hxxps://www[.]bing[.]com/web/xls[.]aspx?t=5&dl=1&f=9&wsbc=1

Analysis

user interaction
yes
max time kernel
299s
max time network
300s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/08/2026, 11:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.bing.com/web/xls.aspx?t=5&dl=1&f=9&wsbc=1
Sample260818-nnec2ssvfs

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4388	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315263498601010"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
548	chrome.exe
548	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 1368 wrote to memory of 4768	1368	chrome.exe	80
PID 1368 wrote to memory of 8	1368	chrome.exe	81
PID 1368 wrote to memory of 8	1368	chrome.exe	81
PID 1368 wrote to memory of 4388	1368	chrome.exe	82
PID 1368 wrote to memory of 2852	1368	chrome.exe	84
PID 1368 wrote to memory of 2852	1368	chrome.exe	84
PID 1368 wrote to memory of 1020	1368	chrome.exe	85
PID 1368 wrote to memory of 2380	1368	chrome.exe	86
PID 1368 wrote to memory of 1020	1368	chrome.exe	85
PID 1368 wrote to memory of 2380	1368	chrome.exe	86
PID 1368 wrote to memory of 4032	1368	chrome.exe	88
PID 1368 wrote to memory of 4032	1368	chrome.exe	88
PID 1368 wrote to memory of 3856	1368	chrome.exe	89
PID 1368 wrote to memory of 3856	1368	chrome.exe	89
PID 1368 wrote to memory of 3768	1368	chrome.exe	90
PID 1368 wrote to memory of 4432	1368	chrome.exe	92
PID 1368 wrote to memory of 1328	1368	chrome.exe	93
PID 1368 wrote to memory of 72	1368	chrome.exe	94
PID 1368 wrote to memory of 548	1368	chrome.exe	95
PID 1368 wrote to memory of 1420	1368	chrome.exe	96
PID 1368 wrote to memory of 1420	1368	chrome.exe	96

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.bing.com/web/xls.aspx?t=5&dl=1&f=9&wsbc=1
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8529fc728,0x7ff8529fc734,0x7ff8529fc740
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,1313353783465487496,14412376541552080408,262144 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:8
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1440,i,8239880955411165574,6090573499222431836,524288 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2260 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2124,i,8928079397714106810,1138855857185048345,524288 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2720 /prefetch:13
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,2358668680551638241,14383188063945942257,2097152 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,17859583391176831945,17031530582210227561,2097152 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4420,i,9479418541221581362,12423918114389801095,2097152 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4452 /prefetch:9
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,1847576938412183640,2650844752139178961,2097152 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,10478568025023480476,6771460902001753695,524288 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:3768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5664,i,10400919603377965686,3774092288835824227,524288 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5748 /prefetch:14
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,17404893618963500198,983824360794604685,524288 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5756 /prefetch:14
  2⤵
  PID:1328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,16212066874556558573,8454684199134318875,524288 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5716 /prefetch:14
  2⤵
  PID:72
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5552,i,15320842950837378576,4173502951508481419,262144 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5536 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4524,i,8513772240726635290,6623950688146522060,524288 --field-trial-handle=1896,i,1384998191911082237,3140482477610359437,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1504 /prefetch:14
  2⤵
  PID:1420

