hxxps://www[.]google[.]com/search?q=%D8%B3%D9%83%D8%B3

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.google.com/search?q=%D8%B3%D9%83%D8%B3
Sample260831-e1v2wsef48

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3380	chrome.exe
5756	msedge.exe
2296	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 8 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326239228169047"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4400	chrome.exe
4400	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
5468	msedge.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe
Token: SeShutdownPrivilege	4400	chrome.exe
Token: SeCreatePagefilePrivilege	4400	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
4400	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe

Suspicious use of WriteProcessMemory 51 IoCs

description	pid	Process	procid_target
PID 4400 wrote to memory of 5040	4400	chrome.exe	84
PID 4400 wrote to memory of 3080	4400	chrome.exe	85
PID 4400 wrote to memory of 3080	4400	chrome.exe	85
PID 4400 wrote to memory of 3380	4400	chrome.exe	86
PID 4400 wrote to memory of 1144	4400	chrome.exe	87
PID 4400 wrote to memory of 1144	4400	chrome.exe	87
PID 4400 wrote to memory of 532	4400	chrome.exe	89
PID 4400 wrote to memory of 532	4400	chrome.exe	89
PID 4400 wrote to memory of 4764	4400	chrome.exe	90
PID 4400 wrote to memory of 4764	4400	chrome.exe	90
PID 4400 wrote to memory of 1212	4400	chrome.exe	91
PID 4400 wrote to memory of 1212	4400	chrome.exe	91
PID 4400 wrote to memory of 4592	4400	chrome.exe	92
PID 4400 wrote to memory of 4592	4400	chrome.exe	92
PID 4400 wrote to memory of 2936	4400	chrome.exe	94
PID 4400 wrote to memory of 840	4400	chrome.exe	102
PID 4400 wrote to memory of 840	4400	chrome.exe	102
PID 4400 wrote to memory of 784	4400	chrome.exe	113
PID 4400 wrote to memory of 4116	4400	chrome.exe	114
PID 4400 wrote to memory of 1968	4400	chrome.exe	115
PID 5396 wrote to memory of 5468	5396	msedge.exe	124
PID 5468 wrote to memory of 5496	5468	msedge.exe	125
PID 5468 wrote to memory of 5756	5468	msedge.exe	126
PID 5468 wrote to memory of 5768	5468	msedge.exe	127
PID 5468 wrote to memory of 5776	5468	msedge.exe	128
PID 5468 wrote to memory of 5768	5468	msedge.exe	127
PID 5468 wrote to memory of 5768	5468	msedge.exe	127
PID 5468 wrote to memory of 5776	5468	msedge.exe	128
PID 5468 wrote to memory of 5796	5468	msedge.exe	129
PID 5468 wrote to memory of 5796	5468	msedge.exe	129
PID 5468 wrote to memory of 5796	5468	msedge.exe	129
PID 5704 wrote to memory of 4124	5704	chrome.exe	135
PID 5704 wrote to memory of 2296	5704	chrome.exe	137
PID 5704 wrote to memory of 4296	5704	chrome.exe	138
PID 5704 wrote to memory of 4296	5704	chrome.exe	138
PID 5704 wrote to memory of 5944	5704	chrome.exe	139
PID 5704 wrote to memory of 5944	5704	chrome.exe	139
PID 5704 wrote to memory of 5620	5704	chrome.exe	140
PID 5704 wrote to memory of 5620	5704	chrome.exe	140
PID 5704 wrote to memory of 5968	5704	chrome.exe	141
PID 5704 wrote to memory of 5968	5704	chrome.exe	141
PID 5704 wrote to memory of 1676	5704	chrome.exe	142
PID 5704 wrote to memory of 1676	5704	chrome.exe	142
PID 5704 wrote to memory of 5740	5704	chrome.exe	143
PID 5704 wrote to memory of 5740	5704	chrome.exe	143
PID 5704 wrote to memory of 2280	5704	chrome.exe	144
PID 5704 wrote to memory of 2280	5704	chrome.exe	144
PID 5704 wrote to memory of 4852	5704	chrome.exe	145
PID 5704 wrote to memory of 1776	5704	chrome.exe	149
PID 5704 wrote to memory of 3812	5704	chrome.exe	150
PID 5704 wrote to memory of 3648	5704	chrome.exe	151

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.google.com/search?q=%D8%B3%D9%83%D8%B3
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff92154c728,0x7ff92154c734,0x7ff92154c740
