hxxps://ddx6dwxh[.]r[.]eu-north-1[.]awstrack[.]me/L0/https[:]/us[.]list-manage[.]com/OdWqHSCxRz5%3Fe=182360fe84&c2id=7cd1c5094b73fed20765f2b3d630c8f3/2/0110019fc8e0a4a4-71d9ae42-8939-4f28-8cde-566014c43c88-000000/piyI7mdamhlD32d5gjRRSAjbS2g=258

Analysis

max time kernel
299s
max time network
299s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ddx6dwxh.r.eu-north-1.awstrack.me/L0/https:/us.list-manage.com/OdWqHSCxRz5%3Fe=182360fe84&c2id=7cd1c5094b73fed20765f2b3d630c8f3/2/0110019fc8e0a4a4-71d9ae42-8939-4f28-8cde-566014c43c88-000000/piyI7mdamhlD32d5gjRRSAjbS2g=258
Sample260804-amaftasxdw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5316	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302763673316749"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
1160	chrome.exe
1160	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe
Token: SeShutdownPrivilege	704	chrome.exe
Token: SeCreatePagefilePrivilege	704	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe
704	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 704 wrote to memory of 4064	704	chrome.exe	86
PID 704 wrote to memory of 5316	704	chrome.exe	87
PID 704 wrote to memory of 5912	704	chrome.exe	88
PID 704 wrote to memory of 5912	704	chrome.exe	88
PID 704 wrote to memory of 1964	704	chrome.exe	89
PID 704 wrote to memory of 1964	704	chrome.exe	89
PID 704 wrote to memory of 5296	704	chrome.exe	90
PID 704 wrote to memory of 5296	704	chrome.exe	90
PID 704 wrote to memory of 4904	704	chrome.exe	91
PID 704 wrote to memory of 4904	704	chrome.exe	91
PID 704 wrote to memory of 4768	704	chrome.exe	93
PID 704 wrote to memory of 4768	704	chrome.exe	93
PID 704 wrote to memory of 5192	704	chrome.exe	95
PID 704 wrote to memory of 5192	704	chrome.exe	95
PID 704 wrote to memory of 5640	704	chrome.exe	96
PID 704 wrote to memory of 5640	704	chrome.exe	96
PID 704 wrote to memory of 1936	704	chrome.exe	98
PID 704 wrote to memory of 2220	704	chrome.exe	103
PID 704 wrote to memory of 820	704	chrome.exe	104
PID 704 wrote to memory of 3316	704	chrome.exe	105
PID 704 wrote to memory of 1160	704	chrome.exe	114
PID 704 wrote to memory of 4400	704	chrome.exe	115
PID 704 wrote to memory of 4400	704	chrome.exe	115

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ddx6dwxh.r.eu-north-1.awstrack.me/L0/https:/us.list-manage.com/OdWqHSCxRz5%3Fe=182360fe84&c2id=7cd1c5094b73fed20765f2b3d630c8f3/2/0110019fc8e0a4a4-71d9ae42-8939-4f28-8cde-566014c43c88-000000/piyI7mdamhlD32d5gjRRSAjbS2g=258
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ff8d65bc728,0x7ff8d65bc734,0x7ff8d65bc740
  2⤵
  PID:4064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,3543461198165086639,11444154901649563283,524288 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2024 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,7759601273232429077,63600199686833433,262144 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:5912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,1110603037704528531,15302686455579540685,524288 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2532 /prefetch:8
  2⤵
  PID:1964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,6624377566224724998,14457973385165312312,2097152 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,11462869299923209505,7787248490671361702,2097152 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4100,i,14311032503447008267,11342035087072835268,2097152 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4180 /prefetch:2
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,574150124008249972,12559791607823319050,2097152 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3256,i,17461039352719114948,16729986595405525397,524288 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:8
  2⤵
  PID:5640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5868,i,11803911640498273696,6548075389899560934,524288 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5196,i,9041465607207055916,13899051297393900215,524288 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,3471985007866266806,11212145079811713002,524288 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4980 /prefetch:8
  2⤵
  PID:820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4996,i,2243040086404906367,7175153146148699588,524288 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5164,i,13098769798454238733,18405156104950345016,262144 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3500,i,8353604454483125598,4992494071664467693,524288 --field-trial-handle=1996,i,6887092544089754238,1296755621983885521,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4100 /prefetch:8
  2⤵
  PID:4400

