hxxp://fire-quip[.]co[.]za

Resubmissions

27/08/2026, 04:32

260827-e6grfsdl6w9

27/08/2026, 04:32

260827-e54vlazanf3

27/08/2026, 02:26

260827-cwzs6scr713

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
167s
max time network
162s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-fr
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-frlocale:fr-fros:windows10-ltsc_2021-x64systemwindows
submitted
27/08/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://fire-quip.co.za
Sample260827-e6grfsdl6w

Score

9^/10

discovery

Malware Config

Signatures

V12 C2/lure/stage-2 domains, IPs and stage path 1 IoCs

resource	yara_rule
behavioral2/files/0x000c0000000282f5-458.dat	Omegatech_V12_Network_Indicators

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2372	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322788210808847"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
3500	chrome.exe
3500	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe
Token: SeShutdownPrivilege	2820	chrome.exe
Token: SeCreatePagefilePrivilege	2820	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe
2820	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 2820 wrote to memory of 3724	2820	chrome.exe	83
PID 2820 wrote to memory of 572	2820	chrome.exe	84
PID 2820 wrote to memory of 572	2820	chrome.exe	84
PID 2820 wrote to memory of 2372	2820	chrome.exe	85
PID 2820 wrote to memory of 1644	2820	chrome.exe	86
PID 2820 wrote to memory of 1644	2820	chrome.exe	86
PID 2820 wrote to memory of 2724	2820	chrome.exe	88
PID 2820 wrote to memory of 4496	2820	chrome.exe	89
PID 2820 wrote to memory of 2724	2820	chrome.exe	88
PID 2820 wrote to memory of 4496	2820	chrome.exe	89
PID 2820 wrote to memory of 2872	2820	chrome.exe	90
PID 2820 wrote to memory of 2872	2820	chrome.exe	90
PID 2820 wrote to memory of 2368	2820	chrome.exe	94
PID 2820 wrote to memory of 2368	2820	chrome.exe	94
PID 2820 wrote to memory of 1564	2820	chrome.exe	98
PID 2820 wrote to memory of 1564	2820	chrome.exe	98
PID 2820 wrote to memory of 2172	2820	chrome.exe	101
PID 2820 wrote to memory of 936	2820	chrome.exe	104
PID 2820 wrote to memory of 2096	2820	chrome.exe	105
PID 2820 wrote to memory of 4228	2820	chrome.exe	106
PID 2820 wrote to memory of 3276	2820	chrome.exe	107
PID 2820 wrote to memory of 3276	2820	chrome.exe	107
PID 2820 wrote to memory of 224	2820	chrome.exe	108
PID 2820 wrote to memory of 224	2820	chrome.exe	108
PID 2820 wrote to memory of 3500	2820	chrome.exe	109

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://fire-quip.co.za
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7fff87dec728,0x7fff87dec734,0x7fff87dec740
  2⤵
  PID:3724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,7593687674097472700,2373785077230518236,262144 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2276,i,6024424948938150650,12514623030568422783,524288 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,11670230530502954295,12429221276678428386,524288 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3128,i,17970472998198600432,17430925452399307813,2097152 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3152,i,18409152711441261422,15894802636941906980,2097152 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4464,i,1423626577023095766,2284126109858734433,2097152 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3900 /prefetch:2
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4704,i,14083249297537302614,16799088759206788134,2097152 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3464,i,949403048432371630,13805084912188957980,2097152 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,8622954921693937741,1271915963596553472,524288 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:2172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,3653240962460534090,15590974958206461824,524288 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5188,i,12709375685144902428,9832823917509596399,524288 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3472,i,1801010581493117027,7899963247217134159,524288 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4904 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5920,i,17181035589193105146,16258345880799430778,2097152 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5080,i,7876688155674530396,8147479015503000959,2097152 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3372,i,14247559277195009248,11494856760598883035,262144 --field-trial-handle=2012,i,7841562242144824847,1176717925757219575,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3500