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,1419485412581355065,6270391293495363438,262144 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:3080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,8778236478034349769,4704130395334622635,524288 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,3164973183987903644,16359825259379993501,524288 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,17858025766158704641,16470360315215507686,2097152 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,6169842687478236945,1820425468384757136,2097152 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4400,i,10902905558154022215,18143344096771551020,2097152 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4392 /prefetch:2
  2⤵
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,16889748275061831131,3468108410186320836,2097152 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,7353426077284325258,495376797463920242,524288 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5532,i,9398706642364814034,1516184279056606438,2097152 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5364,i,8698638731180614180,15383581636715182288,524288 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4696,i,2736599759640821524,5846820826696599647,524288 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5728,i,15269391643488947745,5207935186823590625,524288 --field-trial-handle=2000,i,16690153609491776377,2855168743331450975,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  PID:1968

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:836

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault188e97c9h11adh430ch83bbhffe284677ba8
1⤵
- Suspicious use of WriteProcessMemory
PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault188e97c9h11adh430ch83bbhffe284677ba8 --edge-skip-compat-layer-relaunch
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x25c,0x7ff90c47c188,0x7ff90c47c194,0x7ff90c47c1a0
    3⤵
    PID:5496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,10967972297548306835,16275861069368044349,524288 --field-trial-handle=2300,i,17376374834128504915,4704484240110276545,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,3714338593544998779,2004864172356847598,262144 --field-trial-handle=2300,i,17376374834128504915,4704484240110276545,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
    3⤵
    PID:5768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,3977346391698282846,2452843961668283284,524288 --field-trial-handle=2300,i,17376374834128504915,4704484240110276545,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
    3⤵
    PID:5776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --no-pre-read-main-dll --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=2780,i,7902209649537284126,5517078193477931839,2097152 --field-trial-handle=2300,i,17376374834128504915,4704484240110276545,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:2
    3⤵
    PID:5796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5200

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff92154c728,0x7ff92154c734,0x7ff92154c740
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1932,i,13080035207869036142,13350586131871939020,524288 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,13104465172884543881,10838165620811920678,262144 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1776 /prefetch:2
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,17465232498089511965,16363091513054943992,524288 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,2614334772967916940,879316527931676703,2097152 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,10360703663313950550,13448526630004052637,2097152 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4588,i,845374092403018819,8943136166095572546,2097152 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4544 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4740,i,8106325494472857382,4141409770094405377,524288 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:8
  2⤵
