hxxp://cdn[.]staticfile[.]org

Resubmissions

29/07/2026, 09:46

260729-lr2lmsdn7y6

29/07/2026, 09:45

260729-lrcbradn513

Analysis

user interaction
yes
max time kernel
58s
max time network
59s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 09:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://cdn.staticfile.org
Sample260729-lrcbradn51

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4908	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297919497185542"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5500	chrome.exe
5500	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 5500 wrote to memory of 1276	5500	chrome.exe	85
PID 5500 wrote to memory of 4908	5500	chrome.exe	86
PID 5500 wrote to memory of 5508	5500	chrome.exe	87
PID 5500 wrote to memory of 5508	5500	chrome.exe	87
PID 5500 wrote to memory of 5148	5500	chrome.exe	88
PID 5500 wrote to memory of 5148	5500	chrome.exe	88
PID 5500 wrote to memory of 5372	5500	chrome.exe	90
PID 5500 wrote to memory of 5380	5500	chrome.exe	91
PID 5500 wrote to memory of 5372	5500	chrome.exe	90
PID 5500 wrote to memory of 5380	5500	chrome.exe	91
PID 5500 wrote to memory of 5648	5500	chrome.exe	92
PID 5500 wrote to memory of 5648	5500	chrome.exe	92
PID 5500 wrote to memory of 5276	5500	chrome.exe	93
PID 5500 wrote to memory of 5276	5500	chrome.exe	93
PID 5500 wrote to memory of 3748	5500	chrome.exe	94
PID 5500 wrote to memory of 2072	5500	chrome.exe	100
PID 5500 wrote to memory of 4636	5500	chrome.exe	101
PID 5500 wrote to memory of 2176	5500	chrome.exe	102
PID 5500 wrote to memory of 992	5500	chrome.exe	107
PID 5500 wrote to memory of 992	5500	chrome.exe	107
PID 5500 wrote to memory of 4632	5500	chrome.exe	108
PID 5500 wrote to memory of 4632	5500	chrome.exe	108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://cdn.staticfile.org
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffbd53bc728,0x7ffbd53bc734,0x7ffbd53bc740
  2⤵
  PID:1276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1948,i,3574213770939419273,7581175685518542768,524288 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2104 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,4955546569648968343,13025611854717674032,262144 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,10713315274253648500,2488039853030147190,524288 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3128,i,5180792812618128066,1812302490390134214,2097152 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:5372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3140,i,9954165172550898236,8848556049000376728,2097152 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4424,i,2942299440596436545,15247108882011978415,2097152 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4436 /prefetch:2
  2⤵
  PID:5648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,14467243704438151972,16251747053904182149,2097152 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5588,i,14267661031505502882,17333926288508179619,524288 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5624,i,10534074108522762072,16598839027926126546,524288 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5620 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,6022065494549348045,7186676116810401457,524288 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5696,i,17660929242882100307,9705886429637125297,524288 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4496,i,16175136460785378581,14531998857403156182,2097152 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4500 /prefetch:1
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4568,i,10378937739151870178,3709388137362406086,2097152 --field-trial-handle=2076,i,4024538857926538426,13607985704027421433,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:4632

