hxxp://netvertexpoint[.]com/?gad_source=5&gad_campaignid=23866699872&gclid=EAIaIQobChMI-cTpjOXClgMVZl0ABh1-zCTHEAEYASAAEgLLtfD_BwE

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/08/2026, 09:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://netvertexpoint.com/?gad_source=5&gad_campaignid=23866699872&gclid=EAIaIQobChMI-cTpjOXClgMVZl0ABh1-zCTHEAEYASAAEgLLtfD_BwE
Sample260828-k1xtdacd49

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4372	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323814990696911"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4220	chrome.exe
4220	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 2888	4384	chrome.exe	86
PID 4384 wrote to memory of 4372	4384	chrome.exe	87
PID 4384 wrote to memory of 1080	4384	chrome.exe	88
PID 4384 wrote to memory of 1080	4384	chrome.exe	88
PID 4384 wrote to memory of 1180	4384	chrome.exe	89
PID 4384 wrote to memory of 1180	4384	chrome.exe	89
PID 4384 wrote to memory of 4644	4384	chrome.exe	90
PID 4384 wrote to memory of 4644	4384	chrome.exe	90
PID 4384 wrote to memory of 2992	4384	chrome.exe	91
PID 4384 wrote to memory of 2992	4384	chrome.exe	91
PID 4384 wrote to memory of 4728	4384	chrome.exe	92
PID 4384 wrote to memory of 4728	4384	chrome.exe	92
PID 4384 wrote to memory of 800	4384	chrome.exe	94
PID 4384 wrote to memory of 800	4384	chrome.exe	94
PID 4384 wrote to memory of 2792	4384	chrome.exe	96
PID 4384 wrote to memory of 2096	4384	chrome.exe	106
PID 4384 wrote to memory of 604	4384	chrome.exe	107
PID 4384 wrote to memory of 2412	4384	chrome.exe	108
PID 4384 wrote to memory of 4220	4384	chrome.exe	117

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://netvertexpoint.com/?gad_source=5&gad_campaignid=23866699872&gclid=EAIaIQobChMI-cTpjOXClgMVZl0ABh1-zCTHEAEYASAAEgLLtfD_BwE
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9cffcc728,0x7ff9cffcc734,0x7ff9cffcc740
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,937824277556091742,344212122242475701,524288 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,15543206967929079829,1302387609101371888,262144 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:1080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,6328567287012132573,6446095865220285083,524288 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:1180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3024,i,292656297558206761,10302721562211676253,2097152 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3088 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3012,i,11078571556902861234,8816969131208499326,2097152 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2936 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4256,i,4449781799347146115,15940613207773485603,2097152 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:4728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4748,i,13888285085428131527,39621006155836114,2097152 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,10802005216264650480,839254322329049881,524288 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,2266818111409965106,15567266104305180535,524288 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,9112121112368754320,10151083526830998459,524288 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  PID:604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5364,i,16156204899614369859,16301568754824599718,524288 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:2412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4280,i,4254199773074973259,596376117585101405,262144 --field-trial-handle=2052,i,16851970324797357368,13012798810949182291,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4220