  PID:5740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4864,i,12498509672154653899,3227858296986922931,524288 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  PID:2280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,8584118168964113088,13872177468143067192,524288 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,2728862514167614359,4116373441249384389,524288 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,900551316136947002,3536965653491897323,524288 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5608,i,8468447063829396973,10694805625997197639,524288 --field-trial-handle=1784,i,3051733987038413643,17826656481424915771,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:3648

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 f46e987b393cd6609db2cfb81579623e6c1ff06cd5d0bb36f4f71348130de12b
MD5 37aee978b623a4a7825596a618a1dfde
SHA1 d7fcbead61319a98385cd4a3418cdc496d781a38
SHA512 b612325b6d6695670405a660640e2eb9f75d9065559194886b0ca8b67700037a92093fff9fe8eae3977455db1ae834eaff016ea1090be69bb683328dd3352109
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e2069c8429d1f050fff220ebfcc7c051abe1486c10b2151ace4da8853a8c68b8
MD5 66fd2ae0783c1b534c477b4c16b1dd0b
SHA1 c85438cb9a60b82a6efdd759137826a7548179fd
SHA512 048995b5c202c34648f7d1239c6656f35d4a7a1f009a89b991010482c7e28af614aa82674f03b6f4a4bce74aea112d07408f3d10c888fba574a5b21978b1bbcd
TLSH
T11CE02B6ACD65BC270CFD47189454064AE750175B2B81554F363D511CCFB0A2A41C6CBC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 480B
SHA256 127c1c0697b6de41a2b2795d738279146cf28d355f6b0616609dcdad087d1942
MD5 fa1d94faabc854849563be16a7dbec29
SHA1 39887763290e45d494ff000ba2e02a258508c80b
SHA512 d8f09b52d575fa4b9fd97aa6d352e4388126a3dd502728bef47f1be86ada6a8bfa5cbf0b505b51c7caa3d1bd3d0def61893a5f41171770d23f4102e72798bd1b
TLSH
T140F0683C3846FDB5CF8C4D3720E80A17B9327D1E0231132E829109ADD9A377206190C5
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 ba761c0c038ea947d99a0762a6d057a4e18bb411b5b3cddb2d72f4a89d90ea01
MD5 43ddc87bd757a7ac576afd747a066c8d
SHA1 91b8de370d33f3a9a86c84de8c0e2f5c7fe3e883
SHA512 e29f7158ab6d5a9ac3cfe5d4467bdb1db418c84334965d3be16022cbfd44cff3b9df1ae2e6e7aadaade4d20f0cb568b62fbf2fd15d31aa8d9aafa275082f66b9
SSDEEP 3:MsEllllkEthXllkl2zEklzDdall:/M/xT02znQ
TLSH
T1914404047FC01417C50430304013C3D30771DC1005115F4334D10433DCC75415C01003
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 317B
SHA256 6ac732792d50b331c72c283967b4d3e726d5b494194244065b7ca7c2ef0f65f9
MD5 5e2063ec80c9de0de831bad554d667c9
SHA1 7e67d47c64b2667bc8251ce2e49e0969226943dc
SHA512 2d46d90b32948539187cbc003bc5b339b9da544a9d25093c2765079e3f6600bb89a82ea8c0cbaa938d24fe6c8d74c0fd9b0f615f7a8d3ef4b566d433e7c052f3
TLSH
T1EFE07D94A9CFC5AD4464C5A3C378738E8BF03408F2DCBD466755EC8C328050461EF380
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 24KB
SHA256 dba340d00d6db187b6bffb0f88bf05fac5c98eb590577b56e92fb481a67ad6a3
MD5 55e13658457153bb3246a8cbd225703a
SHA1 42d947644890d652054816b7b2ceec412c1553e6
SHA512 ba7f38094039c8f4e76ba5e41407ef8d7e3332beffefd574b71c15cb4e228011c8b750c42810b1b337e977adc8be189f10d895cdc2b8830ad4fe90e2b6945726
SSDEEP 48:neBmw6P1U1kmBTQ5QkQepPoR8/ZadHetPpfpkAAXsqY2jEUEXhmGv12mT8p:neBCP7GUYepQRIadHetPUAEYOPA1Q
TLSH
T1F1B2078F3F74B823DF690DB9213A6574DE77C21D5F668CA1382054210CF8A8780295EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 4d630a8b1500e7dd59f02db21219484ef808956ebc4a7e596afdfbbd52eb0355
MD5 a3576fb28a9a447e34e5c00863f12e11
SHA1 88dc5448a5bab6451cf1d0ad834b43d6f71d7c86
SHA512 7527af8a728ea16f28da3503e648141719929e9095f10a76ee3a4885779f769e7b072afc686b96f614e26b8bf9073dbc6c62702cdec5175b49344175f2d6886f
SSDEEP 96:aTpVs6Q+/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0zIHN:q5/tH+bF+UI3iWGVYWNkqp34IHN
TLSH
T12FF3405F5F243202CDBD927A68E355B75C2EF02F876365C56C6114B2CEE2A83A01C4FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 1KB
SHA256 5588a08708531b3d7d9f4faac896429fd5adf20643564556ccb54820a017001e
MD5 50e488c005fc210da393cbe8892b678a
SHA1 40db61a5187393c67af2d647f32fa06ec8a737ae
SHA512 d78e9ef0e8009bf5b33a8909bc9fec4f8fab00dc2315751b7accffa0772e02f86251bb7392207ecaf766844cff6581561a8fda1f3f449cc2b3ed2b6956cd382c
