hxxps://centrotelecom[.]acblink[.]com/url/ver/c973940032/3899454/

Analysis

user interaction
yes
max time kernel
150s
max time network
142s
platform
windows11-21h2_x64
resource
win11-20260513-es
resource tags

arch:x64arch:x86image:win11-20260513-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
21/07/2026, 16:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://centrotelecom.acblink.com/url/ver/c973940032/3899454/
Sample260721-vffdps1ckc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4452	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291265553886279"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
3908	chrome.exe
3908	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe
Token: SeShutdownPrivilege	944	chrome.exe
Token: SeCreatePagefilePrivilege	944	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe
944	chrome.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 2956	944	chrome.exe	80
PID 944 wrote to memory of 1420	944	chrome.exe	81
PID 944 wrote to memory of 1420	944	chrome.exe	81
PID 944 wrote to memory of 4452	944	chrome.exe	82
PID 944 wrote to memory of 2844	944	chrome.exe	83
PID 944 wrote to memory of 2844	944	chrome.exe	83
PID 944 wrote to memory of 976	944	chrome.exe	85
PID 944 wrote to memory of 4500	944	chrome.exe	86
PID 944 wrote to memory of 976	944	chrome.exe	85
PID 944 wrote to memory of 4500	944	chrome.exe	86
PID 944 wrote to memory of 2088	944	chrome.exe	87
PID 944 wrote to memory of 2088	944	chrome.exe	87
PID 944 wrote to memory of 4272	944	chrome.exe	89
PID 944 wrote to memory of 4272	944	chrome.exe	89
PID 944 wrote to memory of 240	944	chrome.exe	90
PID 944 wrote to memory of 240	944	chrome.exe	90
PID 944 wrote to memory of 4240	944	chrome.exe	91
PID 944 wrote to memory of 964	944	chrome.exe	93
PID 944 wrote to memory of 964	944	chrome.exe	93
PID 944 wrote to memory of 1792	944	chrome.exe	94
PID 944 wrote to memory of 2368	944	chrome.exe	95
PID 944 wrote to memory of 4236	944	chrome.exe	96
PID 944 wrote to memory of 1476	944	chrome.exe	97
PID 944 wrote to memory of 1476	944	chrome.exe	97
PID 944 wrote to memory of 1184	944	chrome.exe	98
PID 944 wrote to memory of 1184	944	chrome.exe	98
PID 944 wrote to memory of 3908	944	chrome.exe	99

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://centrotelecom.acblink.com/url/ver/c973940032/3899454/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff3352c728,0x7fff3352c734,0x7fff3352c740
  2⤵
  PID:2956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1592,i,11732771564091654551,9958256150516000574,262144 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1864 /prefetch:2
  2⤵
  PID:1420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,4269350805711220230,7763828154577707916,524288 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,11171346177234641421,5841271041103972861,524288 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2620 /prefetch:13
  2⤵
  PID:2844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,17851527998324436389,10092893915082620347,2097152 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,16846291269353109638,6174724541567010995,2097152 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4408,i,1539965193781903646,6491718693278089996,2097152 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:9
  2⤵
  PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,11464938461606190653,7870852480987265382,2097152 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3280,i,13211396055523324661,16644848525046204382,2097152 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5504,i,519312301085550098,12216949531258192579,524288 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4796,i,13146685681194537824,15434149839748100266,2097152 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3932,i,4477178422821242296,13370376181875349791,524288 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:14
  2⤵
  PID:1792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3452,i,205897869605218848,1731926341732085887,524288 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2328 /prefetch:14
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4688,i,17790498304918284583,1307465230347662247,524288 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3516 /prefetch:14
  2⤵
  PID:4236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4416,i,941154445289883992,15942484351797199381,2097152 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4424 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=1016,i,1269199450625626053,9182230087324031214,2097152 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5012,i,8948882610300910476,8837845492302505646,262144 --field-trial-handle=1876,i,13149573447735259657,6694369549822537206,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=740 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3908

