Analysis
- user interaction
yes - max time kernel
68s - max time network
70s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/08/2026, 04:29
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://www.lsdigital.com
Resource
win10v2004-20260513-en
12 signatures
900 seconds
General
- Target http://www.lsdigital.com
- Sample260814-e4f25svcma
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 1684 chrome.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311554249628721" chrome.exe - Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{BB56515E-B438-4225-AAF9-6D83618044C4} chrome.exe Key created \REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe Token: SeShutdownPrivilege 4856 chrome.exe Token: SeCreatePagefilePrivilege 4856 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe 4856 chrome.exe - Suspicious use of WriteProcessMemory 25 IoCs
description pid Process procid_target PID 4856 wrote to memory of 3556 4856 chrome.exe 84 PID 4856 wrote to memory of 3192 4856 chrome.exe 85 PID 4856 wrote to memory of 3192 4856 chrome.exe 85 PID 4856 wrote to memory of 1684 4856 chrome.exe 86 PID 4856 wrote to memory of 4292 4856 chrome.exe 87 PID 4856 wrote to memory of 4292 4856 chrome.exe 87 PID 4856 wrote to memory of 1828 4856 chrome.exe 89 PID 4856 wrote to memory of 2940 4856 chrome.exe 90 PID 4856 wrote to memory of 1828 4856 chrome.exe 89 PID 4856 wrote to memory of 2940 4856 chrome.exe 90 PID 4856 wrote to memory of 3688 4856 chrome.exe 91 PID 4856 wrote to memory of 3688 4856 chrome.exe 91 PID 4856 wrote to memory of 2060 4856 chrome.exe 104 PID 4856 wrote to memory of 1104 4856 chrome.exe 105 PID 4856 wrote to memory of 2060 4856 chrome.exe 104 PID 4856 wrote to memory of 1504 4856 chrome.exe 106 PID 4856 wrote to memory of 1504 4856 chrome.exe 106 PID 4856 wrote to memory of 4148 4856 chrome.exe 107 PID 4856 wrote to memory of 4148 4856 chrome.exe 107 PID 4856 wrote to memory of 836 4856 chrome.exe 109 PID 4856 wrote to memory of 3880 4856 chrome.exe 110 PID 4856 wrote to memory of 2256 4856 chrome.exe 111 PID 4856 wrote to memory of 4596 4856 chrome.exe 112 PID 4856 wrote to memory of 4748 4856 chrome.exe 120 PID 4856 wrote to memory of 4748 4856 chrome.exe 120
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.lsdigital.com1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4856 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe035ec728,0x7ffe035ec734,0x7ffe035ec7402⤵PID:3556
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,6192152983223240498,5959604551553435788,262144 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1948 /prefetch:22⤵PID:3192
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2224,i,4895036704732095639,9352938886282893373,524288 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2260 /prefetch:32⤵
- System Time Discovery
PID:1684
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,10575462988871503475,10647092632776872086,524288 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2348 /prefetch:82⤵PID:4292
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3092,i,11775456511611505786,7342509151953029646,2097152 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3116 /prefetch:12⤵PID:1828
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3112,i,16224619462216347725,4672425491835812660,2097152 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3136 /prefetch:12⤵PID:2940
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4516,i,13399918495354723427,2230168409631152152,2097152 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4612 /prefetch:12⤵PID:3688
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4784,i,16099111915600137402,229996596185294008,524288 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:82⤵PID:2060
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4868,i,15122100305170599779,16781742710476364654,524288 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4856 /prefetch:82⤵
