hxxps://gofile[.]io/d/lbiNLXLA

Analysis

user interaction
yes
max time kernel
899s
max time network
869s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 21:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gofile.io/d/lbiNLXLA
Sample260825-1txssseq2y

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
11	api.gofile.io
13	api.gofile.io

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4424	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321686345425766"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
4320	chrome.exe
4320	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 4168	1736	chrome.exe	84
PID 1736 wrote to memory of 3268	1736	chrome.exe	85
PID 1736 wrote to memory of 3268	1736	chrome.exe	85
PID 1736 wrote to memory of 4424	1736	chrome.exe	86
PID 1736 wrote to memory of 2072	1736	chrome.exe	87
PID 1736 wrote to memory of 2072	1736	chrome.exe	87
PID 1736 wrote to memory of 2236	1736	chrome.exe	89
PID 1736 wrote to memory of 5016	1736	chrome.exe	90
PID 1736 wrote to memory of 2236	1736	chrome.exe	89
PID 1736 wrote to memory of 5016	1736	chrome.exe	90
PID 1736 wrote to memory of 972	1736	chrome.exe	91
PID 1736 wrote to memory of 972	1736	chrome.exe	91
PID 1736 wrote to memory of 3856	1736	chrome.exe	92
PID 1736 wrote to memory of 1992	1736	chrome.exe	98
PID 1736 wrote to memory of 4100	1736	chrome.exe	99
PID 1736 wrote to memory of 3192	1736	chrome.exe	100
PID 1736 wrote to memory of 4320	1736	chrome.exe	108
PID 1736 wrote to memory of 64	1736	chrome.exe	109
PID 1736 wrote to memory of 64	1736	chrome.exe	109

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/lbiNLXLA
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe4664c728,0x7ffe4664c734,0x7ffe4664c740
  2⤵
  PID:4168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,3995722145688841677,12374543347003559398,262144 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:3268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,9322634892812487773,1335882840636714411,524288 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,1731760245283684313,16901616385362828620,524288 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2524 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,17503139801737672720,2294614075131970545,2097152 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,12129324327763082270,14987327182474234384,2097152 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4436,i,7347993172222392218,14734470984310666331,2097152 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:2
  2⤵
  PID:972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5284,i,13520197640454188852,11132984043517390806,524288 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5580,i,9302888179349110964,9000500866739604162,524288 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5648,i,3880245690574613359,10603344193454763856,524288 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,917072093221245453,11991255838724302168,524288 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5220,i,17193273573513606840,10821841077048744162,262144 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=732 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4536,i,7166769966623303367,905298684587459290,524288 --field-trial-handle=1996,i,14092873718425462155,13944457824282580283,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:64

