hxxp://Leakforum[.]io

Analysis

user interaction
yes
max time kernel
899s
max time network
867s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/08/2026, 15:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://Leakforum.io
Sample260817-sk1jbsshph

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3260	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314531196633994"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
2500	chrome.exe
2500	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 1656 wrote to memory of 2912	1656	chrome.exe	81
PID 1656 wrote to memory of 2108	1656	chrome.exe	82
PID 1656 wrote to memory of 2108	1656	chrome.exe	82
PID 1656 wrote to memory of 3260	1656	chrome.exe	83
PID 1656 wrote to memory of 3472	1656	chrome.exe	85
PID 1656 wrote to memory of 3472	1656	chrome.exe	85
PID 1656 wrote to memory of 2200	1656	chrome.exe	86
PID 1656 wrote to memory of 2200	1656	chrome.exe	86
PID 1656 wrote to memory of 4092	1656	chrome.exe	87
PID 1656 wrote to memory of 4092	1656	chrome.exe	87
PID 1656 wrote to memory of 4704	1656	chrome.exe	88
PID 1656 wrote to memory of 4704	1656	chrome.exe	88
PID 1656 wrote to memory of 1508	1656	chrome.exe	90
PID 1656 wrote to memory of 1508	1656	chrome.exe	90
PID 1656 wrote to memory of 2524	1656	chrome.exe	91
PID 1656 wrote to memory of 3860	1656	chrome.exe	93
PID 1656 wrote to memory of 4632	1656	chrome.exe	94
PID 1656 wrote to memory of 4716	1656	chrome.exe	95
PID 1656 wrote to memory of 2500	1656	chrome.exe	96
PID 1656 wrote to memory of 4584	1656	chrome.exe	97
PID 1656 wrote to memory of 4584	1656	chrome.exe	97

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Leakforum.io
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcd8a8c728,0x7ffcd8a8c734,0x7ffcd8a8c740
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,13251805989627258816,13599127433427453418,262144 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2244,i,7215626473596343704,18121355424282313455,524288 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1448 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,14181396396420552339,8795562647395465398,524288 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2704 /prefetch:13
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3040,i,15339706400612467141,1169530646589868429,2097152 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3048,i,7579442721678251112,3299142127148578829,2097152 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4396,i,9031469085566620211,11822290505884452846,2097152 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:9
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4036,i,3858521810439613875,8828206389000328741,2097152 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,12200404589139518267,1611284678231601030,524288 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,9038879528676936987,10277585892848937800,524288 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,4811911064167495036,2739358105619802022,524288 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:14
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,4393439867826053446,4756226979889249632,524288 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5768,i,5771586374704878388,18306023354601204508,262144 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5644 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,10137459891584703252,17007972743397845186,524288 --field-trial-handle=1916,i,2537729790105882181,15113642564142050340,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3648 /prefetch:14
