hxxps://eldorado-verification[.]site/lgsjeey5l

Analysis

max time kernel
899s
max time network
882s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
22/07/2026, 19:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://eldorado-verification.site/lgsjeey5l
Sample260722-xtjdmafn7z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1124	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292209320279743"	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
860	chrome.exe
860	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe
Token: SeShutdownPrivilege	4752	chrome.exe
Token: SeCreatePagefilePrivilege	4752	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe
4752	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4752 wrote to memory of 4772	4752	chrome.exe	82
PID 4752 wrote to memory of 5532	4752	chrome.exe	83
PID 4752 wrote to memory of 5532	4752	chrome.exe	83
PID 4752 wrote to memory of 1124	4752	chrome.exe	84
PID 4752 wrote to memory of 4984	4752	chrome.exe	85
PID 4752 wrote to memory of 4984	4752	chrome.exe	85
PID 4752 wrote to memory of 3344	4752	chrome.exe	87
PID 4752 wrote to memory of 2176	4752	chrome.exe	88
PID 4752 wrote to memory of 3344	4752	chrome.exe	87
PID 4752 wrote to memory of 2176	4752	chrome.exe	88
PID 4752 wrote to memory of 1044	4752	chrome.exe	89
PID 4752 wrote to memory of 1044	4752	chrome.exe	89
PID 4752 wrote to memory of 4812	4752	chrome.exe	91
PID 4752 wrote to memory of 5644	4752	chrome.exe	95
PID 4752 wrote to memory of 3432	4752	chrome.exe	96
PID 4752 wrote to memory of 3436	4752	chrome.exe	97
PID 4752 wrote to memory of 860	4752	chrome.exe	104
PID 4752 wrote to memory of 5136	4752	chrome.exe	105
PID 4752 wrote to memory of 5136	4752	chrome.exe	105

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://eldorado-verification.site/lgsjeey5l
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7fff5120c728,0x7fff5120c734,0x7fff5120c740
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1764,i,1262775089639738234,17200842171070549976,262144 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2260,i,18385742272968752853,4485637023543738537,524288 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,2043198459930205187,4103451708711369735,524288 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1952 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3180,i,13405833809187544907,15732863401221457800,2097152 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3184,i,16324198469548813808,15269855450793993029,2097152 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4440,i,6862648219623928469,5966645591062992276,2097152 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3896 /prefetch:2
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5344,i,1005766189479657939,14461474828950772729,524288 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5604,i,3300132605689534470,2646819779588886007,524288 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5464 /prefetch:8
  2⤵
  PID:5644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5620,i,16138946049152654712,1247125593798186143,524288 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,1022497080468988539,5824502213939316554,524288 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:3436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5656,i,18261151896396308059,16140237597581036250,262144 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1232,i,11329079833219761597,7045872760513964420,524288 --field-trial-handle=1976,i,16617877290193565809,17407401603037567472,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1536 /prefetch:8
  2⤵
  PID:5136

