02d38f82c46f5d68f975f4565f099bd8224271717f767a7445b4a857f461e00c

Analysis

user interaction
yes
max time kernel
101s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 13:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
stub.exe
Size 37KB
Sample260802-rap46sthqa
SHA256 02d38f82c46f5d68f975f4565f099bd8224271717f767a7445b4a857f461e00c
MD5 d7f8c725d967cd79e3c805749d367545
SHA1 c18026511b0fb6111199e4ee719b67f9135d4d98
SHA512 6c1123b135463783f61735fe66214b8e6851109f2b34e461068360aaa21590f7fc2909678b411cddce279d703793fdd864356bfd978dce7f7fffe005ab286d00
SSDEEP 768:RcbC4H06GVbFtyGeGnRTm+L2umMZSpphn:RewlGrcRTm+YMcd
TLSH
T10503178DBBF18220D1FD6A7B0671E1514376F11B4A23EB0F4EE094BA27B77918B10D91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	stub.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5012	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301527942908792"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe
Token: SeShutdownPrivilege	3392	chrome.exe
Token: SeCreatePagefilePrivilege	3392	chrome.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe
3392	chrome.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 3392 wrote to memory of 1584	3392	chrome.exe	92
PID 3392 wrote to memory of 4880	3392	chrome.exe	93
PID 3392 wrote to memory of 5012	3392	chrome.exe	94
PID 3392 wrote to memory of 4880	3392	chrome.exe	93
PID 3392 wrote to memory of 1756	3392	chrome.exe	95
PID 3392 wrote to memory of 1756	3392	chrome.exe	95
PID 3392 wrote to memory of 1700	3392	chrome.exe	97
PID 3392 wrote to memory of 1644	3392	chrome.exe	98
PID 3392 wrote to memory of 1700	3392	chrome.exe	97
PID 3392 wrote to memory of 1644	3392	chrome.exe	98
PID 3392 wrote to memory of 4384	3392	chrome.exe	99
PID 3392 wrote to memory of 4384	3392	chrome.exe	99
PID 3392 wrote to memory of 4012	3392	chrome.exe	101
PID 3392 wrote to memory of 4012	3392	chrome.exe	101
PID 3392 wrote to memory of 2620	3392	chrome.exe	107
PID 3392 wrote to memory of 3648	3392	chrome.exe	110
PID 3392 wrote to memory of 2352	3392	chrome.exe	111
PID 3392 wrote to memory of 1152	3392	chrome.exe	112
PID 3392 wrote to memory of 980	3392	chrome.exe	116
PID 3392 wrote to memory of 980	3392	chrome.exe	116
PID 3392 wrote to memory of 4908	3392	chrome.exe	123
PID 3392 wrote to memory of 4908	3392	chrome.exe	123
PID 3392 wrote to memory of 3984	3392	chrome.exe	124
PID 3392 wrote to memory of 3984	3392	chrome.exe	124

C:\Users\Admin\AppData\Local\Temp\stub.exe
"C:\Users\Admin\AppData\Local\Temp\stub.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4916

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb1a96c728,0x7ffb1a96c734,0x7ffb1a96c740
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1804,i,13782560356860977757,14625946056394091768,262144 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1952,i,2394495172528279711,11298761847063069965,524288 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,8401781087550648320,6397743125774560331,524288 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,6478180909283280428,3588509091769049524,2097152 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3132 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3432,i,12820991899821605526,9885548130045994903,2097152 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4408,i,6473533318569882334,1261628378858907477,2097152 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:2
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4780,i,10601754710687248815,8461614701203693181,2097152 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5500,i,7317180804776862566,6093622663091889910,524288 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,16437397651017486308,3192651078309701905,524288 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,15002342865969617613,3358639584022055999,524288 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5604,i,8621127616166450434,4723789482421703965,524288 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:1152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5512,i,662946718687685693,9125329395141669000,2097152 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6032,i,10488561656397552516,7077906723548705334,2097152 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3464,i,7050337715309329054,8285791022767340538,2097152 --field-trial-handle=2032,i,4759898537053309685,5133549611258583929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3984

