hxxp://fire-quip[.]co[.]za

Resubmissions

27/08/2026, 04:32

260827-e6grfsdl6w9

27/08/2026, 04:32

260827-e54vlazanf3

27/08/2026, 02:26

260827-cwzs6scr713

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
129s
max time network
128s
platform
windows11-21h2_x64
resource
win11-20260513-fr
resource tags

arch:x64arch:x86image:win11-20260513-frlocale:fr-fros:windows11-21h2-x64systemwindows
submitted
27/08/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://fire-quip.co.za
Sample260827-e6grfsdl6w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1272	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322788142214220"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1384	chrome.exe
1384	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe
Token: SeShutdownPrivilege	1280	chrome.exe
Token: SeCreatePagefilePrivilege	1280	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe
1280	chrome.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 1280 wrote to memory of 4080	1280	chrome.exe	80
PID 1280 wrote to memory of 3908	1280	chrome.exe	81
PID 1280 wrote to memory of 3908	1280	chrome.exe	81
PID 1280 wrote to memory of 1272	1280	chrome.exe	82
PID 1280 wrote to memory of 1600	1280	chrome.exe	83
PID 1280 wrote to memory of 1600	1280	chrome.exe	83
PID 1280 wrote to memory of 3100	1280	chrome.exe	84
PID 1280 wrote to memory of 3100	1280	chrome.exe	84
PID 1280 wrote to memory of 2384	1280	chrome.exe	85
PID 1280 wrote to memory of 2384	1280	chrome.exe	85
PID 1280 wrote to memory of 1428	1280	chrome.exe	88
PID 1280 wrote to memory of 1428	1280	chrome.exe	88
PID 1280 wrote to memory of 4832	1280	chrome.exe	89
PID 1280 wrote to memory of 4192	1280	chrome.exe	91
PID 1280 wrote to memory of 4192	1280	chrome.exe	91
PID 1280 wrote to memory of 1440	1280	chrome.exe	92
PID 1280 wrote to memory of 1440	1280	chrome.exe	92
PID 1280 wrote to memory of 3580	1280	chrome.exe	93
PID 1280 wrote to memory of 3580	1280	chrome.exe	93
PID 1280 wrote to memory of 4988	1280	chrome.exe	94
PID 1280 wrote to memory of 5036	1280	chrome.exe	95
PID 1280 wrote to memory of 1164	1280	chrome.exe	96
PID 1280 wrote to memory of 3628	1280	chrome.exe	97
PID 1280 wrote to memory of 3628	1280	chrome.exe	97
PID 1280 wrote to memory of 1384	1280	chrome.exe	98
PID 1280 wrote to memory of 4808	1280	chrome.exe	99
PID 1280 wrote to memory of 4808	1280	chrome.exe	99

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://fire-quip.co.za
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff5599c728,0x7fff5599c734,0x7fff5599c740
  2⤵
  PID:4080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1592,i,11809514792482791114,681892134267017248,262144 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1452,i,3841461304452904684,11411402047689905216,524288 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2192 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,17138950199092965483,3489837066289788299,524288 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2564 /prefetch:13
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,12558248767803854552,6474597664796604795,2097152 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3132,i,5823367445587848486,8017479769896242618,2097152 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4264,i,15581804187293542746,8480495757842473452,2097152 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4276 /prefetch:9
  2⤵
  PID:1428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,1180045277890470532,6766171777037311690,524288 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:4832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5616,i,10236404791183222918,9322688966657079133,2097152 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5360,i,6747353066556331724,78058029671500195,2097152 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3132,i,13768927238154058584,14887019985413302472,2097152 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:3580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3884,i,16272210640166515453,985446112496727030,524288 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5648 /prefetch:14
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5444,i,7334401328153297532,1537795563187369982,524288 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2952 /prefetch:14
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,6566340564416900313,15249725448746010578,524288 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5576 /prefetch:14
  2⤵
  PID:1164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=1064,i,13172491196878995154,5279897964149495782,2097152 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=740 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5724,i,5300239485878375222,7550368662815427631,262144 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5596,i,4845804440489676281,1385932127213448873,2097152 --field-trial-handle=1912,i,16815902573613277031,15936357848219876279,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:4808

