c3b20b8801df097f0ace05644343213dcaae445a7b7274e64cf398eb5455072f

Resubmissions

10/08/2026, 04:37

260810-e8wndsvzhv4

10/08/2026, 04:32

260810-e585baea974

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ages of Conflict.exe
Size 652KB
Sample260810-e585baea97
SHA256 c3b20b8801df097f0ace05644343213dcaae445a7b7274e64cf398eb5455072f
MD5 8e8f63b07661d82b816a7ce8e41d331d
SHA1 97e0351c1e6e07c94d787ba969b475034a82bd83
SHA512 53e95bbd6eaae0bdec80df98e77dc3b107f5815f697aa108f8631b1ce00c8b1b8220a30f901761810af1865831fcb7035a5d987e1c59be9367fec6ef8312ae20
SSDEEP 3072:O0wazAjvuMeUwZPRyYzK4UHcUIcLh2teMKg:OPaMjvuUwZplUhLhx
TLSH
T132E4409E6399C25EE16223306A11D33057B49ED87130D28A07EE7E937F6A5878D381FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5024	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308100912425005"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
4060	chrome.exe
4060	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe
Token: SeShutdownPrivilege	3808	chrome.exe
Token: SeCreatePagefilePrivilege	3808	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe
3808	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 3808 wrote to memory of 4748	3808	chrome.exe	88
PID 3808 wrote to memory of 1044	3808	chrome.exe	89
PID 3808 wrote to memory of 1044	3808	chrome.exe	89
PID 3808 wrote to memory of 5024	3808	chrome.exe	90
PID 3808 wrote to memory of 2500	3808	chrome.exe	91
PID 3808 wrote to memory of 2500	3808	chrome.exe	91
PID 3808 wrote to memory of 3436	3808	chrome.exe	93
PID 3808 wrote to memory of 3436	3808	chrome.exe	93
PID 3808 wrote to memory of 736	3808	chrome.exe	94
PID 3808 wrote to memory of 736	3808	chrome.exe	94
PID 3808 wrote to memory of 3208	3808	chrome.exe	95
PID 3808 wrote to memory of 3208	3808	chrome.exe	95
PID 3808 wrote to memory of 1748	3808	chrome.exe	96
PID 3808 wrote to memory of 1748	3808	chrome.exe	96
PID 3808 wrote to memory of 2092	3808	chrome.exe	97
PID 3808 wrote to memory of 2032	3808	chrome.exe	101
PID 3808 wrote to memory of 2032	3808	chrome.exe	101
PID 3808 wrote to memory of 4540	3808	chrome.exe	102
PID 3808 wrote to memory of 4392	3808	chrome.exe	103
PID 3808 wrote to memory of 2036	3808	chrome.exe	104
PID 3808 wrote to memory of 4060	3808	chrome.exe	112

C:\Users\Admin\AppData\Local\Temp\Ages of Conflict.exe
"C:\Users\Admin\AppData\Local\Temp\Ages of Conflict.exe"
1⤵
PID:2568

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdfef8c728,0x7ffdfef8c734,0x7ffdfef8c740
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,13525380505545416190,1741241102587853098,262144 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,2230631254590089984,6560815496700356485,524288 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,9908397390100922074,11679296532912316360,524288 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,11876264793632766507,9215094237237189433,2097152 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3368,i,4766314248846355805,15879094214058023569,2097152 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,6926886132194430552,17365580900842361853,2097152 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4492 /prefetch:2
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4676,i,10126897010953099712,5934274966278720262,2097152 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,17449559296815427281,7081325141647523673,524288 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5932,i,6004214201942286872,17720382864319228392,2097152 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4664,i,6676006338363921573,4226761140106089446,524288 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3460 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3464,i,8770210345488724917,3132629890320687652,524288 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3356 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3476,i,11983090070719845489,13722045248566130375,524288 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3528 /prefetch:8
  2⤵
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5728,i,10842475647080886065,698900554362906499,262144 --field-trial-handle=1948,i,6034117945196375478,3284559235696608280,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4060