TLSH
T1E1214B3BDA99C045EE5E80E621B3703983DCB1B876DC6B85ACC24C07DBD146D561C630
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 329B
SHA256 406ed82fe39e40eecaf99cb17847367725d091d3a00a03472644302597a9b400
MD5 a67e8fecf8836c6524c4fcc736255514
SHA1 49f85338614276513994bdffb4e1b11ff6877628
SHA512 51391a426b2a5e81d9b90c92c8ce63432ae9c8f1dd60cdcf56fcf7a78708a123739a10431754437324dbcb5aa01bec40ee3f645f8aadd9b8afb33784e9cc1051
TLSH
T1B5E080B119DEC59D16488057D269730FC7F43404D7DD7E4A6B55F48C71C5418D2D6391
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 ab2ef8f73bee996244ca49c909df077999b8043a0cc749731478c1ec62fb31c7
MD5 5dbeb5042911d494182611e36bfa4d59
SHA1 99370ac9c766e5add614d7797d10b0bacac8795c
SHA512 8bb1cf8c72d240eadfa681bb1aeaf5506795a632c95eaa56ae6adb8cefe341e8c4a5e5711610ca2adf6b0d1759b6e22a3cc6ddd517b141428cb7e1182fcbcbca
SSDEEP 96:DRZJtxteUjgAgJtA3JtlaaIEdRpus0SF1CaPnrbAfPONP45cE:DRDk62JmJ7aaIEdRpus0+1CaPnvAfPOQ
TLSH
T1DCB1AEF7C3E8856D891156F8AB15AF1FCE290628031C3C6AC5D4BE1B93E2471E115B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 9c466c1426b737985a210c7a306adc82e554d83db2a28b8656676c2fec135c57
MD5 24bb6327cf704daf5178ba5934fecb16
SHA1 b1c7c33f88034c21bc334d10cc42e137e6ac15da
SHA512 3128d7f8835bbc1bd8c745e8a850f76e4bf5da37344b600d54c27a24bfc2f226ef6bcafd3813254bcc0400e6657960c33115d62beb9468b2deac89b18847dc12
SSDEEP 192:eIEumQv8m1ccnvS6VWm5hFziU/btCkXBbW:XpXUmPF+U/btC6FW
TLSH
T101F2EEFF1715B104C5E095B4E2464B8EEE3710281BEBAAD0D5581DF297875B3E22CB2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 aceeeab5cfed3110729d7575d3e8122a491622fff5a1e00fcd91f21b0ed144f3
MD5 20eda957c0de0169d9689405b59e85b8
SHA1 1fd2ebc821a124e45607fed341ce8aefe94fa2ce
SHA512 a2516820ac68a00a2083e951ee140bb88dd2beab4cfd8b2d6c69f3a54b4415bc02a41151ba88fc75c15455453616f8856ce98c808f8fd3e41a645b2f58fa655c
TLSH
T155F05967E67F746790BD85AF0D00780518B2A83902806DF4CE6F456DD0840E31F16853
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1e3551ed623c0387b4fdae7244d6927abdb7172d97769a6ca8c089cf53695511
MD5 d9c9b0bbd32420ee7c655afa67156313
SHA1 d53c0d5326d14faefe781e63a07215ad88a18a48
SHA512 9ad063e683457f3d6a6e84ab80324c92e3550061f6454f248280a0b2feec16f7ebd93cccead47b396e4a89c756cffc6e225fc3ff90c203e59970029522fc211b
SSDEEP 192:KRscBzlaJVIT8Yv7spAPRp22mLW9wHsb+WNYHLjGZvrep22CKWIpkwz+PyIsnAU3:KRsmzlAJEYUX/PKwUepe42CziTgE
TLSH
T17E52B52EFD15693B5CCAD22AF9227B57D7F6102121902E94E6FC8E2C15EBACC2317417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7875f20d969e9294546eb07914c74ec50dd7c0f3eae3bb113c07d56eaa012879
MD5 549bde6881f0db80d5c12824c70b31e2
SHA1 44dae91ea05801c0d1999ebe64cfcc62225afafe
SHA512 a745e8ff20a1e83bfc3df58f479bcb5f8ec722cd33b70a649e49baec8de7dd017473de5865a17f2dc33a9955c35dd6ce206da488a6f0969d02aa94e17e7d2598
SSDEEP 192:gRscBzlaJVITqvv7shAPRp22mLW9wHsb+WNYHLLI4vrey22CKWIpkwzpVyIsnAUp:gRsmzlAHnY8X/PKwU4Ket2CziTPe
TLSH
T1F652B42EFD25693B5CC6D22AF9227B17D7F5102161842E94E6FC8E2C15EBACC2317417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 62d86a3e7c5c99f4ef03aded6fe037bb21a8dc55def76711affeddfdd44fae4d
MD5 55167e48f8cf925654a4bd69a8c747da
SHA1 2e74ab4727e846663b2d7876a82c4c1791aa16b9
SHA512 5741d5190f71dfbf31ebe929775c446bae2b489ac0c16f56be73d100f0df5fb63b8803545a56f81d6bb52c6ec77647f881818fb6d64d2dfa1735041c9d4cde4e
SSDEEP 192:gRscBzlaJVITqtv7shAPRp22mLW9wHsb+WNYHLLI4vrey22CKWIpkwzpVyIsnAUp:gRsmzlAHNY8X/PKwU4Ket2CziTPe
TLSH
T11D52C42EF925693B5CC6D22AF9227B17D7F5102161842E94E6FC8E2C15EBACC2317417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9f92964c1ed6574816316c5cac3c3e398645eb419cffaaeada2f1ea83c45a11c
MD5 5f5d54525a11e6c032858f9949b8f727
SHA1 510d4ce6313ecf6e2f79df6b459ba95083de5074
SHA512 dae61cfa520281dbebad32880a94a39b2e75c3bf5ef85688d0deb93b06b1280a2c8cb42a4b19bfde6fffe636c253bed8062db7ee19a402c61973965951fac8ef
SSDEEP 192:KRscBzlaJVIT8Yv7spAPRp22mLW9wHsb+WNnjGZHb2v22CKWIpkwz2VyIsnAUge:KRsmzlAJEYUX/PKwSx2+2CziTOe
TLSH