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4540

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3224

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4d016090ccb58f81effe76d0572ec8215c6a3e424bcf41ca53bdef4b82de5a7e
MD5 8f8589cd63f2c48bf8032706adde6816
SHA1 1bdf30aef41da3d09730424253c30130c888af2a
SHA512 f6bec0f7f1d73ab7d666d27ca6f37d99d9b67a23e9b9be6aaa7a33c272d4ac6c083a2369c3ec222d0d4a0cf3fd1606ba0374d5e5410f6405aad3488d0f822a85
TLSH
T117E022A9CDA0AC3B48FD172D61500A86F714131B3A80496F3A3C820DCFB467E018A8AC
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 dfcf06c40a27564553f81aa2982fdcae906456f61b0ba89551bac6b02fb38695
MD5 3244dbd981457a2a7c14be4def1859d0
SHA1 9f3ab632b2e83bcf257eceef4866720164b405e1
SHA512 b74c8c164f507c91bdeaf1e0069d0bb1df078432f6c68cb4fa369803c651c916954e7b422cd522921ec50e331a529d908ddbfff9266984f0db0f0ac7c3bfb004
TLSH
T1E3417EF783E8857D8A1196F4EB156F1FCE6D0514032C7CA688D4AE1B53F28B2D24068E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 714a3cb63e66a1a9831fc5fb3e9fbc59c17fb832b34f52b73347c12170e52616
MD5 9f7b43b9c98845225a360631e6ee9c57
SHA1 fd995d4d5ed6cd2e78f4d2e5bb997d1a526f44eb
SHA512 fa2a7478dde226d97727befe1477662aca9d977d51f713afef046c7349e2b4da12247409aeb74b878b47a2d9c1df78196a4b6fd6074ae6de4c9fcaede3bade94
SSDEEP 192:GRIZg9myPZR3v7+pAPRp2If9uHsb+WNnoKjPC7Akw3ajE+VyIsnAUgE:GRIZghf6UX7UwoGP/Xaw2E
TLSH
T1BF42C62EBA60747B6CCED729F9217B53D7F5112221952E88EAFC893C14D75CC222742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2d281f9ccfa682821292c767eb90a1a576ed451cc799182141952968bde93644
MD5 6f3c5cbf5fe434630881577788c3c5f6
SHA1 d5f546609d0a552e0febcdb012e071e6d9c22ea9
SHA512 e9c1ccfe22d168ab9fe7b0a44dbccc91aa3a30007fd210bd84c1d531b2a6e490b28fcc8c80eaa2d0cfe145c6843b653848ac4ff0301faa82f68bfce960e925a5
SSDEEP 192:GRIZnmyPZR3v7+pAPRp2If9uHsb+WNnoKjPq7Akw3aNE+VyIsnAUge:GRIZTf6UX7UwoGP3Xaa2e
TLSH
T13B42C52EBA60747B5CCED72AF9217B53D3F5112221952E88EAFC893C04D75CC222742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 67af0740e2f09977e58e0b57a2f50759a2e8f9841f5757734fcb0327d566ff7a
MD5 fec4fb436db86cad21941abc01a9110f
SHA1 ba2dd5ca5e705d39c43a4d1b6e8322d9585ef6ae
SHA512 0f0451a5cdc0cf1a68238af6a12764fbfcdff56a6d2624b97fc5ccc2d5ac3ea2c7953fbb5b9a76b9a03e35d763fd9d0513dcaa91b0910d816876e42e5214d373
TLSH
T1BEB01280D401E252C00702F832921CC87114AF30A61B1B0193E069A28826190C124060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5877fa.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5877fa.TMP
Size 96B
SHA256 5ff23b106042d4b26070d96e34bb2fabd1da97d08e3b0ec0bb083f4cb4876800
MD5 5bc835b967819d9e5b69a41207c57abf
SHA1 17aaa96cafb593318390289fce5bb77418e1b0db
SHA512 defd5225a8cfb3766895b5b7e56f4066e58168a5091ebc3c5377c5a2e972a3eb01c4a2bd0a881b43f5f166fd5037932e6dd65e25f3b46ea1fa85bf2f4f440ade
TLSH
T19FB02208C003B2A2C88203F02C80C2C83220CF20CA230222C3F00A23CC20220C330030
MD5 SHA1 SHA512 TLSH

