hxxps://surveys[.]crossoverresearch[.]com/jfe/form/SV_bdXrhUZ45VLepng?Q_DL=8HtD6ju9WLLWeEl_bdXrhUZ45VLepng_CGC_EN8MjwPE4bdxsOL&Q_CHL=email

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 22:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://surveys.crossoverresearch.com/jfe/form/SV_bdXrhUZ45VLepng?Q_DL=8HtD6ju9WLLWeEl_bdXrhUZ45VLepng_CGC_EN8MjwPE4bdxsOL&Q_CHL=email
Sample260804-18ynmser9x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3060	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303556068185186"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
3908	chrome.exe
3908	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe
Token: SeShutdownPrivilege	1132	chrome.exe
Token: SeCreatePagefilePrivilege	1132	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe
1132	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 1132 wrote to memory of 4968	1132	chrome.exe	87
PID 1132 wrote to memory of 2900	1132	chrome.exe	88
PID 1132 wrote to memory of 2900	1132	chrome.exe	88
PID 1132 wrote to memory of 3060	1132	chrome.exe	89
PID 1132 wrote to memory of 824	1132	chrome.exe	90
PID 1132 wrote to memory of 824	1132	chrome.exe	90
PID 1132 wrote to memory of 1896	1132	chrome.exe	92
PID 1132 wrote to memory of 1896	1132	chrome.exe	92
PID 1132 wrote to memory of 1756	1132	chrome.exe	93
PID 1132 wrote to memory of 1756	1132	chrome.exe	93
PID 1132 wrote to memory of 1832	1132	chrome.exe	94
PID 1132 wrote to memory of 1832	1132	chrome.exe	94
PID 1132 wrote to memory of 4020	1132	chrome.exe	96
PID 1132 wrote to memory of 4020	1132	chrome.exe	96
PID 1132 wrote to memory of 3828	1132	chrome.exe	97
PID 1132 wrote to memory of 3712	1132	chrome.exe	103
PID 1132 wrote to memory of 3320	1132	chrome.exe	104
PID 1132 wrote to memory of 2576	1132	chrome.exe	105
PID 1132 wrote to memory of 2096	1132	chrome.exe	106
PID 1132 wrote to memory of 2096	1132	chrome.exe	106
PID 1132 wrote to memory of 3908	1132	chrome.exe	116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://surveys.crossoverresearch.com/jfe/form/SV_bdXrhUZ45VLepng?Q_DL=8HtD6ju9WLLWeEl_bdXrhUZ45VLepng_CGC_EN8MjwPE4bdxsOL&Q_CHL=email
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff87b6ec728,0x7ff87b6ec734,0x7ff87b6ec740
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1660,i,11215817782560509358,3616615569030815423,262144 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:2900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,14922247191159973999,10556433295489125699,524288 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,17857806872768959230,10116799214401816226,524288 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2432 /prefetch:8
  2⤵
  PID:824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,1314107623825419401,6607264117432897239,2097152 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,5685664878889726796,14891252446073039924,2097152 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4400,i,16628843962789873594,419486377626837468,2097152 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4460 /prefetch:2
