4d188c26f59568dcbe8cbf3143279870960c290c5105c6c17e6d57ad2c864bf6

Resubmissions

09/08/2026, 06:21

260809-g4d9naap416

09/08/2026, 06:08

260809-gv5p9avzcw3

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 06:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 39KB
Sample260809-g4d9naap41
SHA256 4d188c26f59568dcbe8cbf3143279870960c290c5105c6c17e6d57ad2c864bf6
MD5 73fa95e7c4b4749504c1b96199e0eb96
SHA1 75ce7abbcbefbf8e5d07a526b0b5c9505142b294
SHA512 13e0a4f273f368ad336d4b1ca53ffb490902389e9350d4d72d6c6822647516cdfcadee0951f2880f68b31f462fa17c83fe954a158f3b088b9c15ec104b8ff673
SSDEEP 768:4pjGSuxGXfk+uvYs12xN1Njx/XrSEnKDjSdHC5T+O5FhfoR:40J12xN1Njx/XrrKF+O5Fe
TLSH
T11C03083EAA420C04933782B0EBE17724F6578253C30245FCBE9E5612CFF9A9949B5F58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
105	raw.githubusercontent.com
106	raw.githubusercontent.com
107	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3488	chrome.exe
3848	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307301137255191"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3436	chrome.exe
3436	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe
Token: SeShutdownPrivilege	3308	chrome.exe
Token: SeCreatePagefilePrivilege	3308	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe
3308	chrome.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 2516	4228	chrome.exe	85
PID 4228 wrote to memory of 4888	4228	chrome.exe	86
PID 4228 wrote to memory of 4888	4228	chrome.exe	86
PID 4228 wrote to memory of 3488	4228	chrome.exe	87
PID 4228 wrote to memory of 3672	4228	chrome.exe	88
PID 4228 wrote to memory of 3672	4228	chrome.exe	88
PID 4228 wrote to memory of 4272	4228	chrome.exe	90
PID 4228 wrote to memory of 4772	4228	chrome.exe	91
PID 4228 wrote to memory of 4272	4228	chrome.exe	90
PID 4228 wrote to memory of 4772	4228	chrome.exe	91
PID 4228 wrote to memory of 4676	4228	chrome.exe	94
PID 3308 wrote to memory of 3280	3308	chrome.exe	104
PID 3308 wrote to memory of 604	3308	chrome.exe	105
PID 3308 wrote to memory of 604	3308	chrome.exe	105
PID 3308 wrote to memory of 3848	3308	chrome.exe	106
PID 3308 wrote to memory of 1304	3308	chrome.exe	107
PID 3308 wrote to memory of 1304	3308	chrome.exe	107
PID 3308 wrote to memory of 1808	3308	chrome.exe	109
PID 3308 wrote to memory of 1832	3308	chrome.exe	110
PID 3308 wrote to memory of 1808	3308	chrome.exe	109
PID 3308 wrote to memory of 1832	3308	chrome.exe	110
PID 3308 wrote to memory of 4492	3308	chrome.exe	112
PID 3308 wrote to memory of 4492	3308	chrome.exe	112
PID 3308 wrote to memory of 1036	3308	chrome.exe	113
PID 3308 wrote to memory of 1036	3308	chrome.exe	113
PID 3308 wrote to memory of 1988	3308	chrome.exe	118
PID 3308 wrote to memory of 1900	3308	chrome.exe	119
PID 3308 wrote to memory of 1900	3308	chrome.exe	119
PID 3308 wrote to memory of 2212	3308	chrome.exe	120
PID 3308 wrote to memory of 2212	3308	chrome.exe	120
PID 3308 wrote to memory of 5364	3308	chrome.exe	121
PID 3308 wrote to memory of 5364	3308	chrome.exe	121
PID 3308 wrote to memory of 5756	3308	chrome.exe	122
PID 3308 wrote to memory of 5764	3308	chrome.exe	123
PID 3308 wrote to memory of 5756	3308	chrome.exe	122
PID 3308 wrote to memory of 5764	3308	chrome.exe	123
PID 3308 wrote to memory of 5804	3308	chrome.exe	129
PID 3308 wrote to memory of 5804	3308	chrome.exe	129
PID 3308 wrote to memory of 5860	3308	chrome.exe	130
PID 3308 wrote to memory of 5860	3308	chrome.exe	130
PID 3308 wrote to memory of 6140	3308	chrome.exe	131
PID 3308 wrote to memory of 6140	3308	chrome.exe	131
PID 3308 wrote to memory of 404	3308	chrome.exe	132
PID 3308 wrote to memory of 404	3308	chrome.exe	132
PID 3308 wrote to memory of 5132	3308	chrome.exe	133
PID 3308 wrote to memory of 5124	3308	chrome.exe	134
PID 3308 wrote to memory of 5144	3308	chrome.exe	135
PID 3308 wrote to memory of 5456	3308	chrome.exe	136
PID 3308 wrote to memory of 5456	3308	chrome.exe	136
PID 3308 wrote to memory of 3436	3308	chrome.exe	139

