ea0c0389d1df2cacd3a41108f0fdc3c1424fa61ad594c20d37cacd1750c7b2b8

Analysis

user interaction
yes
max time kernel
56s
max time network
57s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 15:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Stigma_v9_2026.vbs
Size 4KB
Sample260820-s8hcnaec65
SHA256 ea0c0389d1df2cacd3a41108f0fdc3c1424fa61ad594c20d37cacd1750c7b2b8
MD5 5ae16a259217cc54a4c16d5e72af2ecc
SHA1 96b8038821516550186628e326800f83342025d8
SHA512 d1142a27333675e94c091e365d16256efe079cdd4c4288a29a36193834eb03f7f57de836c41191f692b270f09e5b99bb09460ca6d4b4d63e3038950fda9854f4
SSDEEP 96:fLZNDn9UyAsI2kktQKoYXk6kdjSXbNVFfSXJMQDhQx:fLPDnKyAYmK506LrFfS5M2hQx
TLSH
T1A29142595D81084EB13301D224FA930DF87512A3CA0B35B83D18AEF9CBBAD9C693B6D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4064	WScript.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4024	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317144844639516"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2036	chrome.exe
2036	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe

Suspicious use of AdjustPrivilegeToken 62 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe
Token: SeShutdownPrivilege	2036	chrome.exe
Token: SeCreatePagefilePrivilege	2036	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe
2036	chrome.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 2944	2036	chrome.exe	90
PID 2036 wrote to memory of 1956	2036	chrome.exe	91
PID 2036 wrote to memory of 1956	2036	chrome.exe	91
PID 2036 wrote to memory of 4024	2036	chrome.exe	92
PID 2036 wrote to memory of 3440	2036	chrome.exe	93
PID 2036 wrote to memory of 3440	2036	chrome.exe	93
PID 2036 wrote to memory of 4020	2036	chrome.exe	95
PID 2036 wrote to memory of 4020	2036	chrome.exe	95
PID 2036 wrote to memory of 4796	2036	chrome.exe	94
PID 2036 wrote to memory of 4796	2036	chrome.exe	94
PID 2036 wrote to memory of 3956	2036	chrome.exe	97
PID 2036 wrote to memory of 3956	2036	chrome.exe	97
PID 2036 wrote to memory of 3264	2036	chrome.exe	99
PID 2036 wrote to memory of 3264	2036	chrome.exe	99
PID 2036 wrote to memory of 2288	2036	chrome.exe	100
PID 2036 wrote to memory of 2452	2036	chrome.exe	111
PID 2036 wrote to memory of 2452	2036	chrome.exe	111
PID 2036 wrote to memory of 1796	2036	chrome.exe	113
PID 2036 wrote to memory of 1796	2036	chrome.exe	113
PID 2036 wrote to memory of 2400	2036	chrome.exe	114
PID 2036 wrote to memory of 2400	2036	chrome.exe	114
PID 2036 wrote to memory of 3088	2036	chrome.exe	115
PID 2036 wrote to memory of 536	2036	chrome.exe	116
PID 2036 wrote to memory of 3216	2036	chrome.exe	117
PID 2036 wrote to memory of 4432	2036	chrome.exe	118
PID 2036 wrote to memory of 4432	2036	chrome.exe	118

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Stigma_v9_2026.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4064

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff9bfcdc728,0x7ff9bfcdc734,0x7ff9bfcdc740
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=580,i,16761779286309828735,12322814895095933884,262144 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1948 /prefetch:2
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,2835197167827370879,4691328038224441203,524288 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,17857126179742596306,16231744597618306092,524288 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2416 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,13480036666265160194,14673921232629031136,2097152 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,16268367948712891345,1468017123070388783,2097152 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4452,i,7469674139044616554,7581052230573696914,2097152 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4460 /prefetch:2
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4704,i,397196135204186369,17901091326502403698,2097152 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5508,i,7219046171115884738,13130018032815409137,524288 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5872,i,4909687180875295330,14806335616379025235,2097152 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4712,i,3595743849469559067,11161852345333209094,2097152 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3288,i,2863380141190412543,1621868951788644425,2097152 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6028,i,207297366790803194,3467334281143559014,524288 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6088,i,13205743290683673862,14263357688560747358,524288 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5756,i,11293759457394610180,8873851151727929711,524288 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4472,i,4875435187579949622,16391215200687890821,2097152 --field-trial-handle=1952,i,17344916206039197110,16891309204344295864,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4488 /prefetch:1
  2⤵
  PID:4432

