6744ce8560f99930691c1035c9ccb2522fe091f6c4ea2ce18ac2bbbfebb24ebc

Analysis

user interaction
yes
max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 18:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GameAssembly.dll
Size 14.6MB
Sample260820-xa85yahk71
SHA256 6744ce8560f99930691c1035c9ccb2522fe091f6c4ea2ce18ac2bbbfebb24ebc
MD5 1db78725c337f6c67b441771589dcbde
SHA1 045cfea9487fb784e4e684a4b871bc4e7993fd75
SHA512 c7d489ba40345fca41724e7a8ad63dd570ea2c4203fbef04aa1a74c45c584285e6aaa775321840f7fa4e13b47df7dee41e82f4c04789c78c215286ff9893a62f
SSDEEP 196608:q99chDTDS7ippgbuUTXYUYYxRC0G6wIhSjIz:qzchD3S7ippcXYYxRCRPjIz
TLSH
T198F63A5AB7B58448C07AD2388A13156BDBB238041FB867CB21944B9D1F737DDE97AB30
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1616	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317248992129520"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
3888	chrome.exe
3888	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe
Token: SeShutdownPrivilege	4692	chrome.exe
Token: SeCreatePagefilePrivilege	4692	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe
4692	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4692 wrote to memory of 4128	4692	chrome.exe	101
PID 4692 wrote to memory of 1620	4692	chrome.exe	102
PID 4692 wrote to memory of 1620	4692	chrome.exe	102
PID 4692 wrote to memory of 1616	4692	chrome.exe	103
PID 4692 wrote to memory of 2208	4692	chrome.exe	104
PID 4692 wrote to memory of 2208	4692	chrome.exe	104
PID 4692 wrote to memory of 3484	4692	chrome.exe	106
PID 4692 wrote to memory of 3304	4692	chrome.exe	107
PID 4692 wrote to memory of 3484	4692	chrome.exe	106
PID 4692 wrote to memory of 3304	4692	chrome.exe	107
PID 4692 wrote to memory of 1716	4692	chrome.exe	108
PID 4692 wrote to memory of 1716	4692	chrome.exe	108
PID 4692 wrote to memory of 2264	4692	chrome.exe	109
PID 4692 wrote to memory of 2264	4692	chrome.exe	109
PID 4692 wrote to memory of 896	4692	chrome.exe	110
PID 4692 wrote to memory of 1308	4692	chrome.exe	113
PID 4692 wrote to memory of 1308	4692	chrome.exe	113
PID 4692 wrote to memory of 2192	4692	chrome.exe	114
PID 4692 wrote to memory of 1604	4692	chrome.exe	115
PID 4692 wrote to memory of 1940	4692	chrome.exe	116
PID 4692 wrote to memory of 1076	4692	chrome.exe	119
PID 4692 wrote to memory of 1076	4692	chrome.exe	119
PID 4692 wrote to memory of 1824	4692	chrome.exe	120
PID 4692 wrote to memory of 1824	4692	chrome.exe	120
PID 4692 wrote to memory of 3888	4692	chrome.exe	129

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\GameAssembly.dll,#1
1⤵
PID:3036

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff91408c728,0x7ff91408c734,0x7ff91408c740
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,17134333672820077870,17056785600969051045,262144 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1940 /prefetch:2
  2⤵
