hxxps://go[.]ehidra[.]com/lnk/AV4AAKBk9cYAAAAAAAAAAMoUYBgAARpdYoMAAAAAAAeI3wBqakDPsIIPkfmmT4SlHeO57sHnNgAHLZg/1/gMOizKr99YUnARwLg5sQBg/aHR0cHM6Ly9nby5kZWF1dG93b3Jrc2hvcC5jb20v

Analysis

user interaction
yes
max time kernel
34s
max time network
37s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/08/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://go.ehidra.com/lnk/AV4AAKBk9cYAAAAAAAAAAMoUYBgAARpdYoMAAAAAAAeI3wBqakDPsIIPkfmmT4SlHeO57sHnNgAHLZg/1/gMOizKr99YUnARwLg5sQBg/aHR0cHM6Ly9nby5kZWF1dG93b3Jrc2hvcC5jb20v
Sample260808-pddt7sdd73

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1228	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306647622352399"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5352	chrome.exe
5352	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe
Token: SeShutdownPrivilege	5352	chrome.exe
Token: SeCreatePagefilePrivilege	5352	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe
5352	chrome.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 5352 wrote to memory of 3964	5352	chrome.exe	80
PID 5352 wrote to memory of 1228	5352	chrome.exe	81
PID 5352 wrote to memory of 5972	5352	chrome.exe	82
PID 5352 wrote to memory of 5972	5352	chrome.exe	82
PID 5352 wrote to memory of 1276	5352	chrome.exe	83
PID 5352 wrote to memory of 1276	5352	chrome.exe	83
PID 5352 wrote to memory of 4652	5352	chrome.exe	85
PID 5352 wrote to memory of 5188	5352	chrome.exe	86
PID 5352 wrote to memory of 4652	5352	chrome.exe	85
PID 5352 wrote to memory of 5188	5352	chrome.exe	86
PID 5352 wrote to memory of 5176	5352	chrome.exe	87
PID 5352 wrote to memory of 5176	5352	chrome.exe	87
PID 5352 wrote to memory of 2396	5352	chrome.exe	89
PID 5352 wrote to memory of 5824	5352	chrome.exe	91
PID 5352 wrote to memory of 5824	5352	chrome.exe	91
PID 5352 wrote to memory of 5416	5352	chrome.exe	92
PID 5352 wrote to memory of 5416	5352	chrome.exe	92
PID 5352 wrote to memory of 4052	5352	chrome.exe	93
PID 5352 wrote to memory of 4052	5352	chrome.exe	93
PID 5352 wrote to memory of 3808	5352	chrome.exe	94
PID 5352 wrote to memory of 5768	5352	chrome.exe	95
PID 5352 wrote to memory of 5876	5352	chrome.exe	96
PID 5352 wrote to memory of 6036	5352	chrome.exe	97
PID 5352 wrote to memory of 6036	5352	chrome.exe	97

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://go.ehidra.com/lnk/AV4AAKBk9cYAAAAAAAAAAMoUYBgAARpdYoMAAAAAAAeI3wBqakDPsIIPkfmmT4SlHeO57sHnNgAHLZg/1/gMOizKr99YUnARwLg5sQBg/aHR0cHM6Ly9nby5kZWF1dG93b3Jrc2hvcC5jb20v
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa3afac728,0x7ffa3afac734,0x7ffa3afac740
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1864,i,3791109565640437407,3828748301629759263,524288 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2088 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1600,i,8532772178144185281,3567473801672340152,262144 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:5972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,12395840501186483188,8816444685955080920,524288 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2536 /prefetch:13
  2⤵
  PID:1276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,576688628676006465,2692086300456177725,2097152 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,3402417117422308747,1278913211939597078,2097152 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4328,i,10457642394981307968,9780035165273829062,2097152 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4344 /prefetch:9
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5344,i,1943010150805170210,11576527088712031049,524288 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5348 /prefetch:14
  2⤵
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5644,i,14274494833829164319,1349774359440577939,2097152 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5708,i,864031234051252995,7078982026946433777,2097152 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5608,i,11039906130186700401,6091783478177833088,2097152 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5340,i,7629513815647117741,11091051894107995020,524288 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,5276439138005435231,2015549973159489093,524288 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:5768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,9830620176137430549,11776148485372136454,524288 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:5876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3496,i,12445959079214702922,9056744801384714912,2097152 --field-trial-handle=2060,i,3193419960152652327,14032325983596639480,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:6036

