e577decf67c89a7b1283c801a37366be4db76ef0ed34d0b3d8694e14174801f9

Resubmissions

04/09/2026, 21:28

260904-1br5laxwhy8

04/09/2026, 21:25

260904-z93hjs1cjb8

Analysis

user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/09/2026, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cs2.dll
Size 6.4MB
Sample260904-1br5laxwhy
SHA256 e577decf67c89a7b1283c801a37366be4db76ef0ed34d0b3d8694e14174801f9
MD5 1e48cb88c95dd77c9cea65653526202d
SHA1 80de1f95b7b2d0f53692bbef0c555642ccf2b1e2
SHA512 2a6cc2fa1e3719a09bbfdf59ea1c6897fee216ffbb98ef129a3d5745a52440f1a9fb8af922102def5e2e2093681ffce8c9730dd9ef6e11878adc31685a6638ff
SSDEEP 49152:Qo8TSjKkPBjA/UiQuf4GimyiwHpYtuNppJwruBXMu+u4KkTO2C17K1pk3nj/of:CNe1E4YuBXMFTE7K83j/
TLSH
T19F667C32F70114AEC806DC7A419F4FA729B234A31F3D59DBA0D4E574ADB22E05B25EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
140	4380	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5044	chrome.exe
4380	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330309435007174"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3488	chrome.exe
3488	chrome.exe
1632	chrome.exe
1632	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
1632	chrome.exe
1632	chrome.exe
1632	chrome.exe
1632	chrome.exe
1632	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe
Token: SeShutdownPrivilege	3488	chrome.exe
Token: SeCreatePagefilePrivilege	3488	chrome.exe

Suspicious use of FindShellTrayWindow 51 IoCs

pid	Process
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
1632	chrome.exe
1632	chrome.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe
3488	chrome.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 3488 wrote to memory of 3988	3488	chrome.exe	93
PID 3488 wrote to memory of 1044	3488	chrome.exe	94
PID 3488 wrote to memory of 4380	3488	chrome.exe	95
PID 3488 wrote to memory of 1044	3488	chrome.exe	94
PID 3488 wrote to memory of 1416	3488	chrome.exe	96
PID 3488 wrote to memory of 1416	3488	chrome.exe	96
PID 3488 wrote to memory of 3920	3488	chrome.exe	98
PID 3488 wrote to memory of 3920	3488	chrome.exe	98
PID 3488 wrote to memory of 4288	3488	chrome.exe	99
PID 3488 wrote to memory of 4288	3488	chrome.exe	99
PID 3488 wrote to memory of 2152	3488	chrome.exe	100
PID 3488 wrote to memory of 2152	3488	chrome.exe	100
PID 3488 wrote to memory of 4680	3488	chrome.exe	101
PID 3488 wrote to memory of 4680	3488	chrome.exe	101
PID 3488 wrote to memory of 1896	3488	chrome.exe	102
PID 3488 wrote to memory of 116	3488	chrome.exe	105
PID 3488 wrote to memory of 116	3488	chrome.exe	105
PID 3488 wrote to memory of 4356	3488	chrome.exe	106
PID 3488 wrote to memory of 4356	3488	chrome.exe	106
PID 3488 wrote to memory of 2896	3488	chrome.exe	107
PID 3488 wrote to memory of 2896	3488	chrome.exe	107
PID 3488 wrote to memory of 4128	3488	chrome.exe	110
PID 3488 wrote to memory of 4128	3488	chrome.exe	110
PID 3488 wrote to memory of 2104	3488	chrome.exe	111
PID 3488 wrote to memory of 2104	3488	chrome.exe	111
PID 3488 wrote to memory of 3068	3488	chrome.exe	112
PID 3488 wrote to memory of 3068	3488	chrome.exe	112
PID 3488 wrote to memory of 1580	3488	chrome.exe	114
PID 3488 wrote to memory of 1580	3488	chrome.exe	114
PID 3488 wrote to memory of 3200	3488	chrome.exe	115
PID 3488 wrote to memory of 2432	3488	chrome.exe	116
PID 3488 wrote to memory of 3080	3488	chrome.exe	117
PID 3488 wrote to memory of 4324	3488	chrome.exe	118
PID 1632 wrote to memory of 4340	1632	chrome.exe	131
PID 1632 wrote to memory of 5044	1632	chrome.exe	132
PID 1632 wrote to memory of 5024	1632	chrome.exe	133
PID 1632 wrote to memory of 5024	1632	chrome.exe	133
PID 1632 wrote to memory of 3984	1632	chrome.exe	134
PID 1632 wrote to memory of 3984	1632	chrome.exe	134
PID 1632 wrote to memory of 3668	1632	chrome.exe	136
PID 1632 wrote to memory of 3132	1632	chrome.exe	137
PID 1632 wrote to memory of 3668	1632	chrome.exe	136
PID 1632 wrote to memory of 3132	1632	chrome.exe	137
PID 1632 wrote to memory of 5072	1632	chrome.exe	138
PID 1632 wrote to memory of 5072	1632	chrome.exe	138
PID 1632 wrote to memory of 4256	1632	chrome.exe	139
PID 1632 wrote to memory of 2780	1632	chrome.exe	140
PID 1632 wrote to memory of 2780	1632	chrome.exe	140
PID 1632 wrote to memory of 3136	1632	chrome.exe	141
PID 1632 wrote to memory of 3136	1632	chrome.exe	141
PID 1632 wrote to memory of 216	1632	chrome.exe	142
PID 1632 wrote to memory of 3392	1632	chrome.exe	143
PID 1632 wrote to memory of 3820	1632	chrome.exe	144