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,15795329951799589566,18114564461458601892,2097152 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5844,i,6515824370183744367,14891233084399804181,524288 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5124,i,5024488815602416677,8353978071212690185,524288 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5132,i,8054847488624276730,1902421792262775958,524288 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5128,i,13834380989161357558,8380638377072898775,524288 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4952,i,6150858961570813781,7488226901428987893,2097152 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5248,i,2328036842988201304,14441251722700017312,262144 --field-trial-handle=1984,i,15090299613094422642,14470460138990180246,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3908

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1012

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ef99d0b4211d09b7736881d5a64e7e3f30f28696700227ed9a7a98c737dc0d7e
MD5 0075227a1afbd515b229de49cbb14463
SHA1 8bdc6758050d8b4f7530448aa655fdd3e0d682a9
SHA512 29d94bad74ccf1b455fba2daa3eb5063e69af4388457ff64c27d37b57f5241b3aec888f21d39f0713e644b8ebdacd732d43c6a511a66f7e6eb27833fc6edc735
TLSH
T1ECE02BA9C921FC275CFD472D50940745EA2113572BA0895B363C91588FB167B0A85C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 02de9f4e10a05949dc67c26b512a8176a3916890eeb0f93e7ba8414f77089262
MD5 b97625f591c998339fa719292da619a1
SHA1 ce6a7ca5410c45bc824fff20e2279e422101c010
SHA512 a67f0184887774543f6c771c384bce5af9894ef4cf185fc15c3b1029f27b0c87ecac5b8f553253fada4af8ecc3cbad667d98fa02bf625774ddce6c803c8dfee2
TLSH
T128F0D81FC7D28305DF930A741896D8742120493536473F536C218FD08D1F6E136C414F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 870a4d93064abbda8c4a3f94f32f059b70d9c740ed252670d9db6d527ce4bafe
MD5 7f8b93db37c0c613fae4e3429107db8e
SHA1 7b0ad5d40bf640b185a84d96281886d27f63cd8f
SHA512 8525e4ba6dcb83ca5279b6da4f136fa5e6184bd8c59e5cc94e04ff5f7072e1762e546f98c94a09c11a5d4837ec5988a86980f97e324dd92db1a54248253cf07a
SSDEEP 48:YALlKNeK3ZTeZsZNPhyaXYfo7EdKsRgmzslNiQsiksZ1/s8k0scL0s8ioQsqCzsN:Dye2deWjYaIaEdbyNVLxkoLxoCiHg
TLSH
T107A1CCF3D3F8C62D8A619AF0DA256F1FCE291514833C3D9A8DD4AE4797E2471D200A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9c1cf5e11ef42b6b771c01c85e1cb56a34c492a63330c17133c5c349cfb026fa
MD5 dbdce685760f90e6e6183612faba7a35
SHA1 9e99644ada5f3007c14fc262cdaffeba10695a92
SHA512 f56f8f54437999b2ee77b1d5869aa23b9471d16e711052c49f842cb1d135c43bde38a7fd7f332217d4fb82dab43518082aa021ad0c643feec6d3eea8f57a957b
SSDEEP 192:IROmYOnYp4X8HQGv7ApAPRp2Pf9qHsb+WNnGOLQX2+wUkwJxvVyIsnAUge:IROmVnYK7ykUXkkwPc2zURe
TLSH
T1BC42E82AFE10697B9CCBD229F9267B13E7F6203521942EC4E6FC992C24E75CD211741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e8000ab4b640d799a0d130dd2b59070a47acae6701ac8eb018d036cbb7ba78f4
MD5 8738ed528c0fec48f1eb70f40d162bfb
SHA1 a6c246d97a43c78cb978db34326878811286059a
SHA512 376b7fdc4c19b72af55fb129fa42c007373f45e5f5470ef1e4a9261b90d26c33af440520dd7a09c8094feda43ee5e28b40ec31c123f9865871cdf4368fdbe72e
SSDEEP 192:IROmYOnYp4X8HQZv7ApAPRp2Pf9qHsb+WNnGOLMbeuIwUkwJxv8yIsnAUge:IROmVnYK75kUXkkwPseutUce
TLSH
T19552D82AFE00693B9CCAD229FD217B63D7F6203521942ED0E6FC992C24E75CD211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 1a0d9d1e2682f952aae13d1a69a538a62e4fd3ca762a18c1ee561809def9bdee
MD5 bd9747a7b9351ebd6a1af44549e3f588
SHA1 e30b1fbbb8389069a68272547793716b850eb2bd
SHA512 8da7f84d20157b04df6b35af5bb9a8e4af586fa815ac5bffc8f562c2dc13cfa2e92d2bb3ca1aea8fc2b3562f7df951e481ad5d9ca2b485a48954bf0b1bf7f26f
SSDEEP 192:IROU8SqYOnYp4X8HQZv7ApAPRp2Pf9qHsb+WNnGOLMbeCIwUkwJxj8yIsnAUgE:IROUoVnYK75kUXkkwPseCtU4E
TLSH