  2⤵
  PID:4584

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1676

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 cec3da06d9a70546f2d7850fd5ba74975fdf05b261152e50199a2ee07858e1fa
MD5 2779eb630f83b3b70cc455c5bec68f40
SHA1 c7411b0d1d3d28d89f735c1408a58a755ce585ca
SHA512 f87206dbfd1d143d08f2013ff67ad4b2273ebd7310f5a9b92e2a4d3ee4a5b9ec10e4714c8ea024f2a4be42cc5a5649a5f7d4dfc9eb4f4f0461f6a89c0e2acf45
TLSH
T10CE022AAD822EE3B48FD3B2970504B47E79013272680490F3E3CA11C8FB163A45CAC6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 33KB
SHA256 faa24ec881e6040655c187a681d6dc496eb8aa41e1bd0652a180b3a40b457187
MD5 f953f499c9824953791551bfef65fe61
SHA1 00fbf8d23d0e9549798383179c9b0eae5d653f9f
SHA512 07bf316d186ac8d6eb8cf860fd0dbce854ae74ae26276be3950bd32b06894c7b24268280d504bb490218c5ec0e85b4eeb7e858011dcf4de64bbb06e4eb296fca
SSDEEP 768:Pr8FwJ2kfmG7rCq0GJtSBVRF0UGuEuOZejwpiUCTVwiYz:PVJ3fd7rCqduSduOZnIVVwvz
TLSH
T1D0F2F185B0036A346E502FB459DBE6CE1FADF8041A5318EDCE9DC30BA394C7648792BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 bf111f925ac833793fb3b0cba177513002b9b1974a11a95ced6ca4a877a57889
MD5 d2c91e46dd5a92ad357cd7ea9681278b
SHA1 f76296d8312f5fad0a21f405399533b89e00db6c
SHA512 b946ed10b41ffae2aefb1397206aeabacb87db423b6b4a95ad76bf76ba6954294d62074548060ff06d7dad6b17e0e10e0dd220c8d38f818d9503d9ccb279ed53
TLSH
T15FE017CC859855F5E7CC1230BCD35C74A2205D3AB2D20E1243B20DB04813390A0000DD
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 ee4f645f535ee1eeff07e87d39d4e018761c0f85eb0b009f6a7214a489dbd2b6
MD5 3f0b24017a07ec3f2a1518a3b8a34919
SHA1 97e5260061f5119131512ecb22f048ff466327e9
SHA512 65cf31f4d7131312fbbdce80e85a79340b021f0afeb4d372ad726a7e771c7a00099b8aabdc5d45356ddd6f169055e3ab4fa65815b746919cd0083419622e36f1
SSDEEP 96:DWB0vEaIaEd01DbNKIVuKK0KXKk2ef8jhq:DWB0vEaIaEd8DbNKIVuKK0KXKk228jhq
TLSH
T121A17AF787F88A2DCD1192F4BE152E2BCE590924032C3D6AC9E5AF5B93E34B1D14064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 5dd7e5b0692c6ea465c5ef65df42e0906dc0b001d03078ce34848f66522f987a
MD5 fdf20ef3b07a425bcfb4b5c3921011e1
SHA1 c9c452bfbfc306c17fe77c9c961bc00bb78f61b8
SHA512 f019daa712b93def17a3a65028a794e489f158ccf40e39f6536b820ab68a469619fa0342713600f57270169e95c7c1ea585929b44c2f6a1ee1d49ebef48586b4
SSDEEP 96:DN6C1saIaEd01DbNKIV2KK0K/Kp3jhnwK:DN6C1saIaEd8DbNKIV2KK0K/Kp3jhnwK
TLSH
T1CB917DF797F88A6DCE1191F4BE156E2FCE580924032C397A89E55F1B93E34B1E14064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 59861dc599e6b41963ecb7a0dd827beedbd40142d864fb9682cbfdaf04f126ca
MD5 d69a3566b910055e4b7445add84f6a39
SHA1 ef089513e8fecdac30478d277ba7c04d6ddf6ec7
SHA512 c6c4269563d59c1b9d90c2f77f0e5ba67c1ad31647a8b43bd86588fb9aa13161c894fdc3c6d55e14905dead225ad5d31fb1b1b3438c2614b2a80ee914984b226
SSDEEP 48:YALlC+yC+9C+oC+Dh6aXYfo7EdKsubJ4sRJgmzsKJCXgC3xJgCcCMszJC3DsRJCY:DWB0vEaIaEd01DbNKIVuKK0KFqKk/K
TLSH
T117A16AF787F88A2DCD5192F4BE152E2BCE590924032C3D6AC9E5AF5B93E34B1D14064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 5a96f202eef38c19a746cbf66a64e9f40b114825cc8b1794827dfc67007c4e54
MD5 a75ee35bc47e26723b701b335ad65178
SHA1 f0e4a7771fd8a14352da22034c064be5aeaf32f9