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2960

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2edd28acf193f0059631910629b25b1ebcd5cdf80a0be265ed660b13f2d23ac9
MD5 acbe38f60dc37337a985572a0ac9441b
SHA1 c7b7e035d39e7a92005ab453d3f4f68b7a7e8ad5
SHA512 6c628394dc4a69cc0cca5d0b7e3a0d0460ecabda94baa7a513e16bd390c33de92daef82ed434213c1a425eaaeab452ece0cd3d7e2ed7eb17e3e2303dc997420a
TLSH
T109E02BE9C852EC3708FE176C60600746F79013672E418A5F3F3C91188F7573A418A86C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8a93411b2167b4f0cf39cdcc0c809082383d48b13118195c9c26c4f7a8b15c45
MD5 fc3b76da3d4fedaaf67d9b908cb28002
SHA1 e4c509c07ce15aa826c1bf880d142eac3a040882
SHA512 d2d4318fa411bc5bdb55633b9af479739ad312d861191017a5e55c15e76090744d0e530b899d5e22bd3ca559dfd959f7348298d4d076a82f3bf61705c76ead0a
TLSH
T160419FF793B4857D8A1192F4DA156E1FCE6D0524031C3CA689D46E2B83F2972D20179F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 274fc22d8bbd6aa36ee356f669fefcaeb87831415dc85c788fc94a3f0aec8add
MD5 98166aa8445e97b8f66d0ecb59d7f328
SHA1 410744a5226aa2552a41eb5a6d6b44db9c3b6d4b
SHA512 7e8afd226864d5af54adc7542ba1b9b279c77e139893052c7b8c0ba8a7530714e5d5e56ec8c1df9187144fb8ee2fcf778dcc678f2ab8754aca6d0705848e8b3a
SSDEEP 384:4RMkGv2bVF7xy1Cyo2ZUXArvS52VR42MIlE:ZkGv2bVF7xy1Cyoq/rvZQ28
TLSH
T19452D62EAA506D3B5CEBC229F9657767DBF5106220D41E80EAFCC96C15E79CC322740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4e451c3fc989e25f4a109f28d2f7a74372539b90736cedc7861794cec847cc6e
MD5 bd7c6032650e31a916bc7f04f9955b57
SHA1 376ccf882eacd99dfd35fac82685f9a056807313
SHA512 885010a890b3ffa5ecf7e5818b139e904b1e4f641f369ec5ef4fc6c5898fe9ba14985151be3f7c4c41b5cfc1a52541f746777bc056f2256e7eee5d88b5db849e
SSDEEP 384:4RMkGv2bVF7xy1CyoNZUXKrbSP3R42MIxe:ZkGv2bVF7xy1CyoTjrbIS2G
TLSH
T15742C52EAA506C3B5CDBC229FD657763DBF5102620941E80EAFC896C09E79CC322740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c5b3ec3843d405d8ab68156024ba410c5b9f5463a40b04f966aa7803953c7710
MD5 0815541cb4311fd0f8e4e968d28f27fe
SHA1 91f72de4ec7f69d197e86da7d761eccbd3e17e51
SHA512 f978997d6aa9130daa3c71b1cd1efc98eb0904cd0aff753119b647d758c7757b399eb31619c5dd151ff0f51ce122a1e83164aea39b2da1c16f5db9282ed1aaa0
SSDEEP 384:4RMkGv2bVF7xy1CyojZ2XGrrS52xR42MI5E:ZkGv2bVF7xy1CyoFLrrZU2Q
TLSH
T18352E62AA9506D3B5CEBC229F9657B63D7F5103220941E80EAFCC96C16E79CD322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 bcf51dddbbc74e89d973047bb9ed11bed37d5c71c881472e5c65cd07209878bf
MD5 d1a2b9a1370cf5082caa252f05349e88
SHA1 b1f59063031290f908de776d482a91aaf630dc1d
SHA512 844132c191ec52d90230f099675861466169f17dfa1a62689572d5214a5de044a1d7c5f8ee9cb7a082a4d809962afc054e52985048d8df5242110f1240f0d5d1
SSDEEP 384:8mjoj7KxkXqKf/pUZNCgVLH2HfgslTg97pLKLc4juvXODof+ErU3i45HotEv8lS:8Goj7KxkXqKf/pUZNCgVLH2HfgsZg974
TLSH
T1FA72F8676C4C9E370F94CACCDC177B4F9DB5014B65E9846483FA982903D5BDB210A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 297317fbf304e0d871da66f74037e794be59f9218da4f552d0bb828eff59e4ce