T19862E82EE904697B9CDBD229FA257F23D7F6203621842E90E6FC952C24F39CD2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 75f66e4955a74d3a3eb2e54c0f0c7d727e5b3a9890d72bb5c2e8c272c0500085
MD5 534ad7868da72ac1d8cd4588499e300d
SHA1 237cca91e10f04396961ec3f59c71dc96b8a74cb
SHA512 de59768f91c2150ea80b988a5c43771a513f9c1109d59fc19825679d03be0c17eac69ef8f986b5a02d580d87b0685bdb194b1120ae175e1f2af1af3e5e2d13eb
TLSH
T1C2B0120080415641C8620AB05153548871685F20EE0B1B0153E07A72C825561C02C050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58873c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58873c.TMP
Size 96B
SHA256 201e62ca5b612bd0833611c4878b76965ecffbe7a253bc3fb472f70f78621185
MD5 41f23bb7db8cc280dc64e3b4c81a0a96
SHA1 26e91a6c4c0bbf032e3c0ef4efba16ebfe93cf4e
SHA512 d12414827a68ec5858bd95c3d34cdffba3a1263fc5ddcd6a78e380eccc7848b09f757aea390933e193bbe3526db632045c56a9b2e2b8e161efc81558d5b46f0d
TLSH
T139B0220CC2022302C20203B020C082CAB030CF30C303022383E08ABACC3023088320A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 3191d55b37220b7066b9a7ee38d39e1315f6d59a670432509e52051f36ab9d11
MD5 4e92139178cef04ba2b5340bb7fe4eca
SHA1 94d90dc77482b0a4e52053abc65849422160ed62
SHA512 1d9fdbc2840b45923e8c6499569be557d7f7f9c7f111e36c572d92e0af394972bb83a969098d024b39ed6c4457c709604d25b54849cb31989f9b4be4330c68d8
SSDEEP 3072:EhGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:3m7Rkm1tYpBeh2BAog
TLSH
T141C3023B5D75EC3B5CB5BB1EA04E0A1E2EF249A7C920DE52C8D85A0433F97CD1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 72eecb48579ba3f27b8c90c8653e13fee10c2628b996e1be1483211af465951a
MD5 c3fd839ba4102156827e4c9bd4e8635a
SHA1 7aef2954761638af9374f67e8f1ff68d8db177da
SHA512 4ea281186536eeb93523c45be8cc379867ae88b2e4ff29c52c65b90d71353916b2f8c4d3b794f30deac08f31382517154380b4996633365a6d1fa8e2823953c7
SSDEEP 3072:EqGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Cm7Rkm1tYpBeh2BAog
TLSH
T1DCC3023B5D64EC375DB5B71EA04E0A1F1EF249A6C924DE9288D45B0423EA7CD0A49E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 5764db2a231ebc05fde4455e755aca18d8a76b29edbfc3ba504940e88af20a7e
MD5 586e89dfe3abeddd2a3e2092a58a386b
SHA1 3b2dcf41c9aa2e88a01925f36b0dbbee73f68f90
SHA512 19afada2726a419cfecd81b0be11c82c01ec738c4831d95390218e5e8ec0b17c53d0b2d3ee012ca18d3ebb6f2e3c8d20d88d944c319ef6d819253adcae4274a9
SSDEEP 3072:AEGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:cm7Rkm1tYpBeh2BAog
TLSH
T15FC3023B5D75ED3B5CB5A74EB08E0B1E2EF149A6C920DE9288D85A0437F97CD0A44D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f48dd4948eff8a9d0e289ee5a0560288b5f479c1bed7b05266d20a88d3d08132
MD5 35c0c8e63e682f218c949a2860f8fae0
SHA1 4f7e719638458cddd5c0acc1f9b0627d79e9dd94
SHA512 ee8178deeb5b6ff9852ab5ee5833440afc488496c5bae310494c30cbb57064cb402037f6846c3298e4269d8bf8171f6a8a03054ef8047d0d4376b531ae428151
SSDEEP 3072:EWGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:gm7Rkm1tYpBeh2BAog
TLSH
T192C3023B5E64EC3759B5AB1AA04E0A1F1EF249B6C924DE9288D45B0433FA7CD0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 77cbaa588d443b9c3466e00167e9d02c7d075f033a4fa6d69cd4363f23d0cff4
MD5 ae86c72919d52c65dbe8f68e4509cecf
SHA1 c30dd145c32630ac97deceb5642e7d43da6076b7
SHA512 17197f67e2fb26bab18c37835106474dfd0514c3a4956cda72cbe0d4ed0012bf72ed2f8ea9de178f893f8f4e3294d4a441771559edec03166689a64b75576435
SSDEEP 3072:pWGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Xm7Rkm1tYpBeh2BAog
TLSH
T121C3023B5E64EC375DB5AB1AA04E0A1F1EF249B6C924DA92C8D45B0433FA7CD0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download