T11F42B42EFD15693B5CCAC22AF9227B57D7F6002121942E94E6FC8A2C15EB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 ec652b0033c1ab6400d22f6fd77a8521a0e0913947b297dcfa3934aef35e636a
MD5 9373460f34c905e5df8a0155cd2ea7fd
SHA1 72cee5720868a32ed7d849f2fa5964888e39d563
SHA512 e4f6d55c965e4b02f73640f2f7e464d9808f92d210be4d8f6276a94dc2aa216d02173ae000ee44641368ede8ad39467b6e99f78cabec90bdd675c853d048e2a9
SSDEEP 96:F1mKAMiRwcnDh1Jk7ZQLXbXFXKXTrFXSXTnYXFXKXTCxhXsX90XbXNXKXTFuZXIZ:F139dmDhc76L1ajZCjY1ajE8+L9aje4Z
TLSH
T140A16D6EB50A184EE4AD4936CD78571B6F69CF0C2BFE3767A9DF8A0405B0A5701086F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 5104cb72bd5a8f406aa03af775935d55e91d59db7ebe022014869cec4bf04223
MD5 d80edd2772a35459d6335f3aec91eddf
SHA1 e66dc7ace5e2993a4bf264ab1de56549cc7c7074
SHA512 187c4725dcbc661d6b9e464aa0cb8157f359b40bbc0c2c0cf87cc56dcfca1502a50c9c8347b3cdcda462f8ee53cc78c1f8ea6f15c9d68ed417bd94f3d4e77be4
TLSH
T1AAE026A029CAC1BD105980878630F30F96EC7425E2DC3E466FA1E48822C580CF0D7360
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5344ffced2654a3dabff9c19837aeb085445778302bc8b6a01dade4d19ea2baa
MD5 629b5febac95cd50f76bcca8499b27d4
SHA1 39a2d0d8b619b256110a039e972711f05c2f49ea
SHA512 baf6c733f0dc2f02e63048d6bf6dd4e019eca2e50e0e0e2c5d04dd78b67bc941a8a414185cd2aa5a502e7a2305ad4eba587ce4d7171ebe2d0ceca545d589b0ed
TLSH
T10CB01251C101B601C01602F411831588F1249F20E60A170243F1A963982975481140A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5830b0.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5830b0.TMP
Size 96B
SHA256 f206d7572351c44ce3befdf6774b4f76503477a8fc7349a061eda929954ba4aa
MD5 2159e41f203976902276bb2b07f4543c
SHA1 e768a232e6dcd907af930ee29ea91f71235cd7b8
SHA512 d5fe9cec7919e969545ef23c53f5caf8ec7ef753ce488594640328241e45797b45adef46b318bb2648d1553062f4c321589b647947be91c0c625b38b611fd8db
TLSH
T11EB0220AC2023222C0A303B02AC0C8EC3020CF20C303020382E00EB2EC23220C232030
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 1KB
SHA256 c33192cc3b3efb4679606bcd72db0b4725b6850ef8861aabbdf53ec642facff2
MD5 1f7b7e9cdd7938341c4479bd8018cf0b
SHA1 305c18824a429446e0ee794e8bf92eda2dc16d20
SHA512 595b6d3ef24645452e7a294b5cc2d7733df67192e3e2e1626e8c8fe967db2952ace696d410ed2d0313f91c45853c831b91e02a8d4918e5c6251b41151d2f08c5
TLSH
T1C921D2E669C8B036FDF981BABCD323515B31E0DA69644CC6D2856BDE1027613AC400EF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 317B
SHA256 504f8659d07ef0721a7dfb0210f4133a0b806e5dbc790dca19491354731adcf8
MD5 ed9255ee9cea52202c58b7cd59ff6df3
SHA1 478ff812a42f18f1d2270643334659aad0278b8c
SHA512 50b1cec689e83d02e6b53b6ce4db6063aabda4776698c733ddf5e704203e46354c737879128429a02a8467e3003bfbc4df66c8f698b32c631c225d7f48cbdca4
TLSH
T1AEE086A529DAC9BE16548067A275730EC6E83404E7ED7C462751E48C3385514F2D6391
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13432623967494241

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13432623967494241
Size 1KB
SHA256 4e33ec99fbf22c34224aae0d58bae3a74a388c1f4163fc8b4ac69af9f9f58efe
MD5 2b461c1c3e508885cd4b1c58cce223fe
SHA1 9e7bb5e8ab606c5aea415a3824dacbf70ef87928
SHA512 f7ff8094c8eb49258e2dc83552e88f5521da2e986573720ce24fb7611a84a1505d67c56b0d3708f2262cc4f147c9eac1b048c800c9c6ef775294e8499f2b8c54
TLSH
T17031F083B5FAC12AD53D4976CAED32F6BD755A0AFDE20C4B40D0A2021467D538B54DC9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 ed00259770f9241d376ddaebe43dbee01f52bc5a78f6139dd20490f3528088f6
MD5 1f7744536ae5aaf7ea2ad62cbc60d058
SHA1 565b16b135faf0b855a465accfe1836f1933f92a
SHA512 7929a670b533c110a962303ee4eaef5ce10e87ae3b8721066075d82672a9f903862e010f9cf2f92bee9c75d57bbd0336697bd873a8c5c6aec197bb790087dca2
TLSH
T10BA002A402402F43C40946B0B7A602DD6324FEE4034F4F56D0A891C49AE41C28102650
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\db
Size 44KB
SHA256 4d4711aeeb325662a44a1258285940966f982f65a908edac379e86d8d31d942e
MD5 acf307869858d86e4ab40bdc05c21488
SHA1 dfc80ad02fba9199f69abdad79557c70949eac3c
SHA512 d89cc870cc4c1015e19dc93d93fc9b25b51e83e9480b46f6ee14acca583dd9aed3addc392a1b84f92629b5eb9807d7c20b7cf078d8d44694b3070b0527cfb08f