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1664

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 906c27927f6e7a23d8532fb4d77bc1d755ddf8fe4c5192ce014cf6d5aaab245b
MD5 5b4ad65ed95ec14298048dbcfdbf0ede
SHA1 30ad1577bba1f85b196f125cdd4930845534818c
SHA512 c5cc451880bbda04c937ff0f7e077db84cf20be374836e48eed8adfb06245c191f1633d8159eded9e079a90e3a51a7db0655062ad10a078fa21a92c3dbdbfe4b
TLSH
T1BDE02BA9C865EC3714FD1759A0102745E754139B2A50C94F7A3DC50C8FB1A364595C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 9d90c1994e3eeea85567ef2ecfac7beb6ac398c7cc3f0168fd33cb367aadc418
MD5 3ed12cbeedcce38f0e3c460b252a5e55
SHA1 1900e8233ad06170073015498f0525fc7c7f190e
SHA512 889c9b25bb68c7b4b8d5cfe160f15c53cbda255690843a0a86989193aa38fe988faa146c2b711572d1a74c134ff894399e0acb3c21758150c03fb803de0955c4
TLSH
T18EC0920C80C004ADDB6EB5BA46B3089331932DA90163C2AB5981CADAC46EAA8A822610
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 e2f9c5010fd9123b413e040eadb7df3c3d2578ed885998c08183039a423d68ed
MD5 95c7eb68a877799e046e529d20d24bc9
SHA1 5db05c07ad48299b502a41961e843b5042c3d1f2
SHA512 c5c99d7b37f2778c4812b03134f4c5eedb72005c13449096d25640002ae7aea77c7fff8cd036b2294b5f7d51fcef4cce7a50be374732f62c641e966dec6181f3
TLSH
T19F717CF7C3E8853D891156F4A715AF1FCE290A24532C3C66C8D8AE5B93E2872D21074E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 52ae5755499cf006463eddb9682b76f4b4ce61d550ac9c0333b8812570000441
MD5 6865eeb23ae6c473848eda656218f5d1
SHA1 7b887762d11b551dd7d81c5ff5186d8f2b04ee67
SHA512 cb51cda4087040db5d5ade5f2e8ab80f5ddcf52fae345a24efd26cd79e78e2823d6788241b6aac66751dedfb0159b3fba8b55605a83be87019da856841352cb5
SSDEEP 384:pwRTOjAsthIyiBggKgFXn8wTC22gyrDPD2hgdaxue:pSOjAsthIyiBgg798wTCoy72xx7
TLSH
T1C652D92AAA14697B5DDEC21AFD617B27D7FA102125E01E80E7FCCA2C05E7ACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5f4bfa077340ec43cbe7611f052d491ece91a5f470439865bf39118b59f823c0
MD5 886b0163fd80a09d641b26cbb1bb22f5
SHA1 006648aaf21e832b01faad47119a376e6e47ee7c
SHA512 92370d65f678e97d6007350244c4a65cfeb67173c488a1cf8b558e556a1691693a5b83655e29783abca99d3b1dd54916c1562a9f0e582074de324aea31cd0e33
SSDEEP 384:pwRTOjAsthIyiBgNOKg8X68wTC20s/rDPD2hgdaAu8:pSOjAsthIyiBgNO738wTCTs/72xA9
TLSH
T12842B629AA14697B5DDEC21AFD617757D7FA102121D12E80EBFCCA2C09D79CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 7108ab57b2ccffe0dc44e77c0eec03128e6cd67e814a5ea55a9a5c4bf12c92b4
MD5 b5ee83e18b48d5c3b69dda206201f2d1
SHA1 0f2696287b66fe38203e02d971886a9f3a7c8561
SHA512 f639ff6e5a79549477e2b43179381a90c18c5d1fa003b9f63fe63c497a24682390cb7c2daa07d34d1edecaf5df2b41570e8824d578d94e5c1f9797e8204c9953