  PID:1620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,11931564544921691678,12550549935713989138,524288 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,12006467315368229734,8604429004896695634,524288 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,12853317083588714848,11953055169886348715,2097152 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3456,i,4414706499792306567,1917083988324744918,2097152 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,10942778748107201998,15827082967603213887,2097152 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3840 /prefetch:2
  2⤵
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4748,i,11900253099843400243,16500895324225939586,2097152 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,7886948317606380611,17595271559432638311,524288 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5912,i,16121228445079531452,11172605589794930989,2097152 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4732,i,2533456276292427653,2391107704413653485,524288 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3948 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3228,i,18228456591000826147,10329291113291512441,524288 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:1604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4752,i,17917606081095067770,6426529945381304941,524288 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3632,i,4422000543426192202,9397058321615022394,2097152 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:1076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3496,i,10091901888741503198,14195477353623217369,2097152 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3672,i,479479157708158590,17427605362216378174,262144 --field-trial-handle=1944,i,7663097939767523556,13075707650263206818,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3888

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1816

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 fa8cab11c390560854a6722b32f9aacce68b87faee226c35a39a3904c87d6042
MD5 4a70edc41e665a585bc33e8fe0af1892
SHA1 0bf65fd73434e549cb1bc1136f1b6d3d0ebe3335
SHA512 ddee12197d04b13fb961718f29f665e1780d518c39cf6bac3832f861f97d32ca2b6ca66a119a83337006a0292d50e5827923109e9f09c471f0ca27bee43be3aa
TLSH
T175E02B69CC21AC3718FE0729941A464AE750135F2A91590F7A3D9109CFB0A2742DAC6D
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 43d53b1514b3d2653c5eb06a6ffc9efb52b19db05bdce5ae18d9dbd4b219d7c3
MD5 0caf7c684ca217c86be271954dd9cf0b
SHA1 1b3def3c9f94cb68079ec5439fba728a93fc5cc2
SHA512 27b9e4da01197a7ff8a8f3d708b0b4baa74ec651694801f42a162cc4e7899dbbc5bc2b0bf4814146d9bba7aabb600202346a2b28347249a3f661dc608a7653be
TLSH
T108811B46265EC758C7833D7464C5B6C3F1B208F8B5633FAD839434BA1A96F6BD43A604
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 ca923ecdc28f7f055bf042b201ab1abd1cd3a52ab52c67dda85d981ce5930d51
MD5 7a585a23d5fa6a8aedff1630d39cc0df
SHA1 9dbce353e5f970e0e2d4229c70a13cbdd99cc628
SHA512 07572925422d5de62eca98fef3ce280e1beaad39005ba005e81fd94982bade4d6738343780396cc137c74256fda7c659607e9fb545ffddbd37011b0e53765b5c
SSDEEP 192:Dqj64QMJcJBGQIS47gteu9aa1MMGJM4wvUmqaPDFvOfP7NPghErb912eNzvQIXRy:Dqj64QMJcJBGQn47gteu9aa1MMGJM4wf
TLSH
T16E32BFF7C7D8962ECC6166F4AB156E1ECE191D14522C3C2ACCD5AF1BA3E2871E101A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 333de58412e3a83a50bac5ae0afab3100ddcabe259d6e98c99315daf13773464