SHA512 70a13e6a61724d3bd4f21b209f8f5fb9f7414b44997e9031e6059951b920024b955c5157bde42b74d21fb84e9a31ffa5e148e668c1b37fcb606dc15969627a7b
SSDEEP 96:DN6C1waIaEd01DbNKIV2KK0K/Kp3jhnQK:DN6C1waIaEd8DbNKIV2KK0K/Kp3jhnQK
TLSH
T19E918BF797F88A2DCE1191F4BE152E2FCE580824032C397A88E56F1B93E34B1E14064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 5634ef0064c2633f92a39982f27a9f8217960580fbd701b2e96be0e0b1dc67c7
MD5 ec9618fb4db976e8391399884fd8ba75
SHA1 81425c718cf5b82edd656824e11c6b2e8ef976a6
SHA512 48528409a5f05f60d7bd22819d8ea752bc28ba647de79063c3a576028e7577f7994bf673084f2a0b4d30351249aa3f7a24ef0c57ea8e5b24328d8f77cc589d65
TLSH
T11321ACE79ABEB07B507D48BB1E40FC05A67AB4351661F8F0CFAA811CE0916E31B12476
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 dc323325e1f65161891b0de2e83dff30f7638a5a39ac22516b60e9e257985e84
MD5 6a4efd0448347f585dfaa2a21bfce6eb
SHA1 dfef32a439aae7c1b1d470e6b380a5f5f42ab2b9
SHA512 f7c9bf36c00eb672447ede4e4b7db2fbbcb34cd3a178eacc873aa90a23e8785ea119cf8e338e9902e552661fb39bdb035b906f2ab5e697e9bf7711d0250cbd78
SSDEEP 192:pRBj1uU+Hybz2Lv75pAPRp28lH98Hsb+WNnYrYCgeZIe9lnPEraOVyIsnAUgE:pRBj2bzVUXruwI6eVlcaGE
TLSH
T19342B72ABD146A775DCAD229FA257B27D3F5112225D01E40EAFCC92C15F7ACC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c6b197d36dccb40804df0c5ce27148f9273a63bc16ab9de5bbc2db0c8edff438
MD5 3d9870c50eb0af1b90a837a97656e24f
SHA1 14c922f4c6869717499e55b886771cd4e32cf730
SHA512 bfa947deec648ba8596b0c939050c6c96c03d907fbb82a744722e167dafb2282d9abc91466cc5218b03a9ab5af3c576c8ebd82183bdc929844a9b157236b4331
SSDEEP 192:pRBj1uU+Hybz2yv75pAPRp28lH98Hsb+WNnYrYzp2WIe9lnPEraxVyIsnAUge:pRBj2beVUXruwI62clcaXe
TLSH
T1BC42C72EBE10697B5DCAD229F9257B27D3F5102265D01E40EAFC893C15F7ACC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 938887d6c0bbc95b45bf0e4c89e9f9d79f25b72da2add3f36451b8a46b331c31
MD5 9e6a80454db32ee42a2df6dc4f993a26
SHA1 b898801081d3867ea82efa1a85c8a55dc09efb25
SHA512 abf3975c6eb9122d12e38889f425f545db54cf48e4300589992445931e1a74005a10dff4a64db4a735729093dcc906b28edf7b6f2d181606be45276816382e42
SSDEEP 192:pRBj1uU+Hybz23v75pAPRp38lH98Hsb+WNnYrYS4Y7Ie9lnPEra4VyIsnAUgE:pRBj2bfVAXmuwIiYDlcacE
TLSH
T16552C71AFD106A7B5DCAD229F9257B67D3F5102225901E44EAFCC93C15F7ACC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1b0971fd9d0503382c895cf6762507a69617c8cc26bd028002e6d081a0e7f9c8
MD5 ee135110a641137a822d1ec49d93de2e
SHA1 75b71989a7e3026a10bb130e622069b43b5345c2
SHA512 20f7981d57a2b972baa2b46354871bd2fee6c8e7eaafc7e41d829f94c144c75e39432fb2444a623c13915d3c982c16fc38f36577e072c7bd8f261ee0e1a11429
SSDEEP 192:pRBj2uU+Hybz2rv75pAPRp38lH98Hsb+WNnYrYS4Y7Ie9lnPEra4VyIsnAUgE:pRBjjbTVAXmuwIiYDlcacE
TLSH
T18F52C71AFD106A7B5DCAD229F9257B67D3F5102225902E44EAFCC93C15F7ACC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 6580b9be38e043e5d2436ff4ae9296f74b369cbea58296d9af5604bd4b1cc474
MD5 64d379491386bdf9d2b82bfed49740e5
SHA1 522dcfd2f4d188bbcad58538c6461f8bbd43b2e9
SHA512 5d58b317ff66bb8f8373e7f5972247e20a553af50c4ad2756a022edf34ee0bb5688a058056e953d457420c82cddb02044d6062aa1788af614d0c7bcf05ddc3bf
SSDEEP 384:ywjuJ7KxkXqKf/pUZNCgVLH2Hfgslu17pLuLcSjwxXODuh+ErU37PHG7iK:y0uJ7KxkXqKf/pUZNCgVLH2Hfgsc17pV
TLSH
T10B72FA67BC4C9E370F94CA8CD9167F4FADF5024A65E9886482FA9C2503D5BCA11092FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 af941d4ab58aaddde254f56b343749ebd5b0a27e4fa57c9682a111bed4a2fddd