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cs2.dll,#1
1⤵
PID:2852

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xfc,0x124,0x7ffbcfa8c728,0x7ffbcfa8c734,0x7ffbcfa8c740
  2⤵
  PID:3988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,9874524588606057171,7013002321035115906,262144 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,1934876385385874719,7758660130644870186,524288 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,13415602979075281305,9937098518000386849,524288 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,6448828850076713007,15965390382907813979,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,15055780702984554711,10720121731435403488,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,16970743823148776586,16012013884483724897,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:2
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4740,i,1039918815934282653,5039540431825130053,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,8527610377630667264,1086734225405204998,524288 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5564 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5904,i,6487269461881696078,2914074095753574918,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3500,i,9030479728510083420,10636781568663569956,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3380,i,3861842882380769996,11091197187343882508,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:2896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3288,i,9966300872960587190,16461715546957500507,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3492,i,15853353152461349687,12946308550182940433,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6236,i,7915718104031288943,9363549248696729913,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5804,i,4499865325206402411,17375466627343272792,2097152 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6672,i,8744629964037147963,5544199968348752131,524288 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6676 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6436,i,90747638980519377,12082572506685163909,524288 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6704 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6432,i,14508172413034118918,14239611308345678845,524288 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3296,i,1096298370865672130,3729005929813096020,524288 --field-trial-handle=2040,i,14580893692175234698,60974151693791528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4324

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:612

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3944

C:\Users\Admin\Desktop\roxen.exe
"C:\Users\Admin\Desktop\roxen.exe"
1⤵
PID:3068

C:\Users\Admin\Desktop\roxen.exe
"C:\Users\Admin\Desktop\roxen.exe"
1⤵
PID:1816

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffbcfa8c728,0x7ffbcfa8c734,0x7ffbcfa8c740
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1800,i,10012319634159459078,13880017013730317404,524288 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,17618189757290796698,12186712312270502166,262144 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2080,i,15709646232619549032,12914594367824796021,524288 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,129599294355081758,12583687987119044894,2097152 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,3871110619014523619,8386120575942277989,2097152 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4544,i,15750644993412327552,3023918490857564983,2097152 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5292,i,2283137469643423816,15628624712715005589,524288 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4668,i,8961242647558839538,428108593905768420,2097152 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3900,i,13076708712286284756,9669727552828707345,2097152 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5696,i,13287516089988134690,2641763038197333794,524288 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,3004285971357641240,6392776908676804189,524288 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4724,i,2940464339185435610,6625192515238915636,524288 --field-trial-handle=2028,i,7153767385037297232,5510171586654007934,262144 --variations-seed-version=20260904-090042.235000-production --mojo-platform-channel-handle=3936 /prefetch:8
  2⤵
  PID:3820

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 2679ea0b96f43ded4259ee6860a268fadb58a37d12e7d2bb1fd0c13e50b20120
MD5 f42ffac3aa00d0fe5495aafb0beced4f
SHA1 78479b52f7012c7895b67ab004df0bb519face0b
SHA512 83b673763dc4aef42b427349b50fccdd059330d16cc09a7d460474f06e0016f91fd5cecea8d298d5d6f7322c42a35b8c625f28454ed87a8ac200a2a0b955957d
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0b975a5143d213ac95b534a9714aef4aea2848470c2c57dd64b6a86894a8858d
MD5 e22873fd53aa7b8b144fe885d070126f
SHA1 b2f64fc7f649e61d5a10d0a2f04ac7197d6f81d1
SHA512 a14017d353ddeaffef4945441f8dd609a2f0bcebd5305ede462197015847b94cc97184788f5d162667ae082045aa8c94895a5a4be7ace57fab33f5e96cf5c2b1
TLSH
T122E02BA5C861EC3B14FD072DA4249782D754239B2A41894B7B3DC01D8FB1A364995C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000035

