hxxp://kla4[.]io | Triage™

Analysis

user interaction
yes
max time kernel
98s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://kla4.io
Sample260825-aj3m7adn21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4088	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320905356863997"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe
Token: SeShutdownPrivilege	5804	chrome.exe
Token: SeCreatePagefilePrivilege	5804	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe
5804	chrome.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 5804 wrote to memory of 5700	5804	chrome.exe	85
PID 5804 wrote to memory of 4088	5804	chrome.exe	86
PID 5804 wrote to memory of 3368	5804	chrome.exe	87
PID 5804 wrote to memory of 3368	5804	chrome.exe	87
PID 5804 wrote to memory of 4124	5804	chrome.exe	88
PID 5804 wrote to memory of 4124	5804	chrome.exe	88
PID 5804 wrote to memory of 3012	5804	chrome.exe	89
PID 5804 wrote to memory of 3200	5804	chrome.exe	90
PID 5804 wrote to memory of 3012	5804	chrome.exe	89
PID 5804 wrote to memory of 3200	5804	chrome.exe	90
PID 5804 wrote to memory of 2540	5804	chrome.exe	91
PID 5804 wrote to memory of 2540	5804	chrome.exe	91
PID 5804 wrote to memory of 5240	5804	chrome.exe	93
PID 5804 wrote to memory of 5240	5804	chrome.exe	93
PID 5804 wrote to memory of 628	5804	chrome.exe	95
PID 5804 wrote to memory of 5948	5804	chrome.exe	99
PID 5804 wrote to memory of 5948	5804	chrome.exe	99
PID 5804 wrote to memory of 4968	5804	chrome.exe	100
PID 5804 wrote to memory of 4968	5804	chrome.exe	100
PID 5804 wrote to memory of 780	5804	chrome.exe	101
PID 5804 wrote to memory of 780	5804	chrome.exe	101
PID 5804 wrote to memory of 6128	5804	chrome.exe	102
PID 5804 wrote to memory of 6128	5804	chrome.exe	102
PID 5804 wrote to memory of 5780	5804	chrome.exe	103
PID 5804 wrote to memory of 5780	5804	chrome.exe	103
PID 5804 wrote to memory of 2296	5804	chrome.exe	114
PID 5804 wrote to memory of 3344	5804	chrome.exe	115
PID 5804 wrote to memory of 4092	5804	chrome.exe	116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://kla4.io
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffcbb14c728,0x7ffcbb14c734,0x7ffcbb14c740
  2⤵
  PID:5700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1940,i,6734931004727235535,8446901880489635594,524288 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2116 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,14729066715210474317,12174672692471350515,262144 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,14060585414233024219,3842545073865671665,524288 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2352 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3144,i,8077874152793566766,10973455319710374005,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3156,i,14247978869029429897,6114928346915237298,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,7244048304862725137,2544210688451112306,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:2
  2⤵
  PID:2540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4620,i,12938217380954214344,4642392743614891465,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,15841496433801537549,12222153893110188046,524288 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5576,i,10974307769563919778,10419015260127679952,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4864,i,10339989564134062749,12693414671923544660,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6040,i,17926021917053724026,11321786993171526613,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5836,i,1799969965678398307,12334771679164556049,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4564,i,2460451197229472490,1413286547313073843,2097152 