SSDEEP 48:TFOIy4m1b3fbUjCeYqdBisXJtkNv7QbzEViQX:kLvs7qNvsbzyX
TLSH
T16313EA9F2E14B485E1F98039E49A9EAF2D7F205C8EC3A9D258F455B31DA2418092F17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 8123a2211f076c5e20d81926c397a6d3be47db8266da6b036db4fce024af9d99
MD5 9bd162b03af355d048ff13e0d00d4c19
SHA1 6c10aa4d6b391c033853b5b356650912317e56fa
SHA512 b52e9aa05509066a5407c49730456daf8942a45b6df4653178a2afa5efccbdc317d3886657119118cd38469509dfff39edb832d7aa4cf9a01dd73c7bed3946ee
TLSH
T15DB012443F20D215F8C90538098147446702F201104244B3E8589F204C0E6686FD2EC0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 348B
SHA256 e0904b7ba49ac679e4f5cf5e0dd014ca87033584fe429f5554256d5cfa485bfa
MD5 0c81999347dec059b2f44cfb427d6ce3
SHA1 8211a86c7efc35a552b987bac8d7cfe605a60369
SHA512 d6aa32d582c5052281afa57c87d12da9ae7864c9d0e357e39a138a38ddc21fbe6aaa37e2cf2c00bae2b11bdf95c778b2812b4422a4fcae8d177c1e368d002741
TLSH
T1B5E0DFB02ACE866F1099809BA320F30E86E17400EBED9E666B24F08863C940471C7240
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 324B
SHA256 c1ff424657a19641baae4dbe3ad6111acd204871f1f75ab46dfff9491d450db0
MD5 4034332e19e852f92e76b4412ecf8c90
SHA1 c7b36b94762fa55053cf4bd1d713df03efcd5f15
SHA512 d3c7a0c3e4279f4bbf503229ed3786f42197fc83453587653804746fd03c262ace4c10dd86b95a6001cce81f01dbfb7b3cc3faf0dfaa887e948153135c5cf530
TLSH
T18AE086F069CEC67E1458C0939370F31F86F47804ABD9BF9AA724A49872C151461EA690
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 3561307a95ab36cdab84381fad8f94792dc8aac2708365c3adcc0d3065a3b0e5
MD5 5d9b208ed2e33bf7a6633172d6564f6b
SHA1 0316704ce699afffedc8028f1d69b0bf588addf1
SHA512 a2999c75ca60cbabff9c861457550ec388e430b4a776f3d19bbc4e787c9e69f99c07073629a402722f4c31970c08f4bd519b16dec720b307ec1a39382c3e4c7c
SSDEEP 192:tB+XuvBnl3JsueMEGvIW1/rcP2wj96OEikqOsVumc1w9R:jeuvBnhJsueMEGvIW1DcP249EiVumsmR
TLSH
T1E1D3764B3A747102EDE59A721CE051BB5E3CB16D8F5191D438B620688EF2963B23D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 f235b47fb6d46d24c7450c4379e83d4641c84b4891e19d7e138f88971f08d796
MD5 11b6bbda5f648f3028811938c36a36f7
SHA1 0a00861f3f15c9d01f9d8c252c4289c01666fe4d
SHA512 8fa972d1ea9be61985067b9ae3d72c8d029b6113be01e83125aba73c4ae54647bde4a9c2011538a49b25fd85c9cd3cca08f482552df40545f5255c45ee301a68
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX41+XvX6Vz:7ZT0nzXgg3foz
TLSH
T1DB033F8F962840F3E0B6C13EED8246D6FC7C160CA7237AD919F94B615DAC13790546AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 7a41de5ef8cac2cc71f565e745a7bed1e12fa2c0c294797c856316ba90b43a02
MD5 e482a5d7109efe7a50ef8085e4b7252f
SHA1 9883f9f2b4f2385f812871174c7b3dec86cf6dd0
SHA512 b922d45a024dd8f70ee6900d4b63e1431e1eb4b62fec8ac328981642bbbeaea176227fe68e81c3040400e8e56b4d6792e5c48a35e5a32934c7f99a6443c917c5
SSDEEP 6:lqVkDxPR/ist+Bcc/XKuqHKu42nFzFbyCc/mLEJOgLEJLBi:lqVkDxJ/iq+BXXwX4EOmLULIE
TLSH
T11602268FF404481BF861403DCAADA9822D2A0F8C3B933A2938E9CE042CBC1178004BCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 27KB
SHA256 8b736d9fc0b6522baf8cc42f1cb1d47ec989c2fe7e7b53ceeadd7ad0394120c1
MD5 05e97c11331205c6f5d29cd906181995
SHA1 ea8b6233db1dacfe95e7f30044fbd7bafd8490b0
SHA512 bbae188b812f6e51d9a50f3e93af3ea0a2c94c9d938c238d3180fff50127a601110607b627da019d4851e2124fc5c5407ea8793f26922eeba3b34c6fa66792c3
SSDEEP 384:fXDlsdGa+71Q2IIIBb5MIMIBnCfnsdGuZ0O0sdGXlSmesdGHdG+5/qSQIksdGHdA:q+71QVKUxEW
TLSH
T1DDC2D85693700B85DDCFD7FBBC56CD2E2772EC9A4C5A008265924EFA3833E16498534E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 b60592b0d2e672d77f4a089841d282a88404f46af2c788958f52cfcb7bd90c7f
MD5 01afcd75c8668872f0b5964d6b8d6e26
SHA1 79f161b59282445ca02a97bdd746cbf6f0fb2556
SHA512 54ece88abbf9572f873988cecad4d00147d68a27c965a83872992ca1ff934e8c1cbdb693ad94602787fd7760d845a59869308428ee7ecec67fd99790765d3a95
TLSH
T144E026B07CCAC5AF7418D0877134630E86E43801EAD81CAB6F14D88C62C080861FE280
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 d31bd4492d61570aae70a2b350139809b5ff04f0fea7e81a181010b664dae868
MD5 d313a37a8ef200f0bf9cd6424c0893d0
