hxxps://docs[.]google[.]com/document/d/1EZkN76AS1_4gkVKAgiHPgj5iUWnLYPpAKjqn2MbWl_Y/edit?tab=t[.]0

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 13:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://docs.google.com/document/d/1EZkN76AS1_4gkVKAgiHPgj5iUWnLYPpAKjqn2MbWl_Y/edit?tab=t.0
Sample260813-qs6zzaak5v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1908	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311015875079181"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
568	chrome.exe
568	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
2256	chrome.exe
2256	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 5004	2256	chrome.exe	88
PID 2256 wrote to memory of 1560	2256	chrome.exe	89
PID 2256 wrote to memory of 1560	2256	chrome.exe	89
PID 2256 wrote to memory of 1908	2256	chrome.exe	90
PID 2256 wrote to memory of 2552	2256	chrome.exe	92
PID 2256 wrote to memory of 2552	2256	chrome.exe	92
PID 2256 wrote to memory of 4892	2256	chrome.exe	94
PID 2256 wrote to memory of 3056	2256	chrome.exe	93
PID 2256 wrote to memory of 4892	2256	chrome.exe	94
PID 2256 wrote to memory of 3056	2256	chrome.exe	93
PID 2256 wrote to memory of 3084	2256	chrome.exe	104
PID 2256 wrote to memory of 3132	2256	chrome.exe	105
PID 2256 wrote to memory of 3220	2256	chrome.exe	106
PID 2256 wrote to memory of 2416	2256	chrome.exe	107
PID 2256 wrote to memory of 568	2256	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://docs.google.com/document/d/1EZkN76AS1_4gkVKAgiHPgj5iUWnLYPpAKjqn2MbWl_Y/edit?tab=t.0
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ffe4528c728,0x7ffe4528c734,0x7ffe4528c740
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,420218972257005853,17920954582402814500,262144 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:1560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1620,i,13086750388616424295,1650213650380725602,524288 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,15303928901275572610,10350096445616187976,524288 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3172,i,7307570087908092599,12946085201008116609,2097152 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,5047387021935668304,14191090263869807547,2097152 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4852,i,17537399095105514924,10082790473968082182,524288 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4820,i,17261608288900421971,7936696177161868767,524288 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4896 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4868,i,15221402170954664035,10767872610994360472,524288 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,2100942553364465605,12353813931586530064,524288 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4880 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4624,i,2759048814610001503,32308039670797830,262144 --field-trial-handle=2008,i,12140443912092263578,3526618971329855319,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:568