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6204,i,11062826315039382552,3359121146110631638,524288 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3352 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6236,i,13095401459728125304,3927397683805282510,524288 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=208 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3328,i,3585661092920334741,52325076752940654,524288 --field-trial-handle=2060,i,12636389321395974662,13523516865497243630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:8
  2⤵
  PID:4092

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3760

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a1096250e951c9ea61039194c0ba77c502a6aed10d7e61d80ffe6f1635910414
MD5 5e8d17cad0aeaeddd766ecca5b0cf451
SHA1 8b29a88493b3c32b021d6600dfa0696f50d7eedb
SHA512 f30ff8ecdf192d23cf03a6ab71c32b97f7164de0f107e086a73d4b663c9651c4554cf2a4b48f717a425517741fca2785767d180fd7e7469b673fef0a98b8cd46
TLSH
T1C7E02BA9CD61ECB718FD071D90500746F65413073740458B3A3CA81D4FB533B42AA85C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 312KB
SHA256 0b6251fd38152a7a7319d54a8e993417dfe359650a9581c135c3950fe5704861
MD5 932d4b5eb7460fda1f102de6f7149790
SHA1 fadbac31c043b89a72bf3abf502f9ee53ccbf86c
SHA512 eaad89143b37482972189a3ff86698a7ae3332c42248d177fc74e0ec6aa9e1756a0699cb77d3b83cd815e2651df267c0cca4e9866d7a59a26d0dbeadb060189d
SSDEEP 6144:Y87U1JYBYrHsCcjPUrsgrwz9Ot6mjoSF7SI/5Czsl/sfz+IeJqJi:REJYqaQ8QN7p5Cz0jqJi
TLSH
T1786423C8B9A7916BD9F3FEECE0C64958B3FE733433C684798421915B87122D882E45D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1cf86288a175ea93c212075bb2050eb50041cf1bbe6cda97d1460c6b5916564b
MD5 fcef947df2740c48d7cd296002b9e6a9
SHA1 009a9087b58f7efe796595c72eb6d4115a3e9983
SHA512 1699325e7bdbcea7304e8064d52a13febf0a6d9be147b1b9b743b593c7333ed38d8dfc2d8f491b22d9341e53c58bef4779c2c555a1038bae4f69e68284d30afb
TLSH
T1F171A19DC8C631A5DFB70AF82BD1CE4838B5BD0BB9893F8B1444E128B2932E35129640
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 6e2ce01a7f0c9ada19883986aeb575b5600a3acfd7ba1b588b92ff70b1b77855
MD5 345b0902eb049a27c6343e87ae52ffee
SHA1 ccc408571ca93f15aa6c21a52792f457b521f683
SHA512 df349252fd2bf56a60fe4d7b2171b4eb2ee5f9fd418f65f8934488e4ae8b328cc53d2be33e6d4b6c93b4b1fc523d579bd28e55d5901a853751e2edfd05dba44e
SSDEEP 192:DrPrnrUrErWNaaIEdcON4BA4RQrXvrbrIrOrYCrLqrrVSr9rsrqryr2rH/rcrJLu:DrPrnrUrErWNaaIEdcON4BA4RQr/rbrf
TLSH
T1DF02ADF797E4862DC90256F4EF142E2FCD390925132C3D6688D4EE4B93E25B2D24168F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e9fb33cd79712669b0c8438561fc5c1c0b9710a748961c580734e0244e38bc96
MD5 ee81b57f952cea1594348aa8d4aa523e
SHA1 35967a33eff3ea1b712243b16dcd4d3e351ef603
SHA512 5086946d6d7c63b64e55be2977d07a17d38826d324578781e6bdf23b09c7dd0aab87bed0ed9cbc0b143fb3b358559ef10c35acb90195727139ad6f73dae640dd
SSDEEP 192:5RFdEmfpQJOrQnlv71hpAPRp20lia92Hsb+WNpvILv3n6OC2X1gaY21eaYaTalag:5RjbSrVBhUXHQwpwjnm2u3afe
TLSH
T1F442D82EA910797B9DDBC22AFA517B53D7F5102521E42E84E7FCC92C14D76CC222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ad410f2b85f4242133705625d7b12fcf6dbfec43f6f65e9b9c5d49ddaf52e8d8
MD5 bd760a675a4464c64f55b38318a4ebb5
SHA1 05bd61a95e730c8c4ad2b6a1b2ffa5f4da61d8f8
SHA512 a41176493e6b6d00a1fde76eb6cb060829c56627923cb86f68bf84ffd414561733ea96259c7474ac30376858dc81c31b1e46b8d0a69d8f1c0d6d48ee68af08a1
SSDEEP 192:5RFdEmfpQJOrQnMv71hpAPRp20lia92Hsb+WNpvILv3n6OC2X1gaY21eaYaTalag:5RjbSrYBhUXHQwpwjnm2u3afe