- Modifies registry class
PID:1104
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5056,i,3055712277440387837,18057940302980689390,2097152 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5052 /prefetch:12⤵PID:1504
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5084,i,11383393005562671802,6409770752723672920,2097152 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5208 /prefetch:12⤵PID:4148
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,18118419458504816746,9724350137686919030,524288 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5456 /prefetch:82⤵PID:836
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5592,i,7272869263577668413,12537482530212142977,524288 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5600 /prefetch:82⤵PID:3880
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5596,i,3961148430215232191,2004064024645783841,524288 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5416 /prefetch:82⤵PID:2256
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6248,i,16509541799072100014,4498245786925613380,524288 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6244 /prefetch:82⤵PID:4596
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4524,i,1441945053471775899,572036646923101430,2097152 --field-trial-handle=1952,i,11241975046062489323,9592275210059515249,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4616 /prefetch:12⤵PID:4748
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:760
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3624
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 364ae221267c083f90ed267b50dce77f7434fc012ca1bcd112374722d86c2f45
- MD5 86085d4aa06258728a2b2717ce0f830f
- SHA1 4a02cde7d28262ef2e1099357c11e3a9569cfe3f
- SHA512 20fab26526c75e0e29b5a790378b0a3f6e77ec949299894fef54c762f37f89bf42878930cfb01f1dffa24d8b6ecdf891d85960625cdee00335aa85e2c9bfd796
- TLSH T176E02BB9C8A1EC3B28FF176860614B46F764235B26808D8B7A3C850CCFF5A3A5645C1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
- Size 57KB
- SHA256 34b42f8881768784039804df0814006db3adbc229a50352c5280ea7b1454f6fe
- MD5 d31f96bc3516549c8722558d5a54f00a
- SHA1 76c2c6b5be1348e6df57768c19b588c0f56c1206
- SHA512 cf44764d16e1e98ad23a7d326448924356dacbd50a453f237670d614f616aefd262bc42c91cf699ed6a8eaa19460caee274258ea78d98516b52309d56bb0ebd5
- SSDEEP 1536:gmzpyZ0iCLxCuJMk9AGGjMD34GpWesxuzNYHUotA:MwsipAGGjYVuuPUA
- TLSH T1804302B4223D7E775F8992C46D45AB1EA3CC4084D26C3049F52F0DD7F58A9D4493E92B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
- Size 60KB
- SHA256 3ab5a81a8e3d2c4d88503fe7f5fd28d64837c610d862df6dc4e5cf5a97345405
- MD5 1356eeb353da77cd77d11f00aba5f069
- SHA1 1b934f765fceb23677420b74e5dcdb20800388af
- SHA512 bb147a9c97b60de3f45887758c2033d149560932d8b4f75943247af0588b6064eccf7581977b665b6795d35dd19eb9b93875f11de52c7b9f2807996c9f18b8ae
- SSDEEP 1536:licvbG8LVJY4RKLY4EiX8WPk6sI64uEJIuZjjgrmumfqZ3WA/JF/O2x8:7vZk40bPvH6f+ZymumfqZ3WA/JZF+
- TLSH T15F530254D37C5FCCE8209AF06C64ADF5BE6C9DE550AA6E24C5292207B4AD26CBDA4303
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
- Size 100KB
- SHA256 af43be3feb615e3648ae0146b382d7922b5909ca13c23891887de1779f434b2b
- MD5 0021f06a6709afebc396ee89adf878e5
- SHA1 303256331877aa8c38c9653c9946cc24174077d2
- SHA512 08be57cb349bf85916a073e0df8058e37edb88919d2880f1e1c79be86349204539577465348249a11f916a885f2f67f6cdb5bb9446348f3ed45542aeb6d2fcd9
- SSDEEP 3072:NyViaOXRMTpns+o5FGuS2Fq5wt/JSSzguZg7y5:SOBMs+o5FVRCoiuOG5
- TLSH T118A31306960F1D2B8A34475BE0B3746E3D2A8909B21847802F9FED66B8DDB1F7073D65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
- Size 335KB
- SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
- MD5 9f9c9ac1a584487d0961c6af2cac057c
- SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
- SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
- SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
- TLSH T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.lsdigital.com_0.indexeddb.leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 11KB
- SHA256 b589b885115d225ecbfdbe7e735af7e0de45dc2bde4639939da9cacbab5d35d9
- MD5 6185d8caa3d3464e97083533470503b5
- SHA1 8870b836e8dd4b4a9d696827868c8923b62f9d73
- SHA512 8c481087207409d063142f12b32e571449d62e3eb01c79e51e26da933a4ba5bf9911e498954603b1d14cd6323ee2117b19fbcee434d104da8b131f80dc29c4f5
- SSDEEP 192:6ROK8dHm/v72vAPRp2zS9THsb+WNn5KDom2TqjV2Kg1VyIsnAUge:6R5GGXC6XVFwwx22jV2K8e
- TLSH T1FE42D66EBA60253B5CDBD219F9617B27E7F2103225D42E80EAFC892C15E75CC322740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 1edb4efb4522f11fe83de9f80fd25074ef04909cb08015c4160e890c71fcded7
- MD5 c7f2d567b9c9a8ef63c3c6e57cf2c7d4
- SHA1 27142afdb8afb13a1cd74141ef9ad38d9a53207b
- SHA512 587301b0aff22f9763479dc91e1986e0a658cfca619f59a9137af8f852419098b44718fc4ee2e5ce7e7a17f63003850701d348881878707efb5c18a7d575568b
- SSDEEP 192:6ROK8dHmPv7GvAPRp2zS9THsb+WNn5KDom29qjV2KgwVyIsnAUge:6R5GGHy6XVFwwx2cjV2Kje
- TLSH T13742D76EBA50257B5CDBD219F9617B27E7F2103225D42E80EAFC892C15E75CC312740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 4f1c95293eb845f32921f3b52481cc30f44e56cb43464ccb4dae4d5d3856bf3a
- MD5 56128fa27fb9ba3eed310dcc517958cc
- SHA1 56afb70b24b84c8de8334982cf55e99e52caeb29
- SHA512 7e7eb692efbc5ac40b344c27f381f29c3f9ac254aad86e5b5b4a5e7d6ff2d68e37f8e07502c17537d39378e687166e3748f52a429917bdf8ec6c0ea5341fbfbf
- SSDEEP 192:6ROK8dHmnv7GvBPRp2zs9THsb+WNn5KDom2yqjV2KgqVyIsnAUgE:6R5GGvyxXvFwwx2xjV2K/E
- TLSH T1CD42E86EBA10297B6CDBD219F9617B27E7F1107225D42E84EAFC892C15E75CC322740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 11KB
- SHA256 df3f3d7e8eb52eb11376e73179228426d3d2d5efef9c19d4d305887505e18b02
- MD5 cf7fedf8f7d2c16e2ee32aeccb0d6abd
- SHA1 c0965f169b36b690aaf700b8f80359944a908774
- SHA512 0f7e0c7f513e4fbb8754c44a17604a17a368e18bf06088e8c92d246667c4707e4e019b978bfef2975410552144093cebfb7ef11074676b8e4908dde7b23f6a1f
- SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9H9IB3Wh/+:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcx
- TLSH T16F32C727948D9A3F4FECD55CDC526F4F6DB1029272780C2896FB9C0403A97CE115A1AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 4c2d257c13c9342326e02102be46b27c66132f6e52080731ed65581ca8f69487
- MD5 f156a27d04f7eaf28a22dff2018d6196
- SHA1 79ee2dd72942c1c6a25e739bc6d64c0c6c09d75e
- SHA512 e361da11e00bda88430cbe8ed1a14c8f5e081369451796e5b24e29d17fa6bb0864efb221c45c83c45573be303852ea97a8ba5a22f8e9619283c613ad0e81edbb
- SSDEEP 3072:npGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:nIm7Rkm1tYpBeh2BAom
- TLSH T1FBC3123B5E74E8365DA9B71EB08E0A1F1EF14AA6C930DE52C8D85B0437EA7CC1A45D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 115KB
- SHA256 97840041f2e79674f49a3065c53f0333a4fb421fb0c7cd93176e01b7ac96657f
- MD5 268185fde837d785f29eb217d92c95a3
- SHA1 dfbbf608f6681e1cbcd6886da3fcb5fe2f5dd59b
- SHA512 73f0e124adfd200af8392481c1a75d37c05f4034ce852ed909f42c14a66d6b9f4a1721c26d22258074cedbe7d2038960bd90fc901b1f6b4b081920ba8807c242
- SSDEEP 3072:SGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:lm7Rkm1tYpBeh2BAom
- TLSH T11EC3123B5E70E97659B9B74EB08E0B1F1EF14AA2D930DA42C8D85A0437FA7CC1A45D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 8b8556acb7d89c94414bc58fe228242fa1bdd835bc937ae7ad2b037ee223cfb6
- MD5 c9a5ab0d80b0d7b6d6731599725aa5e5
- SHA1 fe1d7942ec6520ba34684ed5bec2555c1a8988d4
- SHA512 e18624d37f366b2c5dadc9e0131c3951d657fcfd76f17b86b25e713f0725ecf2bb0a17bf388c8d3c9f49f0b73c7f16edd1eec231ddb1d5cd0daa8e8d5665097b
- SSDEEP 3072:ApGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:AIm7Rkm1tYpBeh2BAom
- TLSH T15FC3123B5E74E8365DB9B71EB08E0A1F1EF14AA6C930DE42C8D85A0437EA7CC1A45D34
- MD5 SHA1 SHA512 SSDEEP TLSH