hxxp://www[.]ascreations[.]in/

Analysis

user interaction
yes
max time kernel
243s
max time network
243s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 08:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.ascreations.in/
Sample260826-kcqedscd49

Score

5^/10

discovery persistence

Malware Config

Signatures

Discovers running processes 1 TTPs 1 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

discovery

Process Discovery

T1057

pid	Process
1120	tasklist.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\taskschd.msc	mmc.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3700	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Gathers network information 2 TTPs 1 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
4488	ipconfig.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322064769525973"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
5824	chrome.exe
5824	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5860	mmc.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe
Token: SeShutdownPrivilege	64	chrome.exe
Token: SeCreatePagefilePrivilege	64	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe
64	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5860	mmc.exe
5860	mmc.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 64 wrote to memory of 2732	64	chrome.exe	85
PID 64 wrote to memory of 4944	64	chrome.exe	86
PID 64 wrote to memory of 4944	64	chrome.exe	86
PID 64 wrote to memory of 3700	64	chrome.exe	87
PID 64 wrote to memory of 4596	64	chrome.exe	88
PID 64 wrote to memory of 4596	64	chrome.exe	88
PID 64 wrote to memory of 3836	64	chrome.exe	90
PID 64 wrote to memory of 3988	64	chrome.exe	91
PID 64 wrote to memory of 3836	64	chrome.exe	90
PID 64 wrote to memory of 3988	64	chrome.exe	91
PID 64 wrote to memory of 4892	64	chrome.exe	92
PID 64 wrote to memory of 4892	64	chrome.exe	92
PID 64 wrote to memory of 4888	64	chrome.exe	101
PID 64 wrote to memory of 4888	64	chrome.exe	101
PID 64 wrote to memory of 4640	64	chrome.exe	105
PID 64 wrote to memory of 3476	64	chrome.exe	108
PID 64 wrote to memory of 832	64	chrome.exe	109
PID 64 wrote to memory of 5076	64	chrome.exe	110
PID 64 wrote to memory of 5824	64	chrome.exe	129
PID 64 wrote to memory of 5868	64	chrome.exe	136
PID 64 wrote to memory of 5868	64	chrome.exe	136
PID 5732 wrote to memory of 1120	5732	cmd.exe	141
PID 5732 wrote to memory of 4488	5732	cmd.exe	142

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.ascreations.in/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:64
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffed69dc728,0x7ffed69dc734,0x7ffed69dc740
  2⤵
  PID:2732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,9233617775810415271,14086512829076690608,262144 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2220,i,15447646150170884909,10940199914831427907,524288 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,5937774214337757012,10470358193113239535,524288 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3076,i,12473770851715196468,7608548666785630616,2097152 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3124 /prefetch:1
  2⤵
  PID:3836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3096,i,3490618658079327495,4609524688687107516,2097152 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4392,i,17859843030926254950,8980599991725071554,2097152 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4412 /prefetch:2
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,13277387225881764013,15364252663663779919,2097152 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,2844282136768471584,10814032302417897662,524288 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,15665439126905836328,14493283436359057973,524288 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,17645311123672297253,18284306284901448580,524288 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5728,i,1184451081987460974,1700151721959108300,524288 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3896,i,5455952143567818226,2470061773024507365,262144 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,11862076246980062098,16063478406478943662,524288 --field-trial-handle=1964,i,980013244745761649,4471214570407207791,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4080 /prefetch:8
  2⤵
  PID:5868

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2360

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3760

C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
1⤵
PID:2928

C:\Windows\system32\mmc.exe
"C:\Windows\system32\mmc.exe" "C:\Windows\system32\taskschd.msc" /s
1⤵
- Drops file in System32 directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5860