Submit Download

d131bca1-5664-4636-b65f-e39ca0865880.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d131bca1-5664-4636-b65f-e39ca0865880.tmp
Size 17KB
SHA256 87abfd6483e055ddeb2f8fc2f483f91af443de3130ad7f6cceeeecc94a6c2511
MD5 04c2655e775a571e3b09dcdcd782d924
SHA1 84dda5dbd4088a2a3591384e8279d568339c383c
SHA512 38ea57f7244c49bbd8e846e3f0d5342b6c186f24c011ef661cc6a4f6836da0e0f816f76146075af79a69abcd50476432db60bf14c0daf6c81fe144ac588ce833
SSDEEP 384:fFjLm7KxkXqKf/pUZNCgVLH2Hfgsl+27pLuLcSjBsXODLi+ErU3ZSHG7Ep83wCv:fVLm7KxkXqKf/pUZNCgVLH2Hfgs427p+
TLSH
T18C7208676C4C9E370F94D6C8D8267B4FADB5024B65DD886493FA982903D4BCF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 150KB
SHA256 86b4207e505b72c5b8a9654ffd0ee80971709838078eb062374d4caa35f93b98
MD5 fc45c1b53735c85ddd0cfb121739c45c
SHA1 f90e797efa34e4fc7d25064022eee5458e94481d
SHA512 b4cc49d1cfa55cdabbbfeb6394e62193827fb2728443787ddff610aa2879cca86428dbff201d92795ac35b71deceb9f57951a2b6d3fe39917935ea008d0e6b13
SSDEEP 3072:GBTIl7S7m2cN8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:GBTIY7iLwCcmXKegIh6jh9JvexhQ
TLSH
T1ADE31216191B39B788EDAEB370073B468DA25BA76D09B00D94CCCB1785DEDF8149F874
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0af780426c022c7580344a83a1dce0fc324f4f70afeea3cd2a784901af5141dd
MD5 c12ed912b1b6bfe54ea794867325d3a9
SHA1 c8bd3b14243c542ca8058bcb4de63928f72aac12
SHA512 c646abe5f17cf209fda7bd4ab14d1f8874882aa4b8422c224e24a095fc711692063289a4145fb211ebca41a13e6de228c400612f1f33bbaf9e998b6a39451d1e
SSDEEP 3072:G8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:AwCcmXKegIh6jh9JvexhQ
TLSH
T1DEC3125A28273DA688ED7EB3B44333828AA253E26D05F14E94C8DF0B45CEDB515EF464
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b049c78a629e493874944e1aecc4f4d89edd66e76819a3b5b4a038134c4f8843
MD5 ba223a51d6d99b8b6de6264f31dd5fc1
SHA1 c312f82cb3c6bfc3987c1364b8f5c254651134ad
SHA512 0a5e5ffbdab2bea17fa71d88a0270d5a44806687153eea5d59bf63bf337ff55848e81e002cc599ce81733f6bd1caeddaf32b84681f610349bb99ac1c7c8ae17e
SSDEEP 3072:B8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:3wCcmXKegIh6jh9JvexhQ
TLSH
T161C3125A28273DA688ED7EB3B44333828AA253E26D05F14E94C8DF0B45CEDB515EF474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d7afc887c1a52fde88df3af2bb65a45e299d59a61af83dfc0028cf61053219e2
MD5 df112be5436bb460d9efbf77671ba9de
SHA1 177e717f78ea73a09e932a1a5ca402f58ffffa6f
SHA512 3adc0ce0f61cd9243d2159a5ec34230c1989b78a29fa406e88bc42137382a10ed0e897c78ab1314793f022c2b881fdcd2d06e25f9fd3364d344838026bf7b53e
SSDEEP 3072:R58uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:RfwCcmXKegIh6jh9JvexhQ
TLSH
T1A8C31259282B3DA68CFD7EB3B0433782869253A26C09F44EA4C8DF0A45CDDF915EB474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 f3a9e6306e7c54633490b6f263439a6633f191a6cc7417021b45dc54995dfb87
MD5 451644863805d6546d2be6f8891360ba
SHA1 e1b6af3e2cc0b05aa3dd241f3e28e74c9388fe0a
SHA512 a44fbf7850356f95935db37c73213a741608eccaf5b333853e85dc502f6fd3bedae4d68034881751ecd31be00d80210b4ab38ac8fe85c382fc7da48ba1e402af
SSDEEP 3072:f8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:5wCcmXKegIh6jh9JvexhQ
TLSH
T142B3125A28273DA688BC6EB3B453338286A353A26C05F14E94CCDF0B45DDDB415EF8B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download