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2252

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 af699daa75973d777b07b222511b504c0d717a6219cd79e09230bb207db0a0b9
MD5 50f4e2e10c6023b118c150127b578a94
SHA1 0b9190fa0496fe786858b3d971a4eb2dafc94951
SHA512 43a602b9be7fb1fa94436049a4aa29a07fd9a62bee69f4c59700870e4205641d3ac422284b268095f7d713f06186df83b69bb3be2c4e2d55b623ef8cb801cd4e
TLSH
T132E02B99CC31EC2B1DFD576D50580646DA1113571B60855F7A3DD1088FB16674185E5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 e9231f9f727c08207015b0f77d9b7b1ae3d8d895d2f0f0256d34a58d7f499210
MD5 e501bfb60c3fb8e876edb8487fefbbef
SHA1 84666c2c8d063961a1c6c5380cae8cca6c05630f
SHA512 3e05cf9ac16adb44fcc460a41cf395a170f920e5dbfbeceec22e43ea52d58c1aabffc072d5395374dad34db3f4f9270ae3669b33a8d03ed5968f7c143026bf47
SSDEEP 3:MsEllllkEthXllkl2zEklL9/:/M/xT02znZ
TLSH
T13B440445FFC00415C54031304011C35013F0F4710551D74374F144335CC5F410C40F00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7e8cfbc633484d3ba12e34483e59e8ef9ff6ab87bcf19c99279535bbba0efdcd
MD5 0c56edb5ed77421bd75b40b89c8ce53e
SHA1 2cc44b60a4216054ec07a5ada2480df01b3518a7
SHA512 5108a41664561e73f0b2d3ca2da2c10b9f545b4e50f1a753b9664b78d5a298c8cca4eb8269fba119250b28349b041fb59cd87ff981c445d02121c5f294450ddd
TLSH
T18E2136F71370997E8710D2E4EA15AE1FCE790121131C78B685A46D2743F39A2D10479F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e52b8218b1c2b60b123d074969c56ae281ea2dfc2912df83ec2d3a2ac7603925
MD5 56084fae16b68ed7ef999e254fb6bc0b
SHA1 40f239bafb805b35ca2500768a51a54a00196924
SHA512 4708ed2a35b2051d757ee357c2834ace9fbb68344e16778100e8dc08ba33f9082c041d44935b511056a24ceef67cf34ed00a00267ff0a4a5e8c8092cb1210af9
SSDEEP 192:aRiy/DYM8AX+dv7ApAPRp2l9qHsb+WNnFD0/x28ey2eYVyIsnAUgtaJ:aRiyLYW+dkUXmkwt0p2U2e88
TLSH
T1BE42C83EEE10693B6CDBD219F9663B63E7F5103521946E80EAFC992C15EB5CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e804d552c3c6e798feb4a4aea2ca959eb0ee36344d2a80e2d810c4919b85d7a1
MD5 20318f9194d9264d426a126855d0cba7
SHA1 86ef0fc4c594b0b2adfff9fad09b54375205788c
SHA512 608b5c4cbd14ab82b70e295664a2eec5254da52747a8bd7e537a19c94e1bce51cd64017fbbcf3c4fe957b49734b1a28d93e2c8c6196f8652ff43ee1a1d6594e4
SSDEEP 192:aRiy/DYM8AZ+dv7ApAPRp2Zu9qHBqb+WNnFD0/x28ey2eYVyIsnAUgtaJ:aRiyLYs+dkUXrkQt0p2U2e88
TLSH
T1AD42D83EEE10693B6CDBD229FA563B63E7F5103520946E80EAFC992C15E75CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 7c54ffb73b326102d94ce12ab061658b9d0aebbd4353074bdd822a456ddaa0e2
MD5 8b36a820a55be45546f479f6c1ae9366
SHA1 c21272a0ec8718e9dfedb334abdab86e57fac749
SHA512 a90cc74e1e3ad689758c7ae26d31bd37f5012ab71f1371b45c7e727f839d665b81b39a1855eda0c4ccfa9dda3e1a85c10e8decfb7983e8b1537543caef14da0d
TLSH
T13AB0121180015543C44706B41557149C72145F11970A270143E07A22C865162C424050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d906.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d906.TMP
Size 96B
SHA256 fcd37226bd76b2a89d6e4cdd44e4c835da72fa5d27b57de7f2e3cb842db84c4b
MD5 0d47049a6c47b2bd8def2689de3a9be1
SHA1 36c94496695d3ccee8a35ef311d09a87a01e4135
SHA512 a03ce19a23319b5aae6e18f544c49e7198ab3c4e59699bae7f5d1a7a6b2beff5eb0f62a3947f11bf3efdc6ec01234af1d909fad68ce1fee35c062c99d4497f34
TLSH
T199B0027AC1066292C44217BC35A5A5DA7171DF25C603521292F11B76DCA5A714539164
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d27b7eb31893c28c01f026c0a4400ef443fe3bf5c15316d9f05a6440ecd1743c
MD5 a55ad7066b61204d8d33590361bf1237
SHA1 2b391aca3959b37eb174e2112bf28fa837bc6aca
SHA512 d8abee9dd672199915cada08a7b3719b9f76336b61ef1bbad0df5c20a9e45e1eb052d78c930c37b6184d94b5112af4a461b8dbd339618ccf22687c9e59885c84
SSDEEP 3072:NuGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMB:Dm7Rkm1tYpBeh2BAoB
TLSH
T1BBC3123B5D64E8375CB5B75EB04E0B1F1EF149A7C920DE92C8D85B0423EABCD0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1d423afd3494854912c665ce345a51d6c9a1527e2ce040a36ac4e1e6f7097886
MD5 3dc8e2eca496df322178b5670f2b48f7
SHA1 7baa996409bd6a427e94344ed16bdbf6176626c7
SHA512 f185d40d7787c9cb69a5bfddc0ba5f4054570cb140a5e528e1bb7a58af12a662200b9286db0186f7bf6c3bf7f0a91dfa655c78f53ede0c7812e8f1dc86fbf729
SSDEEP 3072:GmGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMB:Gm7Rkm1tYpBeh2BAoB
TLSH
T113C3123B5D64E8375DB5B75EA04E0B1F1EF149A7C920DE92C8D85B0423EA7CD0A45A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b9658fd7485163ed98acb7f87d59c47c10ac7645004636752698549782a9d9f7
MD5 571a14888597651c5e6e2146c346adc8
SHA1 680517b55d840cbbb79c70c263ebee167dd62587
SHA512 667c150c21b3473d541961e43949ed4e79593b010ecdb750539c28edb959bcba23e9c63ddf19ae66229e262e3000822bde4ef6c33ee563ace0c312e7b965a5c1
SSDEEP 3072:ARGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Tm7Rkm1tYpBeh2BAog
TLSH
T13FC3023B5D75ED3B5CB5A74EB08E0B1E2EF149A6C920DE9288D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download