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:992

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9d7196df2273826f58d94d378898fe674a9cab593b6081083f24b7a4284c2cd4
MD5 6047c0594fb24b723270a1009041d51f
SHA1 6df9b313039555dc04ca74dd9268827ef2fdab13
SHA512 57521528256cf67bf8a577e96d27b6d98eb333bf6c58ffb03eba0125b4b96bdf147d943ed1e9974feae8ca32ca0140af230ad27e98b2bc1f431b48106d537163
TLSH
T13BE02BAAD932EC2B5CF9176C54D00B46E74013573F40C94F3E3D8209CFB9A7A114581C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 d7c4c70c8474d553c8575ecaed0884301777b154883f76076af7f1e1392a6206
MD5 bf0bf3d14445819f3e6eae493c58386a
SHA1 d4463e040266e0ab2f2dd8eabde1970b72252929
SHA512 787b15b062ab233d01fb1c02076555ad3e3a75deb1d4a47c2456d62164661212ae17b235f78527631e83d2aa0ceb1ccb9991d95c60b7eb022346c7781c39d7ef
SSDEEP 192:DnD7gYZalMHkQAwEaaEdcedGmsFYSMnTWsVONTLK:DnD7gYZalMHklwEaaEdcedGmsFY/nTW6
TLSH
T1D5F1ABF7C7D8C22D895156F49B11AF1FCE291A18432D3C26C8D8BE5BA3E2431D21575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 529b7c05df8c0187fb196689df304180386b62f3c1144e3ac19204a3f2249335
MD5 5771a59184a195b25f13eeba2ba42aff
SHA1 011d05632a776678a37e49a428dfc69a66d399dd
SHA512 611cea8eb3ac3343056dff480c2e0f52af258756730215823d2477910c9db5803cde45d9e3585a4c98249bc64497088d3b52d8c643b4549e7a97214fa819f0de
SSDEEP 192:DnD7gYZalMHkQAw4f6aaEdced7sFYSMnTWsVONkrnBR:DnD7gYZalMHklw4f6aaEdced7sFY/nTV
TLSH
T1D202ABF7C7D9C22D895256F49B11AF1FCE2A1A28431C3C26C8D8BE5BA3E2431D21575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1eecdbe94a3db7346a214536428699de7f3d35cdcdbbebdcdea2c056fe52647d
MD5 07bea6d550dee9f4a3021cf94155f88c
SHA1 ce8d1b923d679d9c0cf3a0dc62e888f59977b72f
SHA512 454380289a8ea64da6508c971d01e74ba0d2d199d45fe25352e14e9c4d61ea7fd218549a5eafd66a93bcce3f528fbaac763551ca2e806a38c347ad82cae2477d
SSDEEP 192:/RB3UxL0v78pTPRp/W+9DHsb+WNnXe5P82Qeka9vUGdTkwUVyIsnAUgE:/RB3U5w4VX15wOu2Q3a9McwE
TLSH
T14B42C62EF910697B5CEBD215FD657B53D3F6106261A02E84EAFC896C14E79CC3227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 82d59d8c91d67b813bbe5d1b776eab7e1b35fbd28b49264bacfb17215c14998b
MD5 df09cbad9c1448694f18226e00afca52
SHA1 f5674733bd5cf904608881d4ac53521f3ed91a81
SHA512 603c8040337ae984740fe3c08becdc68f38801819f3d1fd9c95dad126360a4254fb70911f44286a92ce9db8ca5bcd144f244bc89176e634b196e6e3e8c4af7ec
SSDEEP 192:/RB3UxL9v78pAPRp2W+9DHsb+WNnXe5P82feka9vUGdTkwOVyIsnAUge:/RB3U594UXE5wOu2f3a9Mcme
TLSH
T18F42D52EE910393B5CEBD22AFD657B53D7F6106261952E80EAFC892C14D79CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cc1977b017de85854e3d193210dbdb448bf2e93904561df811b786d5ac45105b
MD5 0664c9b3cb5c96fa73b48000874bfc99
SHA1 576ffd0fb56114d7bb3717ab5a21e851c06760b6
SHA512 1595a19429ed292a884773405e5c41b3c4bc46c840ee7d3cd4b2b133be3ade1d49532c1fbfb7721b22f35a6478953bd2b2b70b8680c3d6efbc303089712b9f46
SSDEEP 192:/RB3UxL0v78pAPRp2W+9DHsb+WNnXe5P82deka9vUGdTkwSVyIsnAUgE:/RB3U5w4UXE5wOu2d3a9McyE
TLSH
T10A42C62EE910397B5CEBD21AFD657B53D7F6106261912E80EAFC892C14E79CC3227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\16.png
Size 492B
SHA256 efb5251577a5a6b9655965f6e171b11a8a60fae548649f8b3beec06634eb8468
MD5 217ebf524c4b1d93542410647c3a2f55
SHA1 326bc6085c91ec78785f3b804fe54fbee412dd4c
SHA512 24de9dfda9f893679db9b4570e304b032b3da0f3c13d02bdb7b6eb7c49507e338e48465e83b3c433df15c183f8bdaeced84c80ab996d3e99f49df7fe35a5a1fa
TLSH
T147F054826358A17ACCD774DA0ED3E078A13F6204468DA6BCA612E8A427473045954A8D
MD5 SHA1 SHA512 TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2256_76945501\Icons\128.png
Size 7KB
SHA256 1af3c58c4b9581021c4c74240569a4e4b8d0f45172746a9548bc18ae69143c30
MD5 74e571ef2ffc0dc0e31f7481e42b2fa0
SHA1 e406eea49fd16f50262bf704fe15e32513e886d8
SHA512 12bdcf4d4c3342600d14b7f508d8b880556d1ee295220a870e1a8d2777c5329426b886dbb79127d802c8e64c160707a80ae9610d09516570f7bdcc9654c70419
SSDEEP 192:lMEZpD1Goj4nyHi7Fil6iKv+rU6hiiebJ:lMEZp/WKiRiKqbhiiY
TLSH
T16FE18EC0F4527D2FA5A14A1DA82F6DCA629C5BA78F4683F1CE0499DE0409DA8F092D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 efc85c08545cc7d9169fcb6e7a562ed51b6b4ae562ff7acae1eae166affc22d0
MD5 740191bc5e6e9ad5753cd50f574ac515
SHA1 e56115e21fd029935091d4a68800f846b83ba301
SHA512 dbc719e5eeddc6becf6d0e8005d9873f25fbcda03b8f836fc414c35f6b7e52c2b4d453f35f101daf48cec715c4eb49ffc986bf015ad0684afa62c1afbf032838
SSDEEP 3072:xNGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:xEm7Rkm1tYpBeh2BAoO
TLSH
T171C3123B9D65E8375DB9BB1AB04E0B1F1EF249A7C920DE42C8D45A0433FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 caf9995f3f090f662917e4a6c592f43e158c82399775e2525454b8252a7470af
MD5 8746fa50e42716404a3d9c6827d6343a
SHA1 11f00c54c6d8df3fd6fe279168b547df50b78f66
SHA512 c95f325bce725e01a8af37648dc5c7a00db3523db7d2f8db6a3ffbceaf6487efe6aa4834199c157da4b330cd21448c5455704967dbb1fb88e6e4b34119a73a9d
SSDEEP 3072:15Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:14m7Rkm1tYpBeh2BAoO
TLSH
T12AC3123BAD65E9375DB9BB1AB04E0F1F1EF149A6C920DE52C8D85B0423EA7CC1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 7f779c33fbe7ea8da445ad412ff3d65cf98d46c3bd9ad07cbf5df82b52596e5f
MD5 1684c15336277cb3a50ca3567f222360
SHA1 9556591ecd0326164dcff3d6d6f8545ccbfa6019
SHA512 feddbe9e6f45da88d235044229fad6e1e553b9d526007829c735ca33888a6eaf7f0c132a69b54efa954e7f035cdbf78eb6e4e8b86970655382c7f8939fad6fb3
SSDEEP 3072:1Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:cm7Rkm1tYpBeh2BAoO
TLSH
T1CAC3123B5D65E9375D79A71EB48E0B1E1EF24DA6C930DE42C8D86A0437FA7CC1A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 30b94e97fb5f188506e6ce1623013205410b0824e35784f1b5048dff68767e3a
MD5 fa10e7d1c849fabaeefa4fe6ba28ac3a
SHA1 c79234f3e8ff57258b65b20aff957e9f3a3dbe28
SHA512 05f1bb8a56b958125fe7f6fecacf0d2792b0e988bf3b93b9cc4a3057eb8996bf4d9069f7bd7ecb98b5527a00ca58cab82b9fa9df563196e70c018361c674fff3
SSDEEP 3072:m5Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:m4m7Rkm1tYpBeh2BAoO
TLSH
T13DC3123BAD65E9375DB9BB1AB04E0F1F1EF14DA6C920DE52C8D85B0423EA7CC1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download