hxxps://xx-omega-gules[.]vercel[.]app/xx[.]html?chatld=8412854199

Analysis

user interaction
yes
max time kernel
899s
max time network
896s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/07/2026, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://xx-omega-gules.vercel.app/xx.html?chatld=8412854199
Sample260721-tk2xtsel7y

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1172	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291236805420422"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{4E5BD683-7411-44AA-B9E4-BCA97F6BB89C}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
3032	chrome.exe
3032	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe
Token: SeShutdownPrivilege	4528	chrome.exe
Token: SeCreatePagefilePrivilege	4528	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe
4528	chrome.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 4528 wrote to memory of 2396	4528	chrome.exe	84
PID 4528 wrote to memory of 1172	4528	chrome.exe	85
PID 4528 wrote to memory of 4308	4528	chrome.exe	86
PID 4528 wrote to memory of 4308	4528	chrome.exe	86
PID 4528 wrote to memory of 2660	4528	chrome.exe	88
PID 4528 wrote to memory of 2660	4528	chrome.exe	88
PID 4528 wrote to memory of 3556	4528	chrome.exe	89
PID 4528 wrote to memory of 3556	4528	chrome.exe	89
PID 4528 wrote to memory of 1448	4528	chrome.exe	90
PID 4528 wrote to memory of 1448	4528	chrome.exe	90
PID 4528 wrote to memory of 404	4528	chrome.exe	91
PID 4528 wrote to memory of 404	4528	chrome.exe	91
PID 4528 wrote to memory of 3760	4528	chrome.exe	93
PID 4528 wrote to memory of 1428	4528	chrome.exe	96
PID 4528 wrote to memory of 1044	4528	chrome.exe	99
PID 4528 wrote to memory of 3188	4528	chrome.exe	100
PID 4528 wrote to memory of 2420	4528	chrome.exe	101
PID 4528 wrote to memory of 3032	4528	chrome.exe	112
PID 4528 wrote to memory of 220	4528	chrome.exe	113
PID 4528 wrote to memory of 220	4528	chrome.exe	113

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://xx-omega-gules.vercel.app/xx.html?chatld=8412854199
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc388ac728,0x7ffc388ac734,0x7ffc388ac740
  2⤵
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1552,i,16473389442662003270,15894358177821021915,524288 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2100 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,10263946143997565432,15266557571201002555,262144 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,2746759369915026384,5589635374502966019,524288 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,16594591599945775706,18134235797354575348,2097152 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3204,i,18342159167739631238,1975403629096804740,2097152 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4400,i,18330138328022872926,7563809524305054037,2097152 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4416 /prefetch:2
  2⤵
  PID:404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5328,i,5118708816401766,8178337212534081629,524288 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:3760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,6398364115439304756,12550425887222881162,524288 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,12254144015869194407,15657415318798456882,524288 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5760,i,17864022307815704049,4405555842600939662,524288 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5792,i,13143754202135463634,8809848076323734141,524288 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5556,i,5674636451817729241,14109226500748349652,262144 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,397167776899609931,1798139822399393216,524288 --field-trial-handle=2068,i,17350212670084758360,1311072315963604470,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3064 /prefetch:8
  2⤵
  PID:220

