hxxp://cracked[.]st

Analysis

max time kernel
900s
max time network
901s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
28/08/2026, 18:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://cracked.st
Sample260828-xl41cssdmg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4700	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134324171363317790"	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-101591186-421676486-4137282292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-101591186-421676486-4137282292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-101591186-421676486-4137282292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-101591186-421676486-4137282292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4420	chrome.exe
4420	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe
Token: SeShutdownPrivilege	4608	chrome.exe
Token: SeCreatePagefilePrivilege	4608	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe
4608	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 4608 wrote to memory of 4488	4608	chrome.exe	81
PID 4608 wrote to memory of 4696	4608	chrome.exe	82
PID 4608 wrote to memory of 4696	4608	chrome.exe	82
PID 4608 wrote to memory of 4700	4608	chrome.exe	83
PID 4608 wrote to memory of 4896	4608	chrome.exe	84
PID 4608 wrote to memory of 4896	4608	chrome.exe	84
PID 4608 wrote to memory of 1940	4608	chrome.exe	86
PID 4608 wrote to memory of 3476	4608	chrome.exe	87
PID 4608 wrote to memory of 1940	4608	chrome.exe	86
PID 4608 wrote to memory of 3476	4608	chrome.exe	87
PID 4608 wrote to memory of 5236	4608	chrome.exe	88
PID 4608 wrote to memory of 5236	4608	chrome.exe	88
PID 4608 wrote to memory of 1868	4608	chrome.exe	89
PID 4608 wrote to memory of 1868	4608	chrome.exe	89
PID 4608 wrote to memory of 4636	4608	chrome.exe	92
PID 4608 wrote to memory of 3444	4608	chrome.exe	96
PID 4608 wrote to memory of 1352	4608	chrome.exe	97
PID 4608 wrote to memory of 64	4608	chrome.exe	98
PID 4608 wrote to memory of 4420	4608	chrome.exe	105
PID 4608 wrote to memory of 2732	4608	chrome.exe	107
PID 4608 wrote to memory of 2732	4608	chrome.exe	107

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://cracked.st
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffadf64c728,0x7ffadf64c734,0x7ffadf64c740
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,11704370598715844196,17847485841948892111,262144 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1620,i,3315965669752956240,5015392259669055766,524288 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,12515800676455403080,6213131842230506744,524288 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,8558358637436689635,5976920660908558343,2097152 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3144 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,9364647662210025922,1237421222986955013,2097152 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4404,i,18026342609294390136,3461929017463908461,2097152 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4420 /prefetch:2
  2⤵
  PID:5236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4676,i,16585441771085094543,4474460569198068266,2097152 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5648,i,4683727691716579851,3911523990899115991,524288 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,7484373934604947878,12294360106817865316,524288 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5596,i,14871758414646067893,4331439036595948911,524288 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:1352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5672,i,10212422337892822573,867830375049910225,524288 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:64
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4928,i,13979305836834410235,579655778531469880,262144 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4924 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4424,i,11152931006339584943,1765916038658959064,524288 --field-trial-handle=2008,i,5442783794662099742,6495076472278665883,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:2732

