hxxps://4download[.]net/1477-serum-xfer-records-wavetable-synth-plugin[.]html

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 13:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://4download.net/1477-serum-xfer-records-wavetable-synth-plugin.html
Sample260730-qa4f5aaq71

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3188	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298902876018308"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
3644	chrome.exe
3644	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe
Token: SeShutdownPrivilege	464	chrome.exe
Token: SeCreatePagefilePrivilege	464	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe
464	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 464 wrote to memory of 2892	464	chrome.exe	87
PID 464 wrote to memory of 1440	464	chrome.exe	88
PID 464 wrote to memory of 1440	464	chrome.exe	88
PID 464 wrote to memory of 3188	464	chrome.exe	89
PID 464 wrote to memory of 4616	464	chrome.exe	90
PID 464 wrote to memory of 4616	464	chrome.exe	90
PID 464 wrote to memory of 204	464	chrome.exe	92
PID 464 wrote to memory of 3220	464	chrome.exe	93
PID 464 wrote to memory of 204	464	chrome.exe	92
PID 464 wrote to memory of 3220	464	chrome.exe	93
PID 464 wrote to memory of 5108	464	chrome.exe	95
PID 464 wrote to memory of 4608	464	chrome.exe	98
PID 464 wrote to memory of 4608	464	chrome.exe	98
PID 464 wrote to memory of 3632	464	chrome.exe	99
PID 464 wrote to memory of 3632	464	chrome.exe	99
PID 464 wrote to memory of 4716	464	chrome.exe	100
PID 464 wrote to memory of 4716	464	chrome.exe	100
PID 464 wrote to memory of 3396	464	chrome.exe	103
PID 464 wrote to memory of 868	464	chrome.exe	104
PID 464 wrote to memory of 3676	464	chrome.exe	105
PID 464 wrote to memory of 4988	464	chrome.exe	106
PID 464 wrote to memory of 4988	464	chrome.exe	106
PID 464 wrote to memory of 1780	464	chrome.exe	115
PID 464 wrote to memory of 1780	464	chrome.exe	115
PID 464 wrote to memory of 3644	464	chrome.exe	116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://4download.net/1477-serum-xfer-records-wavetable-synth-plugin.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd4,0x108,0x7ffbfb34c728,0x7ffbfb34c734,0x7ffbfb34c740
  2⤵
  PID:2892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1768,i,3259592580929719172,14717510770125131399,262144 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,14206745605748896796,463826923647690786,524288 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,17844052548978035623,14224295065755331915,524288 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,8945226571648814384,7255805773457664392,2097152 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,10392678360758008232,2019830478430516910,2097152 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5124,i,10014922016423145568,8479572564706090614,524288 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5236,i,7023237657337251912,4857542468252852977,2097152 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3320,i,5090840087386520356,12311475890391953379,2097152 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5440,i,5310826874905280033,3761438637281391516,2097152 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5288,i,16460369118207181239,3391861160672933813,524288 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5624 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,3689669109128196057,8683162435439102418,524288 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5280,i,10546795803329952422,12622646591868983093,524288 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3976 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3488,i,13194526068865928452,15565908800121331848,2097152 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=732,i,1024318166763009483,1638956876647757351,2097152 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3504,i,266953324572093430,15010323420377236707,262144 --field-trial-handle=2012,i,4873307724996320229,15276013288330748451,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3644