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4740

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2fb8d57dc9efb03bdfce2fe53fdd56b43ac22fc6ccd3147161d6bd6cbfbf39d7
MD5 f462b03525ed120786ccfd50a310885f
SHA1 95d17a7226fad3120180612638bed17ad800dd55
SHA512 672915d449707f3080241343262107ae2f2b5500d8bc6a6bdd250340d2779b5ed2292c0780a299c0a0c5fc45800e4e1c9ac988459282ef41c755679c3685805e
TLSH
T198E02B65D865EC2B09FD1B5C94644A56F64013671A40892F373DC108CFB67364A9781D
MD5 SHA1 SHA512 TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
Size 320KB
SHA256 4a2449802aaf50999f43cb76b7e52f94b4ad9ed629f0cf0f1c8d7756e8f1d235
MD5 aaf3d5e782d4fd86316609597ff7f014
SHA1 2e82b15ea1a7dcfdbb5035ed8ce44304c2d7230a
SHA512 ed3c22757414ed48c89e6460d1b0215b5ab9498c3245d9a2c181885be68a5da172c6857055ac19e3b0e774a59ba561690e381acf0c5801e2065a42e0684c269f
SSDEEP 6144:0AeLqKHr7KNb8ya/yx0vbqXXZleSH/+NL5T05Gsk+feSQ/Gvcq:0fLTHr88X/Jv2XXKfNLO53VMGvcq
TLSH
T1C3642325B563B6702B1CBDC6EB4D44585888CE9239E00BB655B3E49CCE316EBC132DBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 7ac90f1e4881e22e629bc197a65c603de86965ee0906f1d9e4bc30930295e574
MD5 063bcf987be3a1500fc6c6e3445b181e
SHA1 c79cb757049c02473080bda4a65fa1e1ba7cea4c
SHA512 87f91263c071498ed5d77df5af4a0668a963af6595064d63553ccd6766a3b3d539a0f5d189a7c529c3ceac9e9129bdc7a93211beaa26ea76c069d63b9af41028
TLSH
T1C541E81BE4FE5A41DF6951BD52620DE6393C3C85BFE2830B94C5AF7B3883AC4495142B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6d877125196fe12a52369b872b305225c59183395d4ec0b22a712b5189f2b236
MD5 c880dddb0da29c6352b72229e6d228b7
SHA1 78ca2386c33601ad4b906071d4bfab640630b8fa
SHA512 eb74de8c597b703bf28193a527bf6cb7fe3aeb5de44d714d58eed02fc8c6f5e86f167d7cd77bcbf01bb0c44ebd7914391ede12e586f82dbf06e00b3e8cf090ec
TLSH
T1A6511AF6F0F9AA51DF155DBC76E20DD1743C2895AA928307CCC96F362683AC04853097
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e630065ce8bfef6b4122065508e7fd91e450c1e51dc0925190e1b0641adbde86
MD5 81d415c458ad29cc12d2d0e4e8dd0625
SHA1 d47422c76c8303531d677c5c2a76f813beab9ced
SHA512 544472a6563d978032ac67284609dc52784381cb46a568b82b9e88594e379d8ced56d269e069d90255ff2d362fee6368e93c59df2209836f450b111fee07fc60
TLSH
T197615CDEC0FD9A43DF240CBC12A28DC1713878916A92873347C4AF72E843ACCF82106A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 9bf174217d0a64af37b26e6c3177fb94b5d2ae120a6d5318f4e65d8524f0345c
MD5 d808ee674e78a8bab07adf167ff3ed57
SHA1 72c4369d652d9ab44d3114b42d1f15e7dbab2ddb
SHA512 7fb3538c67c677e98b093359ad7700a9cdcdb04c5e06c5b6e3ea1784198de08a2f269ea91fa4852b4dbce135ba52669bad3ec3fec817536207149e0444d02e01
TLSH
T1F931BA2BECFE2B50CF6551BD8B524DDA34325C8AB5E2470311D46F3708877C045E5A31
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 342fd8201b3343b0d1e339f0ee1a38d80be3c2d0db9bcf555133c599ace1458c