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3440

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6100c65297619a5fdda67aa30642df1ed92fe73cbdb26e42f3a46b5686ff67eb
MD5 a0d318de59f27cc5a4525a5763d2d38d
SHA1 9f95a5c3c05fc0d89052bc5ddc80664f313bcb3f
SHA512 c3b8367b2076977ca13e663051c84c3ce49f772b7e3f1befa4eccdaabcdc199fb1e5e7f1a20b5cbfffca61de46d95a941a70d8a43ee37501657110e87d48fe11
TLSH
T129E02B75C862EC2718FA0719A0101746D758139B2A40899F7A3CD00C8FB1A3B4695C1C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 14fae0d59b04b570bad2983d2d54a0adc8a0332b483c64b29948ac1d163184c4
MD5 5cba5ff754c9f23ea38fec248ec3aad7
SHA1 0e823bce83ae58679783004e500067836cd79b0e
SHA512 338c130446c8981c1e40de426f4352c120e3e60f20c3abbf97d75f9057d15a0d8b489099825b82b6e87a22ed4ce04737219db667f818dc08b4ae03756020a6ad
TLSH
T10B51AEF7D3E8866D851192F4DB21AE1FCE3D0A24022C3C66C8D4AE5B83E2972D21174E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 35c102bac0053d9e33e0993cf0a5c2718533218f3e7fad380a8a3d5480b0b933
MD5 b9bc11dbbbc1f918423e3f2ead7d75a1
SHA1 834179c4ec8d47334fce075ac745a922d555719f
SHA512 0be4930c8479c5512078a8770da9faf84a572d2554d9c42bfb494fb1c51b1363f534a5a41ab08511be3338c2a67f24d96f9b5d223409ac3c16f3128f963c2cf4
SSDEEP 192:5RbfGDWXWTv70hAPRp2dj9+Hsb+WNnno0mxSkwmmVyIsnAUgraJ:5Rbfexrg8X68wo0yS9e
TLSH
T19242B52EBA10697B9CDEC229F9517B53D7F6202621952E44EBFCCA2C15E75CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 36a840aad6fd2f364559609e7aea45b3846fc785f05bf1fd4d21bac326a3d4a6
MD5 dda4efe00e21ed1d94b769fad77e7557
SHA1 b701b2899b367e799380da30b93e137ab3da0b76
SHA512 fa9e2386f2be03e83ac06a08bdea411014386bed9bd14fd7e87a290f005c97cee096fdb70458af557fb56f4ea738de3331197858f28a57b3c7054c63b83fba92
SSDEEP 192:5ROfGDWXiTv70hyPRpAdj9+Hsb+WNnno0QxSkwmyVyIsnAUgraJ:5ROfehrgmX48wo0YSXe
TLSH
T14252B42ABA10697B9CDEC229F9517B53D7F6203621952E44EBFCCA2C15E75CC3227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ccd968e19ee7114da15f1be7daafef0f5f72636d5ffbfed3a8ea1bddfd32c848
MD5 cdc0bbf9412ee66904ce21c03ba27bcc
SHA1 80e2d76d91635500468778f02ba6812152d83d96
SHA512 552f23cd569bbd9f8161c31dad5c7132e150a2f1541c58819adf17ec73c874c1f1f68f4d658865676d4f6eca4a96c361cd1d0a36454a20035afc61aa7fe34309
SSDEEP 192:5RbfGDWX8Tv70hAPRp2dj9+Hsb+WNnno0mxSkwmmVyIsnAUgraJ:5RbfePrg8X68wo0yS9e
TLSH
T11342B42ABA10697B9CDEC229F9517B53D7F6203621952E44EBFCCA2C15E75CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7b8c34505ccdd841b9ed7cc9af8d0cd5dda67593e9096f7058b75c91a9ad3f7a
MD5 6f692262ecf4402e3b33dfe5b6affd80
SHA1 c89b9af7d6fbff51c617603429feaf0f62d88b43
SHA512 82334844704680ff126c67d2af1c2e0a00472b515e86720d7c8614f94506f45cf1b580e18ce6a172cd29bff279d2ecbc76566b62a8f7b7531555945428aa0427
SSDEEP 192:5RbfGDWXUTv70hAPRp2dj9+Hsb+WNnno0mxSkwmmVyIsnAUgraJ:5RbfePrg8X68wo0yS9e
TLSH
T16842B42ABA10697B9CDEC229F9517B53D7F6203621952E44EBFCCA2C15E75CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8935ba038af5c83550909f586436a892a55ad656e9b30e16f6ee5d162dd12bf5
MD5 4a36763028225c660dcb28f16c221c19
SHA1 015b3134dfd78a34dfc4a3e7b7265e2b31f0254c
SHA512 640e42e9652b083249bd77810ef995eead8ad20f1478903efab0da4a8bcaed694a2058228fece04bc3e08b0f260744c7992ab293ddb8f91c33cdb9fe301a7cba
SSDEEP 192:5RbfGDWXiTv70hyPRpAdj9+Hsb+WNnno0QxSkwmyVyIsnAUgraJ:5RbfehrgmX48wo0YSXe
TLSH
T1A352B42ABA10697B9CDEC229F9517B53D7F6203621952E44EBFCCA2C19E75CC3227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7950c910f8dae98c2b947b90bf864130efe58a5223ae27749b42d656ed63f14b
MD5 91532c49470d3604ffcf5cf8dd9e387e
