hxxps://us01[.]z[.]antigena[.]com/l/CUL89somAoJXAdVXqmi5Bfzlec3nfQfWeXamcZbwm~CzpmQNH19T6xgiGQnlCbEK5pArPw2YgyKGbNxD3DaN95J5cDZSL~4~USY2WhiL07nKusRAB6tf1ABnFU7MFgujcg7z7gi0amKohRSRCpBrvaZymfNt~~L-weEcY00UT0T5zdefzehVgtnvEM3aP~gZ4PWbqL30w2bF

Analysis

user interaction
yes
max time kernel
38s
max time network
36s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/07/2026, 21:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://us01.z.antigena.com/l/CUL89somAoJXAdVXqmi5Bfzlec3nfQfWeXamcZbwm~CzpmQNH19T6xgiGQnlCbEK5pArPw2YgyKGbNxD3DaN95J5cDZSL~4~USY2WhiL07nKusRAB6tf1ABnFU7MFgujcg7z7gi0amKohRSRCpBrvaZymfNt~~L-weEcY00UT0T5zdefzehVgtnvEM3aP~gZ4PWbqL30w2bF
Sample260724-1phs3stfpd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5684	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134294033783698162"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2144	chrome.exe
2144	chrome.exe

Suspicious behavior: LoadsDriver 5 IoCs

pid	Process
660	Process not Found
660	Process not Found
660	Process not Found
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe
Token: SeShutdownPrivilege	2144	chrome.exe
Token: SeCreatePagefilePrivilege	2144	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe
2144	chrome.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 2144 wrote to memory of 5172	2144	chrome.exe	79
PID 2144 wrote to memory of 5180	2144	chrome.exe	80
PID 2144 wrote to memory of 5180	2144	chrome.exe	80
PID 2144 wrote to memory of 5684	2144	chrome.exe	81
PID 2144 wrote to memory of 2552	2144	chrome.exe	83
PID 2144 wrote to memory of 2552	2144	chrome.exe	83
PID 2144 wrote to memory of 788	2144	chrome.exe	84
PID 2144 wrote to memory of 788	2144	chrome.exe	84
PID 2144 wrote to memory of 1568	2144	chrome.exe	85
PID 2144 wrote to memory of 1568	2144	chrome.exe	85
PID 2144 wrote to memory of 3716	2144	chrome.exe	86
PID 2144 wrote to memory of 3716	2144	chrome.exe	86
PID 2144 wrote to memory of 5020	2144	chrome.exe	88
PID 2144 wrote to memory of 4260	2144	chrome.exe	90
PID 2144 wrote to memory of 4260	2144	chrome.exe	90
PID 2144 wrote to memory of 4040	2144	chrome.exe	91
PID 2144 wrote to memory of 4040	2144	chrome.exe	91
PID 2144 wrote to memory of 3496	2144	chrome.exe	92
PID 2144 wrote to memory of 3496	2144	chrome.exe	92
PID 2144 wrote to memory of 1952	2144	chrome.exe	93
PID 2144 wrote to memory of 1952	2144	chrome.exe	93
PID 2144 wrote to memory of 4752	2144	chrome.exe	94
PID 2144 wrote to memory of 1088	2144	chrome.exe	95
PID 2144 wrote to memory of 5160	2144	chrome.exe	96