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4424

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 725fd71aceb3450f186e762940db01a42a85787ab1edb93c48776befc1c99ec6
MD5 408f9568b38c7182c862004156c584a1
SHA1 355510dbdcfda0ce5fc591c160cd3c4ba74bf416
SHA512 2c31082a9352169cb9d166744cff860c8f0e597405f78edf708c6adbb73466e2aea880f19344251c6d3d0daca5a40a5dc1514f72998b785f4fe13fe33cd74819
TLSH
T1FAE02BADC821AC2708FD5B2860544746E741131B7F90C94F3B3D81498FB9A3B41AAC2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 312ae12a587a5184ff7668b7b483799bbd28da613ee9e003b50321f5c6ba9d5f
MD5 1160ae96e741227798d5805dfb29105b
SHA1 92bc3f0914d7dda3c9c57f9bdc8f0648badfd878
SHA512 04cf1f93fbf863cb673d1aafafe4621af375c44a68af48310a704e8c3db472da077207312a97231f4dae9202dff3e1e57739b4bdb6232afba542090bbac349e1
TLSH
T125B0220083802803EBC003B03CE8200832B00F038B2B3A2380C228E3E030FFAE003232
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b0f2b6879c62edd996417770c5715f6922c7448290481fc2ebe609ee957a4da6
MD5 9d6284b009d72e00e99bea030e617731
SHA1 2df87d09967268d6babb2aa78cae6d43d1fe3694
SHA512 ee88c4c1a9efe0de4d752be0990225633b4c2e50be9860f08feb68087551a7a85b00e80339df5ee8f3c268141e24571fea9e6a2b674efac023c10d95be3b44db
TLSH
T1AE51CDFB93B4957D8A1192F4EA18AF1FCE6D0520535C3CA6C4D4AE1B93F29B1D14074E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 86391956bb0d9508ca81be4ad8ba5f3ae8117f819be766d7ff0e8d7c995b1134
MD5 9194909a4db22d43186bc7fbbbf064c8
SHA1 0bc82af37c59664829bcd3a8557de2f153f3b0e4
SHA512 9803783ef72401a8c8b106ae196128845882856df16b2bd1492788ebd6bb23c6eeda5612c46bcb586dca10e4d0a000178780d625f05a0ddaa5a446423fcf6237
SSDEEP 192:4ROnsrI4QHKv7cpAPRp2qUz9BHsb+WNnMnUPA2gVF8laIrE+VyIsnAUge:4ROngIVGwUXlurw4h2gAaOE2e
TLSH
T11742D72EB91029BB5DD6C239F9157B53E7F5102525942EC4EAFCC93C25EB6CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 9fed768b2cfb9350f0a5a2355e2bc0e1acda5f5d8d6e3538d71125a345e5f46f
MD5 632ef144573090a85303b48c2925110f
SHA1 c323cd36471f0ef4aca9e7e17e2f2da99cc89c22
SHA512 b8391f51fd84f6360df901e6ceb7b768877b2ae0293ebc517c7c875bdb4ba906704217ad4bfc4d3b50a3cee8cc8675e62786aa6bd1b2933cb637d193ce75e498
TLSH
T10FB01201C001E141C08606F411525488B2586F10970E2B0283E07966C82D5628028261
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e402.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e402.TMP
Size 96B
SHA256 a5133f3d98c0199bdf988824f8b433003dcfae2a825fcbf7c3b0b249536d9823
MD5 df7d510fa91980b82ce23e04f68e1304
SHA1 6bd9b32d06b8154d43ca4e05591033dce8d4fe5e
SHA512 18fdd883e1888fcf459d10da1b93d2da18bd12c49ea4807d3426e659b0aed8f25c69eb5f9581314a5af7f2527ccb9f79384c4b328659cfcf9208791223030e47
TLSH
T1A0B02280C00A2202C0B203F02080A0C83320CF22C303030382E00EB2CC203300E320E3
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f8447abb5a760d0ee6a7b98afbb27eabb8d7efc4804338dec70b69933c088f10
MD5 3e5765858ee4579fee70043c5de2c34b
SHA1 8d535949f9c998fff195908c6c791827ff53164e
SHA512 e85a1df0c6e318b1772c17635bd0b571b16221266698b892d6c9c44a20b836eeae49fde085585b570976ab1a6721b4b38b90bae7fe3baf4815e032e1ff9239a2
SSDEEP 3072:S9bFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:IbFmUi21rSm8uUVNSlzY/
TLSH
T1CBC31210B9E3B8B3EE9930447BDE3A148DA80D818290C60156739D419DEF3C66FEBB34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 515b903ac0a503125b048497f2987f7fbafaa5dc43d606fe67ac29c34a26bf33
MD5 5a35b31628e5ba106b2532109586283c
SHA1 74dabad614e3ed98387f9ae055b57ff17acf686a
SHA512 a9f15e7507f42b17a53032d13b8cb13a35751d5672a03499dc65cae31b672a1a4a73f69a876ece3f506cf7149746cdb81d0d710fd8d8fd6752e97f8d8c1c05a2
SSDEEP 3072:SEFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:fFmUi21rSm8uUVNSlzY/
TLSH
T1B4C31200BAE3F8B2EE9930547AEE3A158E680D818191C54147739D419DDF3C61FEBB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 5752348a0a0f563479de6089478f1c2638d0419a2f3f01e104e87a61d247fa53
MD5 834bf6bad4714a163ad34e8b4f2f421f
SHA1 3ceebeaccb2c9390a397a92a56d0f2818e810d00
SHA512 b460553bf01e8389ae785eca009ced6d45090530dfe8649750fd84de7d272a0183c192b4cf27d018679f513d12212b771f82e51dbd7f121106f39ac5ebdc6d84
SSDEEP 3072:SPFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:aFmUi21rSm8uUVNSlzY/
TLSH
T116C31300B6E3E8F2EE5930447BEE2A145D6C0D818291C64156739D419DEF3C75FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 31e9359d5a0690faf0ca9d936b813539ac2c0a4f16661de6a95e63ac18b37c39
MD5 d39dab3a9a3921d3ba0d35d95fe1a67d
SHA1 baa573bcaeac546e4f49641c1ec00c8303b043d7
SHA512 a55abbfdf86f84aac23d6467c7dc1d2e4513e63829a8503dc2f3412e3741db50790ee924a4e8ec903d7971f77245c635a6490408ca057a14131921e523275f24
SSDEEP 3072:SZFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:YFmUi21rSm8uUVNSlzY/
TLSH
T149C31200B9E3F8B3EE9930547AEE3A158D680D818191C54157739E419DDF3C61FEAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download