MD5 e663632a57cf94f2f8ec84c05a17ccc6
SHA1 67a3304a318dffa11003f77cf81db88ca654d9f4
SHA512 4a222f3d5cf40ebfb4f76bde9ed03c9904cd75e59ac75eebdcd02e9a29403f543251d11ffa3256ec9489babc3992c8ec7ee44916ae92431b28ec984c3b4b56c0
TLSH
T189B012C0C4415245C01A06F43142248971149F10F60B572543E479338C26150C054050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e19c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59e19c.TMP
Size 96B
SHA256 73b34d332485ae730c668fc1e9897518d289953cac47d7410bd7d54a9b0ebd61
MD5 d233d7ecb9a93a63b09bfe0e9cd8535e
SHA1 74a88d78636445afafffc4b68acba164c7711b07
SHA512 a579ccab87eef64e91fbc00f853736f72a0feef12e20c03ca04f0678ed5eceff9459b72dea639230bb1fb88c61c3d3b5f212180518c4ba27fb407fdaca4c8a4e
TLSH
T1C5B02200C002A202C80303B038C080E830B0CFA0CE032202C2F00A32CC333A08020020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0d229d747a62d1654f2014dad8c561de0a6d76bc1eef439a3ec1a241bd7be0f5
MD5 208da53b1539a62efc30183c43ddb7ef
SHA1 a63f08e9d58a0f9e70027aca6897b80b9ccb21ff
SHA512 c712b8455d4b34a684c594d5bece623ed9aea7d88dd40473b6c8fceb60fc0465b7073e2765d1be62392d2176f9eaa5037883d6adeaeccec7cf81a5fa2489bb9f
SSDEEP 3072:jNNGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:jNEm7Rkm1tYpBeh2BAoi
TLSH
T12AC312379DB4EC3659B9BB1EB44E0A1F1EF14DA3C924EE52C8D45A0423EA7CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4ad2284f68d64f0bcdeb746f86fb81b88f5fca97237f2f0d8a057255c553ff29
MD5 426a14c077ad32ea1fe717ff66ca9d6e
SHA1 b4042aad4c53bd0120558449c8d49168813356e9
SHA512 93e5bfa152f0a3aca2bd29332bf25a6b320c65c5e900204cacd8629e8c6d8a4a8369ccb2bb292c6ea1df015a654aa35e6f92b0abfe81150810fb1859bd3d6677
SSDEEP 3072:ANNGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:ANEm7Rkm1tYpBeh2BAoi
TLSH
T12AC312379DB4EC3659B9BB1EB44E0A1F1EF14DA3C924EE52C8D45A0423EA7CC0A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b7fbb56257f239ff02a28313aa00073b10433c325f4895dffa243b8c29684ea4
MD5 2b2d08f98cb93e3c09f3ebf52f04bf13
SHA1 33eec510fc366afb4c810a3869b74fec11d2b42f
SHA512 0d3b9da37d64c988eb4dc60b8975ab309cab808a19adf70904740b47838a0dd24c510b29a9032dd9a30ef4f180684795aa70307f0e21b6404d273ab3565f30c7
SSDEEP 3072:AyUcGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:ANvm7Rkm1tYpBeh2BAoi
TLSH
T18BC312379DB4AC3B4DB9BB1EB04E0E1F1DF149A3D824EE52C8D85A0423E97CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 dcd639506aaf01075b9443c82def84a3ded3a30dc33d114cfd1998d0133558f1
MD5 6b3ab8611787d1bed9192b0a9ab0d193
SHA1 19493710db7e0a7aa0d180f39b4ad6e1cdaacf1b
SHA512 39d5caf44cce0b09770458671f3c336cebf02c1e176a4cdfd8f62146f88ec4f81de04f32862a7fbc51665b2199737f22550c34541b4c1de67e9fc1d5dc99f6eb
SSDEEP 3072:oKGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:oNm7Rkm1tYpBeh2BAoi
TLSH
T143C312375E71E9365979AB0EB48E0B1F2EF149A6C820DE92C8D85A0437E97CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download