hxxps://encrypt[.]barracudanetworks[.]com/login?nid=U2FsdGVkX19Fm3FUx5bOslQlGLiTYbq7Md9l8eQn3rD27neBSm1sE9ZGP4O5LuMcoVevo8lQewTitg1kyixn0FjXA4NtZN5XLA%2FUHPWRNxtdZSf%2Faat6jGj82bdXFEQOZoy8FMYNNp4tVvvIuGVTqkL%2FaAA3dGsPA04QPQvPlALIcRi%2BUlJ9qovRu2PnsPOjrfIuxxPYYrT0g8QM3nkB1g%2FnMWgjmjKvKuedWIyVnvUq0waXJ1jBVJLDIsT8PHid

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://encrypt.barracudanetworks.com/login?nid=U2FsdGVkX19Fm3FUx5bOslQlGLiTYbq7Md9l8eQn3rD27neBSm1sE9ZGP4O5LuMcoVevo8lQewTitg1kyixn0FjXA4NtZN5XLA%2FUHPWRNxtdZSf%2Faat6jGj82bdXFEQOZoy8FMYNNp4tVvvIuGVTqkL%2FaAA3dGsPA04QPQvPlALIcRi%2BUlJ9qovRu2PnsPOjrfIuxxPYYrT0g8QM3nkB1g%2FnMWgjmjKvKuedWIyVnvUq0waXJ1jBVJLDIsT8PHid
Sample260723-vbza1sca48

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3004	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292989873079332"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
3296	chrome.exe
3296	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 5016 wrote to memory of 4656	5016	chrome.exe	85
PID 5016 wrote to memory of 3004	5016	chrome.exe	86
PID 5016 wrote to memory of 4368	5016	chrome.exe	87
PID 5016 wrote to memory of 4368	5016	chrome.exe	87
PID 5016 wrote to memory of 1088	5016	chrome.exe	88
PID 5016 wrote to memory of 1088	5016	chrome.exe	88
PID 5016 wrote to memory of 5476	5016	chrome.exe	89
PID 5016 wrote to memory of 5476	5016	chrome.exe	89
PID 5016 wrote to memory of 868	5016	chrome.exe	90
PID 5016 wrote to memory of 868	5016	chrome.exe	90
PID 5016 wrote to memory of 1020	5016	chrome.exe	92
PID 5016 wrote to memory of 1020	5016	chrome.exe	92
PID 5016 wrote to memory of 1048	5016	chrome.exe	93
PID 5016 wrote to memory of 1160	5016	chrome.exe	102
PID 5016 wrote to memory of 6096	5016	chrome.exe	103
PID 5016 wrote to memory of 2676	5016	chrome.exe	104
PID 5016 wrote to memory of 3296	5016	chrome.exe	112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://encrypt.barracudanetworks.com/login?nid=U2FsdGVkX19Fm3FUx5bOslQlGLiTYbq7Md9l8eQn3rD27neBSm1sE9ZGP4O5LuMcoVevo8lQewTitg1kyixn0FjXA4NtZN5XLA%2FUHPWRNxtdZSf%2Faat6jGj82bdXFEQOZoy8FMYNNp4tVvvIuGVTqkL%2FaAA3dGsPA04QPQvPlALIcRi%2BUlJ9qovRu2PnsPOjrfIuxxPYYrT0g8QM3nkB1g%2FnMWgjmjKvKuedWIyVnvUq0waXJ1jBVJLDIsT8PHid
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff1897c728,0x7fff1897c734,0x7fff1897c740
  2⤵
  PID:4656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,3160515340676491082,5085062726073298839,524288 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,10973840446924524469,3923737110929526465,262144 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,10226835204656953521,17576934676312816712,524288 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3184,i,1612214001630711461,9540192428484795454,2097152 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,16372466768048199059,13464030328688367657,2097152 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4116,i,13926748763440427119,10109237398380278281,2097152 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4120 /prefetch:2
  2⤵
  PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5340,i,13151950401925555586,17812778214611547027,524288 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:1048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5456,i,15108684658201204677,7936399934340008292,524288 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5568,i,17167633467571193918,17183049320916965768,524288 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5380,i,370248352911109044,10338174029073673029,524288 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5564,i,17243429910950755736,4806629947940198072,262144 --field-trial-handle=2096,i,4695128065023848270,17026343642250581179,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3296

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3912

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 655480ff69dd3c658ab4d41d54fd46badc30306a7fbf0a2694dbb794543c7399
MD5 b853f09ea259ace32dca4439c3b67b67
SHA1 b9db30829a7685288bd98a063fe83fb355f914d4
SHA512 aff8989392ba8c6a97459e7ea092e8df07a35749f1c8b8a258acc7aa03c22cc62f90818a365354e1cffea0585c82a182160a66cc1eb8f9d36e8a2b49b81edccd
TLSH
T161E02BBECA61DC3718FD0B5DE050074AE65423073740958F3A3CAA0D4F7423A4346C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 76720bf5048305325d7da71929569f1323d49e615cf59a98e856cce0fd3f1568
MD5 aa0b7bd147392969227d88996b87054f
SHA1 c792b9359e31b30765ad141d2aa645de7d216239
SHA512 c13e697ae1c12c68d28d125faf80a4f01a55ab19fcbf7e14e1c0dd5639dbdb4556e33499fd248122a05e0c89e588ac3bff5dc418f278067293aa7056e43de0e3
TLSH
T173D0220209800043DB5C92F188F0A5043E3B15B83A0F2F22E2AA03F45822F9C0B8A103
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8d2b66718e4ea74bc9b93290a9a8286fee08fe06dcc764e8089cd259114b8c43
MD5 8f69fc6d192725d878519cecb788c1ba
SHA1 806286fefcf0ae7581b75b91402f3e886076e3af
SHA512 6dc44c4937d905a46a9da319fa30710fae0180533ba9868d750c09c0ae9daf1619f9568d639678785c6787a4b1ac0144c6e774208cbafca5ba2322c7e76ac4f7
TLSH
T10851ACF393B8897D8A0196E0EA146E1FCE690524432C38AAC9D4AE1B93F2872D10074F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 607fac75fd05c5ecc0e115c95f56136aba9b5239e8902e59bbf94c6ce07f887a
MD5 6e2797ac6e3928374059bbfd60cdd746
SHA1 28896ed5b55fd498c7f79dc828faab387d80f20b
SHA512 68e3b849b74d8aae49853187be6ea902ec5135d50d7fb40a010c43adb50e66c5afb481d9791e3c216fa1956354c3b63fe5a16b3c34a37377dfa2c93d1802384d
SSDEEP 192:5RRJtLrQCUIp4Av71hpAPRp2b892Hsb+WNnclfq2d2bFemt3ac+VyIsnAUgE:5RRJFkcBhUXDQwyfZ2dac2E
TLSH
T18D42C62FA910657B6DDBD21AFA227B53D7F5102121E51E80E7FCCA2C14D76CD222712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ff4d7741f8288f38655f84c63f467abed44a1288cc1a00fd7fd936a336200dac
MD5 af9a514f801857dbd1da5b180398876b
SHA1 dc382b1d5329f02bef881e48de8c25ec6f449e1d
SHA512 492ceedcfca087e3185816c0028d9c888c20146ff2ed49419bf9bac07c66d9fdb12cd547b6b006f72236fe0fb996c9a500a87a88170e973b035bbc2fa061d71e
SSDEEP 192:5RRJtLrQCUIp4Lv71hpxPRp5b892Hsb+WNnclfq2d2CFemt3a4+VyIsnAUgE:5RRJFkzBh7X2QwyfZ2wa42E
TLSH
T17452B52FA910697B6DDBD21AFA257B53D7F5102121E11E80E7FCCA2C14E76CD222712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a1c93df6995f439cff9e134de8a4cee7ad35d98dec04a7c4be5053f6a6628b68
MD5 53a4af973bf1945f7d82423db8cd8c76
SHA1 4a25a4c7391251d826a52bfb38e46e25194c603e
SHA512 4cbbf5d2b474ec90f65deac2e2be2b1a3f8489abec43a93e8e20569b532342d8d7052127cfb95b547db43a4b92f1ef11db269931b73c135a792b7cb0cbd7e04f