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2428

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 999c9e85c6d9c3cfddba2e483cea310aafc0019ce8651d7800e95dc1ebf2df9d
MD5 8e63ce3ad34456b58278d5dedfaab494
SHA1 404b1b2a615807021d7341ebcafe41b1426c0a02
SHA512 d038c0d368a73e1cfa2dc701e4149501ab0c27cf68f4c808091a8b27cdce37d1074b9058058f89d0bc94b0b81bb89916211d7ca71ad46e3d564c4bc93cb3655b
TLSH
T1C1E0E5A9CD24AC7B1CF8072A60444A47E74413572A50599F3A3C950C8FB5766459685C
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d8c385466781364554d9e61987ba509cb89dfe98ea7c8124175db9d3fc983479
MD5 560b34a2746325845e0fe727f87cc056
SHA1 4697294b1a81856620f8ea4c37854528e3242bf3
SHA512 caa028d2f6b62a4d8adac7b709e255f95c927bc2c007eab123ac495c3636362d87ff592d379800b384069a19fa0366305e39336689d1424153d7928b9b0d01e9
SSDEEP 192:XRwVTrzXBCX+v7+pAPRp2O9wHsb+WNno8PH0nar8hu4VyIsnAUge:XRwdn+66UXpOwzPIaae
TLSH
T1AC42B52EA950693BACCAC72AFE227763D7F5103521D41E84E6FCC52C19D75CD222712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 31a5ce04ae67b5403f3453ceb77ece590798531384f472283d145995727d92f5
MD5 b28f8d2c357e9f30dbd5f6faec9be3a8
SHA1 7045d97913533ca8a4d3fd4bcccacb31200659fb
SHA512 0c3fd52647169605cd7ffcc7ff7895b9d1008ecd2a828bc0aac93f78a5c3515c5bf2ae9dd7335970687bfc199d7d6444d158da461151c200b0fb87c211b0d77f
SSDEEP 384:sejIb7KxkXqKf/pUZNCgVLH2HfgslHH7pLuLcSj2XXODIX+ErU38xHG6QDzXU:suIb7KxkXqKf/pUZNCgVLH2HfgshH7pZ
TLSH
T17072F8676C489A370F94CA8CDC267B4FADB5024B65EDC86483FA581903D5BCF114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b05d3a7d60f872581fcd726e3dbdc7981141ba63b52fc5c4d7488c6a104d6d75
MD5 ea48d0bcf947bc9d72386ac59e0e486d
SHA1 92306c933fc2217e3132c5f9ee27b11dbb3851e5
SHA512 412b6bcb3d80a9473a29c3231e6cccfee51fcf156471331b901be4a1f91c738fb08dda20ce32efa22317490a8c41bbd8ee72bedd680517700b0939357b0fe742
TLSH
T1EBB01205C0015141C04202F461521488716C6F11AB0F1B0243E4A922C8351B1C014151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586aac.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586aac.TMP
Size 96B
SHA256 d99ae6f0bb16d1a0fea3acefee3294946686fd6f457baba08653ce0558f1fbac
MD5 ef53f912f282dbe52095b9d12a5145ae
SHA1 b9da5a942b3862e5fd5d80d710716716a7000298
SHA512 6de461fd960d74e9f29b37078625c66112bce183be2a23bc6239db91318281c1ee45f77f29dee655d989d2ac2598727a4f52e9eb006b9829d3f244fd9ad8aeae
TLSH
T1C7B00256C2067317C06283B16595A6F8B264DF65D603631AD2E09EA6DC356B14925160
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 8c9a123c7fce092badfb9096c62627fd8ae7e6479b93e3270bfe380a94f5b416
MD5 08af910ee449ddfc342def985c441f53
SHA1 b7228e8780887bcb6994bb4e26dbc2babdd69319
SHA512 d0d0a78b72bf5620fa97df06447a3280b319fb3dec1657d4d8b0745397ab92de24087ca7490b5eba680aa5139066f43f69a062d72fe0d9285b80188b6bd3c806
SSDEEP 3072:6zWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:wWDfxA3OnjrYQ9EU0/hEg
TLSH
T12AC302A15C35BD660CB8EE99744C3F60FFF4AD9A91879DC362E91B4C24FA5C81139930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 40fa994de3b98e3171c3cab638d07fc64755ae15cf7db90d58d76d072329219c
MD5 46447b8c2c0090452030497756ace32f
SHA1 7f31d6af0712f140772c94866b900439ca5b513b
SHA512 069dd92cbfb8c0546252832c8d9cfcac324f0d007d58d89c7dc55806e3bc094a5e23728380cc7dc8ebc830e6a595855c22ae82d18700a7cc6e788f08fed14712
SSDEEP 3072:XjzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:XnWDfxA3OnjrYQ9EU0/hEg
TLSH
T18EC302B15C39BC660DF8EE95A40D3A60FFF46CAA92479DC3A2E91B4C14FB5C81179930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download