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035
Size 17KB
SHA256 3b8130642ca2cbf33e597a8e37af388a76b81add178aa83e3d1f72f58e3c0b08
MD5 94be90e7d251df650130c032d0d11188
SHA1 f3ad07f47cd76839818635dcaaebc19a91e31119
SHA512 36a281ff05ac7cbc4a9e65ef041440178951fe48c0a32cacb9dd8fae0b39b32ce3da17ee4709f22bd7728e2aa2c70d848ff1d423f37e828fe21ddff83c697401
SSDEEP 384:1hUjaecTNeg2Hi9hmuBBgMVbEk6ZRM2+jqASPlrWTW77YM3FkxDiz:1hUjaeYUChmWbE73M2mq7PN7aDiz
TLSH
T13282C061D49EA313812C86984F0AD3F40019D37B0D79B979EA75E24F699D5B4A4B0F0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b6dabcd7b2e159282ff8c1360e6679e7c34ce1606c5fe2f62d6d838e754f8b9f
MD5 451c66c9e84627d228e15fe494123258
SHA1 89d89e726a69a7c88a6f739eb02f285f331e7243
SHA512 f433c09366247b9970d39e8c227401f391d86663d33eef4c9c01be8f824d8fe6613368d8f84b84d7d0740b6e8b798e3cd6792d8f13212040fcb9b77ba0773dbb
TLSH
T12641C0C451CF2436FF0E017214FAEDA6921A0E8906282B3E7E1CD89C2957BE1188DCB4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 199df99b1330f3da0fd7f72f138777701d6270fead1a2ba5ced15d3194d1302d
MD5 3fea947a25d7af1b6c64907d5c7223d1
SHA1 289f045e63a05e118aa849f7c7466869c0968132
SHA512 fe92124db001c6405cd21514ad5622792997c8584a7368e6e0f3d04c1321a3ab6ef2ed1b8dbf6442f0c88b699267f057bdd0c1427b0f53288039b6baf7096322
TLSH
T19C2156C950DD1137FF4E20B315AACF85A20A5E0A05342B1B741CE89D6856BD1689ECF4
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 347b0dfb6791b72ca43ff2a8eb02e416df92c718396de6e8d60d5c98129c373f
MD5 860a66717d9334dbab20a8a57652c3b3
SHA1 d53705bca46d6110bfec29ae5c94835738263553
SHA512 b92d8ac47a79734b6361fa4a8080235b8c546339c7ca57f773a403f5a1d3b02ea54db6367c5aeadbfc11d0dcc2e948930c29aa7db1bde3ee823e42709b971206
SSDEEP 3:MsEllllkEthXllkl2zEkl6gcKll/:/M/xT02znLcq
TLSH
T1F3440444FFC40C07C50010345011C7504370D5110D11D7C3345344135CD55540C04100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 317B
SHA256 4ffdfebfe183880607de22096c58e5762589e71f78bc54c2b82c58dee3e34cc0
MD5 9d2bee669386a8883f71b3166f8a2ecf
SHA1 9da4e46ba68cce9ca6fd0783739ce30621e13d4e
SHA512 6b7eafe55e659d741d9357279222863748d6311c620d9ba0b04d8072804f243130a09b6d4aaee6037069d292e05e244da7304ef31fd432cf772fc14bff93977d
TLSH
T1ABE0864824D9C2ADF0A49563837E571C8EE0790AA7CE39562B0AD88171A1604A1D4771
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 20KB
SHA256 ba8bec7e5ca82e4f2cdc0dd39e4e59c15a9056940f190d01ba37941351068fcd
MD5 31153a18b7ead31a2adc8c91c2b2710d
SHA1 1eae947fffc2f430f7971edfa6139232f23aa55e
SHA512 e949a016d0f85a061c7b504fbe54c0eb2cb261873e89fba9e280da294ab4330e0644bc02cc47861727c43a164816a2e087c15e0ec85c88e46d6c7747a1d2405a
SSDEEP 96:deBCP7Gi7E1+wwwomw/zIuGDmy/g51PO2a7R:dcJfwwDwrIuEmy/81m
TLSH