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4380

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3a7bad24a5f97b6f3a333587a791220e23840190622431700734291e1807357f
MD5 e363398d31725e8b958c39b7dde6cc10
SHA1 9bdac0864c7ef5dc479ade43b28ccb409473d452
SHA512 7317431295661262d21afc6a508b079496b5f7f440ead4142703b589f4ac11d42def0f0f8f0521b04559537e80de8e8b816c1fb9753f91d748cf18046a2849f1
TLSH
T130E02B6AC922AC3729FC1718A865474AE65163177640990F373D421C4FB577A41C685C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 063db410d631a82e7d47e10305cbff0ae37e3bd7deb49f3dd1c1cf947d989415
MD5 2e6f75c04aaa01391b6bad0cefd32320
SHA1 138a1890096c368255c513c08d17a419679a1982
SHA512 2b89bb1831f75a6b66ed229599255c82c0ebdcc9cfff3fb8a7d127d4377d21a70a8a13dcaf07e2716d3177569e0c1d67ebeb6806f884eec1669a4d844a404648
TLSH
T1E1214474AA5F1D20C7143E7054C596B9797209803C077DDB83453DBE33047CAD2329A4
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c7d3c637744053504c49cb7826eec505104dd2d905ec1cc69e7fb746433a0361
MD5 36892c5cd531b320e9de7624097cddde
SHA1 605ee053478531f64f42dc5dc93f89c12ff0babb
SHA512 702176d32044d1736c4f6db0bd7f16d8157b6ad3f3d24d38da9facee93a210a9414ddb86ecb8c937b325863290cb8e4ba41dc11ceaa3455dad2420911d226faa
TLSH
T1D1517BF783F4997E8A1192F4EB156E1FCE690524432C78A6C9D46E1B93F3872D24078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 b2636c4660d17eca19c66fad653344a297165b9c3ccf888abda1c993bb1b27c9
MD5 c9eea97300611ac905bf41b5ec1bdfa2
SHA1 13341f23137fc3cc9fb8a5af104548efb8f37a0f
SHA512 1dc8094e899a2312d74a30a34d21dc2b3dbc2aa7b227cd8608b86f747b023237d5778074c4f64fd72bd3c6441d4d4b34dc4448550f8d10805e4072f880ec7fce
TLSH
T16C518DF783F4856D8A1296F4EB196E1FCE690524432C3DA6C9D46E1B93E3872D14074E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e033345b9b6ee0782a02539156bb2347aacf0d2402edfe2f56eaef51568f56c6
MD5 dd284a2cca2e5c2a9247a282f34883b2
SHA1 138bd99cc5c78d2fdaba9b69104bd067e038d9ea
SHA512 085d22ed53d9cba6e557479459fdbaf497d1bb4529c1c4a6ede78a9964ea9716a854800b502417b40c7825115ea8e1e2f14b438398735c2b51084c551323d4ed
TLSH
T12541B8F793B4997E8A1192F4EA11AE1FCE690524032C38A689D06E1B93F3872D10038F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bad2f47a7bb519df9cdf2ac0a54b7386ed95fba3c94ef5ab3aa140da07560b72
MD5 3214116a382cccb9f36163ee2eba717d
SHA1 15055319c27b1cbf6c6f2e366111f47c8e7d9d73
SHA512 a06174743a1fc2d909f67e503feb9197b38a540b7100284baaacdc5cc1ff5f7b9f8e824cf4b66bf1c781ed8fb60f84ae80e0c4a2a2c426bd573280035e23d421
TLSH
T107517BF783F4857E8A1292F4EB156E1FCE691524432C3CA6C9D46E1B93E3872E20074E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1075c2e8d05efb0db2f8c2e61d12c00b8dbbd06048418bf9e4dd7d49923710b7
MD5 7adbef82e30627aa9e512c1b897054d8
SHA1 b0c60e57c8f2cdb065383e1382b73f5aec2db9cf
SHA512 9440afb29cf62c748276d8bc4e5b6c19b271f747d6e11da76ad7e88c7d3ec3156fd2007a3d7dee3534203c3a669e8320448ce502b81b03d751fbbbea31d8e153
TLSH
T144618DF783F4857D8A1196F4EB196E1FCE690524432C7DA688D46E1B93F3872E14078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ec75ac214568ac5167c628cac4f631d23267be71e9c2b47670752898eb6f1783
