hxxp://ptoszek[.]pl

Resubmissions

14/08/2026, 21:49

260814-1pcxtsak316

14/08/2026, 21:46

260814-1mrm7stsax6

Analysis

max time kernel
299s
max time network
301s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
14/08/2026, 21:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://ptoszek.pl
Sample260814-1pcxtsak31

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2476	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312177642619186"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
3164	chrome.exe
3164	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe
Token: SeShutdownPrivilege	5328	chrome.exe
Token: SeCreatePagefilePrivilege	5328	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe
5328	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 5328 wrote to memory of 4920	5328	chrome.exe	80
PID 5328 wrote to memory of 3308	5328	chrome.exe	81
PID 5328 wrote to memory of 3308	5328	chrome.exe	81
PID 5328 wrote to memory of 2476	5328	chrome.exe	82
PID 5328 wrote to memory of 4904	5328	chrome.exe	84
PID 5328 wrote to memory of 4904	5328	chrome.exe	84
PID 5328 wrote to memory of 5244	5328	chrome.exe	85
PID 5328 wrote to memory of 5244	5328	chrome.exe	85
PID 5328 wrote to memory of 5196	5328	chrome.exe	86
PID 5328 wrote to memory of 5196	5328	chrome.exe	86
PID 5328 wrote to memory of 1956	5328	chrome.exe	88
PID 5328 wrote to memory of 1956	5328	chrome.exe	88
PID 5328 wrote to memory of 3900	5328	chrome.exe	89
PID 5328 wrote to memory of 3900	5328	chrome.exe	89
PID 5328 wrote to memory of 4884	5328	chrome.exe	90
PID 5328 wrote to memory of 4884	5328	chrome.exe	90
PID 5328 wrote to memory of 4332	5328	chrome.exe	91
PID 5328 wrote to memory of 5656	5328	chrome.exe	93
PID 5328 wrote to memory of 5640	5328	chrome.exe	94
PID 5328 wrote to memory of 5716	5328	chrome.exe	95
PID 5328 wrote to memory of 3164	5328	chrome.exe	96
PID 5328 wrote to memory of 5892	5328	chrome.exe	97
PID 5328 wrote to memory of 5892	5328	chrome.exe	97

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://ptoszek.pl
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff97fa2c728,0x7ff97fa2c734,0x7ff97fa2c740
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,12963206346013867013,2448888172982376002,262144 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1952 /prefetch:2
  2⤵
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2088,i,12742192307703544412,4158983145452065626,524288 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,138785790113531858,7483691438803573892,524288 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2608 /prefetch:13
  2⤵
  PID:4904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3036,i,13753509158109556990,8173685061251921774,2097152 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3068 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3044,i,603759807931712290,15846619345750333227,2097152 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3096 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4396,i,2594599992800145749,18041218148975095497,2097152 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:9
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,9629254253359400061,5767797240344791111,2097152 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=2980,i,13105055173786245959,3351414745652351222,524288 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2952 /prefetch:12
  2⤵
  PID:4884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5500,i,4868231529901019096,14756391819559368225,524288 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:4332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5796,i,1131351353642300955,5463164017402789306,524288 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:5656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,11877759390147850066,3554072536591057859,524288 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5844 /prefetch:14
  2⤵
  PID:5640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,7036008095784875460,12860311525090448668,524288 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5828 /prefetch:14
  2⤵
  PID:5716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5416,i,17518815932003643520,17562192592821560761,262144 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=872 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,3071930337058328115,8108793603732899390,524288 --field-trial-handle=1956,i,10632994079935441066,9018087653950543654,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:14
  2⤵
  PID:5892