T1AD920943AE793C13DF862EBF220E20F9CE37C15C5EA39C5C386448318ABD582A02057E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 612ecbf6faf2f33815c23f824c97ac808161f134d439eb742c55900f7ec272af
MD5 4272d277b8f692eabc2acfb761a13347
SHA1 6da3bf65c548dd1f366d6116036cb66e07b0ae3a
SHA512 227700d259b223bbadfcce846ec5af947b7baa2ca5f29a01100fff6e07ab59b10f6de663bc16a3c8556b4008dbd477552af84238c20c180cfc617790416dda1b
SSDEEP 384:fBv/tIkUI3ijVYWNkqpwqF53bGFt1tyqy:fB364idkqqqF53bGFt1tyqy
TLSH
T11DF3959F6E743E12CDEEC13A64A391A69C3DE02FC70761C95C6405B2CED5B63A05C4BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 10KB
SHA256 c6c6cc3fda877daa467ab51fe59f0210d2752e92caa6c5242cf4bc44a30194e1
MD5 194177cb3175706c537cc478152f427d
SHA1 144cdd1a253d0286264e99529faac08839be7c30
SHA512 a7cc20ba6e87efef0c09f04d7c68324b9f106c8e984875276cf9a3b51a53e93f9c60a0b92c1214d7106f6358b8010d2500cbe5029124fedd3bcf232ac6b28075
SSDEEP 192:jEm0ffHDvZsmD/fm2YiepKnP1NOyyphetDu7cAHY:omC7/Dfm2YiegndtMhetDTA4
TLSH
T1EA229E77D78DC149AE4441D0351B6478CECE31AA335D9796FFC1A418CBD90656E3CCA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 329B
SHA256 ae4b78868558702af88f19869792e527cc0d15cf887631ba2d58aafa4db52f64
MD5 62b8dcc5f3ba13f4f5c82a870d6e0abc
SHA1 61845cecbe4dae7425065ad6d00ffd2ce6708106
SHA512 b44b96d68d9093a316ec3e6d09f442236919f22bde3dda8051d9ddbb9a638430fd9cc27f47bf80d6ffd8208588e7d470672e2b7b0b1e905506b451f7134e969c
TLSH
T13FE02055949DC2BD21048117532AB70CDFF03F08D7CD3B570B17D44071D804852C16B1
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 38dfc9deea2b87c57554b3a34cc1c131a8d8f52e816bfa7c31f55946b69ce4f4
MD5 567368b71a588c747eafe732859e170b
SHA1 da8ee901123930f4e3367e0d6e2854b46dc7701e
SHA512 80faf6e4eaf8813bad021726e45f5c7159ce6a15277c3998a25487866e32243e8949fe3cf080d748a2dd609c22a4f50ba7b94f3f8fc9777aa3d23b12be395389
SSDEEP 192:DsBOzZt0BUJjRnJpwJxRaIR1E5KBcSNPnSVZILL8I+MVZy+sWcRooVdGMIbMFePo:DsBOzZt0BwjRJpwJxRaIR1E5KBcSN/SZ
TLSH
T11642ACF7C7F8C66D891152F5AB246F1ECD290A29432C3D1AC5D4EE5FA3E1470E25098E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 403f3e84b08497fd641b76a5a933ce6caabc0e9896275a24bef5ad7580885937
MD5 b6d20f5d88ead2e72dc8764ca9473f2d
SHA1 f9fcbab5531bddbba83b52e11b5a499acf873e0e
SHA512 b0ce27418d38fc5bc688537d897272b796445d74bc6d99626e3423d4ffcc6a9c5ff154f410bce28ac4b36ca1f5652d6c9ba517c7f7d43c48fa13f001138d62a2
SSDEEP 192:OIEumQv8m1ccnvS6iCu+e9T5RerEoXo0IQq42VfFyU9:npXiQeArE8IQq42Xyk
TLSH
T1A7F23EFB1235E112D4A086F4E0196E4EFF23100757EEA6E5D2511AF3E2CA0E2957CE5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 e4460c24475f5d084fdb68d9b2f7f34b2be53b74558db149ea5e1d048f860c58
MD5 e2215c80856d3ca2301ddb91c9e78020
SHA1 f77c2da37306877d142bbb918d14f6aebecad3f4
SHA512 f39cd83d9513ab9dfa962dbbf7dc484c2e9ddbc0073415721eef2974da8f82addf03ce99b0938689bbbb310c2e6a4462aecb59e0d357bb5c3626e1a871be2fe3
TLSH