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8e5c3c728,0x7ff8e5c3c734,0x7ff8e5c3c740
  2⤵
  PID:2516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,11101477794160678747,15805765016725472555,262144 --field-trial-handle=2004,i,4341180347607956334,16084059934864479777,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:4888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,7497485130446101386,9963068865625956939,524288 --field-trial-handle=2004,i,4341180347607956334,16084059934864479777,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,9025531445334280079,6917233158661824171,524288 --field-trial-handle=2004,i,4341180347607956334,16084059934864479777,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2456 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3128,i,5279306793681867347,13532220281925195353,2097152 --field-trial-handle=2004,i,4341180347607956334,16084059934864479777,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3132,i,13215147611662225141,2762739990153906634,2097152 --field-trial-handle=2004,i,4341180347607956334,16084059934864479777,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5124,i,7428834020436998133,13977413526267925057,524288 --field-trial-handle=2004,i,4341180347607956334,16084059934864479777,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:4676

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1372

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2952

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff8e5c3c728,0x7ff8e5c3c734,0x7ff8e5c3c740
  2⤵
  PID:3280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,1319121776840685744,12978479958672670827,262144 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1932 /prefetch:2
  2⤵
  PID:604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1988,i,840312856971323717,796891577023083208,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,16243622123197342698,9032930224574436190,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:1304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,9637580035548560902,7519573909379407909,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,717957690446423207,18330883011637980614,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4516,i,9784622658860961574,16095910876964449586,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4652,i,16372864828357126924,7783553896589774410,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5416,i,7118248553844885354,9062855966590401541,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,4406395249562154566,17484016729313098453,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:1900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5488,i,13007957453120779407,15544909497391685210,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,10423412499482804875,9313524171780937640,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5532,i,17814750700603435114,6453092904332891714,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5608 /prefetch:2
  2⤵
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5764,i,13215204663388209008,10881696402547976494,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5608,i,14439112357478569189,7447554017540152281,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6136,i,7833764861635462564,13369087167355528098,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:5860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4696,i,11733854397371128111,17346797170833196321,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3092 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3192,i,13102903806166370638,9628092020471350057,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6012,i,10860178402829492438,2045020212064626741,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  PID:5132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6168,i,6662156853009638077,373025208096966586,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:5124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6176,i,8220120589366314198,6381063553826445323,524288 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3468 /prefetch:8
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3452,i,256692427507169627,8749996782075708091,2097152 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:5456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6460,i,413283522610845132,12607785398485214910,262144 --field-trial-handle=1936,i,309324997040109180,17823069430720730859,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3436

