hxxp://cevalane[.]com

Analysis

user interaction
yes
max time kernel
150s
max time network
147s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/07/2026, 08:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://cevalane.com
Sample260730-kctrtathka

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3928	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298736745944732"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
5188	chrome.exe
5188	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe
Token: SeShutdownPrivilege	2484	chrome.exe
Token: SeCreatePagefilePrivilege	2484	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe
2484	chrome.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 2484 wrote to memory of 5132	2484	chrome.exe	80
PID 2484 wrote to memory of 2888	2484	chrome.exe	81
PID 2484 wrote to memory of 2888	2484	chrome.exe	81
PID 2484 wrote to memory of 3928	2484	chrome.exe	82
PID 2484 wrote to memory of 3504	2484	chrome.exe	83
PID 2484 wrote to memory of 3504	2484	chrome.exe	83
PID 2484 wrote to memory of 860	2484	chrome.exe	85
PID 2484 wrote to memory of 860	2484	chrome.exe	85
PID 2484 wrote to memory of 4144	2484	chrome.exe	86
PID 2484 wrote to memory of 4144	2484	chrome.exe	86
PID 2484 wrote to memory of 2496	2484	chrome.exe	88
PID 2484 wrote to memory of 2496	2484	chrome.exe	88
PID 2484 wrote to memory of 5604	2484	chrome.exe	89
PID 2484 wrote to memory of 5604	2484	chrome.exe	89
PID 2484 wrote to memory of 2264	2484	chrome.exe	90
PID 2484 wrote to memory of 2264	2484	chrome.exe	90
PID 2484 wrote to memory of 2504	2484	chrome.exe	91
PID 2484 wrote to memory of 2448	2484	chrome.exe	93
PID 2484 wrote to memory of 2448	2484	chrome.exe	93
PID 2484 wrote to memory of 6084	2484	chrome.exe	94
PID 2484 wrote to memory of 6084	2484	chrome.exe	94
PID 2484 wrote to memory of 5144	2484	chrome.exe	95
PID 2484 wrote to memory of 5920	2484	chrome.exe	96
PID 2484 wrote to memory of 2432	2484	chrome.exe	97
PID 2484 wrote to memory of 3224	2484	chrome.exe	98
PID 2484 wrote to memory of 3224	2484	chrome.exe	98
PID 2484 wrote to memory of 2148	2484	chrome.exe	99
PID 2484 wrote to memory of 2148	2484	chrome.exe	99
PID 2484 wrote to memory of 5188	2484	chrome.exe	100

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://cevalane.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbc179c728,0x7ffbc179c734,0x7ffbc179c740
  2⤵
  PID:5132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,16026981591602293082,10898682057086108065,262144 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2224,i,1727759220883586414,9738764095482609734,524288 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2228 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,5035003343861290035,1158803323576882207,524288 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2508 /prefetch:13
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3144,i,395309971607406106,7372035163074629777,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,15037477385717833064,10914726574554835196,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4320,i,7948797606770278404,7402914062234815734,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4336 /prefetch:9
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4700,i,9003268623953486254,12717164574885710268,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4196,i,9378277512842140509,2379916296618294807,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5448,i,9151940831268679819,9001162210459816499,524288 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4584,i,15002865485637196707,9510710703382233845,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4464,i,2008488419067721611,5020371769198469165,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3424 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,15987682046144929035,8083376487200089878,524288 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3688 /prefetch:14
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5464,i,2982720443113628037,16750471519560122427,524288 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5760 /prefetch:14
  2⤵
  PID:5920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4728,i,5022201326220484508,6857127515426008444,524288 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=212,i,2151452469487499989,15510884690893941069,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4752,i,11816935642157776753,16993377138936672503,2097152 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4464,i,9632379055936506094,13711037980551184852,262144 --field-trial-handle=1968,i,2849392183926453696,18191413757060598417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5188