TLSH
T1A542D82EA910797B9DDBC22AFA517B53D7F5102521E42E84E7FCC92C14D76CC222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5f592ba66cbcbca4456666a0f87bc997011a067894d315217fd25040852a161d
MD5 48ef7a054b5089c7b6ee5c16ab8800aa
SHA1 88064b2a060fe3e2c61f848129db1bc618f2ebad
SHA512 8b8ad97c2387f4cfaf7f487aa5cf6c6c91688a549ff3845c110c9ce8eaed35e502640b1fc29e3e8cabb914930a1736e50eb42c899f6032b9982561c64535bcb5
SSDEEP 192:5RFdEmfWQJOrQniv71hpAPRp20lia92Hsb+WNpvILv3n6OC2FF241gaY21eaYaTr:5RjbxruBhUXHQwpwjnmu2V3agE
TLSH
T19852E92AA910797B9DDBC22AFA517B53D7F5002521E42E80D7FCCE1C14D76CC222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b26e0287cef06f054d7640d24fdfa3e432c406ac6b9984c40281b9205e8c4339
MD5 b4812f6a60c0b130f682442568748cb3
SHA1 aba9bac33ccac40df18cc2d1b25e2697f767a34b
SHA512 59f3d010048f22fa50f042fc5f6ebbe9fe16a69a9e745badf0ba9329e12b55a8d234e0a290be81f1681ee7bb577178759923724a2a8c864a185917e76e4aeff7
TLSH
T1D6B0124180416501C01302FC134214C8721C9F219A0A170293E07D6288255908128051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5885b5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5885b5.TMP
Size 96B
SHA256 7f47e8b48ab7b7722828799859b28687bf874e7647c9e5bb48d96cbee905ef2e
MD5 5e3c8315e72ca37445672b7e8a6781e2
SHA1 00ffd5bc3b2afe123d4411b6eaf5231bd8564df2
SHA512 571dba1d3ee91cf4121f177ab59f6dcdd01d16f67ca7cdbc4fce41c9e81d660d94b986abcc39e0c1b43862e64085f150fa0625f1a402babf49a51c88d3f3acbd
TLSH
T1F0B00256D202729AC04203F56995A5D87278DF35CA031237D3E51AAAFC266614926970
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5fdaa5a25544e79f67187dba89b35c1c39ab30693117fa0f994ac88276d31d57
MD5 356db4ba20871c14c441b0e4b78cdde7
SHA1 141f32bac922dd10165ab192d0292a0f0d37ee14
SHA512 43c16812e2e8f6142d284bb75d8d070d98b7b7ef6e24a0e612457d1e59d29850305cb1af90870130b822e17344f8f46b5ea2577aaf908a1c76c8a1740a68db3f
SSDEEP 3072:GGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:xm7Rkm1tYpBeh2BAo3
TLSH
T10AC3123B4D75A8375DB9BB1EB04E0B2F1EF14AA6C920DE52C8D86A0437E97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4050d58e0d9b8dd76a549452532dd68f7629e5ae8354bad7e3e6105146981540
MD5 bd8e3bd47b7848d4d10ab044ccd7afae
SHA1 fb261be1592e9e785f8c5481390ff9bb57c093cb
SHA512 8488e018d842a50a13ed8e672c9938b43d03852f2c28551b3ea429cd0f0f70cbc5ea357d3396d63230d9074873c04ccdab18011d56ea3dc6849bd0895c07d3cb
SSDEEP 3072:yGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Fm7Rkm1tYpBeh2BAo3
TLSH
T10FC3122B5D75BD375DB9BB1EB08E0B1F1EF149A6C820DE92C8D45B0827EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 339eb0be5d48247a16b0e41e12dd33435d2c58b72addc5dd2ec4987c37a0b92a
MD5 abcbd3772afee23bc0e5bf0fda77e650
SHA1 076221d4646531d1942a847b5ab7789390abd71a
SHA512 bf2bd2627ce1a1b1ab0981ce42df78054d59dee6692f9ec8b079b931b04cc1a76832834066681d8158d10f9c91cc3e2b5f284cb37e0c7d47ed3d6ccf6ca3cb17
SSDEEP 3072:zGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Km7Rkm1tYpBeh2BAo3
TLSH
T1E4C3122B5D75BD375DB9BB1EB04E0B1F1EF149A6C820DE92C8D45B0827EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 f943549d4919e1fab5a1f37461a11f7570983715514dd55e5ad9fac5fdd4f70f
MD5 c7419ba345bfb10c9b27f76ff03c871c
SHA1 89326719257536f443bb7ceeaf80bb84fafdf33b
SHA512 2b9c5731915395e4c7efab3dbf3cb5c89dac5ad375c5784fa522517ff2a4df5d9c761d399da3fc26924614e575965d8edc3b7ae0582459a866c4cc476fb7650c
SSDEEP 3072:hGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:wm7Rkm1tYpBeh2BAo3
TLSH
T179C312275E71E9375D79AB4EB08E0B1F1EF14AA6C930DE92C8D86A0437E97CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download