hxxps://158[.]94[.]211[.]92/

Analysis

user interaction
yes
max time kernel
83s
max time network
84s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 09:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://158.94.211.92/
Sample260805-lrbefsvalb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
372	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303967494646641"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe
Token: SeShutdownPrivilege	4124	chrome.exe
Token: SeCreatePagefilePrivilege	4124	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe
4124	chrome.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 4124 wrote to memory of 4472	4124	chrome.exe	83
PID 4124 wrote to memory of 3788	4124	chrome.exe	84
PID 4124 wrote to memory of 3788	4124	chrome.exe	84
PID 4124 wrote to memory of 372	4124	chrome.exe	85
PID 4124 wrote to memory of 1136	4124	chrome.exe	86
PID 4124 wrote to memory of 1136	4124	chrome.exe	86
PID 4124 wrote to memory of 2228	4124	chrome.exe	88
PID 4124 wrote to memory of 2228	4124	chrome.exe	88
PID 4124 wrote to memory of 3536	4124	chrome.exe	89
PID 4124 wrote to memory of 3536	4124	chrome.exe	89
PID 4124 wrote to memory of 3452	4124	chrome.exe	90
PID 4124 wrote to memory of 3452	4124	chrome.exe	90
PID 4124 wrote to memory of 4756	4124	chrome.exe	91
PID 4124 wrote to memory of 4756	4124	chrome.exe	91
PID 4124 wrote to memory of 224	4124	chrome.exe	95
PID 4124 wrote to memory of 724	4124	chrome.exe	103
PID 4124 wrote to memory of 648	4124	chrome.exe	104
PID 4124 wrote to memory of 2928	4124	chrome.exe	105
PID 4124 wrote to memory of 1820	4124	chrome.exe	106
PID 4124 wrote to memory of 1820	4124	chrome.exe	106
PID 4124 wrote to memory of 868	4124	chrome.exe	108
PID 4124 wrote to memory of 868	4124	chrome.exe	108
PID 4124 wrote to memory of 1316	4124	chrome.exe	109
PID 4124 wrote to memory of 1316	4124	chrome.exe	109
PID 4124 wrote to memory of 4800	4124	chrome.exe	110
PID 4124 wrote to memory of 4800	4124	chrome.exe	110
PID 4124 wrote to memory of 652	4124	chrome.exe	111
PID 4124 wrote to memory of 652	4124	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://158.94.211.92/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe8277c728,0x7ffe8277c734,0x7ffe8277c740
  2⤵
  PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,7753599718245859815,1642644718381665927,262144 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,13547768196661201627,2953479744251231454,524288 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,2799851378602937117,2534274426738015161,524288 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3144,i,12476180144064027672,11576400844795237732,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3172,i,9323322887122863369,8154470089095554450,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4420,i,7352392237029730483,15282667994166054248,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:3452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4688,i,501382342503749168,2773632444236353922,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,7517917049797022409,13936307536018650787,524288 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5700,i,2021688563544087943,2166486431060429389,524288 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5704,i,8032244837608661039,5263881214185197478,524288 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,8235117914155845317,4109670232202212953,524288 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5608 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4436,i,12536535202709316872,4681223208038637734,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4688,i,2451303639626745036,10311005701472074094,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5624,i,10180681934205743629,8742013492178562171,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4452,i,8905645029535366907,396960663919275233,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3912,i,8349999414901639207,2371439784704505012,2097152 --field-trial-handle=2012,i,5424897599901281857,5291736659224691553,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:652

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2408

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9035aa22d4c7cb05085ac6eefa55e1ae3afc96777978520cda4d357be6069492
MD5 4eb0e8e09871d86171c10b6cac83a0ea
SHA1 1f8aede4e63ccac25bd9c453d597f3ebef0b6393
SHA512 e7ccf5fe9ba2266c1b76ef868fad784bcc00a5cc677cbff6888b9116f5bf1c03b79f19567aeab24e324ee86bcc0ed17fb547b89dba76adc305ba4da10d800fc2
TLSH
T1F2E02B69CC25AC271CFE475950540A46E755135B2E81550F3A3D910CCFB073B41C6CAC
MD5 SHA1 SHA512 TLSH