MD5 0634640d2d5c85df92a4b003609b4fa7
SHA1 f791fca7c2fa24b1fe90f30fbdb5bfb763234bef
SHA512 04614f76caefc5a7ec92d4b17ad29bbce3a58e937f2fb783b0ecc916f959e5ab55c4e33750858e2b119c520cf4205b319a48a88d9a1cf2a986a32521934eae06
TLSH
T171B0128080025703C44607F41147248871149F30E60B170143EC6A228C261508024152
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589b51.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589b51.TMP
Size 96B
SHA256 65d104d91ddebdd44e7939fd4d03aaf630487f4b05ecb5c86881fbfee648d770
MD5 184e21b410ad9f04e0044153d6478248
SHA1 9f677743006c1be9a05e8939777d1c446eac4104
SHA512 aad4a7897bc200810b85c645c31a5bdc1968963e02a58202ac8cb81a474236c76d42ecbc78840e03c630ea2fe6a39b0037a455903261c87b15d6cc1f37a4fa64
TLSH
T1C8B0220AC8032202C00B03F8A880E2C8B020CFB0C2032302E2E00E22CC22BB00833820
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 6e84450e35813fb3303ff003115c3be00437d11c250ff75ca065e924114a261a
MD5 1f16d63f89d7304052dfa4ba4acd5b5a
SHA1 08d8bd0b3ceec39fa4294b2e68076810ea265091
SHA512 bbe0f024306bc3de2a11d8617dac37df92250365e3bbd1bd79d64dc2274a82e1b280b9b752aa9cd6b8a8af80c49721470406165832571225317f6b0e4d2202a2
SSDEEP 3072:JpGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:JIm7Rkm1tYpBeh2BAoF
TLSH
T1CAC312375DB4E87659B5BB1EB04E0E1F1EF14AA7CD20DE92C8D85A0433EA7CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 68a52585f51fa3bb56c4ade9003750fc09081b55f308c7552d17be163f88ece1
MD5 0c77b529367cdb535eaa9791ac17a5ee
SHA1 ef1806a98ac2810e7879a91a47b75579aaab3ccb
SHA512 d5f73a266ca23c5ade6443ad7448be512427430c2c762dcd5cb3e6671cfdff77dbf549191eccc91eb97ae40c60f117c4337f6cb616a9e5b9e5a5bbbf97866dee
SSDEEP 3072:qpGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:qIm7Rkm1tYpBeh2BAoF
TLSH
T13AC312375DB4E87659B5BB1EB04E0E1F1EF14AA7CD20DE92C8D85A0473EA7CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bc4d83b7580a57656e62741a3100392405a9031f568a010e5e284cc4a8e9f188
MD5 1bf9b8a32d0830180e79e3591236e2d2
SHA1 c20dc949bfc3179a85810b95e7a9081c0d886f56
SHA512 220c9be148a76e65638c92a3872a77c0d634cde833c6b9f35877e71c9684c544f561d52478d840ab036ab3ef56f762aaffdb58e6e0a12d45d0ec2a0ad1488104
SSDEEP 3072:/rGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:/ym7Rkm1tYpBeh2BAoF
TLSH
T12CC312375D74A8774DB5BB5EB04E0E1F1EF149A7CD20EE92C8D85A0463E9BCC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 9cede63ae4ec00e951c148aea51be81109c0ab1a8dc379c5c00bdbfc7d776b72
MD5 40249a47e4c6763072ea0fa6e91ec89f
SHA1 de2015fa7799763620e0742dc507d3779f38fb22
SHA512 4d9a9f3947c82adf7eb50757a2724a33bdc0bf3e6bc5f7cac0b13ddff34e58c227aa66744a7585cb5314aa2f9281007669e6f4f1842660e0dc95c7a28e2532e4
SSDEEP 3072:rrGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:rym7Rkm1tYpBeh2BAoF
TLSH
T12CC312375D74A8775DB5BB5EB04E0E1F1EF149A7CD20EE92C8D85A0423E9BCC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 dde9d529554ba8b943c62b8475d0be1870a49bc922174f8b5c1903af37e438c5
MD5 63aefcc8a167b5c6c887ca0c837db81b
SHA1 89248533868f122ecd828c791cd3a99734bb09d1
SHA512 c9e3be211d481882b419f17e791c4c79ed2ff38e2e7d9b4b1b1264138efdcddb9a5959ac2e3a3b3c64e4ba6847ed634021be453616f2f60a082fcc47da5b83fa
SSDEEP 3072:gGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:Lm7Rkm1tYpBeh2BAoF
TLSH
T12DC3123B5D70A97759B8BB5EB08E0B1F1EF14AA6C930DE92C8D85A0477F97CC0A04934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download