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2616ccab-f7c4-4509-9c95-ff9024991eff.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2616ccab-f7c4-4509-9c95-ff9024991eff.tmp
Size 235KB
SHA256 7a301729b24f38625b67e102e2909466476a00e996dfb8683df7802a5fe53b6e
MD5 5ddbc5eb3b100498812e90a0e0f033f7
SHA1 883e9ac6795f00e341b10dfe31d32a97c564ae29
SHA512 5964e1ab451681da79def8dfbe832f820f2986a9bcc9447f8e08273659a06de07bf6321cde3980abb1d334f75fc8600fef63683fd55475fe880df25ea9c4670e
SSDEEP 6144:kLhxNPRW2PYddqmY7U52FZm7Rkm1tYpBeh2BAo9:mXPRW4Kq97UAW9oBGcAo9
TLSH
T1253423126DB4AA784C5DFE1D318F2D2F2EF28ED494B4AEC2D8D45F0827ABD841952C74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 2607de90f2293e5dc2145f6fcd437367df06b92c4cbd1178a397aeb171104cc7
MD5 79378c146f4914f6234384b7eac7b9c4
SHA1 c322f25f1eed4cacf423af69f92ef8925dd9a767
SHA512 244c38de19e19e6192d713fff9b9bdaeccc164f4339325c09055650b4d82894c3b77b392bcbc565f9d2c22ab1e325b03719962a3d6397b8271b54314cda6c45f
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 91aa6fdbee6bdc417eb0d26ba9dc0990b1db897880e99396ab4458c141d43a08
MD5 53229b255bbd8088cfc990745343b2d8
SHA1 f565b81b4355189a032481410054b2216720999f
SHA512 8f3ebd9b5e17b6ff1addf38786d35aa9341a414d4e735afeeee82319968ad6e15dd93b953df1d813375aa5dd44e36e5cb6c97682c33767ec64b4812e69248aea
TLSH
T1B2E02BBAC961EC2B38FE172860514786F710139F2A40494B7A3C950C8FF0B3B574585C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 46a393824a7940b32fe392923a649ada1eddd45051e23d752ebedfb448b0746c
MD5 27e859473a46c3e8e538c37cd7edf2a8
SHA1 ef5082cd57a71c86e0734c8d89d8e875fdd194c1
SHA512 090bf802b529527fa3a5b42d334cde85f510238a158d229824a230c294d6133e644e51124e8db24677af9d7021fda2ed17ae73b31059fdad4c96bc9131938b83
SSDEEP 12:dOQ7k9gRHNc9T/mRyb74EMTRm/Cfx37s+GuKSVh6cIOw4Ukxs0KNSc+Y:dV4OxCTPMlm/IF7ZKknGkxRKwc
TLSH
T12813A77E45725E13D5C401BC249F6F7907709755F515811F3A74B4E8713030083CE1A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 cd27c29758637347a486ad11474207529d9ceb5caca34b2773ead57038524cbe
MD5 4df113a79b756014c2d5e24e2fd4a0ea
SHA1 6db21e8e34d5255dbaf7d79f8a7f5b6d0a45db7f
SHA512 467fb07042e7407578568342d58209256ab686316a9bbc5553c9f689f2afe70fb999bb865db0927dc3222d7d6ddc9d69ae79d0afaa43548ca7ee7de0300bc273
SSDEEP 96:ew9DQDXugABxtjW28n/NVOLHKWolWhblT43:essbEBxtASclA03
TLSH
T1CE44EAF71A1DDAC3DA1897B42A43623C9F33C1392DA5CDF9F43850E164A09E27278B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 c733f876d83500f4020b1a5c72993600ce5acda8ddb8b83ed91573bdd85a9728
MD5 88d4760ee5701f28af021d395f0b39b2
SHA1 ad2b6223e9d03120328956939ec9681d5ff0e98d
SHA512 cf749dd9279b256c24fd543b04caba73ff19f5b365a760fd5d209514463d82db3334becdbbe88e8ada8755353751297eb63653cd793a612d24a5dd35d88ad203
SSDEEP 96:E0zoeV5dIvx1GUrbmLDFvDX0Vxwj4AnsgkUiEMVIec/Y:E0zoeV5doGUrK3Zc60eqInY
TLSH
T186253C70EE281C7BC606A1BA4BC56CC7D7F3C260D0497416CF545108BE5E6E6C6427AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 964c42bcd00225ec0f1b4df9278100c8d233d2d6583eab54b8b5ad349c6daa40
MD5 fb46680ca0cb4e6e181d88f1b3573a3e
SHA1 3f581606a7f5f447dfd3f8d982134946e4aa85bb
SHA512 61c8428fb918b6e003e0a795153b3cd7883aa9ffe436338c83a6253478e725b0399a8841616c7b2893411d9484ba7ee0ca018bf2cdac0b9c3ec623609a08d45e
SSDEEP 768:NUfDPLSgcRUv+u442UfDPLSgcRUv+A44LfDPLSgcRUv+V44aN4lWiK4jiK4giK4s:W4C4N4DN8KrKEKrqHWNPNbmH
TLSH
T1F8164CE74F24A942E681EFB0BBCDDD2C7C7073D6EC965882A51282B945F0FC41B8616D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 fe2a453497f8462b60c8f22c848e1f9ff6fa3c7a1830a1d1277b0681b72fdc64
MD5 6d84a164908bfe584b3a9e2a55a0a60f
SHA1 a0bcfd0c46cc1bba26fa8e01d831f5ebf2c99555
SHA512 030cc8973916037d0228f1cf0609f0ce5ae316e8e71ac949ff21270f81c6f6b9c492a59ca9a16fa8479650420db77bca2aa444ec1802eacd0136e83ccac01b3a
TLSH
T10BD012145185F6D1D3985734B5513F523735099C49560B02AF60DC74841579111D3851
MD5 SHA1 SHA512 TLSH