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5140

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1f1dc5fb61fe1da3e10292fc9f0c5a9c4e0a34b537a44088a12a1120ac9d2cd8
MD5 84b5af405c80808b2174d58d180b7c76
SHA1 dba9318af680a221afb6183d44102cc3d55ea4eb
SHA512 0042fd58a699cacf8a76bf4700bbe08e977a2671a3f04e95186f397f6e474d4195a692aced3a68b0e0d17c8243db75d59c939007eb634911703f2c5ea2bebfc6
TLSH
T13BE022AACC21EC370CFE1B2C61951746E76113172BC09A1F3B3C910C8FB1A3E528682C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ffcf36496dcd272f799eb49948f39ae5722a6ff43c66a1612f980bc31e66b387
MD5 891f1319720f47844650faa0c4ae198f
SHA1 0ab72fce284ec99fdeec3a008488f98b2d7a15b5
SHA512 d6328f4fdab498540e1cf1ef6d697f591038b20f1bf306e9f203a30eb6160156093bfc4206ee9fdb9d89e32aa7c835b899ab8a0e1e7d570ea0c39e28ba007ca6
TLSH
T188317BF793B4997E861092F4EA156F1FCE790624131C7CA689D4AD2B43F29B2E10478E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8473bf07a4226635642736b68e57d1cafa8f97e89755e5600f512d191aae80c3
MD5 47c69b817ee770c4e540200f6e44242a
SHA1 cabc39a8ea95f3feaa754a8e785447583908770c
SHA512 0fe2fde15507ef827163f306690699a1fcf7ead7d6a7897fabe1417180ceb2644cebf373bae3f45dd0fddf413cc67c3afaea124ec9bcbacce7b7a9753794cead
SSDEEP 192:sRfFvPz6Z1v7HpAPRp2XW9DHKub+WNnnIPCkvP2ceQF+VyIsnAUge:sRfF6FjUXx5/IPLvP2yF2e
TLSH
T1B142B72EAE106A3B5CCBD259FA657B57D7F5102221D42E84FAFC8A2C15E76DC321700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 fe307f6333e5fda25fc7964b8295eb82cd6fe886691510625f02b5eeb5ff521c
MD5 9362b023b8ebf464bdec19d8430c7d08
SHA1 9acb1e3663658e405a4e9e25c037ff37e7c85099
SHA512 83fab682fadbbfc63865b522843f0fc23957561261221d7a3831225e2a102471b45544631f071ebf6932c0236ab12c20d7e5d3afd18699f8d3a4b31011e1b8ca
SSDEEP 192:sRfFvPz6ZHv7HpAPRp2XW9DHKSb+WNnnIPokvP2ceQC+VyIsnAUgE:sRfF6PjUXx5jIPRvP2yC2E
TLSH
T11D42B72EAE10693B6CCBD259F9657B57E7F5102221D41E84FAFC8A2C15E76DC321700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 41f4072c516db60e5fd939d03e8ec9309a5d1c10e04a512a002f2478761bb189
MD5 f96fc2dbeb56a6512805bf6eaa9f9d57
SHA1 64234331042e3e2269f807844c3cdd6d39f082f7
SHA512 0e0258abebc5c160a0a5e29a24aa8ce4d797d89afbab1711b18a1eef9a1fd0a1aa10c81a8edc7912aed5f913d4d25bdcd2ac22f99d6929f9382cf3fae8e558ac
SSDEEP 192:sRfFvPz6ZZv7HpNPRpZXW9DHKib+WNnnIPNkvP2ceQm+VyIsnAUgE:sRfF65jHXs5jIPyvP2ym2E
TLSH
T19B52B62EAE105A3B5CCBD259F9657B57E7F5102261D01E88FAFC8A2C15E76DD321300B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b0b1fa982dc5eacbc6f9007c33ed30c25d00409f44242dc625cd0bff29ad9119
MD5 0859bbc906ce03249fa4799cf2dfde05
SHA1 e7446417f4b1b66509f436af54097457dd287a67
SHA512 08d01cfee0ae3d50dddd05acc741020b6ba86c09263d9bc66dcd5efd0a8235003b2e21305eed4bb16b22348863eb4e758fc251e1dbefc13ce36963c8bab110a3
SSDEEP 192:sRfFvdz6ZZv7HpNPRpZXW9DHKib+WNnnIPNkvP2ceQm+VyIsnAUgE:sRfF45jHXs5jIPyvP2ym2E
TLSH
T18E52B72EAE10593B5CCBD259F9657B57E7F5102261D01E88FAFC8A2C05E76DD321301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 3fceec2368f93ddd3be7eaa1465a3011c325ff47801261d2e3bc86a459460fa8
MD5 a9125c26694a66613be5174b13bd716c
SHA1 d0abfcc6f0e0b8d2779b7f996521b8ebdf6cd039
SHA512 5811381d70a31e2f21b2051a0c5593e8505bc21c15a15c6e78f2f2a296602ffd19c6ce03bfc0a32c575a8048dba5ba42472a9bf5d2aadd73dfc95e4c5fe7a5ed