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2340

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9e68a647-7977-436b-9e48-402a4d771401.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\9e68a647-7977-436b-9e48-402a4d771401.tmp
Size 116KB
SHA256 fcc7d9234d0babde4a0bb7d94eaa0da635f938d4d1edfea91c4fe969135955d4
MD5 2233676031da607de726b3475eb4c5d7
SHA1 5bb3d5d07bafec1390cce503ef3539601e14f93c
SHA512 38f6dd061cdb57e7233733dd79b814c7526c3fac5b22ab1aa7d8b158f05f020fa78ef2700fd227b42f201d68c0e92775486d403f87c6dc860520e201d77eb597
SSDEEP 3072:kHGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:kmm7Rkm1tYpBeh2BAoi
TLSH
T14EC312375DA4E9375DB9BB5EB08E0A1F1EF149A7C820DE92C8D85B0427E97CC1A09934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 419734a417b4fabd5ca4401b661024f6f844e2a55d34d9bb02f8d0f4d012298b
MD5 ed31ae586cfa7ab11285d079047f473d
SHA1 c8342c1f98bd9b99e0278af365b9c66ad9f12e32
SHA512 f1c98d880b49ab8b3ac98149e789fd92852bd0e32ba2abdd8ac242f1339b660edeab7a44a970dd4068ed72afaa4ab1a0e047bc1ec9982cbe46fadb6c3ccfef70
TLSH
T1C7E022A9C835BD270CFEA76D92944B52E75413472AA04A5F3B3D824CCFB12360A8686C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
Size 603KB
SHA256 8fab26df533feec521187e19434917616c39e385f276c8ebeabb6ff5d945cabd
MD5 bc020e8d6fb627f45058350647074fa1
SHA1 a872678eeeee737572fe61e46ecca31f960ed07c
SHA512 fee2999270d12a644a9328c8e85e7e88905d673d78494d87e1f3498cbddf4e47e070db463b8385eb6df0d5b90c36319dab18b45e63479ca41fee4932a28244b1
SSDEEP 12288:dMv+MhlnN4WVqRpy33GEGEnIGHL3pRPGUiOCJ6XkrFze9qnLnWbmJAW0RD6MUl:i360Cpy33G8ndLpFGECJ6Xkrc+WbYA3e
TLSH
T165D4236973BEABABE496173050D0A31E7C71CAB327573703574A304D2EA92E5CE274D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 914a56c3ab225619804fa83ccc14cff6e99edc0f6b20c942841d4d65ee38e505
MD5 1300c916be3112bd5e2a7292fd8b0603
SHA1 91a06d3952beeb5840a8bc4be414530375641e7b
SHA512 2a010390ea226dfb7e490fc62ab233d7fa8c2ccaec8ce024d5e5e60e4640205c8cf3b35812a213b69860a1d7d1e22e3876b923a9035a567f290b487246570651
TLSH
T1F0B0127010C043D0F75022B13D83500423100F3893F32AB281E01BF3C8357909103123
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 aa085f8f7ab4e6abfcdb83db54b903adeeaa5be97558576dcd22103abfde4bf2
MD5 1151e6fa2ad8526e9c63896c87c14fbe
SHA1 d4b2fabb28d36830a8dbbb532e9dfe999e653402
SHA512 0b00ab4047b9bf9ed8a1c84efcb52383434371f8c94d3fd84f18103b39bbcd5f1c10beb7b6f658e9fea7615859e6727ad914680b2f166c9d4ecf1582aa4a505a
TLSH
T110519BF783E4857D8A0196F4AB156E1FCE6D0924432C3C66C9D4AE1B63E2872E20168F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0e4c1882324812ae0bb5a0bc641a31e02577ab1c0155a1bc09ffb92246bc4197
MD5 beefcbb84aa911024ab6e29b15e61bf7
SHA1 e049d5fa3952eac0aacd416bde0b9a60e7b1c444
SHA512 d88a99f5e09c9ed2fd14b9eaaa9d0dca1bf77f28eb665273444f259778d73859b3e7a77e10d80bda45982784a529f049562fd6464f967a757c31be8e3c2bb90c
SSDEEP 192:CRfrFA+Jsev7mpAPRp2vH9EHsb+WNnnLocw2D6eu2I3R+VyIsnAUge:CRfRKaaUXeawLQ2q2IB2e
TLSH
T14542C72EB964753B6CCBD629F9657B57D7F6102121C02E84EBFC8A2C18E75CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 049303fbf17309d9176e4d2321f987cc79f8a52001e7c0e4866ed86b897eb171
MD5 01e4a07c70a144eaefc11297c2a5f646
SHA1 679e3959215589a8cef9e9d548f0e52938768446
SHA512 0fa27ef9d4e625337bde1f4afe59974e0795dce2d813e20f11590758204e38251a0b73d22750939f4425ac60871517e3e295911534a4407b2a614cba3875716b
SSDEEP 192:CRfrFc+Jsev7mpAPRp2vH9EHsb+WNnnLo6qkGn6eu2I3w+VyIsnAUgE:CRfRuaaUXeawLwkG22Ig2E
TLSH