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://us01.z.antigena.com/l/CUL89somAoJXAdVXqmi5Bfzlec3nfQfWeXamcZbwm~CzpmQNH19T6xgiGQnlCbEK5pArPw2YgyKGbNxD3DaN95J5cDZSL~4~USY2WhiL07nKusRAB6tf1ABnFU7MFgujcg7z7gi0amKohRSRCpBrvaZymfNt~~L-weEcY00UT0T5zdefzehVgtnvEM3aP~gZ4PWbqL30w2bF
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe1fcbc728,0x7ffe1fcbc734,0x7ffe1fcbc740
  2⤵
  PID:5172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1596,i,16642716866943067552,425713583980448485,262144 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1940 /prefetch:2
  2⤵
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,10415855420946946108,11909221718896071810,524288 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2252 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,6509021372595127439,5074568312055927641,524288 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2408 /prefetch:13
  2⤵
  PID:2552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,5472050486015382035,7069088510347420310,2097152 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3264,i,15440513943903203534,1180740836220582804,2097152 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4328,i,9410137292496818138,4048871784496896597,2097152 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4300 /prefetch:9
  2⤵
  PID:3716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,13929445027370299026,14857334784202926827,524288 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5412,i,13706947711498535212,16987504041046335696,2097152 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5832,i,12255438987924696078,7795157698784548719,2097152 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5852,i,3564194494391883366,2508160249688858610,2097152 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5976,i,9359069648945147856,14241166324358568051,2097152 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5804,i,16909537623935181783,17101049776250815288,524288 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:14
  2⤵
  PID:4752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,7362908698119570058,11419535489949721425,524288 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3320,i,807206993649252282,9213008575691279278,524288 --field-trial-handle=1964,i,5713053649793189606,988926317301713556,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5792 /prefetch:14
  2⤵
  PID:5160