MD5 6dacb967be125ca3d474195ee88a393d
SHA1 f55a3a038d7c1878708b98026dda774b78c3c0fc
SHA512 556e7cdac394caa2b5394eedb23e89444956c4d0bd008bff448279da37e84996afac74861f0e1c1b23da7e5526e1227bbc58ca598fc97a135d9654492835ab8a
TLSH
T1C64148F7C7D8897D8D0156F4BA252F2FCE290E14536D3C9AC8D4AE0B57E2871D24068E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a42337f646ae1201eece4cfec63fb741572a5d288a7106bbe5ada9e0490b9d76
MD5 e3f177d919e43a7bde55ca249bb9903b
SHA1 ea11303ce446bf89d9f5e4c181da2a3b421c6f54
SHA512 147156ac9e999985f15c1e0efcd584bec98acbaf59ba10c1fa9b7a5bec88d2378a3b0de466e80dbe4ba1cb5c04beebc28cc01786f7a4ed94f81fd776bf62b1c8
TLSH
T19F4159F7C7D8897D8D0156F4B6252F2FCE290E14536D3C9AC8D4AE0B57E2872D24068E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 fdb98ca0d2256ded43d65ff17859d94e1b7b23bddd136761233382c85f9511bf
MD5 a8effdf349a34bba787277450a79a069
SHA1 736cadd45f638534974eb36d1fc1745a0d59acab
SHA512 f5d01835b0c1e9551f0490cbe3cd7981ad91df32384e9b657d6d0221ca913c7d222223c97e7b29e0df92f0e807aa0a8afde2f662c5c802c30ba3bf4e7710aa65
SSDEEP 192:DUR3EHDn0aIaEd9zTbTL6D0EJXg48UAv1+t:DUR3EHDn0aIaEd9zPTL6D0EJXg48UAvQ
TLSH
T1CAD18BFB8BF8CB6E880151F5AB253E1FCE1D052443183EA6C8E59F5B93E24B6D10164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8ac5d06c273d5a7701147ddcd9610aba9029f37af1485fef08af990f5b0d4be6
MD5 85e6be6be612d31994f5dd3dae9d94fe
SHA1 a21468da6c9249fce658fa4a19612f51d5ff5167
SHA512 f6a4221078c31f32b5251ef61b86eab54bdfad6c27c0a3b8110b0e178f2c6758a4e88bcde3bb53aa68c1486f30aa32190bb93a1f67d20b4975da46e69428716c
SSDEEP 192:CR5mvO955j4iv7bpLPRpfoN9/Hsb+WNnzDBBNeEuQ9Hg8kwsafVyIsnAUgvU:CR5mm95euP5XM1wv9eYrMa5vU
TLSH
T11052D62EB954693B6CC6D22EFD267723D3F5103221981E44EBFC8A2C16DB5CD621B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2544e8df9b8f7e24b5b4511e74d75201b449806b558626eb59fc01082760f3d4
MD5 38f45d772710caa09c3838a94a594848
SHA1 ae2bd0f2d058e177616259aa29a1a0acc7831dba
SHA512 38555dadaf758c3c515670380fb7b96ef7b9bf4625e73b934977f61f67df39fbe358532a9f5397460cac83555c70f5428317478efe8a1c0a9422b75dee4387bd
SSDEEP 192:CR5mvO955jSiv7bpLPRpfoN9/Hsb+WNnzDBBNeEuQ9Hg8kwsafVyIsnAUgvU:CR5mm950uP5XM1wv9eYrMa5vU
TLSH
T12452D62EB954693B6CD6D22EFD227723D3F5103221981E44EBFC8A2C16DB5CD621B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e0115d5d7456ebef0c7ab3c0f552066241695f400ee65c5827227816245842a2
MD5 8ee180c9a386c6a158676ed0583d4ea5
SHA1 a925e575fd3dfeff1e5665bcf4301c2bbcd32970
SHA512 17682874a55e7ba374b0a6a1b6696b8cc0888eb7b44e0ba34db482d8084bd9388319d88ba269a9e0220d2917916215e0d38592ee714d79deb7d5ad33530dea24
SSDEEP 192:CR5mvO955jgPv7bpAPRp2o29/Hsb+WNnzDBcY2d9Hg8kwsaVVyIsnAUge:CR5mm95GHPUXQ1wvt27rMaDe
TLSH