Submit Download

DIPS

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DIPS
Size 36KB
SHA256 81a97c9e90e880d666ad9476dcb11671b98243f41efd36c79164e1db89466c66
MD5 b9179e3c51d3eb3d71d2e275d9b3aa89
SHA1 86e987e320b40616e95ea8aa22faa36c660d3f85
SHA512 e859256cfd00c0d6faf56ca702c411223761d2c5116afa677e5204be552d1f8b48a1aab69ca219d1fac7bb07a9f3b3e3a7182f045d285ed6b29bf4f3ed095a1d
SSDEEP 48:TJqQq3qhmr/O43b/Y8uaLNW9WjWbfl4pwU1cx2B:tCEmrm43b/LuaLNW9WjWbfltxW
TLSH
T147F202478E393C61D4CB863789C18AE70F790758975B5E6859A804615DD2A4881FB0FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 320B
SHA256 9a1320c28d1b3e3b785ed7c34f93330377721b632b981e28f15c99708be66664
MD5 49f9aa20a7b285729d2b2bef362e315d
SHA1 c98b82d01dc7f52919ed175aa77763881858f2f0
SHA512 0c5b116c5bd3ce09ee5bdde9d8f9646111aa8323e390a9cf4ac79d96b59438547fcd61d6b9130c87805ca401e4620b6720bce9f562947478806daeb839b60e40
TLSH
T149E0268824CEC57DA45C84A38769534DDBE0380DABC9FA422706848822CA605B1E97B0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\000003.log
Size 1KB
SHA256 b167dabe41ce0d9d6d373101be4cd15948c31a4c724828d29624bc2e655b0c73
MD5 63ea85b22f9f7af1ad5fc5be569840a4
SHA1 712805eaceee51e23123ee36398e51c88b195d8e
SHA512 026dbc97f01a4e56b557625bf2b74dbb9d9f4de5876e2d46161ac7073c7e8b0c140c96ae8ad76132f6505cf052c95282c3c7f9b27ae771d9035e1883dae96269
TLSH
T12121F1CC2B402653FF6E48756C5253773FF1C96502D4889752E88CBA4DC7F62161B0C8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
Size 330B
SHA256 c9ce6b4a1de2fa997b7aab907ade1d50659ee14b6faae7e7b103d65c13733598
MD5 1a4126e73c03512ad27932bed075a7a5
SHA1 3fd11343028e55a3b95cc35e7ad6f1de20c85787
SHA512 67a2dd091d1f70ff91f164bc3c4662e57d0be37faf3199509055cbb38f6bb540a4a9ec3a2dfeb3f7304ef3ab385989c1ef0c8716d740c90b9a7da65775f7bbdb
TLSH
T1EBE0260E38DACE7E2659C05359389B0DC6D43A0DAFDD99B22B0190941284805B1E27A1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\LOG
Size 308B
SHA256 e62538938d7e8f302b92e68feb8ad58c3026afef2516f4022c6a8e21ec6d7aee
MD5 975e60bd7e3c371db4e81d8cf68968b9
SHA1 82b998dfd9aa83d29e513308c1f8cfd6369d8c10
SHA512 6ce6949110614d524f1d4f6032d0fcbaa732481a1a997c2fe38545b81fbfeab75b7874f023f604e73b012be20938a2deff5aea008bf730e505c70e95a4d4cc88
TLSH
T197E0CD4B34DBCE7E15898013576D971EC6D43D0DFFDD94A21701D495538AC14B5E0B62
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 19977f19f05b67fb97306503d57539c07d28418624d4378f9913a21ede364c9a
MD5 2c54829b49808f735d9f412ce8086e4f
SHA1 9a9a10834af89e9521ab1d961e77b012339494d8
SHA512 61975f17fde0d09ea52b046b2a9e032bc5589e2537c6ea1f85ce40086bb77ca22c4308805b024cb1229ccbb365493994a3f4ce17d810135a5f716c87311d6af4
SSDEEP 96:Z2ww/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E06Y:Za/tH+bF+UI3iWGVYWNkqp3U
TLSH
T1EDF3095E5F243312CDBD923768E745B3587CF02F87236A866C6514B1CEE2A52B06C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 329B
SHA256 2a6b521538b249f1d36426d49b39f6861ada71d8e8766990000ec7f81f5f36ef
MD5 ca44e71d1ec3806be4f776dff35fc8c8
SHA1 6c6e63b9bc4c7c4e13fb52027b320290d2c8dde9
SHA512 662d19ccf35fe47e3d004862bdd2ceb4f81b448fa1e71222ae106607feaf969706452be69d5774ec566c55172188f60ee3f1e95efab64a26b17e166ee71a2078
TLSH
