 5860	4884	chrome.exe	112
PID 4884 wrote to memory of 5868	4884	chrome.exe	113

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://discord.com/channels/1374108923782631490/1374110655954817135/1468472487070404845
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff08e5c728,0x7fff08e5c734,0x7fff08e5c740
  2⤵
  PID:4232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,5107848611673806916,3077520222297773656,262144 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:1112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,458043884284378836,15021901480845172766,524288 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,9211371785280144018,16597171601970266104,524288 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,3649001857319972096,6924151832076949346,2097152 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,11681850101886107951,11460674827117562731,2097152 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4428,i,14834182768738636342,8289331406315877467,2097152 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4432 /prefetch:2
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4672,i,7988185097444735245,12529466136628037568,2097152 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3296,i,2373092346506834926,6327051800550080664,524288 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3300,i,7783659241148359158,16921631761168511783,524288 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3920 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6028,i,14230973396426066719,16604844618643794170,524288 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6340,i,7592296307723500247,7282694227078310599,2097152 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6040,i,2867150255984583300,1121056908801529417,2097152 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6280 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6408,i,17307196360486346084,18304472035738509462,524288 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:5848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6424,i,11651418333304351830,1640960268622700551,524288 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:5860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4900,i,13598244128030410536,7015535512757887137,524288 --field-trial-handle=2012,i,2837094809731541751,6503551629505251162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4972 /prefetch:8
  2⤵
  PID:5868

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4380

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 16bdd32ba4148e1ee696f14b633bf3d694fea6ca4e1b6a99cee198cafaaf8a22
MD5 a2d4c961b813c05af8727b4d07f67f5b
SHA1 f947cf61c6414d2c0ae97870c14a6d5d731efa38
SHA512 9a339397d08fce44361d051d1acb3133d47ca97b879589770bb91d0516c7552047d28e9880200715d403bc91bb904175da8c9c1738291ad79fe244fa16bd1c91
TLSH
T199E02BAEC8219C2B08F91F2820144745E75003177F90CD0F3F3DC2088FB5A3A4566C2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0dc284cefa6a6ab79b8937575e9789222fbecc20d579a3daa597259f24313a95
MD5 2db3b078e26b320ff4e31850ca706f67
SHA1 6515f0ab78f52069566710dff901045854462710
SHA512 d2976f880b1654ddca7edbbbaf6fe2be2e2272f6bb33f068f318779d93bdfc2b0a78b08a221f3ef497e82d7f92b5c9055ae9795846d8d902e66a2036d22e5abe