C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5732
- C:\Windows\system32\tasklist.exe
  tasklist
  2⤵
  - Discovers running processes
  PID:1120
- C:\Windows\system32\ipconfig.exe
  ipconfig
  2⤵
  - Gathers network information
  PID:4488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2622b267-3df5-4311-b583-45da97daff96.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2622b267-3df5-4311-b583-45da97daff96.tmp
Size 12KB
SHA256 f8f5bd87ddb77f74493675f3923e73f6faeda3f5fa2854c1568ded2e35527a59
MD5 df0034d9944a4bf1316d7ff6d8181567
SHA1 195cf0f0526a4c0c07664fb8223adde63fb5be88
SHA512 dc847e7d85f4979775c428279b9002719df1f052fe99fd816664394c07eddd436ecbf051100d57a0a780e76faad9a5ab1dad388c15218d76a675fb68e5eddfc1
SSDEEP 192:IRM5vE8Segv70pAPRp2daP9+HmPb+WNnojJ062IZPMkwYKNVyIsnAUge:IRM5sC8gUXj8gYv2IZM4Ue
TLSH
T11342A42AAA506A7B9CDEC225FD627B63D7F6102125911E84E7FCCA1C19D75CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 96f7e09bca49607ebd936b7400aa14a9f9a97ff50ef7796c40b8bfa4a7981cb3
MD5 12c38537e0cf1d2faec8efb04099a9bf
SHA1 0f52f0d452941b46e81a4d05fbfd8ac2b4a9b174
SHA512 6ed634ca86442508e9a3b15cebef52e6f5f9bebce6d09f0536770885fbe933ebb70ce2be61e7b3b9a283f22f3fdbaacac8b0406ac9e2f07c0a7493dc8cf43370
TLSH
T190E02B69C861EC2714FD5719A0145747E768135B2A80994F7B3DC10C8FB16374989C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 dad90dc5bb9cb2a36180b420ab993c94a7e1a09e8aff473bf34e7c03de190677
MD5 da4843c3169378cf6fde170a0bf91240
SHA1 d68041a8743c592c372095284d02bda0980002b2
SHA512 36d61dd427cc94c18b2b9093c2dc2521f8a9dec5f5117f307e38806b8ce682a88d4dde54462c35555ab1ea081d3b2d7444b808a120d18af89be3bd17239bbfdb
TLSH
T1A82140CC54CACFF0CFFABAF1299B4D99EC301BC8A9071B437BB42B1284072C64815840
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8613d6d2457bf1836f1d72f93f914f9c04f0cea76a8494d69283ad5babc2c6e6
MD5 8bd179147a6045cd1096469a807ba066
SHA1 4dbd99b4bf22cbff003c3ab30c997504a0f31dfb
SHA512 66c45215688d7b695e572ba3a13f0284950fa5f21e49b80cff6cc0219fd1432b9ce281b447a968cf17d89d6201c538ba62b07358ceda6206310f51762d992979
TLSH
T14F21CBCC94CACFF1CFFAAAF1298B4D96EC345BC4A9471B437BB01B6285172C64425840
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 5006a9364f98905a1ea35ac14d8770e41c0c20cac02e8a4e39fe2cb726e00390
MD5 f3338ca0e8cee9a455034c4bbb0b48a7
SHA1 20d13940f9b9f0d98ab601131ae5ffe53dcab09a
SHA512 578c9bb33f29da72e3e9ed8275013f997bb091c8b113c403e0c0c2de1439450dea218323e2d9bdae7edba105984d98d9fd45938e379901651bd47b3e7e34d117
TLSH
T15F617CF783E8C66D8A1196F4AB156E1FCE5D0924432C3C66C9D4EE5B63E28B2E10164F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 81dd6100d732cb042242d3e4523605f1d23381fd96d32a1d2f52076bc283e1ac
MD5 aa7ae4ebdf7b5d8b466708216c010352
SHA1 be09609180df68d670584bd921ea40d40a0ab6b7
SHA512 66882bc3bb70e5ebd7bc809b113f15f7ab579d85c85f19ab32e8e714fcc2114fce90399613f19172b781a4d9f7e3d8624e398e6f50b8c6840c37140882d71687
TLSH
T1174146F3C7EC896D890196F8AA192E1FCE790E14536C3C5788E4AE1B53E2871D25158E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8531fe143282eff40f21e89750f451a9b91c79da526a169327abcc5fe01c6c7d
MD5 08b60d083ad565b1efd49a1e9df1b807
SHA1 f6587abcbfdddc50eaea4b5290b44bc80c83fe0c
SHA512 c362de9c73ec83c3817cab0debc67951146283209ca1f6b13e747c30ce7dc7516c756dfc8a0b657b6d51b39bb033658e1111557caf0b4e2df44c1d531c4fecb4
SSDEEP 192:IRM5vE8Sekv70pAPRp2daP9+HmPb+WNnojJHdeZZPMkwYKNVyIsnAUge:IRM5sCAgUXj8gYfeZZM4Ue
TLSH
T1DA42B42AAA506A7B9CDFC229FD627B63D7F6102125911E84E7FCCA1C19D35CC312701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5b072f2e6f1313a079b96748198f9c30a493403994860c1e43addebf879ca5dd
MD5 26b9aaa4427520102ff9dc9fde5c42e1
SHA1 f04f088a451821f085299ba99c9f7c554406b1ab