MD5 2986bce9a08c2cd1cc6343695ae3ac77
SHA1 d4d9b610a2bbb4b5d279baa2679b24a86c0b3088
SHA512 c9531a424e6629cf9c40032ba6134494569506bec49b758369f03f0da4f793ff97b5d9a5d40db362171920f3e2f5ad62998610d6f1c7040a8fdc74a80e8a79eb
SSDEEP 192:rRqcBzN9EuIK5wv7spOPRpw2mEF9eS9wHsb+WNwwbXro4eRiZRJkwqJVyIsnAUge:rRqmzNSCsYmXN9FKwtLeIZrse
TLSH
T15652D62FF914293B9CDBD229F922BB5BD7F5102125941E84EAFC892C05DBACD3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 22ce3c975ce25856b327eeaa46ac774c4c1bde43e64dae5bb3ee84dc08492cc0
MD5 937be323a7058943436194db68de308f
SHA1 108c4a864ca101417cfbc6480a3a513fd671d74e
SHA512 4f7d002717bd93625ea4bbf89f8fba4c46fddadcc1f4a065832e9da17ab5cd06ed84bed4253d3df5d4504548cf352b8cbdfd0497e95c9df821d67c8cca32082e
SSDEEP 192:rRqN9EuIKU4v7spAPRp22F9wHsb+WNngg0biZRJkwqoVyIsnAUgtaJ:rRqNSJkYUX/FKwb0GZrN8
TLSH
T13F42C53EFE19693B5CCBD229F9227B47D7F5102121941E80EAFC892C04DB9CD222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d67c78195dbde8351f609eb1d18492707d53963f278bb13e2b778000591368f9
MD5 2f926474247dfefb210c5b7f9dab20fd
SHA1 1c39548b20213a82df1eaa75390513b6718e39a3
SHA512 b411f246dd141d30ff71f1febc3c2a3b504be2ec570f4f0800cfab02b7a28f9b3b93ebb82e6f0f814f17a057d5b9b204dfd6e4107eb34a14b5e5bb4a1cb4a4d1
SSDEEP 192:rRqcBzN9EuIK50v7spAPRp22mqeS9wHsb+WNnbXro4eziZRJkwqfVyIsnAUgraJ:rRqmzNSCwYUX/rKwLLeeZrQe
TLSH
T14352D63EF9156A3B5CCBD229F9227B57E7F5102221941E80EAFC892C15EB9CD3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c7d904a1fbb5d1711a43e021f3547938267a53c91777af71e58e27a45b121778
MD5 a9342166f339284d56f60f53f478c817
SHA1 e583e7ece79537c5ffd8e96f3a2fa9d2d5c04f53
SHA512 8c4e318913ac2c56c1acac810c5ddf8ca62306f05230df440b73a0ecaabbf1a663022650b2555b271e9cac6c7d12996529c1afdb234e7175050571436d8041c1
SSDEEP 192:rRqcBzN9EuIK5qv7spAPRp22mqeS9wHsb+WNnbXrxx22iZRJkwqoVyIsnAUgtaJ:rRqmzNSCmYUX/rKwLD2pZrN8
TLSH
T15E52C53EF9156A3B5CCBD229F9227B57D7F5102221942E84EAFC892C14DB9CD3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2282bcba340a39533e102a70b46f40b8e6e10ab066051934e5c1805864031e58
MD5 7f5a8ba3434738947507ef5edb75dd2e
SHA1 e004d32d569a1015854094008908c213b45e7339
SHA512 d398d607dd31eb99da08696b2719b8b634f6ada529be9d69bdbe3126bbf1014823739738fb8261cebd2acde47aabc68f21e74f3b0877b0fa87ca015370e68c5e
SSDEEP 192:rRqcBzN9EuIK5vv7spAPRp22mEF9eS9wHsb+WNwwbXro4eziZRJkwqfVyIsnAUge:rRqmzNSCnYUX/9FKwtLeeZrQe
TLSH
T12A52D73EF914293B9CCBD229F9227B5BE7F5102125941E80EAFC892C05D7ACD3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5d2ec2635e370dbe6e0e4ff27be7570803149b95ab12fedf90e6b3b4a77b82ab
MD5 97c1dcf6fc6e202083c3e78bc0c87800
SHA1 739ade26c67e313ca243f1c9117ec72bd0882054
SHA512 d2792610cd0a0b3ff78a7262033798612522831eb9891ccd97fd6f29ed5cd8bc91b7156312787fcd88e6775ab518f236ac5cb407b9c1e499e0af2d0f78445e74
TLSH
T19DB01281C1016551C01216F81352288C71289F20960A2B0143E0A926C825170C4140D0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588548.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588548.TMP
Size 96B
SHA256 836627ee559cbda907b95572575dae164c6f0a7580000812a33365c554b9bed1