Submit Download

7e7428d8-64b5-4592-b195-19c4d3a5c4b8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7e7428d8-64b5-4592-b195-19c4d3a5c4b8.tmp
Size 2KB
SHA256 49353a6d03a5c9a61b8ee4333521a540a61e1ae4b33242b990983db8ac4df997
MD5 44982a49e36e18b9dd988d42a0ec68ad
SHA1 72d9c1ae062d1304624640ce824d4c5e34c0d668
SHA512 59ad0fb7c875ef44770c3d78c873fde83538b597f53f87b2ce2e1d0407ce065cd994b750117c93b39f74d465a6702788d94a505307796a3e14e825e8e56fe7d8
TLSH
T118419FF7D3E4897E890152F4EB156F1FCE6A0924131C3C56C8D4AE1F53E29B2D100A5E
MD5 SHA1 SHA512 TLSH

Submit Download

e640f54d-7122-44f2-a381-301ccdc6a02b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e640f54d-7122-44f2-a381-301ccdc6a02b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 638f90dabe021a74f966281824c0032162bb52fb44a82cc7716b1fe35fdc3910
MD5 81151214b790ead69c53923d05926e70
SHA1 af0d972fed1a9b3bf2250541aa66036831ffb24c
SHA512 439da196be18c88ab02d56a5816a1a410d5ec860e2f0af52123062f369aa403a982f6c5a75d0c1df0c0864a6a328a2be04af26bd980dd611c8e5284b081de4e0
SSDEEP 192:KRahdq75EDshv7sp37M1PRp22X/9wHsb+WNnS7P+/21kw3VyIsnAUge:KRahVsxYFmX/PKw6PEgxe
TLSH
T16142E72EFD54683B5CCBD229F9267B53D7F6102131942E90E6FC8A2C55DBACC222341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 93f363b7ca9e6b2bf1e93518619a50b6bd5b8816d60b9efbfea1738fb2180d0d
MD5 96f1c9fb19ac149a417992f98c5a4222
SHA1 e4fc3e20f7ed69f602968f9b39b577fa5ec37548
SHA512 e63fc2bfc9712760bfc0fe1335560282e8f7fb17fa84bc1caccffd63cab2bc7f10aa4ec2874736fb948a7016cf905f17f1eb9492622dbb8ffe89c1813be075a2
SSDEEP 192:PRahdq75EDs1v7sp37M1PRpK2Xv9wHsb+WNnvtJXV9P0yY/21kwyVyIsnAUgE:PRahVsFYFSXb/Kwlfp0y6gSE
TLSH
T18552F72EFD64283B9CCBD229F9667B53D7F6202125901E94E6FCCA2C54DB6CC221341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 550703a154107a09d5a3970e87eed89904b631351d844482cd15c93f5aac3291
MD5 fa6eed9a8e38c06e6ae1c9481983def6
SHA1 1214d389c137e16518e531e88e2e1189159fb685
SHA512 307f375e26a6d07b8e99de3bd99820867146c2a6f131e73f479d9077d941c7a414b01d4453b7033ec0231f42fcc885beeed67816a126a2e12684ee201d0d22c4
SSDEEP 192:KRahdq75EDsov7sp37M1PRp22XpK9wHsb+WNnS7mP0yk/21kwcVyIsnAUgE:KRahVs0YFmX/ZKKw6c0yegYE
TLSH
T19052D52EFD54283B9CCBD229F9667B53D7F6102125941E90E6FCCA2C55DBACC222341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 6623bac28d46386ed57417f78e10b414eb5568cd4939c324b51e382e856ff243
MD5 d7133aaf564c27ae6f2dbaf692edacef
SHA1 231472bba3fb3b966bad180c0da81229dbde60be
SHA512 268b0c2ed9fb370d210ed630abc9923643c657ace954ddd1fc7f3a687d867f7296d7f7e629a06194cb8ca4f87031a8e991fcc3ab0a18050fb1a1749faffa1301
TLSH
T1F8B0120288015151C05606B0135A5598B1149F21960A1B0243E46932C9295618154070
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584c08.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584c08.TMP
Size 96B
SHA256 a54ffe9379229adf695cfcbd3d6f291c2250914b3545c04955c2d4a28bf95d08
