hxxps://u7103381[.]ct[.]sendgrid[.]net/wf/open?upn=u001[.]BiCaAh4SXdWfT-2BinQGByMuOnmr1a8T7N31nyBB8PPET3hHdbwuOzRA2hWDJ8LiFrmu5nLtVJWA95r37ncfqCEyUJJpQVsXJiYgahwRchy0njw2cyGAoJXK6MucFr0RAYvxWS44YpjpNx2ooQnzWG3OnQPVYB1qG41HAfaLYoqKJgQHfegS0BqqIovsWsOWa3EAC-2FprNxHQzplN60P5CgLQ-3D-3D

Analysis

max time kernel
299s
max time network
299s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 23:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://u7103381.ct.sendgrid.net/wf/open?upn=u001.BiCaAh4SXdWfT-2BinQGByMuOnmr1a8T7N31nyBB8PPET3hHdbwuOzRA2hWDJ8LiFrmu5nLtVJWA95r37ncfqCEyUJJpQVsXJiYgahwRchy0njw2cyGAoJXK6MucFr0RAYvxWS44YpjpNx2ooQnzWG3OnQPVYB1qG41HAfaLYoqKJgQHfegS0BqqIovsWsOWa3EAC-2FprNxHQzplN60P5CgLQ-3D-3D
Sample260804-312rfatclb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2304	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303615835503956"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
1104	chrome.exe
1104	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe
Token: SeShutdownPrivilege	3976	chrome.exe
Token: SeCreatePagefilePrivilege	3976	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe
3976	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3976 wrote to memory of 3788	3976	chrome.exe	86
PID 3976 wrote to memory of 3316	3976	chrome.exe	87
PID 3976 wrote to memory of 3316	3976	chrome.exe	87
PID 3976 wrote to memory of 2304	3976	chrome.exe	88
PID 3976 wrote to memory of 2268	3976	chrome.exe	89
PID 3976 wrote to memory of 2268	3976	chrome.exe	89
PID 3976 wrote to memory of 3796	3976	chrome.exe	90
PID 3976 wrote to memory of 3796	3976	chrome.exe	90
PID 3976 wrote to memory of 3200	3976	chrome.exe	91
PID 3976 wrote to memory of 3200	3976	chrome.exe	91
PID 3976 wrote to memory of 1160	3976	chrome.exe	92
PID 3976 wrote to memory of 1160	3976	chrome.exe	92
PID 3976 wrote to memory of 4684	3976	chrome.exe	94
PID 3976 wrote to memory of 3064	3976	chrome.exe	103
PID 3976 wrote to memory of 4832	3976	chrome.exe	104
PID 3976 wrote to memory of 3736	3976	chrome.exe	105
PID 3976 wrote to memory of 1104	3976	chrome.exe	112
PID 3976 wrote to memory of 1500	3976	chrome.exe	113
PID 3976 wrote to memory of 1500	3976	chrome.exe	113

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://u7103381.ct.sendgrid.net/wf/open?upn=u001.BiCaAh4SXdWfT-2BinQGByMuOnmr1a8T7N31nyBB8PPET3hHdbwuOzRA2hWDJ8LiFrmu5nLtVJWA95r37ncfqCEyUJJpQVsXJiYgahwRchy0njw2cyGAoJXK6MucFr0RAYvxWS44YpjpNx2ooQnzWG3OnQPVYB1qG41HAfaLYoqKJgQHfegS0BqqIovsWsOWa3EAC-2FprNxHQzplN60P5CgLQ-3D-3D
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff05bfc728,0x7fff05bfc734,0x7fff05bfc740
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1740,i,5583522560300775656,8273807313444617777,262144 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1948 /prefetch:2
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,9630161437653809310,11160294779538593918,524288 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,3672187971189532511,2897546972266901653,524288 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3160,i,15265079474708144364,14631843178703766971,2097152 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,18265816270121383626,8473753533154071867,2097152 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4352,i,10071807066155765286,3858045873359747437,2097152 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:1160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,4989661575599109825,5530114464385458645,524288 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,8550424438761791714,8384061812819128566,524288 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4528,i,745007147215573864,11416705587988566720,524288 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4756,i,8379746877355973695,732108016867454353,524288 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4404,i,8625672556313653777,11956241046167921532,262144 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3048,i,18387969654477631434,280166792518213777,524288 --field-trial-handle=1952,i,8729462245836715181,10583882063802588758,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:1500