T1FA42A62EB96475376CCBE629F9657B57D7F5102121C02E80EBFC8A2C19E75CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 78f2b9e9ebc08798880cb4679beee8aef2e584a4e9691c5edb1c0165ca1273af
MD5 f3fb909317ed06709bfdddf6e293f823
SHA1 f9840b19b75e8120807aa0784c1bde6154aba029
SHA512 4bd189ef0e2f72445f5af07954ee4d6ebdcc450090a92b283a2c281a3cf530c9eff525dfd48ea12519fb7f49e455434598bbe11f388dcada8c12c9ada348e50c
SSDEEP 384:7NjnO7KxkXqKf/pUZNCgVLH2HfgslOv7pLuLcSjZkXODnq+ErU3BHHGu/n0To:7NnO7KxkXqKf/pUZNCgVLH2Hfgs8v7pU
TLSH
T18172E9A76C4C9E370F94CACCDC1A7B4FADB6024B65E9886443FA582503D5ACF114A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 c25500c3f5d4e1fec02fd2f40b929c79be8ec90083269c20c435cc9a70437344
MD5 3812f79c9ecb8a2eb0349238b5111b34
SHA1 9c0c905e5fcf575e2a16adf5d9c24657e471d28d
SHA512 c6bf58a22efe8327ec8b1c740ca215df44b67b01427891910052744f82e701e00428b12f3700bd0d393303c04857cebb162e90a338f84a4a7c6dc98ad59daf73
TLSH
T138B022C0C0022302C00203B0208C80CCB0B0CF3CC203230BE3E02A33CC30232002A0A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 0f37b34afcaa6e15eabbd7ff72be60ba6b48c4efd158c9f988ceda055dc78462
MD5 a97f1a6768f2f2913f9517c366b92dfd
SHA1 307a5d5d950fea14f55445a767a043152da17f31
SHA512 f4ce6c48c2f9c02c8edee5d4895cd9e1cf1225d3712a7e5209bdc48fcdcd488f0956c9c51de729b058d42ff99d39dc8a5ef6656b90c5d72871ab0c88a36de390
TLSH
T10DB0120080027201C04302B021431488F1247F10961B370143E86D33C8253658015150
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 13cf853adb0759a2488d6449b25be89fd8d968ee583a540f4c2d16f8ef1ea5ef
MD5 acdce77fb2738f7039e64c033b571b6a
SHA1 ab26537cd996398904e681804e1c1b0c371dd9ad
SHA512 abb00738f25389d6fb6c163554e10324f6d345873f53256860a4ea76b440efe36f68bc1813ce498aca1516c97616442907692f1d5d8725d9adf6dd535bc307da
SSDEEP 3072:giHGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:gimm7Rkm1tYpBeh2BAoi
TLSH
T1DEC312375D64A83B5CB9BB4EB08E0E1F1EF149A7C924EE92C8D85F0427E97CC0A45974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a0c06a082f48c11111c4f3e268db41c6f648031ef68fb1d07fb53bbc7dc82d4d
MD5 b9706b82856712c5591f05bee4a4362e
SHA1 d826781ce40f706ce9c6971157a2450b8a492660
SHA512 de9eec925ef369bb4cbcd362b35ae1656f3f69c2053610fbe91e131f7f737abe609b0960fde4c29335901aad970b2db71afb4a63622f631f18cffc0e7c84043d
SSDEEP 3072:BHGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:Bmm7Rkm1tYpBeh2BAoi
TLSH
T16FC312375DA4E9375DB9BB4EB08E0A1F1EF149A7C820DE92C8D85B0427E97CC1A09934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e0bae8f096cfd23e3e041e84f157df6935f3599caaf6a9d4a70e66ba2b3f3a2b
MD5 4e0093db1f8a1fc9c0175956f4c9d1d1
SHA1 b0680bac44d9249bc9358d0f8eba9a78978ed8a7
SHA512 600a1257076c15c59af4c22fc58e23df59aba8f4388d4c4ae027b168e5cfcab462983a43f6ededa5398d440505297faa6732d32c0fcc5173c407ecde7b935eaf
SSDEEP 3072:kiHGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:kimm7Rkm1tYpBeh2BAoi
TLSH
T154C312375D64A83B5CB9BB4EB04E0E1F1EF149A7C924EE92C8D85F0423E97CC0A45974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 3ede007295240ce76a651328a5b66743ff62308a456438975c0ba173b3906d81
MD5 e0ca4cc5800979d4fe99a18fcbc523f7
SHA1 75e786561500391cfd49cc02f8a28484d5fecf2b
SHA512 a0698ff03941f53113d7226afe17cdc9389fe8c525f3a4f564ffac7c37078ba1778c7259f76625d5e3b1d3927f0b1bceaa2b7b58ef9363b0f5eff65ec59344f6
SSDEEP 3072:3xGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:3gm7Rkm1tYpBeh2BAoi
TLSH
T14FC3123B5E64E9375879BB4EB08E0B1E2EF149A6C920DA82C8D85B0477F97CC1A05974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download