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3228

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

95a4bfec-6ae7-46b6-9150-96c8cb774a89.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\95a4bfec-6ae7-46b6-9150-96c8cb774a89.tmp
Size 115KB
SHA256 e2f80906ea2b1e23c76b88ebaf677096f55975b0ba4571629e48fee47fd7229e
MD5 74f401d56ea41281ee5d146604749658
SHA1 bd7be5d1e511ce8771664a841cbfdd7e82103b91
SHA512 6fd72bd4762f314f0bdf9b7db7b65a5e92997cf7805d4371eb84474c328fc3baec79d6081af1e352852208b70eaeb04c81874fd80807b9612c13b62f87687002
SSDEEP 3072:AGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:rm7Rkm1tYpBeh2BAom
TLSH
T1C2C3123B5E70E9775979BB4EB08E0B1F1EF14AA2D930DA42C8D85A0437FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 15e80a72b5b49d9d3e46877ecdabbcdf3834892303ce96ce41c008ff369f0e14
MD5 ab6f461b51fc9671f0e484427e147069
SHA1 60a1763054737651cfce1a5ac4ff18a09d49e528
SHA512 980ba93734b20484e801e650fa163f46ec8775bc9759e37b172ff445fa0582a1282ac40d6af7572a92131b8b7a9090e7721739ed9e1f794d7a5a5af5689ce817
TLSH
T151E02BFAC961EC3B28FE476860558746E610136B2640894B7A3C850C8FF1B3E564581C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4a22205f6730734e3ff40c6ef4f3a895965ad592332ee9b327d4c0fdf9c6baa9
MD5 585ef117894ed8123c7d8870f464ec04
SHA1 ebbac9f5779581309b2b7ac66a41d707df64108e
SHA512 14d3414c380a0d7cc64b79e36068336427f9ed257b44e7835ae106a5961528bb3878ae1888008e65aa20f7b300729c4f909b824293525ccb16c159c28664d97a
TLSH
T1292199F783B0997E8A0082F4EB156F1FCE7A0524031C38A688D46D2B83E28B2D10478F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 3b8dc0891371e69cafe8606f8978a4765a51b7b9f32590d7e1377b8c805d4a36
MD5 86d5ec94239393c1311ebd42258d1ede
SHA1 294761b931b23f325064cdaf1ea7450780cc57ab
SHA512 fcaade8b51bafbaf539b03ddc61a7c4dae7e9976a33471b04c7d61fbe1c692213c8c13a54728661d5ea8c8e23988b50bb167801f48b957b7e8fb570781891079
SSDEEP 192:6RekjHnlv72vAPRp299THsb+WNnfWPwxCkwTp+VyIsnAUge:6RekjHVC6XuFwOPYCd2e
TLSH
T10F32B62EAA10653B6CDBD229F9617757D7F6103536D42E84EAFC8A3C14E75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 c48b8335706a9b81c37237206e90f790dfc5d6db5b641db140e718f37ff535c1
MD5 899af64cd4c4a7367f302b362a74f14c
SHA1 762d287b0756d922f0dab3e4f07cf6eebbec0703
SHA512 902a06c00546ee4cf62eb8b47b4ef99a98d9f74bdad73c6f011e74426ebc9ef7e6e35458ebe978d796f5521d192938a46e6744f82ab3966db2a051b1c76c1364
SSDEEP 192:6RekjHnIv72vAPRp2Sb9THsb+WNnfWPZxCkwTm+VyIsnAUgE:6RekjHUC6XLFwOPzCq2E
TLSH
T15F42D76FAA10653BACDBD219F9617717E7F6103136D42E44EAFC8A2C14E75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2094f361c2d3e259a5258edf961a9a3444aee536eeb8d84ec3db8263a2bc58e6
MD5 939ea3810d9ae56c6826f973987d8dfd
SHA1 4152e528962d8d004c35b199561dd48dd7bdbf1b
SHA512 597bde920f8c420744024ee0624b8df2bb2cdb8617b65a1470bb13d1b2d919dc7f0146fc4ece32800285122b904e9d592e1d0def906b58301a4e8bcdfeadc504
SSDEEP 192:6RekjHn3v72vGPRpMSb9THsb+WNnfWPhxCkwTk+VyIsnAUgE:6RekjHfCQXlFwOPrCY2E
TLSH
T19142D96FAA102537ACDBD629F9617B17D7F6103176D42E44EAFC8A2C14E75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 df3f3d7e8eb52eb11376e73179228426d3d2d5efef9c19d4d305887505e18b02
MD5 cf7fedf8f7d2c16e2ee32aeccb0d6abd
SHA1 c0965f169b36b690aaf700b8f80359944a908774
SHA512 0f7e0c7f513e4fbb8754c44a17604a17a368e18bf06088e8c92d246667c4707e4e019b978bfef2975410552144093cebfb7ef11074676b8e4908dde7b23f6a1f
SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9H9IB3Wh/+:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcx
TLSH
T16F32C727948D9A3F4FECD55CDC526F4F6DB1029272780C2896FB9C0403A97CE115A1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a5e7fdf5e6eda7a0879726acc30acb434599066fb071d803cd9208dec7ba2133
MD5 eb857ab8458fcb61341c807945ccb6fc
SHA1 2598123850655c37cf1a67bbe50f7743d56ec53c
SHA512 b135e71b2b0cef301821546633368a677fad8d0945614972e21b5ea346e8b1d5878e425ba2be6352c1616355b7f20b71f4fb169c65f030159661fd25cdcc732e
SSDEEP 3072:SwGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:S7m7Rkm1tYpBeh2BAom
TLSH
T1CCC3123B5E64E93759B9BB5EB08E0B1F1EF14AA6C930DE52C8D45B0433EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0772ebd9e477a3f4e9ef3eebfc3c38b45b2018c06edc1797b8bcad3baf824205
MD5 17c3cd805eb886a878efb7623e0b22d6
SHA1 fb59df96738a1662620197de283e610afe0ed520
SHA512 febda6a05a1971078809055da95d532057a1ce8a98abfd4b1f80c9399d2b037e81aede3f29560d96e0d5b35faf26d74fd4b4d8735d6e37c38d84678d24baeece
SSDEEP 3072:dGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:0m7Rkm1tYpBeh2BAom
TLSH
T1D3C3023B5E74A87759B9BB4EB04E0B1F1EF14AA6D920DE42C8D85E0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0f53a66727ed1a3ac853a95763ebb97b8cb6a4983ff0598cd3349d9ce3bcf1c6
MD5 01dc330ea3d191f7efbf901e73c5aaac
SHA1 c392ecba152145f376017b1ad3f938db54a2f4e8
SHA512 97c06f226ae98c0c82ddf2727cc85688acec5afa17005e1762b1b1eddedc651e92f51041b3bbfc78fdbf9d18dad3467f43c7932b07f115a85b12f9b14b22ecb5
SSDEEP 3072:5wGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:57m7Rkm1tYpBeh2BAom
TLSH
T1F0C3123B5E64E83659B9BB5EB08E0B1F1EF14AA6C920DE52C8D45B0433EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download