SHA512 f01b1549e2da84ab846159f0c1843bc85997fb83f46310eba97053bc6758833db265e386fd1ade1cd352828e0845d57007a5c380b4791c3ec6dab7621f82bbae
SSDEEP 192:IRM5vE8SexIv70pAPRp2daP9+HmPb+WNnojJHde2PMkwYKtVyIsnAUgE:IRM5sCCgUXj8gYfeMM48E
TLSH
T16952B52EAA506A7B9CDEC225FD627B63D7F6102125911E84E7FCCA1C19E75CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 e1fbab080f997e75f54a4320058cd6125e886e30c74687a280774ab2d6b3df2b
MD5 e06357e24178ef05c6561df86111f375
SHA1 c8af6799e6878c9054e7922fc1f74e02b512bec8
SHA512 990a6154adb92ddaa093f7c56b804938dd4a6c72af00fba7e79b411bc589d62ed83db5c1078ec1b6df86977d7a03eb93fe3e3f553c75e697c86bce98a0aa012f
TLSH
T1B3B002D5C112AAA6C45203F06E95A5DC7160DFB5C6131212D2F02BAEEC25B71556A161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 ddcd5d6e394146e4fe2608bf0006c9143aeebcc4f832fd759ea0f723fe9f7b9b
MD5 32171c85baa58a383a0046717ec52483
SHA1 d988dfaab6e1d89e46c38dfdf7858c76281b85a4
SHA512 9c40646a59cb4d29866b6be9933712c747d0c7988e0d4c0ff07f1e639c1f208ccf4ccb12669884298352ed3c284dbf944124e9b9a83c5eb66ebc72db6074f63a
TLSH
T1F3B012408002D122C04206B41586348871146F14960B170943F56923DC291618025061
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 6d9af00282028d65400d298a535784898fc457e098330bb4ce70709cea7758e7
MD5 acac603526ebc052ca56f893ac472faf
SHA1 bfc838baa394e8b86a6910111f1b8cf8f526079e
SHA512 fcd2f608a21ac1aa29a69e67f5b8139e591e6fd06b6e23506fbc91a6e22826f850cb4ec0080ccbd725153d4dcf00c7745f826ca80bec8fa729e2f28ac0950636
SSDEEP 1536:p/0yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:x+qfd7NtZL8cHQRZEQ6Sps3
TLSH
T199C30237EBC21E339DD2DB60B9130F9793F644A9D034D301EEAD3BAB6883551A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 680f3955f44f346f67e5f22a32712fc9adff2ec643fb3570a07655609a3b3b49
MD5 dabc69fadc8ef114a95bd52208ebbea1
SHA1 95a1e0acb81e4a2a4cf243684bb59ce482880e3f
SHA512 f3d23a99fb4afa341c304ce3a7c80431574f0693a61bd941fe84f16f83955f3b00447c4c5d3b72143a76d33cdd7adce5858a24aea9d758b521dac5c3f44892b3
SSDEEP 1536:+HbyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:ylqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1EAC30237ABC21F339D93CB64B9530FD797B644A99034D301ABAD3BEB6C83591644246C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 168KB
SHA256 7da1e70cab657cf44b91d75c57d9da4fc2a5082667638f923afcfa1d8f6f8cad
MD5 af1c912f4f0e7f88f8d20b2c965e2a25
SHA1 bfd3418d9dd7759744a96da5a20328178662170f
SHA512 423d0eccc3be6a6c3f87b37eab66bbf5ef10840301cbadea43bc70676b2adf04138835b38c9dca83e295b15d90adb9bcd73dc1f4bba22daa38b3b31ea1b8698d
SSDEEP 3072:1OFStJWQuraVFbgUDEXtadxQOJ4qfd7NtZL8cHQRZEQ6Sps3:18bQuraVFbSd6ZJ4qZ/ZLW3Ex3
TLSH
T1F6F31237AFDA5E338D828F30BC134DC78BB6416D8038D201FB5D6BABB49B91664D14A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 6fa77b7696d0f18b0d40cce7462c9cc87db5b323a8dd41309607ba2b5fcc8f67
MD5 0ece9228ba118656590a06d9bb878a76
SHA1 4bffa98bd58964590311156a97cd28dd0ae052f5
SHA512 1e6328cf2b478b68e33b3af5747769174977d9c46b52bbb1c3e3c22d14dfdc42c602730b9ab8abb2488e832123f6b661ec5717ecdff7bc3264e7f6e496a60112
SSDEEP 1536:biLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:Gqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1F6C30237ABC21F339D92CF64B9130FD6A7B644A99030D301AAAD37FB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b0a1d3d02c44e9750726b3076bc89b0dfa86b09e8cc4e7532d7e7cfd832c4fab
MD5 67f2632b5ce859c6f1b9164280e93ea4
SHA1 887631e6e68dcfb86b53bda15654f83b61a98520
SHA512 19cd0484e0d17197613f933412a9ca3ce2c7b7d44584edf469caf8d49a36560849fa9579a7b3d576150f47c5d59e4204df80b7fd989f78c6621d6ae6c276e804
SSDEEP 1536:dHbyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:tlqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1ECC30237ABC21F339D93DB64B9130FD7A7B644A99034D301ABAD3BEB6C83591644246C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download