T1A642E72EB914793B6CCAC22AFD227723D3F5103221981E44EBFC8A2C16DB5CC621711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0a323c323fea4b3d28ccecb6d369b75fb1bac8c6e3dfcfcf845ed2e2e5b658c6
MD5 167d85c0c9e9379254c0121611a12ba5
SHA1 3c2be28f528b8d936b289243d0deab05b9e34ee7
SHA512 33f287132e3776bcf2719f66819067fd56e528ee86d72e0916372d55359be53294d5b0fedaa0163a087e03112e321c87c015810e44d9b06bf729aa8f1d415cc0
SSDEEP 192:CR5mvO955jgtv7bpAPRp2oN9/Hsb+WNnzDBBNepD9Hg8kwsaJVyIsnAUgvU:CR5mm95GNPUXH1wv9errMavvU
TLSH
T1B342D72EB954793B6CCAD21AFD227713D3F5102221981E44EBFCCA2C16DB5CD621711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c82f755e51f9d2ed1e480c995099936aa38271cbcf8aab16eb84eefe71de6478
MD5 678ce1889540c7d951e41b603e8118a0
SHA1 24c224092caf45029593df67635e65543a35fcc5
SHA512 d5b7712a47d373f3ac2027e2f77a1fc4464e7e24e3a495bb52b1283f78ba3e36f618829588929887140b950dd87cb6502a57a19b7deae4f74539d090e7e02cde
SSDEEP 192:CR5mvO955jviv7bpLPRpfo5T9/Hsb+WNa7zDBBNHYp25uQ9Hg8kwsafVyIsnAUg8:CR5mm95xuP5XC1ws902prMa5vU
TLSH
T14052F62EB950697B6CD6D22EFD22B727D3F5103221941E44EBFC8A2C16DB5CC621B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 29a6401c303d1f0043dca111bde3f392a43ce71f54d7442f38887ad6750f5187
MD5 215541ce54f4b770b738514d27d6b405
SHA1 16026ffa272401a1604bb641f11582ba9a05c6bf
SHA512 4f84af62477d9469376a1b277abf083b3993def90804e66f671206c7242dacc8a709c930dd68f12356d64f90d5865696abfc26793f2cec7565616f9245853b74
SSDEEP 192:CR5mvO955jvEv7bpLPRpfo5T9/Hsb+WNa7zDBBNHYp25uQ9Hg8kwsafVyIsnAUg8:CR5mm95xgP5XC1ws902prMa5vU
TLSH
T11952F72EB950697B6CD6D22EFD22B727D3F5103221941E44EBFC8A2C16DB5CC621B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e6928d2f58433043db1d7033bd372c231195723e4dcacf8ce2250e9ed32ce040
MD5 d002e93aedd476b5fa85cd4883cc90b9
SHA1 f71ef357d496f17da24b4bbe0ab339a5c2acdc8e
SHA512 2c645e13318c3c2c228a5a20495c5cfe11564b499512d78c425f5e0e8191d42b1ebd1ccd212f01090ea92ef16765654733ed2befda6b75c17ddc91da8d7a2920
SSDEEP 192:CR5mvO955jvfv7bpLPRpfo5F9/Hsb+WNa7zDBBNHYp25uQ9Hg8kwsafVyIsnAUg4:CR5mm95x3P5X01ws902prMa5vQ
TLSH
T1C552F82EB950697B6CD6D22EFD22B727D3F5103221941E44EBFC8A2C16DB5CC621B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 fd8bcfa1d31722f9e1973c843f9d23ac2965c2bfee27ea56a995df2e3cf41e8b
MD5 fb1cbe09384ea007b5ff6e1a5e397569
SHA1 c511487ef2ffbeb297453c477eaee5f5795be7db
SHA512 e05f26612e106ff2830f718c375c603f0a2da75c8dd9a6ee174651fb901ebaf4aeb3591192f13789af5e39e0dbcb06989d2b3c701ab35fa60a4a3f6e76346600
SSDEEP 384:RrjNI7KxkXqKf/pUZNCgVLH2Hfgsl4Tv7pLKLc4j/6XODNI+ErU3BtzHo+lv3EVA:RHNI7KxkXqKf/pUZNCgVLH2HfgsmT7pm
TLSH
T112720A677C4C9A3B0F94C68CE8177F4FADB5025B66E9886543FA881503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 06fd4d1c20f1305f5b48ffbfad5fd6cd14956f55282258c4fd3a267ed16deb36
MD5 ff5ef3c3d16dce64df68452823a51c11
SHA1 3e6ad295d4c780b16ae55cd546c8849d6161ccbf