T1DBE0205819CFC5BD1508805B6739770DC7F0380DDFCDA9420B07954472CD40876D0791
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 c7fd1f6363f936b8ad8b3789860a1ef07b7256573a796a6be527458aa8996184
MD5 9dc828746bc2ad051ab92187e8dd1581
SHA1 5fcab081358751e24ef3110d7614e101a129dd24
SHA512 6089b47bdfea01cbe5265790b8daeb88a2211e34adcd1ac2842f3937e2c00c446233cf26c84763eb91ba07ef94b5e22ddcbdfdb278383c96e503eeb6e8808900
SSDEEP 24:TL/91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBNd5xEOnYDOFaJ08tvj:Tb9aw/aHLopFMavU1iBNHxdYDO8C8N
TLSH
T1F4920E8F1F743214C0F88B32E9D105AB2EBC211CA757BA99BD5424B39DA659BF5060A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 60abf07f369f622e9391c7a76627e77923d074aebd85748a15cddbb3642bae96
MD5 c8b7c3e40c00acafdc39e600ef3a1517
SHA1 182b1f0967da24caa4bdf2cd0a3dac69ea2819f5
SHA512 aae033c8fb5b20a50fb4c942a8ddb21c8920d294e40b83616a7c421337483f69b4e675671ac796ecfc25be1005ef56486ef67eee98420f4179f872d3815344f2
SSDEEP 48:YALlh5q/qihqXYfoKsS9zsNdzsz8s8Rsm4sRfsMos/KsIHZgtKsgq6zs9qIzsiqx:DXYXkId+IQ1RlvqHZgk65hhe
TLSH
T16B919FB7C3E8867EC91151F4DB156E1BCD290A29532C3C66C9E4AE1F93E2872D24124F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 af5e83ad7aeb833c9e036da5abb1db4eda3c6246481a6103f9d42034918d6fed
MD5 28d1c4a80855597bb96c9c138451f792
SHA1 9247e8e29fc21a32a73d010f6c56d3a2251ab46a
SHA512 85863dd28281d46f959dade3b9ba6c9464c9b67e66b816feaa77ea6795c8fa92016b0cc3ef4ccb23925e631810862d3469a95bbf380efc4b0a40b820b3859c8a
TLSH
T1BC419EF783E48A7E8A11D2F4EB156E1FCE690519132C7C6688E46E1B53F2972D24028F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 c2f8a516ac73e7390d2237ad194082ddf359f6f9f09de13885a1e2b17cd9ee1b
MD5 ef27ee909f78190b026f7edea71fc7b5
SHA1 cf3cde1ce7db118ff539c5e3ee3c3ea9788b6962
SHA512 3fae510f203464046564bbb2961acde49d36473c308858be07942f019a644ef7459e491138f951c6bf845b3d158ecfb93cb55228b1c93940bcac54f20696875d
SSDEEP 48:T6IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBl5o:OIEumQv8m1ccnvS6r6bYrbSgRRA
TLSH
T1FAF2F4FF07057611C0E491B4E1450DCFFD2A112E4BA7BED09AA80AF3A7835F3952836A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 524B
SHA256 433e6123d6a45e62e513f0e764bd3f8c17b690497867a0355904fd6b87b7a07e
MD5 4d0e5553f90668b4fc53c581bd4cd912
SHA1 ba7789d3845c2f486e1506870977affaa85cbbb3
SHA512 d4c9fb0a4c5a1e309c96b4a4497340b12ca2c05fb31767fe5eb95aad9356dcd40ca768fb78109d5d9ddc1d11c9fbacf26a2e123274c69c2d7024d04e97f7e8be
TLSH
T14DF059ABD6F9B07790B894AB2D04BC1A27B9A43111901CECCB96826DF2C05F7DF00466
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 f20ed07d792061a1f420f9691f73eb1e0178c1ec83aa78b687d7a249b2dd864e
MD5 a8268dbd8f83994f7043621d46f873ce
SHA1 0ad98659f6e54d175c3ae2e60387184408051b88
SHA512 ceed22c39cf863a9cc741fe7b094a1ec7422cdb4fcf92a7c1f3e39f4b55204eb495fe0a8e3379bd8d13af1c6e59244475b3da218c1e469a0e7a08cb3c16105d4
SSDEEP 192:6R8YoHu6Jv72vAPRp2Z29THsb+WNnE9P04eqHMaAPyIsnAUge:6R8YobJC6X3FwuPmaKe
TLSH
T15242A52EA910693B6DDBC229FA717797E7F6103235D42E84EAFC892C14D75CC212741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4f152a7832a546f9801933b5faaecdb18ccda135d90151491b90febeaec26a48
MD5 d92fd9f085270d38f4a69c2cf397885a
SHA1 65f0bcb6c4f7c0f4a24a22257df5dfd75bcdd6f6
