Analysis

  • user interaction
    yes
  • max time kernel
    1049s
  • max time network
    1042s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/07/2026, 02:49

General

  • Target
    Aurora.exe
  • Size 108KB
  • Sample260724-da2lbaec37
  • SHA256 2803b74d5466845e4dc9063bd516f3679aa2a3f70a30d9e93976c212e87f6e87
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Aurora.exe
    "C:\Users\Admin\AppData\Local\Temp\Aurora.exe"
    1⤵
      PID:4348
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:5068
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffd00f1c728,0x7ffd00f1c734,0x7ffd00f1c740
        2⤵
          PID:5032
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,14916028328366260664,4509326994759401737,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2244 /prefetch:3
          2⤵
          • System Time Discovery
          PID:3520
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,3734494925312345769,8046007693964071746,262144 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2180 /prefetch:2
          2⤵
            PID:388
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,10320735457906329783,11944784759168486448,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2372 /prefetch:8
            2⤵
              PID:3468
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,12462522353868168027,9181897556158674715,2097152 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
              2⤵
                PID:2920
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,8476350782020376114,11692052855031727272,2097152 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3308 /prefetch:1
                2⤵
                  PID:3940
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4328,i,15510002889596256069,1896573488824069803,2097152 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4332 /prefetch:2
                  2⤵
                    PID:1384
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,9297880902297675928,13326986676652195639,2097152 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
                    2⤵
                      PID:1800
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,10449265345405088071,2035482007558193683,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:8
                      2⤵
                        PID:2844
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6024,i,14000371559297724023,11014154018115364110,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6136 /prefetch:8
                        2⤵
                          PID:4552
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,6066386552911898241,8476395176833973263,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:8
                          2⤵
                            PID:1012
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6036,i,13605231421452419561,18092107392823607679,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6108 /prefetch:8
                            2⤵
                              PID:1572
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6104,i,3279244512172396125,12501459923442247215,262144 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:8
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:2444
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5928,i,5605546928029452533,10309181795184429586,2097152 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5956 /prefetch:1
                              2⤵
                                PID:1920
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3256,i,6576267595721221638,2898968576171793520,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3320 /prefetch:8
                                2⤵
                                  PID:4464
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5860,i,8870292088041558469,8085290504702871984,2097152 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4268 /prefetch:1
                                  2⤵
                                    PID:2304
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3424,i,13666235064484342832,16433896902534431403,2097152 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4436 /prefetch:1
                                    2⤵
                                      PID:788
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4332,i,14735976195796095439,8521588717151931656,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4324 /prefetch:8
                                      2⤵
                                        PID:1064
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6172,i,11551815717545089214,2512774875908808405,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6176 /prefetch:8
                                        2⤵
                                        • Modifies registry class
                                        PID:4260
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5788,i,5240405045040907832,10489510190994881937,524288 --field-trial-handle=2184,i,18259900237312380627,2710275402962093091,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6352 /prefetch:8
                                        2⤵
                                          PID:3424
                                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                        1⤵
                                          PID:4420
                                        • C:\Windows\system32\svchost.exe
                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                          1⤵
                                            PID:2284

                                          Network

                                                MITRE ATT&CK Enterprise v16

                                                Replay Monitor

                                                Loading Replay Monitor...

                                                Downloads

                                                BookmarkMergedSurfaceOrdering

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                • Size 6B
                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                • MD5 SHA1 SHA512

                                                BrowsingTopicsState

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                • Size 414B
                                                • SHA256 9d4ae31ce76f3d2eccedca00a0e27fdd6b659c64042e38612f711a48587b99e6
                                                • MD5 SHA1 SHA512 TLSH

                                                f_00001c

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
                                                • Size 56KB
                                                • SHA256 3f9b0c0a209ecaa2f816817bd374578d8ca9acbd0b1de8a110dfddf3c81435a5
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                f_00001d

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
                                                • Size 671KB
                                                • SHA256 0e7bab322f75b092a25a69df44e645c2ba66f0af47d0e3a5374724410f04eb99
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                f_00001e

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
                                                • Size 22KB
                                                • SHA256 c227a1af6376674c1ba6fcfda203a3787c1eb57bc222df372e44d3b5c10e4c7a
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                f_00001f

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
                                                • Size 34KB
                                                • SHA256 7fd55cb3eb1b4640925f976f995f37754ba88fcf13dde8bb6a3d6f43ea0e597e
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                f_000020

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
                                                • Size 281KB
                                                • SHA256 29a3a130b454908abd5c40f80045847aadafa3bf92ba1de32dc0c59b888ab6a4
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                000008.ldb

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
                                                • Size 33KB
                                                • SHA256 490d47c8fc3535943e084f69288865720686ce8afe91609aaa013a90fd9e35d9
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                000009.log

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000009.log
                                                • Size 608KB
                                                • SHA256 f06ebe53c1e5cbbb37544e21d274a214b056ff962f645ce63150778a41b66f7a
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                000011.ldb