SSDEEP 384:97jJY7KxkXqKf/pUZNCgVLH2Hfgsl6y7pLuLcSjvKXODJ4+ErU3rQHGjLsHHG:93JY7KxkXqKf/pUZNCgVLH2HfgsYy7p8
TLSH
T13E720967AC4C9E370F94C5CCD816BF4FADB5024B65E9C86483FA582903D5ADB110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 0e1be5b3bc428acd7d6693c15adb897976e51e6a3a4f9e2a28eb3d245c3cdcff
MD5 fe2654d2379c830dea85ad1f9000f2fc
SHA1 7fc3e091f5e8cff2543ffea7ae292b70fd2ec86c
SHA512 d489650bb464786888a5727d3e41adde44466b0fe7ed5e510c36ba64eb0285c930f9b1c058df68bb5bf43ea1390afe8e3191672537bfcac0655190123f0368d4
TLSH
T1FAB01200C8415101C0C20BB0114218CC71145F51960E1B0183E07E23C8366618114050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58afa4.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58afa4.TMP
Size 96B
SHA256 56086fffd8db8dc357ff74528dccdadc38011ff60e7bff4146dbcf2ba6c641e8
MD5 4e8b2bb47f619b21b0f1918aa0dcd5a8
SHA1 78bfaddca56cf90350391ae2a448db555137c88d
SHA512 0550c2c65ed623ea971e9c2e19fb7dc74df5f7d685dbdccb6305217e2cb76aba64d5e4ba29025c1440b7a98b21d4cce84aa6b0ff57a40d2a9ceb759e1f3e47e8
TLSH
T136B02200C0033222C00203F020B0CAC83230CFB0C2832322A2E00F2ACC28E320020030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 977c2b4414e4b8f755419150f7fdf6293ee16b906c70deb8caf0647c957e34d6
MD5 cf69464522ffd659c4ccfd3fd5281a40
SHA1 9f55db7022cdda8c48779781da0642b3c2208a7b
SHA512 dc6de4ff526ea73032334f460e959ed7e540f4a6c875a11a0fdb0311e4e23d2dd440212dea517a5c98376b896d196d4de43a9a30202aeb2a3552b4eb945a983a
SSDEEP 3072:9fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:9Om7Rkm1tYpBeh2BAo+
TLSH
T128C3123B5D75A9375CB9BB0EB04E0A1F1EF149A7D924EE92C8D85F0423E66CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 aaa41dc543fa4736b9c830f6024ade71d741073011305903e325877108970575
MD5 4b403f362dc85874b6bee7c42fcd653a
SHA1 0b7350112c540891ab7cd8bf740f98e0c23a3852
SHA512 312ca2db22cb7af5fe6b2c7a66df54b101eaa1a834e5189e346174f60686eca1eb429198824cfbcdff88938fac80178a1f169738f2f29dc6dea9594879f33484
SSDEEP 3072:/Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:um7Rkm1tYpBeh2BAo+
TLSH
T1A4C3122B5D75A83658B9BB0EB04E0B1F1EF149A6C930DE92C8D85F0423FA7CD1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5e6a90cee68919d23fcfddf35eaf07eb8f9e7cba0ed0964f862e3f9dc73b8165
MD5 c5b5a4e2f2b3e9c46ccf04b512520e63
SHA1 dccb3769c1c6b830d54a0f296048907445abe701
SHA512 a5a3dac9440a125af5a3b7fe122a8a9d71054d7febe82dca0ad0ace20e8affaa3e7c816513e8bc33dfa79d097d601fb99e299ebe63fcbf6284d4b1db08f401f1
SSDEEP 3072:UGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:Xm7Rkm1tYpBeh2BAo+
TLSH
T1A0C3122B5D74A83658B9BB0EB04E0F1F1EF149A6C930DE92C8D85F0423FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 98abdd8d3694d46f5ace2e443f6df6bdbad2e3c25c28fc94d41e5ac7ba67ecf0
MD5 3210f6efcc59a75960ad418ba4911166
SHA1 db8a046859bbd21fe4b6baca3d23c0d22b3c152c
SHA512 f72b31886600fb738b42d641724cd213e74ad3b126558b6825f1edabcc43dac1136c721ff1068bb365d47e943a99ac4373b71ce3da48e686500c9cc919b346f0
SSDEEP 3072:bGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:Cm7Rkm1tYpBeh2BAo+
TLSH
T1EDC3122B5D71A93758B9A74EB08D0B1F1EF149A6C930DE82C8D85B0477F67CD1A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download