SHA512 fb74180aacc7ccc4a49b7be40402185a46b0b00ab469f9f1d8ff4a303492986afb27498f5cda9bbb6d7586a3f003c02356123bffa44a618629743b9b0df5bdf5
SSDEEP 192:MR8YoHCa+v72EAPRp2Z29THsb+WNnwB034eqHMa1VyIsnAUge:MR8Yoia6CVX3Fwk05aje
TLSH
T13442A62EA920693B6DDBC229FA717797E7F6103235D42E84EAFC892C14D75CC212705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2ec4e9525ddf7afd6c36702a502ea9201d49e679de58c1224114b609c0558cac
MD5 82a126abd537df6feac9f38c9080aa61
SHA1 5f522a8f68b359c886f4395cc2d98c89e6ce46f9
SHA512 e373aa11d4a8842b353815dadf1536feb495501a93c73325467e2fa94f0ad71f426672493fa0cb9591a7890b4c4010f8c671b4a3c75d386c78143ad0fbd3c9b1
SSDEEP 192:MR8YoHCamv72EiPRpQZiTls29THsb+WNnwBiOavNj02h4eqHMa6VyIsnAUgE:MR8YoiaSCbXpFwkCK2ra6E
TLSH
T18852C62EA820697B6DDBC229F9317BA7E7F5103275D42E48EAFC892C10E75CC211705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 d0774833c27ada8036a0809a2351306f7b22fab42c7862ece277631ad54d914a
MD5 d2039b13ff8cc25a984c4a83e99b08da
SHA1 3212ceeb2774ebf96fe9b18c6e508c6504c8739b
SHA512 461f76992318675bef1d166066f8e2f64a85694f1b4aab0feb368a61d51dc0b186b68cf6cc96b00f7aad94dedacd36ff87687da2464ad1406e68a1099e61b1ce
SSDEEP 192:MR8YoHC5+v72HAPRp2Z29THsb+WNnwB034eqHMa1VyIsnAUge:MR8Yoi56CCX3Fwk05aje
TLSH
T15D42A52EA910693B6DDBC229FA717797E7F6103235D42E44EAFC892C14E75CC212705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 df3f3d7e8eb52eb11376e73179228426d3d2d5efef9c19d4d305887505e18b02
MD5 cf7fedf8f7d2c16e2ee32aeccb0d6abd
SHA1 c0965f169b36b690aaf700b8f80359944a908774
SHA512 0f7e0c7f513e4fbb8754c44a17604a17a368e18bf06088e8c92d246667c4707e4e019b978bfef2975410552144093cebfb7ef11074676b8e4908dde7b23f6a1f
SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9H9IB3Wh/+:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcx
TLSH
T16F32C727948D9A3F4FECD55CDC526F4F6DB1029272780C2896FB9C0403A97CE115A1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 a1f8588859f462a8f699dc1a6c1afcf2d8451bf44705d14b8f88c22fecd8a888
MD5 b4dd352ace217b032f65844a18f46782
SHA1 5506f3a72c24d54eb3aa5fda1a410c3b0a3a0108
SHA512 5c13496c5f7f64615ad4104b6ee8afbf995bfa37b25634d3fa45b00d6892bb1b21d5f0ae1bcbabc90c61e84d7a0ca00c5e5fc4a4b1e4ebf7b114605cdda569ff
TLSH
T1EFE0260929CAC5BD585D80C72635A30EC6E4780DDBCCF8A21F06F64462C980E70E1B60
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 308B
SHA256 cbee1100a2c9add47776b7e416b58a809f6feb9fe458bef8185b0c176b5db340
MD5 4e7982b86b3d7d916b7722aa3b3f0669
SHA1 ce4e874903cb71d9012cc7654ca7a6ba5e4f7efd
SHA512 c4dda8b36e90a327061dab901730f47fc23cca129b02a157f1ed0c566a1d6dddf272a4e74d3acbf14eb3a7fac0820387a584db9e19ca299724ed7f3030f891bb
TLSH
T1E3E002D812C1F027FCD986300D4723302F21D8BD1F311D43C4CD35D0061FA653401441
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 317B
SHA256 1ed6025d5b51626a9fa708be7a0eea749930453d890ef7a1eefefb7f43eb5d78
MD5 2ae3a3833abcbe2cfad35f609b1def76
SHA1 8fdc3056a6be7dde40417501d44fa6a6c15ffa08
SHA512 9e792e7bf502b5ef993654f3ae58df12a226b1790e3084fcaa4a022d15c2a5e43e26045f331d4e4fc9911abc6227796267216c5b6dca47cdbd185bbe3b63745e
TLSH
T15DE0865C29CBC67D145980671779B74EC7E4380DEBDDA8521B03D54823C990572E07A0
MD5 SHA1 SHA512 TLSH