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1540

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 445cfd116eb269d87ca97c87ed722c3ac6019e133315cfcac380913054237b34
MD5 5e4b41ca46ed118ac8b3a462c060a603
SHA1 ff55a13d6498da6a019a1aa724067e1709b11877
SHA512 7cf97d467c07f7e8af7c0869dbea6d923bc088de0bf51586617934ad4ee70b482c09d1cb56f5a15c704d7920d6cdce8d732758da7630ffbfef5eeea3d99af191
TLSH
T114E02BAAC835EC370CFD171D705C4746E710135B6780854F3A3C46088FB0737569591C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 de53d7bac58982b2f55ffd79a4f9484ca158f5566c239855163c53d907e95581
MD5 50ef7f01e9a54874d50a73bdec6014b9
SHA1 4bdd1b3f41614258869cae2ea2e7a302cb83e7af
SHA512 fc8f9d8a57d47c0b2f13528fd466aa2be72cf74e5462fa2fb97de87607d36702abc7611085614c3701b65526de7d7a61de4b9bd65618db361a287f6f1d77ea9f
TLSH
T12A3199F793B4997E8A00D6E4EA156F1FCE790524135C7CA689D4AE2B43F29B2D10038E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8b9e22b5831da0bb61d5986caaccdbd3a06aea5dee2481daab8e2eb8e3e657e7
MD5 2636a99f2f22dbcf12707e8f580ecb30
SHA1 b9c22a6f70a12dd5839686d1d220d0e9ccf84b98
SHA512 b6b7648cf48f80d73df5ae5b2718da5da7f55302a4d6c79ccb8c01eb3f93cc0728d7798ab832469775e2d3a362a707a5ca7205f09ea24bd7ee3f1fea707d3f52
SSDEEP 192:RR0xvjTzwwjov7H+p37DALPRp2Qf49WHsb+WNng2r9S2LQSkkwPJ+VyIsnAUge:RR0JfZ0iFiXh4Uw9g281vJ2e
TLSH
T13342D63EF950653B9CDBD22AFA597753E7F51021A1902E84E6FCCA2C14EB5CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f9558fc70d5c56f94a85f7d2e57ef969a3b8ccca5f95a6bbe682cc867c940abf
MD5 0829b3727e029db939f8e4dfac60719a
SHA1 4e3c9613f01d7b1fe85531a89420eb7c6638464c
SHA512 621d3b44db97eb82bd190ff154da55e773a5197049e8d9411e6a48a75416e53d6a6ebff453c957e0402016cae639cddf46f88a0c9ec3762140f0530e522de956
SSDEEP 192:RR0xvjTzwwj3v7H+p37DALPRp2Qf49WHsb+WNng2r9S2lCQSkkwiJ+VyIsnAUgE:RR0JfZfiFiXh4Uw9g2lf1CJ2E
TLSH
T12F52D73EF950657B9CDAD22AFA597753E7F51021A1902E84E6FCCE2C10EB5CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 985865c03b908657312985926896b334fac5ea802443f8b7add06eb6a123d648
MD5 661d0f0fa6c6e5016ef42ec7553de159
SHA1 f6c2a7fb49f7dece56b9f179be88eaa51436116c
SHA512 133aaee0d77153bd1f11c19dbfcd86269aab4fe9ecb6633d1869f18022ec3edea8559e9d886315c0aad9f46d1ff088c64af0cb1ed3b3c92e66bab2765763b47a
SSDEEP 384:6kj+F7KxkXqKf/pUZNCgVLH2HfgslzO7pLILc2jsNXOD+F+ErU3JYH1v88D0j:6o+F7KxkXqKf/pUZNCgVLH2HfgsJO7p4
TLSH
T16772F8676C4C9E770FD4CACCD9177A8FADB5024B65E9886483FA582503C5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 234c603611c0109d1cb291db9c8aec0c00a293556e57ddbae1611617afa608be
MD5 0d6236deee77eb2f6ee0dbdcf4988acc
SHA1 e3eac39534b42d844f93b5de1403e3630fccb298
SHA512 060587e8295ae331a5a7251e2638e78c5b326c4022e72dd6c0435128ea3431fb3f33536040e3b12e8dc38b819266353d7e03223325b7d742e06e4d7e66bc85f3