MD5 a0d623f16af27ee1c73366035300b1da
SHA1 e0cf916b5dc4c57f29fcc2965ea875a417cf39ae
SHA512 495580fe28128e1e675173cf6737f4717da6150bd0b5614d4a863d2e59ca8f6565372e1beec95209e430d2bd7df8647353b6a5e5299c70df213a1f472935cd2a
TLSH
T10FB02208C0022222C02223B02C8380E83020CF30C203220383E20E23CC282308222C30
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 06e18ec168466dd2885103e6334f5e33def0741191ed8a32d4fd2e1f1a49d8a4
MD5 ef9de4ecb1a4da8e2c464094ad916103
SHA1 e5a892f6d0dbaff56031aa97429e5926bbe11c88
SHA512 e60585a3abd71d286fb064447c331b4ebecccfec3400cce8a636363572a9176e8037253129bf95e7effc0aba179c8b1b5848ee3d2f7ff676c6ce34af7a1ef0a7
TLSH
T16AB01254A0880953D810D770B9E345861020287405710B0274D0088044211418429100
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 6b19d539a98ffc7fd17b7f99f13f43bb1d30535100d19fcfcdf3a402bf3613d4
MD5 b4a326afdf9aa463e9295656224d8e39
SHA1 6b71bb089eadecc276b9da1abcf68e695d36bbe7
SHA512 52307918ac6dd8bcaaad8e3429108b98e3693a067d0fb75843f141f12bbc67f9fd653d5be3ae9a1770967ba3d9f4be5920deb90c2fce8ae9070ee1aa11b43028
TLSH
T18FB0222280020823C000E3B0FCF30080322C0C3003BA0A028CC022888830A02E022030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 95bede559478a3a3c4295bc605c59c1776fa26cb3f8cad0adba83893355b51b4
MD5 600f6bff9bfa1f20c37f9859a81f4f28
SHA1 93ca3921d6229c302f42beaf33c03eaa99bf8b23
SHA512 f3261e9a4619b3c1882e4f8d851edfb08adb6b3aa93d7e0af2b114ea742a206a8cb5897767333a2a1e508e2b6db9d80f1e981e84db0c59dc06ca0142c4d34586
SSDEEP 6144:so12X6gTgcJIo6XkOm7Rkm1tYpBeh2BAo0:UT739oBGcAo0
TLSH
T19F3412221D745E3B9699EB0AA04F1F7E8DF1CFA7DA04EA150599BB44239E3D80604D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 9b2d3000cd612d6b508dcc8301f133e5dfca3fe77d0e8101d41bfcd724f121e9
MD5 ad8dc3833e4cca61a28a1812030e4488
SHA1 7d7e14fbea4037595ca1079d82f621dd267896af
SHA512 d0e612b5eac789b59b6ef5d6b1cdc77437f0d527cee2eb5ffd38e6b9481a43bcd9b00db8a8384216bb503b2ea551541966198302b693bbd7225c943d74f7afb5
SSDEEP 6144:l8o12X6gTgcJIo6XkOm7Rkm1tYpBeh2BAo0:2T739oBGcAo0
TLSH
T1D33412321D705E3B9AD9EB0AE04B2B7E4DF0CFB7CA04EA1949997B04635E3D84A05D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 1a3269630f79df7b335b93f7830c7792cc0977eded123e30dccf29e29ffd31db
MD5 87b77d91fd46a8f1028dccf410c21941
SHA1 a8201da299f3ed0c897dd3ebb806e0f1282f64dd
SHA512 e2030d9697510aa1d2d3f1ecaefa87b73597720bc1103399bf06536c989fcf6260ee57f35a4522e452cd568461ee9dba2751be8419a314625ea20cbee35da261
SSDEEP 6144:zo12X6gTgcJIo6XkOm7Rkm1tYpBeh2BAo0:XT739oBGcAo0
TLSH
T1703412221D745E3B9699EB0BA04F1F7E8DF1CFA7DA04EA1505A9BB44239E3D80604E74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b16c1975537acf19ffdd88829ae92ff548e0c7f969b3fc2e686f9e4e09cb45eb
MD5 be821f0f6e8c927275ebc22ce673bb5b
SHA1 01fc9c32f81d90059069dc763e5a88977c0f2bf4
SHA512 84620c745fba4d3932a368f7c0cf297469754ac18bc76c8344fb5d89d0e8baff3d45bf5e741543764523ff8138e54b6982f780a198809b01b998a4895fba3d36
SSDEEP 3072:kGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Hm7Rkm1tYpBeh2BAoK
TLSH
T162C3123B5D75E8379979B70EB48E0B1F1EF149A2C920DE92C8D86A0437EA7CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download