TLSH
T144B01210C0415202C04202B01167249871149F15964A170143E06926D8255A18A151A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592428.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592428.TMP
Size 96B
SHA256 577e5d56f33d56df8a7b307af5a56cd5b0a0f5b6bba2b3ca5978321916db96b2
MD5 3b7472117e19a692175edd56941ac4d0
SHA1 b317fcb4a1c14883aff771d5685aa86dbba69dcb
SHA512 ed8746264811c06a5b989ec836c548b4096ac482effe7c6cf4180bfe259e1f1e03830e95b55fff6ac659e61cb976d462b9a59fd1d05180666ee368413f23574a
TLSH
T1B5B00255D1476323E44213F565B6D9D87160EF25C6031613E2E01A66ED25AB64925270
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 ff0d8c4d257883d9390add8c28ec9b04f32c0f47d7360b99b8cd5469d63e0f2a
MD5 6fab0c66655d3f11c86ead0f9c4a0df1
SHA1 2ed5c082eeead240fc02d1b0054e861f7abbaf3a
SHA512 51be3cd8eb1034376f99b05b0e59dead6862fe4e2fcb63f2794f10e87717e76a6d4c3b0932e0ff23fe0916e52de763d65b9754b7bf2b16c4b561bbc9becfec64
SSDEEP 1536:b3LyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:Bqfd7NtZL8cHQRZEQ6Sps3
TLSH
T156C30237ABC21F339D96CB64B9130FD657B644A99030D301AAAD37EB7C93591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 d7f8904c5df11ca624fb2cb9500b2dc7ac7b9e33dbfbd3a0794f7522aa8e371d
MD5 4703403c9252d66b62670c4afc2f4bb8
SHA1 26ccecd3c046e01be8559ded8599b4e66d8cde15
SHA512 aaefa5f1c474895368e9ca1196b246142c23d207b5714c2b70b8898e048508fdff1c318e1cfd14adff56cda7bd9f9796b787ca7715ffe81df498ce603000f7db
SSDEEP 6144:9RX4NwhgqKR4ILo59R57lOYo8rqZ/ZLW3ExC:foNweqYhLw/7lpqZ/piQC
TLSH
T1E23412B2EBA31F755CA6CFB830111FA58FF290DD9178E201DEA977AB340A854960586C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 37edff6c5cf07d77720d26abbaaf7c867bd522a5bb590b7e378ae107bd9796d0
MD5 37e2203cc6c7f8fe8dd94a6b43aaae24
SHA1 60548ea14b12ebdfc906e7fff0b74670b7f0f95f
SHA512 8e4bac9e143f2952e1e912607c9ca791919962fc5ea7e13b0834b55dc4a95fb3439265d4006e5838548176d0882cb624223a57d52bd110e0094a3ec93aac49ef
SSDEEP 6144:3X4NwhgqKR4ILo59R57lOYo8rqZ/ZLW3ExC:3oNweqYhLw/7lpqZ/piQC
TLSH
T1753413B2EB631F395CA6CFB931111FE587F280DC90B8D202DBA976FB350A854960587C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 aa8f716cf61fa0080a2596bbe169c8a364ab30049a772d6b5c24408da63dd47f
MD5 a481ec6956bbadabbfcfaddd243f1d07
SHA1 d4c80fcd0395d3e1301d33ef31f214125c0f424e
SHA512 0a70ab4b56e557b9178e2f8ed0908d7a0dbfba9283b706554b330ae0ed82079fe383e9ec8bdd7c2b3ee8c994de18c93d21d01a2b4c0ec5f77cb0b2bfbc8a1c6a
SSDEEP 6144:yX4NwhgqKR4ILo59R57lOYo8rqZ/ZLW3ExC:yoNweqYhLw/7lpqZ/piQC
TLSH
T1603413B2EB631F395CA6CFB931111FE587F290DC90B8D202DBA976FB350A854960587C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download