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2884

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 cd0d0d9be8f122c54cbc81a64298901c3c243780c74abf54923ea5475d4527c0
MD5 2d404a7c29a4ed04bec5b3f8325cf210
SHA1 ded53c9078159496b9017d6bcb8ba0fa078c6e26
SHA512 53f0b2bfaf08fab052ec498f27b19bbb9f7bd6e7f494d66b6560fdd563e8f0eeb06f12dc324b5565759109ccf807e22fc29a08ca705c18d17cfb5a6cb45ad0bc
TLSH
T1C1E02BAACD219C6B1CFD071820644786E69403276A40894F7A3C910C9FBC636475581C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 d1aa9270d330ed0090c8283cb92bd0496174ac06cc0a07ea68d2eec4c94291dd
MD5 3f0c0cf874041078697bcd2fda10eeed
SHA1 3fb2f919811722f0f8ef707dae8a211c23193636
SHA512 594aedbb6669147cb6a5477f9df248af7a00d8b12504403d23d37d0b50f5e4b87f72b4ba724b3bac48a4deebe5af153d884c939008f3a3c5317e64179b8812ba
TLSH
T148B0113000C00A83CA0282BA228B8800302008E8822E020A83E080A0C8AAEE00022020
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 93964d69dd451b1f0b8c2ac58a6db11a8c0c92ba09f24bb915eed8db8300ef2b
MD5 c129dec95ee925e40ff26752df55e063
SHA1 8395362c36815ba88bb7561eefeff2e29985782f
SHA512 bd4bc4cb30c5d6965d54fdfee3ad96686a71a3abb954a88083286dca034c73e029594d940c0ccd45efe0b92a7e0ef3c944acfc6fb0d2e4a306825a32b948d01c
TLSH
T13F519EF783F5966D8A1196F4E7147E2FCE690524431C3CAA88D0AE1F93E2872E14075E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d2f9673346417edc927deac4a2fbc25f12079d3ced283b24a1cef3e9615f0e77
MD5 baacf6e4c797585fd564b012a2118940
SHA1 374e89e51469bd372754cb69568293f6f1619082
SHA512 1f9f92037ae1a4274e9a59a2e9f2eb141785baef6af255824ecfb0228e74abe86fe0deb6aa43a33194ae87bd15077e42b442f3e0d8c74039a9efb09771b6e859
TLSH
T1D651A0F783F5962DCA1196F4E7147E1FCE690524435C3CA688D0AE1F93E2872E14174E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 74bddd8692f7c612932aa484deb5926eb520df3a644f783329436b1123088140
MD5 3d0f8cdf6154c76ecc85d76dcf94cf72
SHA1 00532c35300d794201a2012fe6cd9448bffa66eb
SHA512 0832cae040c45086663b799bd1098317873de79e90289b638820381d6dfaee79a84b4d3ee226603fa1a52014cdf9ec4f973cadf1084446b693fb62e39aec7bbf
TLSH
T1E4518BF783F5866D891156F4AB147E1BCE690924431C3C6A88E4AF1F63E2872E24164E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 55e4f87766a8507a354800955f2c411dbf27de5c9fc0c7b53be4669c36549480
MD5 bf76c09fa1c79f2a5c88c5b6bbc4742d
SHA1 fcfd74811d7e2aa503d5a3304d8102366a1e2c95
SHA512 4baa87231765a1ad77340e61af6ba1c33c3b0679f1c9ec0c508a92070f0ab1647b15dc475a2efe8bccabcfa08a0d1d8c9f1667dba9f66282e7a80e48f68f0761
TLSH
T16FF00E67E778B01300BA11BB6D047C09ACFBA83006D1A8F0CEAA926CE0819F30F12857
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e86dec3e49309913b0cecda660682b95ead6a3390e2a9d836a0d2fdb7b44f272
MD5 0431f9116f34d54df46da5d11e481357
SHA1 f680cb915e3ddf4514f3d7cfbb66c2a52c6ab8a6
SHA512 7fafe6d821fbdad8864001b7b0fdb0b3ee9c89fb59398e1431dbf8e698bb1c33a1af08a066b881c1f1f45b292895c5c26d2911bdea9af248c7e63e066d75448c
SSDEEP 192:hRRyQ8yA3OMv7XpePRpb7q9fHsb+WNn1qX962eV8kw6a1eVyIsnAUgE:hRRycYLSXiFwMQ2ZaaQE
TLSH
T14752A52EFC14653BADDAD229F9527763D3F5103565A02E84EAFC8A1C05EB9CC231712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6d55705def12ac027c096c0f5301a613ec50adb3c3a6a01e58071739ab0aa045
MD5 621790b856ee389c9794a9a825a59aeb
SHA1 d3a363ad43b340514ec44041d620a7800b6b1302
SHA512 74f850eefc9777272f69b7c5b62e6ccd88ae4e52574a50819c1199749a9633e0331d892f61b1f667b6b0d4c81c8e54338b44593bd7ff79db65a1cd9ef77cf5ac
SSDEEP 192:hRRyy8yA3OMv7XpAPRp27q9fHsb+WNn1qX962CV8kw6a14VyIsnAUge:hRRyyYLUXPFwMQ2laaWe
TLSH
T12E42A52EFD14653BADDED22AF9527713D7F5103525942E84EAFC8A1C04EB9CC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 88441f7725ed5685a2b1d5ef5037fb37b54904dd97a8a2e234382b55065b22e8
MD5 c29b41f992c4ca55f64012533f9da5d4
SHA1 d5a8a53295507f58299f13453395eb33e04f9055