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3052

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 82cca65f1d0d85e11094aa700143fbb8ea9d57d37a313283cd205b7d8834151b
MD5 8a14f975d764659eca2344f00b8fece3
SHA1 6431e45151a8dbd8f4738f1ef86a70f0fef1c339
SHA512 7ed7323f43b798d23578811950ac07c9dc36a4bd49d8e43d330f89fe4bb3586044ddb8d1a6e9807a9778740f2953cc4e3d4fedee2666ea11fbe917d8f9558d21
TLSH
T1B5E0ABA9CA22AC371CFC2718A8614706E642131727408C0F373C410C4FB833A428281C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 71b58fa1816202a1a9b3ebeacaef94de4261fad52ac6c446c4c283c7ac7aae56
MD5 4fc5c12846d0783dee7e1d2a23d6b514
SHA1 7db4e5a92ecc543507bbeeb19040131a4153dcc5
SHA512 23d6d02ec562c74fa58b70c8dc6eef5b8a5f582b20d046dbf953576e1356f56fda3087e709c26ba8c9125457581fa7be9510a0adef322f770e19fd549ea9fabb
TLSH
T1CE419DF793B4897E8A1192F4EA156E1FCE6D0524131C7CA688D46E1B53F3872E10078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4682d962848da81f0aed66b27a8429a0eecfd81b1e741deac3db2cda6003cd6d
MD5 14da7594be2a3df07b95720b842717c0
SHA1 7cc4d1284e3ae87ef5751eaa32bb98da3f99147e
SHA512 e17b105ebc57511403c1f73fdd2f3743c8f4028d61ad66b98f9ffec04a269de531ad4fd9b6c41ae1d9e4c77b927fd3a2e960318a9754cbeac4419fcb2ae137d6
TLSH
T120519EF793F4857E8A1192F4EA186E1FCE6D0524432C7CA688D4AE1B53F2872D20078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fcf1bd9920d574f576ab0f378729e3e52376171f3b04be98dbb76d15443c56ee
MD5 ebec113257b19336436dd08c34ca2df3
SHA1 60271b541d580cbc1a0073f22f292aade3b77b7c
SHA512 666f7e5adb43a36d0ec64a86ab6bf23a7ec0df040f5b2dc60c174d5e34e687ba6a980b26de7a112188973de3b777bd801ac14918e2c156a5ba25ed83ef19e349
TLSH
T16341ADF793B4857E8A1192F4EA156E2FCE6D0524031C7CA689D46E1B53F3972E10079F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8131bea0e64d24d1ab9929ee0cb6423d30d324874e3f0261bd435ad366251a24
MD5 1bb5f24cac4b670fa8b6d6f94c00cf63
SHA1 5bb3e1a6cc2e79f51c52286b16280b041eb7eb6a
SHA512 80a5fd0b3cb52eeb8c9871e4b8fee42f1c63adaa83bef093deca42069bc7dff1d223f1abf5b2548bad10f32281c0e479ae30271f9bd015be2510e87cd73aabda
TLSH
T1A851A0F793F4857D8A1196F4EB146E2FCE6D0524432C7CA6C9D46E1B93F2872D14068E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 690B
SHA256 bf6a472dba1c8297390fde0970273166cc3c58b17108bdd607e58240ebe728a3
MD5 5d474eb9e7d265756aee9a850338621a
SHA1 7919e7fb4c27ed73c10829c506e064bf09a796bf
SHA512 64b6786e143ca1295c2d14ad64db92f85bd39c0cc267f661d4d6fee3eadc389eb637d453f222639438a557ec8f11b4b007d2fd24ad929e135718ce1ae62ba743
TLSH
T1CF014EA3967EB063507909F71D40B80D65B9B83105426CE4DF6BC1BDE0E15F75B1345B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f2ce5a365d307029c364d26eaba19a438ff0e2b84537844c508e69b48326e9c0
MD5 c369022dc7542c2077fdaabec0be281f
SHA1 674391ca656e072a4530264c3c7d72b82d881455
SHA512 132a063d8a6160c1b2563cc8eaf86bb27061f9e215e2511e535598cf9bc3210fa854953613468c34615f5e638cf3e4df2d720079bc910133d836917d09eb734c
SSDEEP 192:FRGPlthjDT2h6Ef+jkv7bF+pAPRp2jr9HHsb+WNnMoHwr24cSkw/4EVyIsnAUggD:FRGPlthXT2h6EwAvoUXM1wVO2NSJa
TLSH
T1D942B56EEE10297B6CDFD629FD127B53D7F5102525941E84EAFC8A1C14EB6CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 10919a60cb057cf6078d627ef50f41d9d4a04f7247fe87cc2da205c000a05ba8
MD5 be64c12efc47d0e7ab69c614fbcc7d39
SHA1 924be7189d62f1965fa96e4e195e804fdf62c13e
SHA512 7c978c07129672e8b2f7a2cf09776426246976cfc4d2c509600271a10acf43d328be7bc4df5c4ae4ac8a698acd496d718d4283a18a490d2e4bb9b7a3f9249d84
SSDEEP 192:FRGPlthjDT2h6Ef+jxv7bF+pAPRp2jr9HHsb+WNnMoHwr27AcSkw/4hVyIsnAUgg:FRGPlthXT2h6EwhvoUXM1wVO2ZSqg
TLSH
T12952B46EEE11297B6CDFD629FD127B13D7F5102625941E84EAFC8A1C11EB6CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ac2fb4b8be3b7acf5d6559a23080030be0aad027d236df5b4b4ed87f1f20fe21
MD5 65cca2604a4308dba325dd7e52a75750
SHA1 df4e9206e5a85f7266517f58b605658350d4d6a8
SHA512 a806f175cd52812a4fb0ed6c10c323e6113643dfc16239ffd0497b663b5b6d60692a615be5f0713a7184a139b8f136cfd6c488b654e5bf84df508958b667133e
SSDEEP 192:FRGPlthjDT2h6Ef+j1Qv7bF+pjPRpDjr9HHsb+WNnMoHwr21jcSkw/41VyIsnAUd:FRGPlthXT2h6Ew1MvoVXj1wVO2eSkg