SHA1 3742ba7fc29a6d3794ff4fb7938f00e61a64ac9a
SHA512 0d10b73291addc8a1e9f54172d717c85c3a51fc0cd5fe5a80b7d5d4485539d4f9beb3a87c34cdf4c420a59d5f9015f5f497b081c220dae0bbd536bff7e989975
TLSH
T1F7212896F732C308D54A563EA43E9B251338D4569FF8ED0F44B530786E76E000E4B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 a858b29b6f772c73b3528d69db8234d1639660134a3a9b68ce6c5ee24141c4f4
MD5 9a3c1d0f705cabd26979ccdbfd8d9d5d
SHA1 a11b99ddd40dde920fddda7e5b02b15ce91d1845
SHA512 fec5ff836a82d006c86c5d6c1e8f04b7a3517c08165ed12d9a417b9a3145adc4f35e2098d65fa8d02c2b96850671677fbdd0326d51f4f00dd7880b6220de3ffe
TLSH
T1D1E026A27CCBC5AF401890976174A34E86E43800EAD82E4B3F10EC8C628082471FB281
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
Size 264KB
SHA256 ddf9cacf0d021b35638c156fe9820b0b59a79d9870d6da0f83d30b400ea8c8de
MD5 7ee0a5bd88c3475dd2fd9d094f6aaeaa
SHA1 a7212c74ada8069346387a072bf3bc20bf18d94e
SHA512 3fb39d95b66bd0b3672916fb2bdc71e6cbf5dbb2c8b344844f484e515331996e169c537716d952c671e860967c8f66ecadfe4b2f2b8c5fe945544f21926fa5dd
SSDEEP 3:MsEllllkEthXllkl2zEklwAkll:/M/xT02znwAs
TLSH
T1EC4404457FC41405CF0410304011C3510371DC111D51574334D147375DC57400C00003
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 26d5fa8c9d7281e56689c357e713507d3139a1cfeee0dc1fe8aa1060373f8e9a
MD5 19762e81d99ba7c4ce18bf39da023ec1
SHA1 9456978308f4b3d90fdcb5dd22bce871f52a86f9
SHA512 10c91b62e39814b87ddf4c06b877e39921110a78e8c492d4f1bb37ff1f79992dd2e143b69817392b21eab62a52a7abd0a0ea8b73b73e3eeb8ea678fd73890472
SSDEEP 3072:MGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:/m7Rkm1tYpBeh2BAoK
TLSH
T17FC3123B5D65F87759B5BB5EB08E0A1F1EF249A7C920DE52C8D85B0433EA7CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1ab9e3f476c61f66c0ffc2d72f457627f56a8054fc3794d092e14e9f0b997247
MD5 c6d2db8d76dbf5974eb6bbb209285fe4
SHA1 66db70e168bf15c8d9b9269708b78b3150d540e7
SHA512 d583ca07c9239fd1786c67924ab48e91759477f56dd9b4a4dcf49883807dc86ef2fdbeb7aaa5b9c4e5beabfa256b2fcfba11042e4f96fed9fc182a9650c3dd08
SSDEEP 3072:cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:vm7Rkm1tYpBeh2BAoK
TLSH
T172C3123B5D65B83759B5BB5EB08E0A1F1EF249A7C920DE52C8D85B0433EA7CC0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 0a48e88252c0c850920db1a6a7cb0a356ad6b72e2100a0750359cae56f220d31
MD5 4513a3a8df159286475a156fa51b5b76
SHA1 030d9e34a4197c586984348c0180eda74890b04d
SHA512 a8d5d55b19b73ef2bb793de47cf6ba0c8e37d114c34a9c5a10dfec35a8b4de5f9b05577ca78b12c2ef7d9359f47bb0bd10b2fe2a9bb2a175866f918453f0ab23
SSDEEP 3072:StMrv0mr0gMqpU+6Cb+5CCV2xKpBJYxPgXGm7D5Lk17ox1tIpud63U8BehbCBi9Y:30mAIpUNVS6Wm7Rkm1tYpBeh2BAor
TLSH
T12C34233B9CE36D3B269ABBD6B4891F3D14B249E2C8148A54C8D06E093FDF7881907D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 413cc142786616fdf1c327bbff3d68187f97591b79b27809b438aa43f1b89f5f
MD5 fe997c4616f4581112e3e2ea1755e9f3
SHA1 7ab1a36a93355cf2234a2ea0a87332d368ddaf72
SHA512 b42b5512c33c8a113c986b3029e194e40eeca7a7dd9273a1475ca5710a515103e86550472f57812b70ea046a7799b0447469e322947e125de0b3956b9efed46c
SSDEEP 3072:wGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:7m7Rkm1tYpBeh2BAoK
TLSH
T163C3123B5D65E9779979A70EB08E0B1F1EF149A2C920DE92C8D86B0437FA7CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 061c437e1651c73ea78d54e6a91660926070327100c4a0d9e02c34e7d0e901ce
MD5 c1cab2954dfeba1ea469cce00d0e6424
SHA1 0bec937036e15bcb01f4269c4a204fdf0c482963
SHA512 0c8b431ed9a50af5b7e3a02b5e3097d1feaaa2b2a70c656b5ff2d7ed8339953be7f61008e1dad1a24c0dff6d141000f4dd1cb0c8e3ff4168c1cee7c08368fa82
SSDEEP 3072:tGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:km7Rkm1tYpBeh2BAoK
TLSH
T150C3123B5D65F83759B5BB5EB08E0A1F1EF249A7C924DE52C8D85B0433EA7CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 a8a84cfe89d174dcd0ca0fd3882c6d72a2389bcbe23eca5389aeaa8e5d13da06
MD5 768365711e4c2c4d98533408b570da64
SHA1 974fdda250e897dd939d8bd04ade02ec3577f1ca
SHA512 afc634e646b0cfd29e1164d28aa603c77a54858bd55b846c366346ae5046d4f6951a73415f8d7963f7b9bb56add734b5e0fe0ca9a3f94ca1dcfbe9997556abf8