MD5 a01e1fb388e25dce1ce1c86393d4a713
SHA1 6957daf22fdf29eb9553793227d3d0f5d0b821bf
SHA512 83dcd8720f03f1dcb8a0b7d24303d12c421ae1317cdf47b780e6abe45c749c54b34dd559c50c86d24078e110923100548cea59f988dd45aef7f009aaf9a1926e
TLSH
T1D3B02202E002B302C00203B02BC0C2C83320CF2BCF03220282E00A22CC20A308328030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b5e54e73c7725727eeffd37b7a2cc6c8e5f5921bc0f6046da42f3f4e3e961da1
MD5 e3b31ee5f37aefddbacc534a3d6c38fe
SHA1 fa71ec42090c47f4ea99dbaebb7af4b423ff2deb
SHA512 4baa7ca2b4025940c055464c50c00208959c3ba2c43caf7da16c5e778dfb79c28cd352cf8f73d9cc87752c97d6be480ba3e5b751c14fd8be48b747de7f2d6401
SSDEEP 3072:9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Um7Rkm1tYpBeh2BAoK
TLSH
T102C3123B5D75F87759B5BB5EB08E0A1F1EF249A7C920DE52C8D85B0823E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 44334f2b2743ed324a1f635d748074dede506d4ce1e5df8b60180cf6f359622d
MD5 e758aaf083cf8fdd0dd31316fc3f52fc
SHA1 97054e810a6abec9696f7ad330aaeae11c02fddd
SHA512 a9ccc33ed40a73b38d762d2b9b4e8f07aa524268c2adf5f50ee8b9b5eecad9f74c369cfdd22f7681ea2d2b1a58fc2ba6132bb5c19890ba3a87922885e36d1997
SSDEEP 3072:XGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Wm7Rkm1tYpBeh2BAoK
TLSH
T11AC3123B5D75A83759B9BB0EB08E1A1F1EF249A6C930DE52C8D85A0837F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 fe06f31e82ec72ebe4cf8739e0e60a568c43e7fbb255500db6e349e6d4b9ee1c
MD5 eb87bdde2f387ab905c2a225f384b815
SHA1 f97e6000fb651e63d3661ce59c9b8427ff5e8a30
SHA512 d861be30e98c304af2e5e3a3911c593a66602c57d6fe7553a2e41a19de8ed30f93e622b9a3dc2baae1a394dbc29b986c2194f7474411606ecbb64ccbf8177a84
SSDEEP 3072:cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:vm7Rkm1tYpBeh2BAoK
TLSH
T15BC3123B5D75F87759B5BB5EB08E0A1F1EF249A7C920DE52C8D85B0823E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2fbfbd20bd12dd16859c2d2914b6b0c603c9a19bd431f7c83b31b1fea3524e99
MD5 50e393abc016562552681bd232e0f453
SHA1 4cd1ff6aa9e0df7f360cfc960b2172a0a6d4a3c6
SHA512 eb5628a5ce806d07605a2a6746adcbdef05ab22a35a82a6649cb9a4d154a1b6b72a5e50a9d4b4ef60ea095bdde8a7973ef406788fc9e5ca3e940f92454e6c8ff
SSDEEP 3072:9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Um7Rkm1tYpBeh2BAoK
TLSH
T1E9C3123B5D75A83758B9BB0EB08E1A1F1EF249A6C930DE52C8D85A0837F97CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 a569f65c296863b801f6d3f08483029aae54b3ebe856abd80d86e0e5cda78243
MD5 eb8273014eb66500321c577d2f410c63
SHA1 cb79bb501fc62c122f5eb302e73c0a41b09548c7
SHA512 77fe8da2a6e2d08b81e142ed3cf53c99cfc37df79cdabfca2435f5546518f6e9e8143e816058bf4eaf57fc8db2cb0a5dac08846aee805f2d640ef9b05bc0ad05
SSDEEP 3072:xGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:gm7Rkm1tYpBeh2BAoK
TLSH
T140C3123B5D75E9779979A70EB08E0B1F1EF249A2C920DE92C8D86A0437E97C90A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download