TLSH
T1D2B0124488017101C04706F42A5254C871D4AF14DB0A5B0643F06922882D150C014090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587133.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587133.TMP
Size 96B
SHA256 1ae7dbef769e850deb17cb214371bbfd315120225457ce198431d48fbfad393c
MD5 fff20a5fe9f0dea5152efedf1724f369
SHA1 7ec6e1c47a04304be4e7d3734a6c92a61a5081b4
SHA512 1455f9a752cc546a83c1194d239fb3c909db8aedb2a966b81f44e6b67d8874e34366abc6ba48ee6d2973966f0be7e37c8f7af44a26c56220c0a2c4d765ccf6cc
TLSH
T12EB02208C3022202C0AA03B0288A80C830B0CF20CE03022282E00A33EC3C2300023C30
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 155KB
SHA256 0a1b8d463fd94b9e0afe7b76d4a7d900950ef3f87e44e7b7845d934b6fb57296
MD5 40281ae0e33928989b945e48d3e86a95
SHA1 389901e9c7afa2d71853a4f490554cf97aa924f0
SHA512 17695461093b94a16eb88c3aa0152b5917d9bad0613db80ef4bd7a31cde92ed3384ad7c708b2395ff7990833961f8434b6e5953f95713636595ff0e14f07bcaa
SSDEEP 3072:6DKH3Wt1dLsZT22yFzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:tGVLyT/qWDfxA3OnjrYQ9EU0/hEV
TLSH
T1B8F312E45C39BEAA0DF8E958700E3A50AFE07C5E92579DD2E5AD1F0C14FA5CD126A830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 cc75ab3a046678d10a340d23465b00a10fe1c91eaf0315d12b229120b5fadc0f
MD5 5324fd580dd6c9fe49bf6079f8025b9a
SHA1 afb76656c2a3fdf237688e6dfa0819292c181858
SHA512 d8a904f11406f9b15db9c4b0159ee9bed1000e383b36a9a504d9b13b2385d8cbfbef455d946e01eb46966793f62ab0a293ab51e43863a03e7886b7290389659d
SSDEEP 3072:pCzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:+WDfxA3OnjrYQ9EU0/hEV
TLSH
T1D7C302A11C39BD660DF8EE99B40D3A60BFF4AC9A92875DD362ED1F4C14FA5C81139930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9076e6b806a93f21baa1e18de48b5f028fa69069e36b1178fcf86d26f946261a
MD5 9bdd4919217f6ca5bad4baa51fb2b91d
SHA1 c73ef81b71a928573ef914299d79a8b2048f6f79
SHA512 e1be3a7276a769e98e9478387881aa12dc62db799799c4face2b4c718701a632b611ead486f3e57e502511487f4b3f695f026c5adf0317975c61a39bcf9d7f77
SSDEEP 3072:izWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:4WDfxA3OnjrYQ9EU0/hEV
TLSH
T103C302A11C36BD660CF8EE99B44D3A60BFF4AC9A91835DC361ED2F0C14FA5C81139930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b8f6efe90075e65ad33f55fc79f76226b9abec8cc444c932ba47c3c6b811b622
MD5 96ebf698ed8f4021488076fb0efa7f13
SHA1 0c7040996f6e0c5cefd4b3a50cd21cc7e1407c80
SHA512 9e6e4fecfbdddc9ed1f3d0469c386357ffcd470cab54d5aa5230be355a45bb63ee46631a773abfe2b239bc59e9e421978dab298dbeff0ad98e951fc69cb19c43
SSDEEP 3072:yCzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:pWDfxA3OnjrYQ9EU0/hEV
TLSH
T1A5C302A11C39BD660DF8EE99B40D3A60BFF4AC9A92875DD362ED1F4C14FA5C81139930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download