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5668

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3f898b30f9bfcf0958839f58cfd3ad861e953fc4dadd6dc0f5d5253f0eedada5
MD5 d5f02a32afe331c218fc64ae78484a72
SHA1 81b1110fdb879c2694166c5e826c546cae5692f0
SHA512 521e5a90fd1d1489e963e558cf501deb5d58366f6c1a14ef1bbbb128073db68f297b0fcbf6a9117b502a09f9391c0c000defcddb48a010246e2b8523f77a3385
TLSH
T10AE02BADC961DC370CFD176C90554745F655130B3740555F3E3D98184F7463B424685C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 248268b684a7bda49aea99304fe453a11a50e50558bb562ad0d26b5406bf1ddc
MD5 234347a3ad2e82eac80baa4f16f5ce4e
SHA1 65ccace924fc5b2726af3db9aee50c94cdd128d3
SHA512 2757e7f51e5c070e2a041590cd0cd15a53fc3773e6c05b9f8c9b11ea94d60e45fee16519650458a41e46440b3d9409bae2583dc436bf26dc1f72f10f02ae6a36
TLSH
T15C21997199928B41C7DA83FC7CEF9038BA7E08601DE34DE6A299B1F11085397865788A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 debfc30af85bb34c7ffa47c1c1bd496aab148427567cf62d9113af027b823abb
MD5 52a094e2f2cc66ba3e794eac41273aca
SHA1 084c29d17d5ec6c742d0d32ceb989401c14e3fab
SHA512 fdef680c4d6e9533cf8e4087aaf19c456b94528c4e4c8d39d109c3b81a460327f876652cfbb842df92ec92b82772c4d4d73f595c6bccd6be9ba1e51038503745
SSDEEP 96:Dy5WaaIEd7uP6LyQyHyYyD+OIjhXly0ySyr:D8WaaIEd7g6LXwZi+jhXl/l+
TLSH
T1E5817DF783E9897E990251F5FB156E1FCE2E0524532C7CA6C8E49E5B93E2471D20068F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 eba575f01c15cc16a6692f383bf3af5520e6f29b0318f6795f27dfc4d08c7ac5
MD5 44cc3a3b42d988e9573ce2dd59c9d14a
SHA1 53893a42d0ae3bcd06985bf872aedb63cd30436d
SHA512 3f7850b6a2e8cb9f4169c1d9be70f9a5dae382e69965f8a3f1471dde0aeca6a2cb990e831bd5e0f94b5e8485325d93197564d41efccf68c3e256c90f96b12d06
SSDEEP 96:Dy5+y8aaIEd7uP6LyQyHyYyD+OIjhnySys1lyj:D8+daaIEd7g6LXwZi+jhnl/ly
TLSH
T145917EF783E9897E990251F5FB156E1FCE2A0524532C7CA6C8E49E5B93E2471D20068F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 7203a87d20260d4d7b0b8fad106b6575ccd3910f4a4a1df64d1ab26288a49ec3
MD5 b183d597b7594ecb1a45afc36b2a3822
SHA1 4f8ae5b1cbc5ee22709c5d3006ca4f7fddd57474
SHA512 95c9174535b43a44b151483cf7bdbfa70079bf05308c2f3f221dbdfecb6dd25a3cc87e57043f0b2e794d8a7ddba2ac02fd5884f607c188f82e80cacab200213b
TLSH
T1F2717EF783F8897E991191F5FB156E1FCE2A0524432C7CA6C8E4AE5B53E2471D14068F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d047f85979d9e4a5d70e647d27c6e54063cf739c7679bde8bba3461f96f654c0
MD5 599ad732a6afca5b03fbf554d7b4aaa8
SHA1 66028c3107287d16212283830af8864eca713e38
SHA512 69db8ebc604fe62410809461e256ffae3bb6ec184843e7d8abace412a4ad0e7ddd7b10734e16b8afd42fc25d14e8860ad8b5ec51f62a63e7266ff7a423bbdcbb
SSDEEP 192:5RGzHUUv0q96ehv71hpgPRpivt92Hsb+WNnfaFAf2FSzeq0n23NPakVyIsnAUgE:5RGzV0uxBhMXeQwyO2q0n25agE
TLSH
T1E552E62EA910647B6DDBD22AFD267B53D3F1102521E02E80E7FC892C16D7ACC622711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7540e76282fb3f9530a0b34b99bff28667918044bcce1235562571f5104463c5
MD5 bd6f1f055f3fc2fda4127709d067b30c
SHA1 69027f47b0a0c685cd0b88294b852d8d77005e7c
SHA512 04517a8019a13ef57ab3d67003764365a1be13c40a5d4761dbc03f9f33e96cf56e8f9856d5d0274df77b7c8414b6c36071483038784d1bc24238e586e81c6406
SSDEEP 192:5RGz7UUv0q96ehv71hpAPRp2vt92Hsb+WNnfaFAf2GSzeq0n23NPasVyIsnAUge:5RGzh0uxBhUXqQwyO2t0n25aIe
TLSH
T19042E62EA920647B6DDBD22AFD267753D7F5102520E12E80E7FC892C06D76CC622B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d3df3f129eceb6d224352565d23ef4347a2606ca29fe074213bb52a812cbbbc6