SHA1 fa49c1d2234be942ebb47e5345cbec6fb1cc1b97
SHA512 8ad04be3daff14a01c26ede0a2a40f2d6c69167c96943c14a6508c63266e8f2516d981af230f1c53dd66b85e0bed13d631d900303c24788a4130ddb005f09a0f
SSDEEP 192:5RbfGDWXUAv70hAPRp2dj9+Hsb+WNnno0xxSkwmVVyIsnAUgtaJ:5RbfeJcg8X68wo0fSM8
TLSH
T1DF42A42EBA10693B9CDEC229F9517753D7F6202621952E84EBFCCA2C15E75CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b2b26e91bb72b6692a59c0eb9ff73d2ce253e70f018bfddf87739957ff47cd5d
MD5 a194040fa3df1b2cc980f257c718bc6d
SHA1 0553d5697a65037b0eb1e5221e9f666dd57cd48b
SHA512 2f30e2e6cd0afce1f26662d80821144d399db465be4de5f831823abaf8dde425a520c654934c75a9e454f581d024ad1825d11356fc46a6647887f7e5415b0188
TLSH
T199B0124180019203C04606F011671888B1149F109A0A170183F0AA22D825561C06E150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f1dd.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f1dd.TMP
Size 96B
SHA256 e660ea377feee53dcaf0ee193515c46239a6a382dd106aa0addd50e71e7c25a5
MD5 a77e4fd134de65469915f84ff974f779
SHA1 816908bf672143c330f792955a66db59ede53591
SHA512 ec6b4cec3dca58279a6311f7fbbfa300fd860dc4cffcc5699bc81df209e2fe47a9570ddd45379f63b7e25797f860d6cf7ee4aba8bd57bf7f500a230efad09de9
TLSH
T1B2B02200C002AA0BC00303B0228880C832B0CF20C203020282F0AF22CC202300220020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 38f5e2d1ec7d7ed794dc2bca36672df45dd5f3abeb563f5892b5fd76718e4e63
MD5 6c0cc7ab2a0054ec934e8a5a047fb97a
SHA1 6bfe86b85b15ea68ea1d5d070783aadc143a7c14
SHA512 b1d550e3c77e0f234132b9d18c088d0b101ca7ea2791ad235ee5fe963168ecb1ee697bf50d939e86eb2a8ff610c47b019608978790748af2a01839174964ca30
SSDEEP 3072:4mdLTq/HYb50P4w9J4aDvC3QXhbx+WIzZ2l+1hbAFqfd7NtZL8cHQRZEQ6Sps0:X8i0Aw9NDv+qw5ZtAFqZ/ZLW3Ex0
TLSH
T12C342333AF438E378FC69A7478278F8F57F4AC69D064D7826A9837BF59038962417418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 ad628954be8c70c5a87c9d6d1cfe2088e8380390451142949bdf4d7d01113d82
MD5 9c972d822a266d04464bea0abf209f82
SHA1 03cdec10d6edae7aa99adcc3de90d313840c03df
SHA512 d86c3913f11652861e70dab5c29367e7e6ee2ac21d8d42e7fd54799676100ce4016e805fdb1e1b0866e42a871f4a011bb997a1bd468c16345ab7dedb72557725
SSDEEP 3072:XmdLTq/HYb50P4w9J4aDvC3QXhbx+WIzZ2l+1hbAFqfd7NtZL8cHQRZEQ6Sps0:W8i0Aw9NDv+qw5ZtAFqZ/ZLW3Ex0
TLSH
T1C3342333AF438E378FC69A7478278F8F57F4AC69D064D7826A9837BF59038962417418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 961e4d10e4f4ef346cc66bc617374f72f085407314f584c1ac6283f00f89001e
MD5 0fa43985521ebb635ad0fb1f4b3775c1
SHA1 e189902a13cb32c9005e4a896790678e305bb428
SHA512 10a86dc31a1a295933ecbee03f4e6a75de129ff592d803a2e8722e3eacae685079841f1a995e93e0b828fd0d44b91e2d6306b185e722e38553355a70753cebc0
SSDEEP 3072:4sdLTq/HYb50P4w9J4aDvC3QXhbx+WIzZ2l+1hbAFqfd7NtZL8cHQRZEQ6Sps0:4s8i0Aw9NDv+qw5ZtAFqZ/ZLW3Ex0
TLSH
T106341233AF434D378FC69E7068178F8F5FF8A86ED424D746AD983BAB58078A52417418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 c39cde046560c3935395d1b28cd8f1d12c6f95da39b41b0bb8a37a0074745726
MD5 f4aed19a4db9894a4123aa84f7e97342
SHA1 ed56661b8b2e785a040d9424ee48bc1533defb62
SHA512 0d3e527ecd4b5d2f64a5c0557a3cbbe3e89bb2064404c21e30f57402521074b4a6fdae50f89bb8cdb41e1278246578d3e8dcd3159d3f2ee71cadde33e1d690a8
SSDEEP 1536:b9LyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:vqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1B1C30237ABC21F339D92CF64B9530FDAA7B644A99030D301AAAD37EB7C93591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4916-0-0x0000000001170000-0x0000000001180000-memory.dmp

Download

memory/4916-1-0x0000000074D62000-0x0000000074D64000-memory.dmp

Download