T1273171A3857EB42B217D08BB1D46782E6E76743917522CF4DB5A856C70C44E31B02877
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 8049481f127cb907aab5090ec139aacce5345d515cd205d19baf938b3a571b9d
MD5 218b455ba379c8b063d486c7c7df9ac2
SHA1 68bd5790a73598098722e16ae97c69c89b11f5d6
SHA512 ab5fb1a7fa5dcb307485311f0043daff05a39fbe3d0c798234e50a5874a8e59abf676f0f93173bb33ec7b408c3cd2b4a3735bd36d2b9fa5cebd1715a1f1a3989
SSDEEP 192:ERAcBzJhrzafv70pAPRp2dAYl4c9+Hsb+WNmKQZ11tRB772gGeakwxbj6j3wPyI6:ERAmzJw3gUXc8wox92ghaxIqe
TLSH
T15662B72EAA20697B5CDBD226FD117BA6D3F6212275C11E84F6FC8E2C19D76CC2127007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 0e9b94fc2b016ebae431268fb516e828f9713eb637108650407a235070e7a094
MD5 4e6e77d4413b48316c7b0820f3a175ec
SHA1 ed7aca720ec947d3473077f79d3e4b8645b5f11d
SHA512 b29971b851d6855e63e61ca22105bfcfce113ed5c2b3795cc026c81c0458a41ec83815b7334c9d3eeca351ac42a3823aebf1b042f0b9e1379225fe90f394cb73
SSDEEP 192:QRAcBzJhrzntv70hAPRp2dARl4H9+Hsb+WNmKQZ112dXGNWi4eakwxbj6j3LVyI6:QRAmzJNNg8X+8woGsWi7axI9e
TLSH
T13362B72EAA10697B5CDFD22AF9517B97D7F6202220C11E84E6FC8E2C19D7ACC3127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9436bdb30c9f5e7e41f39d146e66e8eac794aa28d2af549f55e820d289add88c
MD5 6d52ff08f9ef6caab27e5cb123a812a9
SHA1 40e45ce650c6f8c9c5d50755594c5407cccaad0e
SHA512 f76bf38b1c5e270a8bee479160828367aa32682471ac786d0c547a812df0228c258f16c2bf0c14284cf8cb78ae4b51dac9cc445df98cc31842178db514290995
SSDEEP 192:ERAcBzJhrzafv70pAPRp2dAYl4c9+Hsb+WNxQZ11tRB7729Geakwxbj6j34VyIsB:ERAmzJw3gUXc8wmx929haxIMe
TLSH
T1E362B62EAA20697B5CDBD226FD117BA7D3F2212275911E84F6FC8E2C19D76CC2127007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 624da400f1b0f39cb9ebf69432bea4e8442698edc76c272cbe9597acb6046434
MD5 6cf71cf29445f6e069950ab77713bead
SHA1 79da137bf060d757e21a12eb9bbc548e60aa71d3
SHA512 0f5c998a5f9e7feeb599b1e0918761d4bac32886b5d91f351e795f3e0ee7a3698aeb9f1b0d18ad0676c95d77a3282ce74fcc59f267103a2050474be6960f0e97
SSDEEP 192:QRAcBzJhrzAtv70pAPRp2dAYl4c9+Hsb+WNmKQZ11gn4772E4eakwxbj6j3LVyI6:QRAmzJyNgUXc8wouo2E7axI9e
TLSH
T14662B72EAA20697B5CDED226FD117B96D3F6202264D11E84E6FCCE2C19D7ACC3127117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ea72dcc7ddadbfdb4ef088eda521f8886f7fa4b7554337cf647ede4d54fdfd05
MD5 f2d2c659cb572056a8824145596a3825
SHA1 08aa163974e628c8cb88255bd50308e2778298dc
SHA512 a5bdffad3bb5b370b77c76b0eb042dd5e5a587cbbc74ca295986a7ad2b1dc15bb3dcb54be8162114c3c26f185e1976aeb856d4f5ad164fcbaf089f23ab5c3bd9
SSDEEP 192:ER5gZhrzNfv70pAPRp2dj9+Hsb+WNPZ11tRn6Geakwxbj6j3sVyIsnAUgtaJ:ER5gZH3gUX68w/xn6haxI48
TLSH
T15452C72DAE14693B5CDFD22AFD117BA3D7F6202631911E84E6FC8A2C19D75CC222710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0ebabcc47385986b0dbca853ccb666f11938f6b8d562e2a48f03b2d371c2677f
MD5 922cd40f70126c555df8592b5460eba0