MD5 7d74ed6148b000fc774f5d69065549cc
SHA1 392f5833c3b4e345b48b24a610da1dcf7d9810ea
SHA512 19bedc65ec3889b8fd5d1f2f4b52a58b770b81bc2e1024b0853c278dade5ab4029ef730c284c702fc2ccd097282e2b004f5054dddabed9f762cf19d29f2f7d50
TLSH
T1C1518EF783B4857D8A1296F4EB196E1FCE690524432C7DA688D46E1B93F3872E14078E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 857B
SHA256 3f64cc03196b38d1e2d0f3da12f99b6e12996fcb8f497840c6d9febcde6cad98
MD5 55a4f198a66eec30f3d4dc0dea950277
SHA1 998348159e0a15be7592e828fbba2d134e28c925
SHA512 423c4f7c1cb901988d9299bb3acba94e4ad58ab1f68770cc212d71ea2ea98357a3fdd7a92fef41907e2ab1370e555a4167b7c9b1004d040b9a5ac6f75a5cb01d
TLSH
T12B116FA7F2BDBC5B10E9487B1E44B84B25BDBC71018158E4DAA7C13CE1626E31F07457
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 577bcebfbc56c2a406f2c74ba4874cb24d2ad79d287b83112de44a558d8af6cf
MD5 9c337d60c6c5128339c93d204707b983
SHA1 1869f9e51e12bf28f801dadc6bfd5f4f6888ff71
SHA512 8add1b669e1e744db256fad783cae512cbb67fd5ffda27b0fc84272cd3779f561f2edce00a728b3f06ea8124c06affcaaaff1b7cc57eabd58934ebe7abd8edbb
SSDEEP 192:FRqZ+4B2M/uqv7MF+pAPRp28lf9HHsb+WNneNQme2JW2Vecennaq+VyIsnAUgE:FRqZbB21mgoUX11w0k2E2venaq2E
TLSH
T1F442C72EEE11297B6CCAD219FE217B57D7F5102120C02E40EAFD8A2C15E7ACC721705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3df7a5d2c63d300c9e0f4f62d0a046ddddbf735d47ad3dcfdf491d7cd49b6d58
MD5 7bed8d792fea1461c367771a7000b3c0
SHA1 c9b3db24890e337d00e1f14ae1c487b3326b5cef
SHA512 f0a58305b8aa2a951c3591d3a89f548242f2df2f9cfe4b05aae6da930dd9fa8706c18ef0206aed3c9d8987cda82c8aaba2499b432973a90e62005bbf31aed3df
SSDEEP 192:FRqZ+4B2M/uev7MF+pAPRp28lf9HHsb+WNneNQme2NW2VecennaA+VyIsnAUge:FRqZbB21agoUX11w0k2w2venaA2e
TLSH
T10E42C72EEE10697B6CCAC219FE257757D7F5102120D42E40EAFD8A2C15E7ACC721709B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 371c6239cc2bfd15e8e8b6ee34c6dc3c6ea6aea94da3211b0e0fbdbbd5850f03
MD5 90b3cb560a8ca4f22ede7df643933bc4
SHA1 49fc40f20a4814c9e8278bafe69e206e54230e22
SHA512 93f0ab1bac3e512274143f42ed95d2b90e9c8a9f07b59205423b99ca0305eac1c94c97ef139eb0806e59840ef3bdc2f51f5c7eafba7f8cc2629299f146fff75e
SSDEEP 192:FRqZp4B2M/ucv7MF+pEPRpa8lf9HHsb+WNneNQme2KW2Vecennau+VyIsnAUgE:FRqZKB21IgowXZ1w0k2l2venau2E
TLSH
T10052C82EEE11697B6CCAD219FE257B53D7F5102121D02E44EAFC8A2C15E7ACC721709B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5d2c16fc2d9d0ec8af46e632f48a0a73e6b853f7baab52032488d529b74fbdba
MD5 7ede2db5a58f505af81209ce038bdfa8
SHA1 31f10989641e5f0dd498c22e3470a9bc478f3764
SHA512 58252f4ed935e9848bb72ba4080325d7b92b70fe3370f4935783fae04a1650659ce5f08cda50957b38bbc3202c97ef2897b236bf23e09731463a52cc4ef1ac77
SSDEEP 192:FRqZ+4B2M/ucv7MF+pEPRpa8lf9HHsb+WNneNQme2KW2Vecennau+VyIsnAUgE:FRqZbB21IgowXZ1w0k2l2venau2E
TLSH
T16F52B72EEE11297B6CCAD219FA257B53D7F5102121D02E44EAFC8A2C15E7ACC621709B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 bc5f527976c00b733d855bfb540cc6abca39813865cc107fbdb1da99795ab578
MD5 2276327d8284a945494138b1caf23e6d
SHA1 5d4ed1ff8fda91b2d99b644b60c886c4c09a170b
SHA512 df10585262ce5bc201b099a175b25418107ca2bb04e401cea3c806f1b42b9319d7b125f664c9ece11294710588e930158964d07ecc3029bb4e40ec99bb5ea0ee