SSDEEP 3:MsEllllkEthXllkl2zEkl3FJall:/M/xT02zn1Ju
TLSH
T1574404047FC0140DC50710304111C3551371DC100515574335D30C335CC75501D00111
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
MD5 f732dbed9289177d15e236d0f8f2ddd3
SHA1 53f822af51b014bc3d4b575865d9c3ef0e4debde
SHA512 b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4
TLSH
T168A012078473800AE4184092C45C024114A480460119D0015070931314950CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 8b4c23fbf625720023961a0383461e0e2ca448a5741e088d8132f179258897f3
MD5 5658c010c340d06ecdd0b4690ef93f06
SHA1 51848a8b0e86b5ce903ce69e414edc8130aa89bf
SHA512 bab6cdd5fc5c1fc329865b9b904a0840c2020b46a0a14d02b6857a7067f3844e38a3428fa3fcf2690a9d275a2e3964067dd47e0a3cf7e2d45aacd63afb716060
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0Jq:TkkhCU2QB2zbBxxfnG
TLSH
T1D923994F6BA861E9D5D5193EFED24D617CBE0F588A2B68D205E018764CE10AB912E0BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 94cf15bd3c1c0508524498e7549012fa89d572f01519576f21f328a560127a05
MD5 a292342d86fb394626b123297f6cd5b4
SHA1 f560b3d2526b8f0a3a4ba1059d301f421874ead3
SHA512 eafe368a974f10e3360d77cc54bd75f833f6baa32d8f16e500d5d9453e7d45a1814d6210833b376f8d48c888410fc58ffde02c86c82c86fc56f1fc0134e754d3
SSDEEP 96:sa2viEDW80sc0tb9WArodHWU6W6hfuH9EOx+WVoMfm+uecpYQjxMV67JwUhgNVDB:sxvujsbfr+5HW6+WNGY8xhgF
TLSH
T1FBE1C8526F38697B4CCBE11DFA267B53E2F5503166C51948EAFC8A5C089B6CD230B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 26KB
SHA256 0d978eb70833bf21c3b307191076ca3f1816212af1900359ad8f8d4f371f6ef9
MD5 51ae8e8b88b384e22c8811a5eecdb4b2
SHA1 b80ebac5e64456e6cb20776d767b5d9b59931959
SHA512 6c0a64029453d357d2b2da0e49f9b4ec5d2a201dfc56f9087b83075efddfe3e0b6869bd203f743cacb80d17b9ced5a1c4ea81d9d101ebf11ac7306fb385c1d8a
SSDEEP 768:WJyqbblWvJDjT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVE4Ll6AR/Broc5r:WJyqbblWvJDjTu1jah4LAs/6c9
TLSH
T1DFC2F93B654CCB7E4FC00AADDD5A6FD73E9802C7A6588D4047FA994C02C77EA512A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2052c40ba4998afc83f61618e7f4a3d8d544342af189b0d7656ed132690e968f
MD5 4bfae54df67ae50da21ef84ddad11bf3
SHA1 830092b6c6924e373fe4fa8e83ff26d5c0442cfb
SHA512 2d2381d3fa43b62e58aa50071c7b366570ac2f96ea45413ca5d97ad5b4a8ce4e1e88d264cea847840b7de722a54a4e3ece2993be0b6b01e5c1a80f57ced6b0bc
SSDEEP 192:qONb6JkR+QmiUyRhF+RN5+Fd107ptpefPwoUCVcQqz+U6:qONb6U64F+RNmd2OYoYQU6
TLSH
T15C121A34AC396C6B4EE77809F48B36535EA4217BED8A6F44E5E84F0C00D779C271B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 e7914dd9218323dc2ae27766c2f3a689053d03bd095b99df23dc2d7e5b60facb
MD5 013f156b6cfd9ae924098d0d970f3421
SHA1 81fdabfbbae4c60189d0bb4f8deaf4a269505f30
SHA512 e75a05661f4becec1ee6c37ac7c2367bad9a245669b1a930e38db306d4253a3cc01a278aef97ece224a61867cef53ff26b8fe4d75aa2bedd1404089bb4681af6
SSDEEP 192:qsNs6JkRb9QmiUy1hFVRN5+Fd107ptpefPwoUCVRxqz+UO:qsNs6Ub7EFVRNmd2OYolrUO
TLSH
T127122B35AC396C6B4AE77419F48B36535EB82077AD892F44E5E84F0C00D779C270B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 31d4d66df99e5fddeeac9db57d24298e7823504f83b0dd62fc7e42de97792d66
MD5 77241c32f936c9b3badf587ea49c2e76
SHA1 fbbfd05bd55a60a5060395c3408c494c69a1d44d
SHA512 30400c3929a3fc36704df132463adc3bd39f07744aedc1d620f4030416f980e255dbf280fd381ce4ff5a5719df086e8843c613de9e6787dbb32f821a810058ec
SSDEEP 192:tON06JkRtQmiUyWhW+RN5+Fd107sh3fRHJU6:tON06Ur7W+RNmd281JU6
TLSH
T1FA02B735AC382CAB8EE26D0AF58B37175FA4217BBA952B84D6E81F0C01D765C1347926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 38e45902a245b7f2e03043338b8cc9bca2ac57858ca22834e305efb91a2c73a5
MD5 92c736b78762a3a1033aaf09fc36d7ac
SHA1 94ee4184c6730715487a683328874ce84a572490
SHA512 2e11e5a14e95606811b02743e14f11951c999acc4a7a00776d4486c83cc66b55544a78f759e48a33bc6fc586c120f7375e197b641b85dcd6d8d79cd59e3ac99b
SSDEEP 192:qsNs6JkRb9QmiUyghFVRN5+Fd107ptpefPwoUCVRxqz+UO:qsNs6Ub7FFVRNmd2OYolrUO
TLSH
T1B3122B34AC396C6B4AE77419F48B36535EB8207BAD892F44E5E84F0C00D779C270B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download