SSDEEP 192:5RRJtLrQCUIp4Bv71hpAPRp2b892Hsb+WNnclfq2d2HFemt3ae+VyIsnAUge:5RRJFkRBhUXDQwyfZ2pae2e
TLSH
T11842C52FA920657B6DDBD21AFA217B53D7F5102121E51E80EBFC8A2C14D76CD222702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4fec89d77bbfa337f8a6fe9dd2e492aef6533442315048cc6eeb0963fce8bc98
MD5 468e2609d1beb8e39aeac9dbc2a9a671
SHA1 d53e60b29e56fac88f491d57f899d944ab7b887c
SHA512 a6d200af77d52df58beb249546059158a0db6b0b5c4618f53608a93e90073688538f3f53d31d777f89e33177c448432249236e2aa60ada00485b4704599a700a
SSDEEP 192:5RRJtLrQCUIp4Vv71hpAPRp2bl92Hsb+WNnclfq2d2HFemt3ae+VyIsnAUge:5RRJFklBhUXCQwyfZ2pae2e
TLSH
T18042C52EA910657B6DDBD21AFA267B53D7F5102121E51E80EBFC8A2C14D76CD222702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cb1c19b11357054290535c1235622ba49da00bb7fdbbfbe369fe3ff9c785727b
MD5 c4380660f02ca8be846f033e5aea50bd
SHA1 136273a823d3bf569412c4e0990981ea6f45cf01
SHA512 76433ea840324e36cda3c13d9bac0559f08dc69d9de29929fc062a398a65d2eecf83e198e703166724f66525eef0e90ef4f240c238781744ce9cbbf3ee1e9f24
TLSH
T122B01211C4015102C04706F02142648871145F209A0E170553F87B22DC651618024160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58533c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58533c.TMP
Size 96B
SHA256 131614ea1f6f6d5eedd24362a440dd2a69e460074a3e116a6dcba691f50a0cbd
MD5 8ee9fd15a7e6dc7c4ce341578301e74e
SHA1 98cc464fd6730eff69f70bf69ceb4cee10d1df6f
SHA512 8f629548ecd3c0ef3a186c53a4c5c16f2f1c4034e8de8f21c9a5f2eeb47066a906516adf6592f749dca9922b87a5a58f25ea237698ef6468bd2952e06ae7c7aa
TLSH
T163B00259C2426213D04203F0269699E97172EF25C64713B3A2E11B66DC29B7556361A4
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 ed9244afa9eeccc3ece44aca9ada4a1892da3ce302b178f95488027352663c11
MD5 eba5b62cd6aa2902968dd585303f27e1
SHA1 44aed818cdd85bece786eaf62dbf22273598ae45
SHA512 c5587dc35b0b8c31769d887e82feeeedbc2be950fd9358869d66ffd75efc4d8b51ee1b62950d5e370309c7dc90dc45f8829897713f83b8465cbd44119d48d446
SSDEEP 3072:OGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Jm7Rkm1tYpBeh2BAo3
TLSH
T113C312275D71E9375D79AB4EB08E0B1F1EF14AA6C930DE92C8D85B0437E97CC1A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 dcb6dce760262ef6b860aae1ae78707dc43cbe8889dc8fec44f60f5cf7f66964
MD5 f37d93a75386096c0a9d29236e839bff
SHA1 2a29636aa489ffa0ee1a26f142e5d5958c4f1bcf
SHA512 731461b66ec2f3d452039d025e6c07c2abf4a254fc6b89c878289221cabba3557d33329207af2d8c26da0f6f442bd1451fecbdefbe57f5551c21ce3beb2f2622
SSDEEP 3072:2Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Bm7Rkm1tYpBeh2BAo3
TLSH
T13EC3123B5D75A9376DB9BB5EB08E0B1F1DF149A6C920DE92C8D45B0423EA7CC0A05938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 058cc1a3a6e449e60cc21207766c4fe481c208a01181e8dc33f6f5f74b1a776d
MD5 4f5830f109b9530cd69b4cdc492e08b2
SHA1 398237658c00cfdc92bf969d3b0b79bf680e8cab
SHA512 f86795c84a3f8fb4b4790c6baa6081ac41d6c8c5e4159fc8d7e82d586987b37c1f3dd268f6cfec897c06e68eb8ab642b498f73587dc2e5293cd2a70eeb36593d
SSDEEP 3072:hGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:wm7Rkm1tYpBeh2BAo3
TLSH
T168C3123B5D75A9375DB9BB0EB04E0A1F1EF14AA7C920DE92C8D85B0423F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download