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
                                                • Size 17KB
                                                • SHA256 4005c19dcd82e816f87c1b1f351aa650ee53c12ec3b2df609c1a0ef33964fcf4
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                LOG

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                • Size 3KB
                                                • SHA256 46c95aa3821b861c7cfa0dde7af16cc9080b91d739f0f8d40240b64791c0d927
                                                • MD5 SHA1 SHA512 TLSH

                                                MANIFEST-000001

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                • Size 530B
                                                • SHA256 6095c98480cc9124c3d2b72390eb13fc382cf65bcbe1000f943aaa0daffe0e32
                                                • MD5 SHA1 SHA512 TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                • Size 2KB
                                                • SHA256 5463fa65971507186ac21c2ba752cd576a155405daefccd718c77df74d87db90
                                                • MD5 SHA1 SHA512 TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                • Size 12KB
                                                • SHA256 d84b1400cee3c34386ef631079df252147abc2fe6957e8410c3916dbec16e128
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                • Size 14KB
                                                • SHA256 836ee3c4ffadca146dacaff136addd66b6f468994663a79e2e990b7f2d9d2900
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                • Size 14KB
                                                • SHA256 37318c81750b87834cb5a3a257a6e2dea758474412d643564eb8a836121e6599
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                • Size 2KB
                                                • SHA256 99d898d3ec3681d23571b57c15c969aa78ac24e0698f0449b979971cba1d1d76
                                                • MD5 SHA1 SHA512 TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                • Size 12KB
                                                • SHA256 b0c77b64ebb4bff196c3196b8435301d08a5f6ad0f946fdc7ccf1acf6bef0090
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                SCT Auditing Pending Reports

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                • Size 2B
                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                • MD5 SHA1 SHA512

                                                TransportSecurity

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                • Size 1KB
                                                • SHA256 37ce89537b655e4d58d7e3db996b5082ed6ef8d38d224c4aa5a48d689d4edbf7
                                                • MD5 SHA1 SHA512 TLSH

                                                CURRENT

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
                                                • Size 16B
                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                • MD5 SHA1 SHA512

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 13KB
                                                • SHA256 b1cc8912d34b5d76c139de49a2cadb75f4afb813217365197de2c40e3b400c14
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 12KB
                                                • SHA256 f5492611a571c159a981342b18b329a553186444e33b641ce539f2ab70157204
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 12KB
                                                • SHA256 02f41dc1084911f9f19e8cc84f7a569776872e5aebea76e3913729231bf1b0ba
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 12KB
                                                • SHA256 b5b63f77636a88f8ddf70ec33e73bde46d1654bdafd31b6ebfb3086477db3ae1
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 13KB
                                                • SHA256 44d078f9bcf3d3f3f2ba9873fec043a02b7337a95182c40603e80a9d8156cead
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 14KB
                                                • SHA256 6ecfee35dd406030985444496a891a0e5e41ed1c09bc6eb86ad266bb61d0bd26
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 15KB
                                                • SHA256 ef8396b62291d107148c70821f8c1e799aafda284234e8c099875066ea48bc11
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 15KB
                                                • SHA256 a3f306caf108ad58918b85d3b82fd06e0f46608d370537675ffcfefb6b1cee2f
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 15KB
                                                • SHA256 146b32874a816eab1e250429c241a95ecd493bea11b0c95cd146bb32431a5a9a
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 15KB
                                                • SHA256 a41c7d7d98c3295fe49238e63766019c638fb8a5289e15223a37119f799202a1
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 15KB
                                                • SHA256 468cd1e9b8dc33614b43f24e59cb6df450cc902bc1e9dbb4cf5f93cf90aed307
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Secure Preferences

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                • Size 17KB
                                                • SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                index

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4e2e5d23-2db2-48cb-abeb-258dce3b6e92\index
                                                • Size 24B
                                                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                • MD5 SHA1 SHA512

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4e2e5d23-2db2-48cb-abeb-258dce3b6e92\index-dir\the-real-index
                                                • Size 576B
                                                • SHA256 e0d14df2c865e3a181cdebd69859bb9bdc8c55e239853efd61d5c0eeba739fb6
                                                • MD5 SHA1 SHA512 TLSH

                                                the-real-index~RFe5b6e37.TMP

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4e2e5d23-2db2-48cb-abeb-258dce3b6e92\index-dir\the-real-index~RFe5b6e37.TMP
                                                • Size 48B
                                                • SHA256 364f7772981e1cf425614ea63b74f0fd3e510bb5de6eef4c6b28d8981bd8f60e
                                                • MD5 SHA1 SHA512

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e1ca53d5-4793-4e06-8898-7bf0716d122f\index-dir\the-real-index
                                                • Size 2KB
                                                • SHA256 dd45b08b8fbc96d1c633aabd2d98b33d226d1f3594dec44762fa1c261fd3679e
                                                • MD5 SHA1 SHA512 TLSH

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e1ca53d5-4793-4e06-8898-7bf0716d122f\index-dir\the-real-index
                                                • Size 2KB
                                                • SHA256 07fd8ed0b2ad5f875ca0ab04062f7f1a7159ce8cfbed6330a28911567125ecf6
                                                • MD5 SHA1 SHA512 TLSH