SSDEEP 96:61QbYllWEB31zHJZt7EArzIgiR+ePCRxghDcP1O:6yOB3lHJZJEAgR+jXoDcPo
TLSH
T139A1B1DAD7BA19D7CB52D5B810D538B578344872AC93AE028E7C93F8D0BFB986492500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2b1d22963ebaa388521ff9010fb66fef2691e49fd051064ca725c997561edb14
MD5 b03709ceb1290600a11fdb4ef30a46f0
SHA1 8050e69265f1bc4ef5c6640944f42bb440aac5a5
SHA512 bab4d73c642993a3a7cef646c24548d2af6dcaa1c1dff55a5a27e0b64b68a6c92ab9c8df89fb0d760a3eb6c767055f08fc53d8f59df0b3ce46feccc8e59c1a66
TLSH
T1604148F3C7D8897D890156F8AB192F2FCE790E14536C3C5A89E5AE0B53E1871E24058F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 fd103db32274e5a40ec8a261d071b43aec31fbb3f9496faac225cb0d2e347f45
MD5 9aed72aa214ca55344fbd07b251eb553
SHA1 431427b1b616d8aa54d60380dfe83ab0831ad670
SHA512 9f2f7e62df10534e7d297401e718244b47963afd53b269ec6d309c37c566d5d9f7da934f73ba64ccf6f5be4f97a41fa848784d1cdbcbd84b4c8e67df552c06a7
SSDEEP 192:4RcbuR4/bhQv7zpAPRp2qDT9BHsb+WNnNIWl072F5+O4kwoMVyIsnAUge:4RcbiYhMvUXlnrwNvm2zMIoe
TLSH
T19442E72EEA60657B5CDBC22AF9157743E7F5102226942EC0E7FC8A2C15E76CD322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1b344526fbba8232d1fafd234856e0accc3d4d93edb160591e6802066797f3ad
MD5 8a56b821666f6524cf5e7f9798b7b990
SHA1 d4b1a2a4b56d6f88b485887acce31addcb1df565
SHA512 2f8f32a8d32c9c2cb7d786237bced8e740347b66aa2d7af031263b552f0e7ab8ce616ab5a3afb778c9e7fb97f47f075ee93c17701a55656213d6591f0a162588
SSDEEP 192:CRcbuR4/b3v7zpAPRp2qDT9BHsb+WNnmFO6peX5+O4kwoMVyIsnAUge:CRcbiYfvUXlnrwwFeJMIoe
TLSH
T13842F82EA960657B5CDBC22AF9157743E7F5102226942EC4E7FCCA2C15E76CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 26f4c9feb11c4ab6911a656b0dc83175aa30b30db34050b4d4502a7f6952a83d
MD5 8e1949acdf78f04ef56b065ae41d2b97
SHA1 19f785fbd4bbc37a2fe18992afe23b2a88052871
SHA512 c891882b1553183693d347cdb4c79341e6408ba89897529abe05dd7e233669b88fca1916fe4e28439fd02073712b70c77eb8207c304b5f04d7bf169d645935f5
SSDEEP 192:CRcbuR4/bHv7zpAPRp2qDT9BHsb+WNnmFO6pe15+O4kwKMVyIsnAUgE:CRcbiYPvUXlnrwwFeDMqoE
TLSH
T11142E72EA960257B5CDBD22AF9157B43E7F5102226942EC0E7FCCA2C15E76CD322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 40725360c07addf65b5d8a0e356f648fb174ab8a90b7b998b1dbadafbcfb253a
MD5 2889c25e07da11df2c0b80f9f8d1e219
SHA1 374b0725e336359990cd60b42919907901871334
SHA512 c2a3d068476c453736307cfe462862e78e557af05a2743ffbd089454a7d7efde8bebbdd3548f0f7d2b86e03919a29a39075bcd74b546ddf84cb6f2711de820dd
TLSH
T162D0A747B1090691E7AB8B9116A2696A97303D8C0959C04CE56B0819C854F83A751E62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 f3497529afa7e1939cbb18e9bad299af0842fc714595bf8956ab9a268e6c8782
MD5 efc9f834cb23bb32fa39416064161d96
SHA1 b7dcff0ff2125ccead2473317b18d6e30066629d
SHA512 74a7b66e74db1b70ea06e4a6adf3a37849c918e36f4d8e2d649040ee07a586ff6f0461a852c9b634a9df3de0771848f2725375dd978e8e685e76af7d3d34a395
TLSH
T1DED0A747F5150591E76B8A911661695A97302D8C1945C04CE56B381DC874F83E711E62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58c82d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe58c82d.TMP
Size 138B
SHA256 917bc6f099a2e092d7063a8745684ff9965b7d3891394ed560e91eb7a1d5ffa5
MD5 f8bafec4be3a6d6a7f04761df2ce134a
SHA1 7f2ecdbe1797fd63c2dcff500696125c558a3ef9