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2420

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 fb32dccd8876c440adfd8008d160814b03e7fc7b9d6880753bf416ce439636c9
MD5 bbd401b154ad73d1c77f86d1a6dcac52
SHA1 bffdfd12a603acbb7ee30b752d3d08467c853204
SHA512 2e18444afe4dd4ab4011d8ce2f0cff4d1aae822d4c1b3f63aa6701e84e83576984f84459fbea2eee9d32e750d3f3f8d6f12d0bd46386f9e6e9de50b4e7c316b3
TLSH
T16FE022AEEC61DC7B58FE4B29A0888A47E78413572F40485F7E3C950C8FB473B469A85C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 384B
SHA256 99c8d0c4432a1f85b8de95e9bce011bd9e22a9e81931836cb8e873cf0b70fa10
MD5 274b5d730387e58a35c3b1e5841bf065
SHA1 0c1daa2187a6f0a604e41d482866990337a9bdf4
SHA512 41a0d36577edc7138d48f9b67053211e937bb3211226b3a666d1800731676813719040cf730e9ade5680a66112b01485710a5b12b6991320f18e8df9591ec3c2
TLSH
T1D3E05EB12D811882EFAC62B7B2EB3C0CF0F456753B532E6346D4D1B4D6223D6A841314
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cd5e9aa998228d9aa2bc00b6b2a8597c6ecab8317aa5dcce0adf4f261142a8c9
MD5 57dd6c00bc91faffc90399354d522e4f
SHA1 756b5b7acb1702b1db682e9c5f79bdf8e975d1ef
SHA512 a8d5f78da47d74c8e7886975efb4966875b754b64ccb3dd54b0e96554295f71fb8bd355a3fe65a485dddf6178ccbf397d4a3071cb032eb5b88a9f8cc72397cfc
SSDEEP 192:XRDJTEHdXUKTv7+pAPRp2GK9wHsb+WNnd2jRnZ2OFe8CHaZZiVyIsnAUge:XRDZUr6UXMOwIpZ23aye
TLSH
T19C42E82EAD90693B5CDBC31AFA65B753D7F5003171842E80EAFD892C15E76CC222752B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 67a91894f6ebd3b62e34badb23345dd23d9bd650c24e63259973aee866b3a71a
MD5 26fd476cd2585075007d30c9fb8fe523
SHA1 3a13eaf1b2442d773d728ace7a64c074bb213e40
SHA512 acf441a3561e470c856dab0e94fb298cf36558762dacbd7e23c5367e0ae662a1b627e165e0cf7e16a7e741cd03aa8ff7e88f17dee994c3003cfbbb73b3ae5776
SSDEEP 192:XRDJTEHdXUKXLv7+pAPRp2GJZ9wHsb+WNydd2jRnZ2UFe8CHaZBiVyIsnAUgE:XRDZUj6UXdOwFpZ25a6E
TLSH
T18852F82EA990293BACDBC319FA15B757D7F4103165C41E40EAFD8A2C15E76CC232752B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 31a5ce04ae67b5403f3453ceb77ece590798531384f472283d145995727d92f5
MD5 b28f8d2c357e9f30dbd5f6faec9be3a8
SHA1 7045d97913533ca8a4d3fd4bcccacb31200659fb
SHA512 0c3fd52647169605cd7ffcc7ff7895b9d1008ecd2a828bc0aac93f78a5c3515c5bf2ae9dd7335970687bfc199d7d6444d158da461151c200b0fb87c211b0d77f
SSDEEP 384:sejIb7KxkXqKf/pUZNCgVLH2HfgslHH7pLuLcSj2XXODIX+ErU38xHG6QDzXU:suIb7KxkXqKf/pUZNCgVLH2HfgshH7pZ
TLSH
T17072F8676C489A370F94CA8CDC267B4FADB5024B65EDC86483FA581903D5BCF114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cacdc621d3dfa1472284b87abd166df1a75ea1931c63aadb242aa1c638ba75d0
MD5 083ebd65ffa6da515b90b1f752f74523
SHA1 c60768ecbc98de28d6f5fdacac65aa4865a5d90d
SHA512 d387ab622847d56abd2875212af3a8619521497ebf56c266924bc7217a66616aa333b3fd9589ed46d543757c348c22c594076dd0723c40fbdd8c7b5cd193d1e7
TLSH
T11FB0129180025301C00203F411422698B214AF11E64A1B0943E0F922C8251908014190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ab8d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ab8d.TMP
Size 96B
SHA256 346e67ac5e519fa0bd225ca41756a43d84ae052733b0a03c35eb97c274aa991f
MD5 fd5b1ef5a3ac17fd2e0aa947421eee55
SHA1 f2b6e7fda2ca170c5d4640d86c8827d48e3b0a31
SHA512 f17489787be05145aca3b6ada14261fc78c3fd67bef2007f7bea68110848113a2ea9179f7409558b69e24c3bccf7cdb30b61d94d5d0c084961f954f8039b8b8e
TLSH
T17DB002A5F3026612D08307B02D96E6D8F271EFA5CBC3131692E17B6EDC26EE04525962
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7b67339abe881c14b35dbf356260ff15a1fe33602bc64c84ad9dccd24757f973
MD5 e73d4b41c9016bfcb1b3ae72a46c7c54
SHA1 2e7d111eb003dd4ec77b759fc757dcaeeca96d5b
SHA512 cd4996dca0068e2f5fa3334e0ff88030f4769db4883530f298f2ff64022737a1c47744679f24bcf0d686d10c05a7b4402cac59c62d0f80424c86941005e6f712
SSDEEP 3072:VHzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:VTWDfxA3OnjrYQ9EU0/hEg
TLSH
T15CC302A15C39FD660CF8EE95B40D3A60AFF46CAA92479DC3A2E91B4C14FB5C81179930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 8af32aa6c17a6946922533a31c1058912d6c6b62e1bd47d223d5137fbddd2103
MD5 cea46842b2f9ad413938abd37018e4a9
SHA1 14c5ae075e429ed7c864e224309904934b342d72
SHA512 7f12b9d19deb8f984813b09de37db4914e321a043b27ae69710ec23d7fc8b6ffab4ecfd1dd42355a67818e44cac2ff2d9a02a35b13c255ac487538ac34bb5b94
SSDEEP 3072:LzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:PWDfxA3OnjrYQ9EU0/hEg
TLSH
T10AC302A15C35BD660CB8EE99744C3F60FFF4AD9A91879DC362E91B4C24FA5C81139930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download