                                                the-real-index~RFe5b12d9.TMP

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e1ca53d5-4793-4e06-8898-7bf0716d122f\index-dir\the-real-index~RFe5b12d9.TMP
                                                • Size 48B
                                                • SHA256 70e81bfa62b0f45fe634ca0a5cb5b72027ec60df7cc158bfdd71d2624c8da36e
                                                • MD5 SHA1 SHA512

                                                index.txt

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                • Size 214B
                                                • SHA256 7f20ed4f8b2676141a73a4668c9267f3cf507775f6d3b8dbc3ae371f7fa6e353
                                                • MD5 SHA1 SHA512 TLSH

                                                index.txt

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                • Size 243B
                                                • SHA256 7bb0beb0e76c4744562e6074bbfab929d5b6074b5f5358bef03914a73bcfba59
                                                • MD5 SHA1 SHA512 TLSH

                                                index.txt

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                • Size 390B
                                                • SHA256 5d7a9b0bb9a9935bf1c288b3217e7ecced502b993263b216eeac796d4bb3d3b4
                                                • MD5 SHA1 SHA512 TLSH

                                                index.txt

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                • Size 130B
                                                • SHA256 6960ba771835e0b7e9ec9f68711a9e82e918736f08574500d60ed28046656e28
                                                • MD5 SHA1 SHA512 TLSH

                                                index.txt

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                • Size 132B
                                                • SHA256 0a1730cd27ec3e708349d48b91eec64eec3eb58f63c5f6a67bf43531f24b3383
                                                • MD5 SHA1 SHA512 TLSH

                                                index.txt

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                • Size 216B
                                                • SHA256 b02b3fcd5620a190184dd2dbaa24c2068b579d013d19b606c6a4d9196dc9594b
                                                • MD5 SHA1 SHA512 TLSH

                                                index.txt

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                • Size 383B
                                                • SHA256 c26c47d8a9aa64d750b2bb0924db8e749ccd96dfcc87c1c78d7fff5f5c0e2701
                                                • MD5 SHA1 SHA512 TLSH

                                                index.txt~RFe5b03b6.TMP

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5b03b6.TMP
                                                • Size 137B
                                                • SHA256 5a89484e50389bffe7f5da37004f2083dddbba5981021a7d1c308a5ca7190b15
                                                • MD5 SHA1 SHA512 TLSH

                                                013888a1cda32b90_0

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0
                                                • Size 192KB
                                                • SHA256 cc5ffc58ff14130819c646cee784938448710375024aa249ff235b984a529882
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                b6c28cea6ed9dfc1_0

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
                                                • Size 18KB
                                                • SHA256 f6aecf64f623a1a7c937dbf2d28ae1d09448a8c488cee2dba199731b681ba82c
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                • Size 120B
                                                • SHA256 2734793fa4e34e9756c5f1ce6669c4b80d08730a11b8c7cdf743232251c4b406
                                                • MD5 SHA1 SHA512 TLSH

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                • Size 168B
                                                • SHA256 4a254df57ce6b1874fe5e7782748583905f129411af3528a23780e0f7fe5fdf9
                                                • MD5 SHA1 SHA512 TLSH

                                                the-real-index~RFe58b11b.TMP

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b11b.TMP
                                                • Size 96B
                                                • SHA256 86ed00dca22eb0d2ac59fefd831efc52dbe769b288af5ed87bd27f79b3cfe50c
                                                • MD5 SHA1 SHA512 TLSH

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                • Size 72B
                                                • SHA256 2ac56a51ec17857e7c34eebcadfb025d48be74c82324a5e12a1ec883d1d1b263
                                                • MD5 SHA1 SHA512 TLSH

                                                512.png

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5068_333147891\Shortcuts Menu Icons\Monochrome\0\512.png
                                                • Size 4KB
                                                • SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                512.png

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5068_333147891\Shortcuts Menu Icons\Monochrome\1\512.png
                                                • Size 7KB
                                                • SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                512.png

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5068_333147891\Shortcuts Menu Icons\Monochrome\2\512.png
                                                • Size 9KB
                                                • SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                16.png

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5068_349634500\Icons Monochrome\16.png
                                                • Size 257B
                                                • SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
                                                • MD5 SHA1 SHA512 TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 236KB
                                                • SHA256 be1beda2e6d6c16bc856bdf60f6b2b65d8a6a36e2b3a4644458b98070135a1c1
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 115KB
                                                • SHA256 8cff5b8330d3b0604c6765f3a0f9d12edfec03eaa9ef6773ce814f1b68a278be
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 237KB
                                                • SHA256 3e219cc4a3730c7c88adab1d8f982ed768783855653c43ee2024078cb6173054
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 237KB
                                                • SHA256 f7876a90a67e9e6448dd80f145433ca456f8877cc48926f6a1f5d65b826c75f7
                                                • MD5 SHA1 SHA512 SSDEEP TLSH