MD5 c85d8db5971f889baca3ef9789bb864f
SHA1 df70843188b9d7fa5c8d185980aaf0f19d9ef9df
SHA512 25e916609515a547694715816e8b6b747ee62f0ee55a89eadc202b6c0354df7cc304bed81ff803f6eeaa7fdde4c283272ca52addcd0ecfdf97ff641739ea796f
TLSH
T16DB01265C0015161C01342F4118A5C88B11C9F10960A170143E0BE32D82A260C514161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58af36.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58af36.TMP
Size 96B
SHA256 727fbf4b761c8ea6856ac6faf5a7bf59a2df796520ebd17a73c64cd668fdabff
MD5 806b9dfb499160e1c39462870ae4c4a7
SHA1 f4359e764b18713589ba0dbd4f38c2f769e6b635
SHA512 d4ccf9682a2daeb50634ba914edab451df6753593cce3d9a543fb6206f33ca2e1535760753d1e878e30e1419da724e4a0712797ba271435ade636c5cd5acdce3
TLSH
T1B0B02228C00B2202C08303B038B8E3E83028EF22C203022282E02B22CCA22208830220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 c4249a1f898b45d45b8019288b39d9c6ca0294b3eada0ed971d529d1feda8ffa
MD5 3ac2150efc53ca5da306bc56f341a6e0
SHA1 bdc56c6ecf3b002c797135bbbcdb081a2a07e588
SHA512 444d0fcb4ab7151bf51fd10d43a7190f6f4d9a145356ed13460cfd05405d746eaf077c0d5bd567db86c67f92bb042c1a10c0d260f3d3d62746df1314624c35d5
SSDEEP 3072:DGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:6m7Rkm1tYpBeh2BAo3
TLSH
T18CC3123B5D75A8375DB9BB1EB08E0B1F1DF14AA7C8209E56C8D86B0433E97CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 26008831653c09def2c84997148e4b360ea809045abce9c44a033ebbca16821f
MD5 6f1bb3917304620b36c48339aaee26d8
SHA1 43565af2c4ba76da6377419789bc81e6aab8b69f
SHA512 d241d7769ab50d1b5f96dff321e428aedf274423eda5dc51b293025a0f90ed8ea47e721bcd612574da2f5a6792dfd6f260295582340c1ec12125ac8b45bbd47b
SSDEEP 3072:7Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:im7Rkm1tYpBeh2BAo3
TLSH
T1B8C3123B5D75A8375DB9BB0EB04E0B1F1DF14AA7C9209E56C8D86B0433E97CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 069703513f8c1256798210d4955dfb72f5cfee3dbd505025081ffdad380fa7bc
MD5 d15066c114257b379433d9a4ddb373ff
SHA1 25950f915cf368f226affc6b650e50309d75a65b
SHA512 48d40637fa88b6c23537128e165ed51519724a32d155ae7d1dc4c45efc856c7c1908aed11f9f43192f80f8bbc1a1af7f78acf8433f2edbdce52e9b8533947027
SSDEEP 3072:5Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:4m7Rkm1tYpBeh2BAo3
TLSH
T16DC312275E71E9375D79B74EB08E0B1F1EF14AA6C930DE92C8D86A0437E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 823ff2e4cdac889e1d2cc79db328fa0b904fe4133321df8647360d6a0cf3d01e
MD5 cd764b48f7b16eb86011f6ec03fe9e89
SHA1 b1c13a89d0473149d911b7f138ef760415df4e27
SHA512 a81f3e575b2479b8004c9bbafc02438fe57beffa40606edbe4c0c50b961bd14d4eb6410122a6f141317d480e54d296c4e5c19eb2e21f9fe8e0856a03216e1eaf
SSDEEP 3072:cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:vm7Rkm1tYpBeh2BAo3
TLSH
T1F8C3122B5DB5F9375DB9BB1EB04E0B1F1DF14AA6C920DE52C8D85B0423EA7CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4637c5027f24c7f821e2f20b714290fd0d99aea980a838320eea01a12e3cb30e
MD5 04016de485edb74a46a3fab7c03f8235
SHA1 458d1fab031bf5b2dae812130e6d7325cd8118ef
SHA512 268b63d9ca9195ddc60d6649491dbde992f1b961486c42669661f024676aa82a184407ec7f5a5d38bea8c8d045e28b29941548115a863a0b0fad05e8dbed216a
SSDEEP 3072:dGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:0m7Rkm1tYpBeh2BAo3
TLSH
T1FCC3122B5DB5F9375DB5BB1EA04E0B1F1DF14AA6C920DE52C8D85B0433EA7CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download