TLSH
T1E752C56EED1029BB6CDFD629FD127B53D7F4102525941E84EAFC8A1C15EB6CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8725622903e9be4d69b4896ffafb32e95e95ca67e139857339e4d0cfb45e2445
MD5 5cc6abab0a257813ee31cbadc6b7b2cf
SHA1 6ba63eaddfb2828a4af6ea9727485940e3ec1529
SHA512 64b5dd052488b6e60dd4926d6786e7af4f9eb0fc327496bff4f706a7c749e25e3fea342a33b593d4f0c5b5d244576397eb08fc1d73f9e87289f333d8ef727caf
SSDEEP 192:FRGPlth1BDT2h6Ef+j1Qv7bF+pjPRpDjr9HHsb+WNnMoHwr21jcSkw/41VyIsnA0:FRGPlth1pT2h6Ew1MvoVXj1wVO2eSkg
TLSH
T1BE52C56EED1029BB6CDFD629FD127B53D7F4102525941E84EAFC8A1C15EB6CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 427c6d7c4a1ff24d58e7b72644c5a43c77d2bafb097ca55d6f585898f94b1905
MD5 99e150add361207e6656cd3194abd05f
SHA1 765e31eaa25dc65f4b4de5523cb434fa9b58c6e7
SHA512 d9fb1bb4b7f16edb49c7d3c08ba5731b816b49cf7d671c040e2df6a17e1100d30ef99d618e2ac424daacfe823036b2931cdfae9aece68bc382d56b24ed0dd8d2
TLSH
T1A9B0128084815505C01202F42146958872149F10E60A5B1543E0AB629C39651C115060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5852bf.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5852bf.TMP
Size 96B
SHA256 bc8046715893f3d22941c1d2ff9990eb4d534ee827b23f0b07efb530f8607491
MD5 c4e769b01757dc1f9ecd3f52c93697c4
SHA1 1a57dab16e179e4bbefa817c3d2d6b383714bfe3
SHA512 47be1700e55c84b8a67c994dfce34c5d7f6558c38ad5ad8a2f49ccc69db5c77210551ce1d4f19b4d12062ae1dba380b9240b85bfb76ee530b3bc81db4d501e84
TLSH
T117B02208C2832202C08203F028AEC0C833E0CF20CA03020B82E03A22CC2823080AA030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0687eb3f9a0955aaba9090aa3e8ef5505ec5f31663aee7d90d3e89ebc9395c0e
MD5 dec53a7368374c4c2da7c2b62c8def99
SHA1 377036cf0576ec06a3fed774edeef815cbc5b9d3
SHA512 e1f32146c24fb0e6ad4f5e8de312e898d8239d4ac72a23f488b2cc407eb2735656d88f884adfded6711bb4be7b91116dcb6f2df090c7b9c7374fccf6279ae116
SSDEEP 3072:u2Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:uBm7Rkm1tYpBeh2BAoM
TLSH
T181C3123B5D75E83759B9BB1EB04E0B1F0EF14AA6C824DE92C8D85B0423F97CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 35bcf8d4ee5ed54592c4885ecf035a150404b567c0152ec6773d99395ad99b4d
MD5 559033ea5f1776be07904242c9c1d2c1
SHA1 b7efb564b112096dd73b08e0b8a823b2207194bd
SHA512 506bf5f69dc040ce8f7246e1f05c6f23862ab27351483fb33517dac989f6a846539b1ae0ae174e33ae84d0efcbc7fef9172b0c5266bb7eeb04398c922dbb3863
SSDEEP 3072:dnGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:dGm7Rkm1tYpBeh2BAoM
TLSH
T126C3023B9D75A83758B9BB1EB04E0B1F1EF14AA7C924DE52C8D85B0423F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 50917a356c266ac6e606785a7a5dd2aea3d908344f271e4cebbc3d2e96c586a8
MD5 4a25c437bd44c5f9a2f11e768a0809e6
SHA1 92ba475d6b03ef285b385caa9a359febe13eead9
SHA512 6d0d7e73aaa48abe51f86feb5bccb132bbfa0f88a6063b5fe68f9da3801ef8e9302071d927788140a5aeb59480af3b4eb96d6a1010aa515d1eeba217781c3d8f
SSDEEP 3072:5nGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:5Gm7Rkm1tYpBeh2BAoM
TLSH
T1B8C3123B9D75A83758B9BB1EB08E0B1F1EF14AA7C924DE52C8D85B0423F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 5127cdd7f6f722910bcb36b2fdd8eb5be80777c9b514a73abd7d520bc1c535a9
MD5 08d7bb262bb7a48d282e7739b32f4bcc
SHA1 0987b9a23c01c3e5db297c9cbbb66f218fc94ffa
SHA512 fcd465e5e5563bda53596628e76708070c4890c6de763d1b3f5629d81292961cc305da79ed5f71994c8fbcae4a25bb7d93cb5f45df731c7828f6d8a74970bcd5
SSDEEP 3072:/vGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/+m7Rkm1tYpBeh2BAoM
TLSH
T197C312275E75E8375879BB0EB08E0B1F1EF14AA6C930DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b1a0c549a3c18b95ce905901d46fdf88dd1bbf19db6d6cad728e728bb7f2ffbf
MD5 95db134e0322716a4d483cbe17dbb724
SHA1 9ade4097c3be3262e4fcfe167659cfb915e41f43
SHA512 e104715cf13a9ef894f2ce0adeea18def66e224371e7fafb8e9d5e59547b5278c3bf0cb7aeb0d1bbae74708d436ee2c816775ba8cf3da7855611e2318a382d52
SSDEEP 3072:d2Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:dBm7Rkm1tYpBeh2BAoM
TLSH
T19BC312375D75E83759B9BB1EB04E0B1F1EF149A6C824DE92C8D85B0423F97CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download