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5756

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1db5ea18bf036124dc743595330ecc30a9a872a71715c35f6c6342c186fcf6a9
MD5 485bc2c93abb6e4959c21ed3a6f42b98
SHA1 e3e5a66101309d5c574ea766be80e577b25b800b
SHA512 3dc647e51a4a46fed28e7c08d1acea03e8b9a9a5a5044605119a232cb2b4a32681b955b89d3ed24793e019cccc1ab3880ab1258674adc2368f7db8b1cc0d61f1
TLSH
T121E02BA9C921A87718FD172D9144478AF70413A72A50455F363D520F8FF173B51C695C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 d975eb833e8e8ccacd4815cfa0221dbae5fc4e3471a9d44244506e3b951a28f6
MD5 56b1b836e0b20de3b2861eb4a1c9077f
SHA1 9de8da474aba61f5f345c32fee58d9da51850e85
SHA512 37ebcc74a49a33271a7f2b8681c8f1d8e13c1404c5b46a426872ad996d64760e5699174ee927ef13d5f80935b5c4292af12856694399a42e5858a4cc8094ffdc
TLSH
T161D01261D58FA481D314CFF458E4C958B5704B9C946B2D215DBC017D3AA03105F83447
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ee3ee2ef58a47059c71bce7242131bf42e8c6f2e74ef6401b7dc7b30a88fe645
MD5 782ec521456db9bba7981ccb5c2f00c5
SHA1 22e1f6137e0148c7f124d793b8f2de5712d75785
SHA512 e1b16e6fc13f27ce115e16e31f92a43a0a8e731078562a2079f9e7e7767ff890c605af211849ee1ba98e1f11e4d8b65588867f67240c3cb517bb8837d450da2c
TLSH
T1DD818CF793F8CA6E8B1165F0AA152F1FCE1C0920436C3876C5D49E1B93E2972E14078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 b8245525a4e5995109fbc6bdf32c0f3a4238822244f967412fc35fd872573f6d
MD5 6daf4cdef94734e28579a194030467db
SHA1 f4c1edd447be6d15f79e55ba343280a51f2adfec
SHA512 669b9a724a95291f5a5841e5168abf6b65c159619da6c1d4dbd66a142230e073d3c37c9f0b9a8f12b5c640af04e67149eb362caa16c3d16f9761d7fdb27d8d97
SSDEEP 48:YALl1SP1faXYEfo7d7rs6gmzsI4s/QgcpusNVGzs1PIcAsA+ssjhhnONgcGsXScu:Dm1aIEad7DD/TcpJpPIcIOjhncxScu
TLSH
T14F818CF797F4CA6E8B10A5F4AA156E1FCE1D0824476C3876C9D45E2B93E2872E14078E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 2b8bacd3a27e545be899641ed19aca45b5a63c46f4da79ff6c105eb5ad2d021e
MD5 433e4f393c766a08c5676b75fb684f35
SHA1 7a30a4eab3cb6fb577e24b2a0c80121f1894e81b
SHA512 0d68cb97282e10f3b758042aa548eb64898e2b0b170f0abd827ff9e9a1f92702b96e7d1c14bd0d9c9698d170990fdd81cc37d1eaaa711462968614399e8d05e0
SSDEEP 48:YALl1SI1raXYEfo7d7rs6gmzsI4s/QzsuJs3cpusNVGzs1PIcAsA+ssjhhnONgcF:DRJaIEad7DD/MscpJpPIcIOjhncDci
TLSH
T14A919DF793F8CA6E8B1165F4AA152E1FCE1C0924436C3866C4D49E2B93E2872E14078E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 aafdec7373d6aed54f899a9bd690b8b457912d89a1cb73d0310d8b59346b70a0
MD5 7fe5167ef4e0e757bbb18cd75bc739f0
SHA1 9eaa3278fb5e8f5d5c2dced23c4b1092448fcdbe
SHA512 a2a08d5ca07407f103ea89db3a5b2e63b841279c252bd9bf9a7c7aa5397af6706c692cbf13a51246e27531d1fa680a7bda9f4e423c724cff0a2bee535480bb5a
TLSH
T1E511AFE7D17F7067107D48B72D0AB815A5B6B830469228E0CE62C26DF0815E31F15462
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 465acaea8e5ffd00dfd82b6b97bb34939b73d44c756829fc4f45213671db5f0b
MD5 1ced98b0bc8efe4131f9ec73079f55ed
SHA1 a0ff4cd067f2cc6e4fac8a95f2e3ac8d47870873
SHA512 18d70eb7b17e9471dbd395940dead5e85ec54cee44f3e846cead1fcea362a2cef33ff7ac1fa11531321e7ea46a5aea0ac0aa772f314e4a80304f036f62e2353a
SSDEEP 192:9RXXs1/W+9Qv7dpAPRp2uR97Hsb+WNngoym8b2koSkwVqZVyIsnAUge:9RXXMM5UXDdwg9x2BS1Ue
TLSH
T10742E72EBD10753B5DDFD22AFA257B57E7F5202121841E88E6FC8A2C18E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8b382aef3a1079663b07646c9536bb7393d6ca703f7f7b5996ab904e60806b33
MD5 f37620991a5b53e02610eab941a6486d
SHA1 16d6d9efd6a52efad998f05c9925be4363828733
SHA512 51e518a2e125de131e340dfe02044b817f7a5e96dba83e539eff15f82b2e68f7b1c730d9b3496949d240d1a9275fa17207732322771b50a8cdc8357436a0d109
SSDEEP 192:9RXX91/W+9Qv7dpLPRpHuR97Hsb+WNngoym8b2EoSkwVqUVyIsnAUgE:9RXXXM5RXqdwg9x2hS1dE
TLSH
T1DA52E72EAD10353B5DDFD22AFA257B57E7F5203121901E88E6FC8A2C18E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 6646989bfcb5c97513acdde7bf1e6a934ad9e4a758723746e8ad756689192b52