TLSH
T1D5B01240C0815102C44217F82183549C711C9F25A61E170143E07D329827152C034051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587191.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587191.TMP
Size 96B
SHA256 6ced12b34b6b48151914af8900537e0fd7c0e88d3a048eb026a1c818beffde1a
MD5 a9a75ac0e9022ef8308dc7d79192c646
SHA1 3d711f54dc5a1fbf15fd6040286944e97b2c0c86
SHA512 f31487e630b63ec3c547f6b59ce2d4c1aa12bdae85381b740e73daefa2a3fc0ff00586dbba225fc5d2b6e02a72a8d0d2db575964b35321301116d94deba1eea6
TLSH
T172B02238C0022382C00203B028C2C2CC3020EF30C203020383E00BB3FC2C2A08C30222
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 c34c043b8c4bc4103d0c29367b6a1f645de9dd3309230bba648278a6187e20b1
MD5 ba75d9c0676a86b5fd3f6f510df93596
SHA1 ac6d752fc8beb89785f399073bd5d082904e15c0
SHA512 f5bb9df3470dcfe7f63e65822856dcfcb39c7c7cfe1823691c6806622da401918ac839d2f1e38a324495b8b312083ab63e8803a09280496bf9019860e65efe31
SSDEEP 3072:PHGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:Pmm7Rkm1tYpBeh2BAoM
TLSH
T199C302375D75A8375DB9BB1EB08E0A1F1EF14A67D820DE52C8D85B0423F97CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9407d84a86931517f828065accd0c48a1dfcea5713ecd40a04436c645f7fd1d3
MD5 8fb10facced4ec99c5f9fb4381555f8a
SHA1 a391dd5cec624c29efbbb1df87c85bbbc25660fc
SHA512 422163374d55267098233b4196714d0c7f41b86d83e33c6def6ab1f0e01599000acacde099a15d7f882f8ff2a49e2f6cdf8bc12bf9934499597924c1cd5f0670
SSDEEP 3072:/MGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM://m7Rkm1tYpBeh2BAoM
TLSH
T159C312275E75E9375878BB0EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ca6e715b0af92b3bdc9811e5bc2876d1c2ce5008bf343ff28d44766db818919a
MD5 ae4fb1c32069378c228907477c3e7ef2
SHA1 7d1b440105ee2584f874c21258c06641a5a3f52e
SHA512 716a6fdfeaf9188360650e64b7ee4cd824369da238940f8f25e44dfb8f03010773a87ce8cae85af74bb9a56241d3b9c07de3f53351f02a72e885524caa64ee08
SSDEEP 3072:0fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:0Om7Rkm1tYpBeh2BAoM
TLSH
T1ADC312375D75E83759B9BB1EB04E0B1F0EF14AA6D820DE91C8D85B0427FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 9e2776ca2627e2b40d3a0e54ae4d3046c79729f14a960e347dfbd4597539ecf5
MD5 30bb2ca39b14879d649d4085d7d61940
SHA1 b7247dd412ebbd2d63c42e32d43c2bbc3f57bcd9
SHA512 6d6aa575b027edf883186db282ccfaa3e3a1da16b931e3af5e553220ee50a056f29a2b39d4bfad77174c530e8024d0e68dd60be1bce665f2db19cb3bd0dc35b4
SSDEEP 3072:vHGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:vmm7Rkm1tYpBeh2BAoM
TLSH
T137C3023B5D75A8375DB9BB1EB04E0A1F1EF14A67D830DE92C8D85A0423F97CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b96d3bd4ed913a317088e0f9b07504ce4deca981688f476060467dec2ff5132f
MD5 f67ca580c07b879746dca6f91dfada40
SHA1 122c0d82ff285077b67fa00f3ca410050ffc70d6
SHA512 aa4425a51b4d4e5078e270d595884de66a2760d4ad484b9cbcaed11dd9d13f8ab694f59f57e101cde5c5daf5b342b913f1fe56146f88dd4feb04f793a9aa186e
SSDEEP 3072:vfGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:vOm7Rkm1tYpBeh2BAoM
TLSH
T13FC312276D75E83759B9BB1EB04E0B1F1EF14AA6C820DE91C8D85B0427FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download