SHA512 32982d2e53ecfd06653e976b862761b30b0246b7ad7b6db5dff0b2d51ea938fea20329753b934fde2b45eacedee532ed9300bd5d4a80165c6703f2cbf986a88c
TLSH
T151C02BD3F2010651C71206900332F11D63202CDC4E87C08CF03738282074F532305FA1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 13e676b6941ff11d339b4cb59e71dee1399d66dbe9e28f88b94756fe5551592a
MD5 fabaa5c2a94f141c00d05706d3e9d260
SHA1 f666d2f75ce65f0c9a14c90c5ec0a5166f1dced4
SHA512 ee4171cb75b9cf3c44d5a1cdfb19819553102cf56728f742e6222dfb4fc700ef506ee036a16a45633972105d12707417f8f58a9a06fb38e3ade7fe86d6f4b487
TLSH
T19DB01240C4015201C01243F8154254987114AF10D60A170183F0EA728C2E162C2150B4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590e9c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590e9c.TMP
Size 96B
SHA256 164520f2847a8a1e2966107a7b5e1e82b0a045618afb39f36fd2993d7be60e74
MD5 ad40706807377d3f1f9dfe4069536edb
SHA1 1a61045ad27a6099effa4cc4533e6c7515621b69
SHA512 ed8566125180f64052724c123f05636fbfdaa27e10e3db9fa6194a0ef59f3632d15304ed8c9455815d6c85b34667b1e3b8e9c23b28ab8ce884b6e6dddf27b333
TLSH
T195B02282CC03B222C00203B02AE280C83020CF20C203230282E00ABACC3A2A00020220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e140108e5d2ad9dbbcbcfcaf35d115018eb6e1bb579f89fdb75b234bee144f2c
MD5 d9295bf39e82bd6a9382ee405d2d714b
SHA1 f1d12b1c2e8c44cf94f5f1d62b0a3c9a80da51ba
SHA512 21ecea239b557a861748e68e0d21274d74261e66cc74695dd9a0260690289e81e4f62e108ed7425008aa91856f12d3598edbbac63222e58c51e5352b5b79156b
SSDEEP 3072:SlFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:2FmUi21rSm8uUVNSlzY/
TLSH
T176C3121079E3F8B2FE99304476EE2A158D680E818291C54157739E419DEF3C72FAAF38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 0715199324b58bba2db4a6968ee11d7646f33fe62dc715129f5dd54a3dafcd8b
MD5 e5528418c41f034f83a373610f934c02
SHA1 1a092ee900836460d694764eae2ba0242f6c37d3
SHA512 b0d64970e2f8e42f67b7fd6f3d98730960d8d17f5bc8047ac5c8a218def8b4cfb532f9e5a4fda6b5121d6ee1d06e02baec306f8ab1c9ea22997b5fbdd084d935
SSDEEP 3072:SRFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:MFmUi21rSm8uUVNSlzY/
TLSH
T189C31300B6E3E8F2EE5930447BEE2A145D6C0D818291C54152739D419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 51e0c5e90274147451def83caa4e6a4932d9dddcf8297d484e238d9f767fc89c
MD5 7362c93a777844e18cf9e3858f3569ee
SHA1 e80886557245ecd6bee39f6b97078d4235426bd5
SHA512 7cd72c881155ee17ca7d5f3a4647036231c888df378496ec62684ac68e3131cc8a3dc52ebd83410fe2c14bd30ab1c01f8b4989e6778bd2af4fff83761fdec77f
SSDEEP 3072:S6FUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:hFmUi21rSm8uUVNSlzY/
TLSH
T1FDC3131079E3F8B2FE99304476EE2A158D680E818291C54157739E419DDF3C72FAAF38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e237f03a00d5f98e9a6781c3a5cb6680bac2ce5943addd9b487a632ce7b326d8
MD5 a0edc7b3c6572673e38a4046bfe7e74d
SHA1 1ff4749c2f96f0230891b77fdbeca372bd00d41b
SHA512 4208f164f2bb6ae1399bcb4e5ea11c9838751ba92ad92581963eb0cfe1bd60a7631060c46e78d3d81f649fada880b16769cea576f9b6c625bdca0ae37d03ff69
SSDEEP 3072:S9FUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:IFmUi21rSm8uUVNSlzY/
TLSH
T10EC3121079E3F8B2EE99304476EE3A159D680E818291C54157739E419DDF3C72FAAF38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download