SHA512 529a0d47cfc9deae767b0f4b8e6e813399e592dd8fe15f83aa5a6a02ad28ecc190f3faf3012c810d847726f6943e8eb88b6092c1446618511ca7253ab13cd825
TLSH
T1BEB0120184116101C04203F4234218C971145F14964A174643E0AD32D826573C018093
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a3dc.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a3dc.TMP
Size 96B
SHA256 e900b3999216cec64e20a4d501dbaf212158bb64c0e7b34b56700f7c23f602c6
MD5 6085db90d81769a4e2c8d48f24ae3eab
SHA1 24d6c412ac2f20248d6d8b845c0fed1bb5f07b84
SHA512 49838acfffab4fb8b26f015b172fd080b81b032318e3214eef443dd806d96e2a170ad11b33afae81a5b59b912edfae42b5c2c0cc4f7b0fb7c65c7f03d9014d88
TLSH
T12FB022A3C20AB302C00203B0328880CC3030EF20C203C22382E02E32FC32A300820030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1b16105490a56d3c11f0db7ef60e0d0f919700bc3bec564eea1807f06e1fb0ea
MD5 f55cf12f6981a08a199dbca08905848f
SHA1 17923760ee0a21f0fcced0ef380b27e5f18e71a0
SHA512 8c62592e401c5bb2d07a099c075bd6ec349fbe16b087e51e3c8e05d21ec734006dfc9adf28d39161f91943cf1d15da068c47c472365efccf960fbfe050e02535
SSDEEP 3072:PsGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM1:Xm7Rkm1tYpBeh2BAo1
TLSH
T1DFC302375DB5EC374CB9BB4EB04E0B1F1DF149A7D924EE52C8D85A0827E96CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 df957807ff8e1c6dede9c99f642a4808e30571a9d87a63a7288e63df737f9c46
MD5 af237ca2f48c1342b06fff9fe3d10881
SHA1 2fedee968207c3b61f5edc4fd01b813656185a8d
SHA512 cc784f5178fd8dc6f52c906e8fc1bd47d3ef74e17014a75b7d199f26e9ecf832564c47aadf9370f1f176084781d20b33748eaa4d3aba5bd4f2928948253081f9
SSDEEP 3072:1TGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM1:1qm7Rkm1tYpBeh2BAo1
TLSH
T1D9C312275EB1E9375C79AB0EB48E0B1F1EF149A3C920DE92C8D85A0477FA7CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7df224f4b3731d6bc158cccd0238fef466547ada38253dbb98a8f464549ba115
MD5 e9cf946c20518c1ddca09a359069f784
SHA1 d28f18a7f70379acc157e898de7657f50e674d06
SHA512 b7c7efc2467470768939193d998fec908492072f5edd9f52eb79affccc84b6bf57e7eab99cccf0e89b2c1af1c68945fc08484ed9831124de6dc0e2c5fd974d07
SSDEEP 3072:ZGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM1:Ym7Rkm1tYpBeh2BAo1
TLSH
T183C312275DA4ED365CB9BB1EB04E0B1F1EF249B7C920DE92C8D85B0423EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 425541be7b85dde0f6822fe651367d11dd98e526413127bc1d95c114e2ca64ba
MD5 405c381d9fdbac9e6f53d8a3df6c76d3
SHA1 af5dbecd11c50a858116cd231e7da967d3269803
SHA512 83cf0839b5a04d1eb6252736b4e7f5a76858e14b2e2bca033b48f0748ea99b7f55df42eb8b61f10abb9401e38d3339c00f68339cb63bb051666e25d6e635750a
SSDEEP 3072:wGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM1:7m7Rkm1tYpBeh2BAo1
TLSH
T190C312275DA4ED365CB9BB1EB04E0B1F1EF249B7C920DE92C8D85B0423EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download