SHA512 0b1196d764e78b4d4c7d2aba28cad794876b0671219aef38c499341d98770405f20546863e3a2394172f1f8fb23b09b0b7356fa4b03378afcb84bc1a7b60ae15
SSDEEP 384:eojKB7KxkXqKf/pUZNCgVLH2Hfgslmc7pLuLcSjYZXODKZ+ErU3n6HGY3Wobe:ecKB7KxkXqKf/pUZNCgVLH2Hfgscc7pg
TLSH
T14C7207777C489A370F94CACCD8277F4FADB5025B66E9886486FA482503D5ACF11062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d93e263920382bd09acc90ee7e3e67ba4e830abf737ce3d0d869644108322efe
MD5 0e4d3eb65e2c0c26471b141a83a02386
SHA1 5871327a7d9889d8cfc5e4eafde606c71254fe64
SHA512 db49146d153e057bb3df5d99915551313113cec0ff108982d9e697988c4c3ef283c1d97a51a86719a36aa8c5509a6e67bc6af28fd0022f37a28c682ca115048f
TLSH
T1BCB0125080877101C00603F4258214D871149F159A0E170643F06922D8255618018150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585eb5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585eb5.TMP
Size 96B
SHA256 5f317e2d7011164ca9f0759ca0014cfa1e6be2e47e18984baf9bf9dacd9e9b58
MD5 b573449b34aac1d3bb39c9dcd7b77725
SHA1 2ff090cba1270e05e6a81f423cfd9b52ac9aaee4
SHA512 2af24675bdf9d7b23e57e48ea3d0da8efacf93e31408bfd69b636dbe0560ad566d1e69b8b16d863750a1350f7fcb965ab9ee6de97c3e47d3eb0e0c74da6756dc
TLSH
T1ADB022AAC0022302C88303F038C0B0F83020CF2EC203020A82E02B2AEC222200B28020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 05eddc6c0eb8841b9c396d0cf1867e34e89b6f53e719bfff62e8aae5b9498a53
MD5 a46a2814eb20a1fbb74060a4390328e3
SHA1 99726f5d52b5a744392f05c35e1803edcb8cbde8
SHA512 9e27848c24a72032a37cab6188b66fd9c3e76f5895d26c6efd1cc9609b4d71e33f6e26103fc2ebd6c0b316cb4fb4af0934ccf78f314c76cf7de84dc10d953975
SSDEEP 3072:IFGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMC:IMm7Rkm1tYpBeh2BAoC
TLSH
T198C302375D74A87799B9B71EB04E0B1F1EF24AA7C920DD42C8D85B0437EAACC0A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d962a729b4f473a505be66d85f47b9750f823b73e217e8ba99426bf675fb98e4
MD5 5a13d6e00f59f0fab1b4433288db4abb
SHA1 c33804493f7a2d04bce297508946a27efaaee7ff
SHA512 5a17a80b4547906cd3c1594a9c20cf0c69ca74afc8240379553b6f761740d8625d88fa3cb98eada7924598cb2b96fb92045558a51d7d26f5cda96459f337ba7d
SSDEEP 3072:0FGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMC:0Mm7Rkm1tYpBeh2BAoC
TLSH
T183C302375D74A87759B9B71EB04E0B1F1EF249A7C930DD42C8D85A0437EAACC0A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bfa1d58e692e648eaafa568e3852acf4712a7239cc5373727e06b8ed42a9b116
MD5 5254f832cc2deea3cbe293a07f690031
SHA1 d2d2dda4211cd2eb289088e7209a8dc7fb030d70
SHA512 0f5a090292b2cb51654782131e8fef225b3b3f0263f7124586617000a7f695b94225b0beec6acfac6c4bc7532a5bcc51776ab627d836459cd3aa871286a13d0a
SSDEEP 3072:wGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMC:7m7Rkm1tYpBeh2BAoC
TLSH
T157C312275D75A83759B9B75EB04E0B1F1EF249A7C920DE92C8D85B0437EABCC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 c2bf57e107782530ab136e8d2cf721a4ad0fe670897d0ef3072908eabfa203f0
MD5 8c7cc8293201a83e810e32b85c5ba2f3
SHA1 f3faea36401c24b4ee8b28f3c6ce51a501452640
SHA512 9e80669590b6a34fd313d6605351f0963d90fa8c6568444be695c8b30695ff563d4e008cfded2a498b1e207bad402bf91ae47065e2f65e214604639987d6a046
SSDEEP 3072:9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMC:Um7Rkm1tYpBeh2BAoC
TLSH
T1F9C312275D71E97B69B9A71EB44E0F1F1EF149B6D920DE42C8D85A0437EA7CC0A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a3efefeddc1f157c5a84d9e60e9590279c9e0a4115af529d14871e73fafb9369
MD5 0c927fb02924710aba43104c2c7ebc27
SHA1 e8da562bffd452247c5ea9308d795d42a23730a8
SHA512 2c0c1b557b4b53def38aecefd80289cf9344b7269b875fe67c5522150fb7000e514efef9f2ae3ca90cbad13ecafb258561968c8378f6c661b75c2640bd25a6ab
SSDEEP 3072:HGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMC:mm7Rkm1tYpBeh2BAoC
TLSH
T1E3C312275D75A83759B9B75EB04E0B1F1EF249A7C920DE92C8D85B0437EABCC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download