MD5 a53b398127eef947fb45f97818cbc504
SHA1 feb83c16e01a91151075652e72c375abfdb60d64
SHA512 7d4597211aa3b5d84a9750798703e7119d689c2b5783eba16dc6b3a7fad248d1392de105073b4174c487374230945692a752279764d5846cd7995ff455d202cc
SSDEEP 384:UOjwL7KxkXqKf/pUZNCgVLH2Hfgsl5T7pLuLcSjGHXODwn+ErU3uZHG29t8OPHu:U+wL7KxkXqKf/pUZNCgVLH2Hfgs3T7pe
TLSH
T16772F8A76C4C9E370FD8C5CCD82A7B4FADB5024B65E9886482FA581903D5BDB11062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 118adf0b7d44e4a168193339aa5fed896ac4ca736e5eb0a590cddaaa81f4e3d7
MD5 f2327e125bbbc9ce2737ce4967f3225e
SHA1 6d07dcdde4c20749c8c48445073a84edbda17068
SHA512 6d7dca3b084316786e86b33fd842b83d2312261048bf1ca7942f32edd01b22b97b1bf5b21e96f894806bf2dfb55d28403fe02e27696c853f7f5736c2018b4c29
TLSH
T120B0128180019111C04203F01583248871545F20960A170183E06923DD269A185260A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589258.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589258.TMP
Size 96B
SHA256 e386eaf57b0082673cbb3745e50b317a257fe912a639c278c30340cbb8611374
MD5 c03052d68783ff5b567c026b94a4b363
SHA1 a4120272aea84c28835e073b9e3f2008cda2a084
SHA512 a732087f8a1aeff0e67e3934978e3421e3fc10b24d57566264858e6ca7cad47dff6a922eaf25ffdfc6f49e7c457ca163047d62b3c7e34b2ed9d310baf283b9a9
TLSH
T172B002A6C1027222C05243F029A799F97160DF35D6031712E7F02EB6DC296F18935162
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 4cc5f37e5ef55bf88d6fb7eb6b3e5511532f9ebd41423887a9e482a8b5283e37
MD5 fd56377ac2c2b2bead9a89409c6fdb07
SHA1 813a67a4cd4a19a81451e0e620ed13347336af8a
SHA512 92376e4f5acedb38ad8bad0b8fdd9154c4c4a4f9d9dad279251ae9f212563e280f79677b7b32bd14d829568d8cb33e9797af5d08150ea21dd54922b30534a1bf
SSDEEP 192:eyC0RHCw95IQiU23/jUN++8fSrM9e5Ds51s:FC4HCUIQUjO+hf19ei51s
TLSH
T113D12AB5A85EAC235AB7C5C9F5032B47CFB8A1DFA6605A449DDA4F0D41DB1EC2303532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 979376d5b3fa7869f28bd83bbe1ff4c61cdbb3d36ca7d5c767fe1c34abbf5aad
MD5 85a22cb3585c49cb6c8dab8857dffef9
SHA1 f0d2d53ada6844bd9fa89531d37a666ce33c5d3c
SHA512 b4654bc502b2e0b726250fb01da96218597ecd6b64ac453d163dc5a76fe6f79e300da88bff3a58c471e50a365e483e09542a6d79b067afa05085d91989d79925
SSDEEP 192:eytoRHCw95IQiU23/jUN+LSxM9eq3k+1s:FtUHCUIQUjO+LP9en+1s
TLSH
T190D1FBB1D86D6C7356A7E68AF1073B078EB4919BD6206948EDEA4F0D11DF1EC6303521
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 2b8e2b762a176279f9d75d8cd1d7ba8a0130013365a9d05da29460eface977fd
MD5 156f09947a56b184187ceb8cc5b9041b
SHA1 4cb483f4039ebde8d9a9742b04f80fea0b10b574
SHA512 1dc10f8184ff773b5906f110aff43f56447f4f2eb0a101fc5ce01ecdf36effc3fcecfec3100fee224c09596de10e68b1d86b9ea24cc085cf03133990665088b1
SSDEEP 192:eyt0RHCw95IQiU23/jUN+LSxM9eq3k+1s:Ft4HCUIQUjO+LP9en+1s
TLSH
T108D1FBB1D86D6C7316ABE686F1073B07CEB4919BD6606948EDEA4F0D11DF1E86302921
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 c69950184d1aa5e97c5b7f40fd6a914b7a1b385b99e26262f861895bfb41c6e7
MD5 f12fffbbb5df4a89c9635b505e669c97
SHA1 27b7276581fa5c30f8a3b09f8dbe1294ae9d3e3f
SHA512 42b2374bcba53c6a228b62c22bd50a91c574cea2e06fa36bc914d2b0204c8e7c2339d05cc568eca0a7872ca2e93e5750a4530f8ac19fe1f4f4c6fedcc899afe2
SSDEEP 96:eNC0d++nHQU0Ttfy95z4CRDotok5M0DZB6PJGyvyL9QN9eHBC1Zwh11a:eNC0RHCw955DUDj/o0N9QN9eHBC1q1s
TLSH
T128B1F9B6D8698C77167B85C9F6066B07CFB8F0EBE5609E8899DD0F0D01EB1E81302536
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 4c2854fdbaf119c979c930f83f7fce91c8a832cf162ec0604f7e6c3b9ae3369d
MD5 37b1a8a955774c1ba451c69f8654b5fb
SHA1 b8e023c55b5630835d929ac36b78ea162aed1eae
SHA512 da69473c32bbc4fef34440df8fb51d6bb3ac095ba9ff355cbb2ae991d9967ffa045640d28de6404e4fe2be78993cd503c696c064e1caa9af3eef18f8491c0238
SSDEEP 192:eyt0RHCw95IQiU23/jUN++8fSrM9e5Ds51s:Ft4HCUIQUjO+hf19ei51s
TLSH
T1EDD119B5A85EAC235AB7C5C9F5032B47CEB8A0DFA6605A449DEA4F0D41DB1EC2303532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download