Submit Download

Session_13430730113295632

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13430730113295632
Size 1KB
SHA256 606c39bfdcb0b8589848f52e8807530267648b2e27993090efe23e264c512783
MD5 3ba10d1d3cd4e5348cbf80efae2bf75b
SHA1 f56af5bef4970a02b0c5f6d16d122751ab701d2d
SHA512 09dda5ce1611b29e8e7dc47571af908d9f38ff54e683fa1a112d73d4c9da86e2675e55d3e6aa4d0e45bddca940a54055b6a32658a2e4811a5e3d41d73859052e
TLSH
T10021801495D90AAFC67A843E107E71E336F0EC01A1A56F0BA1D27074587B3D22F55EDC
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13430730117840632

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13430730117840632
Size 1KB
SHA256 5a8f30f58a7686e927f2394d2d4adb2e664e062e3e0b72317f345cd813e17a94
MD5 0b5400c47e9c211dc6a39fc3cdc0902c
SHA1 9954041e9bc8a77020e748aa645343e560c851b7
SHA512 fff2dd718391f1458573cd39c8474b21e98ca48546e89338b68b82a349fe592bf30ef8000a9bc2d7e2c7a7cc2f1d1808909c0be9187b368614445e3468b04649
TLSH
T18B117B1095D4127FD17E893E00AA59A77738F91175804E0B02F2F4184C22BA73FB1E9C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 8e9c5569834b586e9711458953b2c7e302444a947679412f491ff21cc5e85eb8
MD5 39129ba5c6f95c22848061b5f739d941
SHA1 b81be4db85865d885c9dfc7f4be7bc2e241d6de4
SHA512 581cc3015582a3412efbed8710da2aaedcd155e66ba8e68b4e5e96fee862677c7663e8e00813d47bd18098fe9528e56f5620684700570f471344a45a18a758e6
TLSH
T129E0D8282ACA8A7EA549801F672AF34DC5E1780CDBDDD4711B09B144938940471D1750
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 b97b72bb8d614c8fef0925d1e3d7204959d731915a747196b82265ed9e5b6636
MD5 2de72eb1855491700a20f8b7d65b56e1
SHA1 0a52b2c71067bbb4159ab74475a8b7ea2252aa2f
SHA512 f9155366057ec7818ac377e43b5ba5c63bf60e198666ba4da4a0fcbb725ff151f2665b429b9955530d770e4694edf21352674c887f77f235e3196ab4542822ae
TLSH
T17AA0220000C20000FC0822F0A8320C82AA00AA200A0003033C820C008CEF0C000A0200
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 324B
SHA256 4c95be5e05e33a22d3363e5cbe094ad9d98257613a56b9975541f7a3dd807582
MD5 2680d709b2034197a8bd23a3857a62bd
SHA1 39910648f455244df426b1a788667f56ebaa1864
SHA512 2a4d59b12dc890a24d58972b33296b09b2bb6e91baaf064aaddd0ac586e153be9d301d8dcf7d6b160f5031b73c67b5094a42aa9feea6f1c1730c356f0c9f6777
TLSH
T131E04F7825CA8ABD2868C0575775B78EC6E0BD0C9BCAA9A69B096444A3C550471F0AA0
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 da252cf9e3bf767fd912b14a6e174186b25ad66ebe2e8f5d1d3e969ef867348b
MD5 18609058bd73d1c3fe654e2806ba0300
SHA1 5c28246a41f50313b836b639276108fe668129be
SHA512 c7f3966e44ff44646776e27d930d2c9627a504ca74c248371af47ba6db450f342ddb475ab9498f31b2a0a70e6196a30de6719b7fe9429d70b6a8db1596b1eb3a
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2OeMVumZuqnFj:1nbZeMrv/hGteOdnFj
TLSH
T172D3864B3A743102EDE59A721CF051BB5E3CB16D4F55A5D428B620688EF2863A23D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
Size 4KB
SHA256 8881775204500d3ff05ff1c3d313fa2bce19fbfaf2adadfbd7a191b7539184c4
MD5 3c705bb55bc90a1f87c71104ee27437b
SHA1 cd4671f97852aade3d2c48ace81d1fdb7d8e2990
SHA512 5e2108247eb911a1f66af857bf75c60f59f12458a8246a1d394bb6935c2e152a6653c8093021f0d301c3825b7a7800f1a04c49adb09ce4150e551654a5c81d8c
SSDEEP 48:7M6eNJzbfmU5MYOdq+4LWSNm6zgaMXBVwWOquu3Br3TL/eOEErjQ10wY0wi0wN0X:7dezOUSYYCWs3qvlf/
TLSH
T1859110A336D42147F4FCDA7CF8D77A4D5715A181D895E2FC507410080A65F2361EB4FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 badbb1a52f6f524c566fb5e9fd1dff17decd2650380781a4754f5d8afad254b1
MD5 91abe213a127ab46bded51ae76fae724
SHA1 1fae922c6966bb60d97ef7ef5cb3b6a1e535495e
SHA512 e905d58d8791849e32cede8841b18fb770cbbcb817834d974050567b962065305a5be297fd525331bdf1ab7206f839b3780320a1a23d6ea2ee96f993782a424e
SSDEEP 48:T3j7dojKsKmjKZKAsjZNOjAhts3N8g1j3UzBulLULpKVL1Lw:f7doKsKuKZKlZNmu46yjUuyj
TLSH
T18403428F877891F3C0F6C53EEDC256E1FC7C2608D7162DD111E903755D88036516466A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 af5b82a26d061b7e09d96858ee6d0d37ac4bbc841c800112610a469a660dc9e7
MD5 865dff6309ec6977d7749b12861dfe50
SHA1 3be3add1a69205b602be1dfc90de5249b24dee66
SHA512 64c1deb9f0177700f284579a17b9f09452bf2f42d5289dbc93d41a83e9a173eb78ee8572f4faae9d74488f6a642b12cda8b82f651a614a2ea330d831d7c93d74
SSDEEP 3:cSlv9Nllv/etXl+Ctho+qg/G9TjffaXM/RuWGJpDEJ7KgJpDEJ7HBQYqIZ:cLl5RSCc/mLEJOgLEJLqIZ
TLSH
T1C8021299E5C49955D435007CC7DFB7A43A294E957F87271226D001593CE99029464BC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 26KB
SHA256 42653677f9c738c00a5dbe76202a0a2e32aa7a354fbadad49143b64854a8bc23
MD5 3b2ae783f35af65e1ff08126cf710655
SHA1 aa13b62c32536dd4006bb45471f5e91ae2360050