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2684

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9d532c9b79e43d1398635654b93dbe9278af09717442e8fee22e75a26b7980a4
MD5 3b7aa63d6fce5761a2d6053c06f2fa81
SHA1 25e3ae2c6320fce93ca2408b0fc2d41cf33bb163
SHA512 7bfe1039c5a5ab71c4bfbecd2c0facea117ba774de0410464bba15ccfdf9eaaaca615567238381bdc2d11fd0d5632d740ef967226ee8646e1adf9eeef51562f6
TLSH
T1B1E02BA9C821FC275CFD475D91904B8ADA1213572760885B3A3D91188FB06AB0186C9C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 db20dd1e8ba8c41a96ac3554f8de12b78637cb587dacc5f112bda4ff271941a9
MD5 44d419512f71fb4ea16ede431d6039e3
SHA1 34965b51539ded2f12c1eb2c2c82897ebc5e0fd1
SHA512 a9f340889c01e463affe9c855140101f09844a4b940679df67485d2e74e0fd069bcbc6e5359a0e00ea870cc933835a160b66d8bff446393ab9e3d0baf02c2c89
TLSH
T15A41BBF793B4897E8A1192E4EB156F1FCE6D0624031C3CA288D4AE1B43F2872D10578F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 439aa9ab6bb7930429dfc1e9109048e3d7f5e1e8441f93fab5a1a51cb70cb16e
MD5 b04d39984285972a9bcd81bebdb99777
SHA1 8626a833cb9a706741ea564a7e1695673210c5e3
SHA512 b5004af766d5b84ef1364a86d034fbe8e66901d548bfa4e53a5bfd8b37ada26753950ab66a3e4520a03927dd4c18c2f3cd0c698d75026b262f09fb5e00d3a331
SSDEEP 192:IRHCYJS8A88M8v7ApAPRp2479qHsb+WNnuz4HV2M4dYdZVyIsnAUge:IRHCKTfokUXrkwSS2xye
TLSH
T1A442B52AEA106D7FACDBC229F9657727E7F1203520942EC0E6FC992C14E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 39112d8755f151ef75e2bd8fd8427c52ed756ff4edbcef22e107fb2495ea24f3
MD5 6f9a8c1aca0efa66c367dcfd8e14ef56
SHA1 4bdfece28c238f83fdcf073a56d6904ee225ae1a
SHA512 5924c1edd34e844c6e9332b65e4ef39648dd3a140a6a0dea687a86769d05b328254aed582f7108445af4fe24fa310d359bd8aae81a047cf1c65d01d8f36d3c50
TLSH
T132B01211C081B245C04202F025422488B2289F25960A270543E06AA6D826162C014051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a65d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a65d.TMP
Size 96B
SHA256 a763a0664e861301336e0591b5dbc98905228e1cda6cb845c9f1e141828125b7
MD5 c709263de9e812d0cb2240235060dcad
SHA1 4684e0b4107b5f1040b4a7ea82cf34b85d5727b2
SHA512 90e0c1b98794a7b4f516673361bd57ffde648376b7de0967ad3f52b9dcd0740657dbe96a608cbd1d2b18a53014b43ea7d9f308058ab4d9249b46f7aa1d4be1cb
TLSH
T1D2B02232C0023323C00203B02080B2C8302CCF30C2030203C2E00B32CE3AA30C820022
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 2ae9fa556541a0a5c08f33c18a5e49a6f1417b43ed43cebd48e65c43830983b3
MD5 36f52e57b36c9908bfe6bd1cdb541e63
SHA1 a8c44623dc383f7c2c80239e36a59a03786dd7b9
SHA512 aa9babf0a25399484cc2e78ad6084ae553d3b3be1e1a2b218f6bf2716bf9a8e2a628e1bb4799ced5ee340d0c08e2976c17fea778f9b3d5a985b598ae0b34ec4e
SSDEEP 3072:ygGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:cm7Rkm1tYpBeh2BAog
TLSH
T1C0C3023B5D75AC3B59B5B74FA08E0A1F2EF249A7C924DE52C8D86E0423F97CC1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 151KB
SHA256 afa8c2e225c1a4990d338f6a398f40fcc5508457be03ebebae261507a22d31db
MD5 81af4b291dbd77ebb973938ef26496e7
SHA1 c99b72ddf466e5451c654ff9834a531ad67a05c9
SHA512 453345c8e54f4f7a3205d516b0c154c2f39e50fbb74a075dd28c499839fe3ca9c6fda15719e07be3db661f773d842b47cebe8ec470b1fd3f5f941192361c4430
SSDEEP 3072:q4SgX5anKVz+sQNzHGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:FX5sKFXQlmm7Rkm1tYpBeh2BAog
TLSH
T104E312379D75E47795B5A35FF18A1B2F2EF20663C420D596C8D85E0023BE78C1748A78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 fd2c2c4c8ac6ecafb688c31af6b5ed40b22e0e3558bc7cbb938029420f1c609b
MD5 33972476f0573366dea79956ea94b172
SHA1 abd69a729d9faab5378abe3466a5735cc9d74519
SHA512 58b2a61b519f7aebcca155d26b116d14f7ccea8f2769e9f83d4304b4f8be392bda662cb4bec00952aecdf663eaeb4118ec8b196324ac9c593d67beefb326d2fd
SSDEEP 3072:AEGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:gm7Rkm1tYpBeh2BAog
TLSH
T128C3023B5D75EC3B5CB5A74EB48E0B1E2EF249A6C920DE92C8D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 53b2a63b60d23ba502f071e005172b69453a8262f65b27d0848ff7d9b71ed85d
MD5 bd5c4d1833e497ccd1a3873924ab519e
SHA1 c9d2a5c2eec24590d72e4738068fa3e4c962c64f
SHA512 1e416195bb7f181261da3b8763edcfc686bdcfff5689a9b30c7bc33ce4b2c648da4ff18d72e7bf692732b270208142e2b2352e1136890004e38e06b8597fa46e
SSDEEP 3072:qiGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:am7Rkm1tYpBeh2BAog
TLSH
T149C3123B5D74AC375DB5B71EB08E0A1F1EF249A7C924DE52C8D85B0427E9BCD0A44A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0a29dd9019839d5190dc46e1074eb415f01a6c34ae58ef28b246cdd23ebcb03b
MD5 c2b01052a0539b34a5199b16c8266ece
SHA1 4baace3dd7ba9fdfb442d0a01b961296b7fe0839
SHA512 bcfee005bc807eb01bb3131b71aed00b66c0582e16a2a9aff2b3bf1172aebd0ac6b9a9df5d297ec67448c20bdef729d81ce14dc10b48efe22b9ef10298dd6c9e
SSDEEP 3072:TiGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Jm7Rkm1tYpBeh2BAog
TLSH
T1E9C3123B5D74AC375DB5B71EA08E0A1F1EF249B7C924DE52C8D85B0423E9BCD0A44A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download