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2584

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 81ee202d68a6f99e0af7e5b811129896480e4e9cb7230313377c85120f1f349e
MD5 a9d876eed940e4f4e563b887fbe0b479
SHA1 2f2f2cc32cbab30bf227fc54c87de2ef99b7f3d9
SHA512 047bf91e2c035c77afc97912103ee70f2499bd6dce5f7843ae5acc9a46a5f88b953f01d2ef36642751a69472330a1c04f28af52c5d7959e078a315225383bd51
TLSH
T1B2E02BEECA72EC371AFD0B5EA0501745F65513473B40448B3A3D85088FB423B474685C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 a4446a990006402e59f3e9f4b16382e6f1c3087d90b0f5d46fb12a14556dd5cd
MD5 1ef526bff30039ffb3bfa346f09c2592
SHA1 c181f9196d5d5102e050766473ac459e50fa12d1
SHA512 c11f22d213bea40be8aa892f551de84f8ef29c1d772659298a116a2643c3216bbcacfdc190a4d176ca29b78293d120335e80a18688d4cc32a593a67a73840c54
TLSH
T16CE0179257C07114DF0816B4E6B2AE6C626485642A408733D8AC34BDB9AE1F876F20AB
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6a445e33b89f2670b27d0ca47d312957cc3bb5af999bae842e7107e320d061d2
MD5 df22e883bf6aee492f36149ca2f18a04
SHA1 325f7502718efa94c404d34bca9a55d5ed16ebea
SHA512 a58e0212881edebb85d70a934f5a9d42cff7ab9813a7b5cb814101b13e3b586e8f20a5e159ac8681db19d59523e4b4526189418119513068605d722f27afe164
SSDEEP 192:5R3rZqR41lUuEahgSv71hpAPRp2/sz92Hsb+WNnjKUXc2gU2mhSWDDsVyIsnAUge:5R3rZu41qGBhUX9zQw+v2p2mhSHe
TLSH
T1B642C62FA914A9BB6DDBD22AFD227713D7F5102121E01E84E6FCC91C14E7ACD222340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 921596f7d708168c960ba63f84b76f45b4489db84d99870a0639ce6cfb2583ae
MD5 fb843a2d29debc8465c55c3648c84112
SHA1 36ce21e0e3d73052b92ddc556704361177bc660d
SHA512 745d86f50775a8ffbbf77ef7f5fba0892ca30133a2978d4d1524575aef3122a6d71875d544d89f6b328c3b4835b0cbe26b9f26bd663ff05974c91a3a9aa0654d
SSDEEP 192:5R3rZqR41lUuEajSv71hpAPRp2/sz92Hsb+WNnjKUdyekU2mhSWD7sVyIsnAUgE:5R3rZu41qJBhUX9zQw+Ded2mhSrE
TLSH
T1B742C52FA91469BBADDBD22AFD127713E7F5102121E11E84E6FCCA1C15E76CD222341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 04510ec7705514a0d1258399f40d73cecdf9d68edd027d637fcca084a36f0965
MD5 eef7889cc16f7ec29f2b6f6d9d4f7bd0
SHA1 65a0b51de6bf19af5733db5c9f72b2250f6b03fd
SHA512 bb6970e2877509f9568df2ac3fa74f8de437eb8f25090af6f477c8fb1634c3c034cad9cf4f0d9637cf17f9125d96e83aecbd7ca3323133d9c2a26ab18ffd6270
TLSH
T193B0121080016101C44202B011825888B2346F11960E2F02A3E0793ACD259A2C018090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5834f6.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5834f6.TMP
Size 96B
SHA256 5c3cc9b09f4320229e99d82bc59a3d312aae7bfc41eb536121b108c0876d046a
MD5 343fd84424e561f3ce9acb54f1fff2c5
SHA1 b2df2c34bb13a8c0fe4ed901ae6661b7e62143e5
SHA512 42569f0eef9b411b444130c26103f141ca1382fae351029232fa844d0eeeb20275c1d14f9579fd82819269237ee8c1b3b769eb55944d32502a1512c2d22a7ba0
TLSH
T165B00276C1027212C44243F065A5A5DC76A2DF25C643131293E51E6EDC2D6B145291B4
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 16bef967fca007e2925404a55f5ca6e23255b9a5da00044ff8b37f958e41dc52
MD5 11913ac3b234746faa8d169805672293
SHA1 874867b151d27f0c77b213281f76e40e62cc0b55
SHA512 f62ab24ed5faadf4bfe4dbd62cd62e7e243c7fdbef18e70dfb843dbad2ff68d4d1144ccb555e54fe9fa06bd6cb5950a6abc2fba9788fc7f1cbca2eb2c0e16fd6
SSDEEP 3072:fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Om7Rkm1tYpBeh2BAo3
TLSH
T1ACC3122B5D75E9375D79AB4EB08E0B1F1EF24AA6C930DE92C8D85B0437E97CC0A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8569cc7495e133316390ebae37df9855e13ee77ab864db1782e8cf43b0051409
MD5 272b36f7f3e3d839c96d5c4d0e4d8f1d
SHA1 6fed5997ea93acabf24e7b03eb4bd861bc4e0c5d
SHA512 eda534585e62dbb3e3d7bb421260371de5d02722be5e1ca5b7474b8a447a870bb151676834e830c7d78ecb8a018dfde8aab9f74c1bf8e67bf373b931f64dfb81
SSDEEP 3072:xGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:gm7Rkm1tYpBeh2BAo3
TLSH
T17DC3123B5DB5E8375DB5BB1EB04E0B1F1DF249A6C920DE92C8D45B0827EA7CC0A45938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5ef238b473371b0b5e8a552146f4fef857d9f256cf71356cf2ce283802a33182
MD5 c939c722a255ef5e99b8afe04bba0457
SHA1 8cfc0a34f909180a986e0ea1f4760a8ebd8d9acc
SHA512 d146e52383bfd3f266a93789de97ee3ea5572526472c2c8028700747fa6da33ee188ad908e2ab404b314855d1c70a8a0775296a2cc69e255608aeca77e0e87e1
SSDEEP 3072:tGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:km7Rkm1tYpBeh2BAo3
TLSH
T198C3123B5DB5E8375DB5BB1EB04E0B1F1DF249A6C920DE52C8D45B0827EA7CC0A45938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download