SHA512 ee31bf727bed027c471c0faf768aa142b7b2bf575dd89ca7b65ba96a721137824c82586dc6e8afc9bd00b69538a2c3aedda65b7ac31a3011acb157df7b393089
SSDEEP 384:HWXNsdGlhu9+8sdGOAQ2IIIBb5MIMIB5BwJsdG49IoPsdGVdGBvIxKMsdGVdGjk:ChzAQ7s7k
TLSH
T1DDC2C89693B00A45ECCF97FBBC658C6E0772EC8D45592003A4967A7A3C33D3B5D8139A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 9cbe4ffc036bd90f712378511af36cb245a7ca2a309a56467e8992e7cdfd5350
MD5 cbca0effe7ae01f5b203ff270791df48
SHA1 e1c87af90b8290696d8f07addb8d6ea14a2d3559
SHA512 0309b96703ef17e19a0e55744f146d0632179fea9b7dd7ac736bed5e9a6f078cec0cd848b1527600ec6720813bf58494feb8e507b3cc59763c7370905af42fc1
TLSH
T15BE0264478CAC5BEA41C80672136530EC6E43C0EEFDCD4860F02C84892CA40C75F27A0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 728adda921f1170eb68627693986a01a349c9b68e2ee126f3f9ba54bc42cf729
MD5 375caf062beb0719630adebe7e141bbf
SHA1 c0e030fd7cdcf1a225bf69851d8ace9a5a84ce0b
SHA512 4ef5c9958644622dc8765999b90650dbe86126f8431338df9efd910ac321f76a950804705862a273dab4d2f73491f64b800330446032dda09a7b86fe1c534ca3
TLSH
T1BB21F555F731C245D14A567A64BE97251374D8528FB8EE0F51BA20692EB2F000D472E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 6c98c3d6af7a0439f021374546ba68b82887b17fc019666411227669aa90af1a
MD5 9c306a97261ba11b9eadc93aa24aa499
SHA1 07ce4d20b34ff36b3ca128cd2857094a31dc9d9f
SHA512 82014e8a7807735fba76a95767674d63d2670bdc4b2f4febd1449b4ba937278b0df9d5e7ad4c171ad065ff8ad9a60997de00a42905b5c4b0761a92e1530882d6
TLSH
T1BFE0DF0478CA85BFC81880671176B34AD6E03C08EF98AE820F06994892C840D75E2AA1
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 9822f182fbe19f114899ad2c96dc0c3709aebf88a7d650e6ca10ef18a357d7a2
MD5 a43d8b4eb695eea0190b905c43d0f667
SHA1 b8b91c517144e698f7fd3b1cd44e7e7361dfe51f
SHA512 a262359b49f9a675c025d27555ec2bd7db2284599e82554a7cf7de1d4c0a89890b2de03396bbf700a262972c5db2df6955de13afdb6ebb96173d6a8e73ca7a37
SSDEEP 6144:7LhxNPRW2PYddqmY7U52FZm7Rkm1tYpBeh2BAo9:ZXPRW4Kq97UAW9oBGcAo9
TLSH
T1653423126DB4AA784C5DFE1D318F2D2F2EF28ED494B4AEC2D8D45F0827ABD841952C74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 82de92841c4beae78389ca376f398a9730b6e27b45c24845cccc4cf9db261f18
MD5 29605fdf282857385f09c7fa8db0acdf
SHA1 a2c71908d9e4316fd6fdc082c4f2577f732645a9
SHA512 451a841ad955e92c335460c3ee6dcb8928f388790b4e601deab34b22fe08d596e528dd43e00d9c98e43df2b78c666ae8ea83d7a59bfbe7312d7d77b2395fa5d3
SSDEEP 6144:8UhxNPRW2PYddqmY7U52FZm7Rkm1tYpBeh2BAo9:9XPRW4Kq97UAW9oBGcAo9
TLSH
T1923423327CB1A9790C6DFF0D318E1D2E2EF28EE79468AEC1D8D45F0427AE9845916C74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 7dd0bbe909306f114be69098b1fb948b6254fb304fde0e95ecc3838245a26e9d
MD5 9256fbdf6a0eef5d43f0f2b6d0e62dc3
SHA1 bb30a0a9860167646935bdd4cfca2edabbe6de5d
SHA512 64372182b7dae5651508bdf663a51d94a19d26b1ab2b73af6b247d191732b4a041aeeb38240600a3f19b9a221dccb9ba52b1592fa8d101ae445ea8f2583e5393
SSDEEP 3072:bGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Cm7Rkm1tYpBeh2BAom
TLSH
T17AC3123B5E70E9765979AB4EB08E0B1F1EF14AA2C930DA52C8D85A0437FA7CC0A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 cad7c4352ad4c5b352ced82f9a120344f040bd11b35d6f6cab536629c6a07af0
MD5 41dee2f07ed76592b0ed9c0437051b5c
SHA1 3f92c886c879c658cea87b8ed03615cf6bc4c6dc
SHA512 0c116a6ac25eb1adaaafbcbb7d04023c4633da02193af931fea55ec4fcbd47b2f4a9e17a85f21bcda686951e8dab85f780221ed5570ea724e713596fa0ee371a
SSDEEP 3072:VoGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:VDm7Rkm1tYpBeh2BAom
TLSH
T15BC3123B5D74E83659B9BB1FB08E0B1F1EF14AA6C930DE52C8D85A0433EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
MD5 f732dbed9289177d15e236d0f8f2ddd3
SHA1 53f822af51b014bc3d4b575865d9c3ef0e4debde
SHA512 b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4
TLSH
T168A012078473800AE4184092C45C024114A480460119D0015070931314950CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db
Size 48KB
SHA256 0c2a7d9a05ecc2cc77765a0a5d71529f2237755fe60ac3d742d6c07805f80d14
MD5 e045e65cd8ef3d083617318874fb79ea
SHA1 c2fa643f68ddf8df9e99d41cecc7525e5a2c08c3
SHA512 23c380211a66716c26bb85d47c8d82531cd1ed92636bb91e281a4abb9e2e2123967e8b4761d830c99c8fabdd7d6e7526165d78111e0ffae97194ce7a1195dcb6
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfL:TY/IHRH34kWqB1kQnjhHmr6ITmU9L
TLSH
T1C223886EDA2CB9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3308_1922022655\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

e13ff05c-1755-4872-9424-990ca4e5b54d.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3308_1922022655\e13ff05c-1755-4872-9424-990ca4e5b54d.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download