SHA1 1eaddbbb29376a7ebd6ad51e8e2a4da6438a15a4
SHA512 e92d565b384f7f67dd94bc2346fe1c07fe284299848e0f1ce074ae29f3d6c41da9be60ac7b0ffa95b023b6309e62ea53b22759fc2d867582d61ee42957cc614b
SSDEEP 192:ER5IcBzZhrzafv70pAPRp2dA4c9+Hsb+WNPZ11tRB772gGeakwxbj6j3sVyIsnA4:ER5ImzZw3gUXh8w/x92ghaxI48
TLSH
T17952C72EAA24697B5CDFC226FD117BA7D3F2212675911E84F6FC8A2C19D75CC212700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 37fa5993db30386ee1d32edefdbecf6461b8186370c9518c0bafa5f706703887
MD5 30a0897778a40524bb1240bdbfc8c016
SHA1 7789be0972139cccace64d2d77d7932980f03e3f
SHA512 36f44179798db03281433503a987f05101f37577072842ad58bd8d365564ab8bf99a9b073af2c7a7b7b2b4d69b722b0331d293f8755acf4d9b1a3b67b9484493
SSDEEP 96:F1mK1MzRwcnDh1JJ7oBLXbXFXKXTwFXSXTkXFXKXTJxhXsXY0XbXNXKXT2uZXIGq:F13eimDhh2L1ajiCjk1ajR8XL9ajp4Gq
TLSH
T1E9A15B6EA50A184EE4AD4936CD78571B5F69CF0C2BFE3767A9DF8A0405B0A5701086F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 577a8651c47122900dd2f3dac4a52b48ee30969892da6f2662f71452c9e55790
MD5 2418b01b546faa2a7960d71d42c62f51
SHA1 738613af4aa72f2efe9dcff4980a8b544d7d04c0
SHA512 2819af8e899a344b3b3a26ad9f180f54ff9448a7d1da6832fce36dab68879c8bb6f483f1d25db9ee8eba9d27b29b054312aa7f174480e23172070e71f6019683
TLSH
T1A8E0865129D9C2BD109680275375E70CCAE8FA09EBCC3A561F93D54021E6D28B5D2670
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b84ea366da63e180ae4ee9f443f72d50d2f6c32d47b2da3683707581c16e7c3a
MD5 78f1141f92ec0e141b263030ebb732c0
SHA1 8ea4cef434b0c0d4f688f2aefa730791a8c0f38e
SHA512 8a196c367227d1d6d3d1d96af5b4e8ac34824ffd1948940e0c6123667e8b91af3931879fdee0f9a47632bfe4a0b42ea782c2bce7c8c1eb05607c8cc9cfb9b3eb
TLSH
T101B0124080419502C18206B017C6288C71245F11F60A174173F0BD22D829A61801C090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c74e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59c74e.TMP
Size 96B
SHA256 9ad73da10ae977a69cdb03d0c36219caa227d1ab808a9b797e140ce0a27a8c03
MD5 bd392f74c1f3148684aac5ad607d8b1f
SHA1 ae17a8cc10fd2aeff8822b64ed989088e9e5f7e4
SHA512 b8fe19d24abf00fe38a61c098deba9b44d4c16067b548e9b0dbf6128d157f66e135898b8f2713b9d6832f3794037291134114506963f1a269e72fcacde44ab42
TLSH
T171B02288C20A2302C88203B03088A0CC3020EF22C3030203A3E02A22CC2023300A82A0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 1KB
SHA256 14deb7f949b4c839f603cab713565ffc95788b7b5689c3a9fa9f85eac505df11
MD5 d47ebeb40116cfbe716fad6802f31f51
SHA1 458ae9aecaaa4fb3f681c8ea5059085ac6a7bef3
SHA512 5b878e5020525e9157a78d097b9393bd3c8d4dc6342fad139817b10592c7d72df5ac35ddab7d4b4d298324df306a71fc6ca0770fb0dda556d9ba33b00d5cd6e9
TLSH
T12841ACF25CED6835EDF994729D9572258733B0441F50ACCA8A592BC80026712B8149AB
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 317B
SHA256 09b272453fa2b79c56b5f1bdafd3f824f5b746ff083d4b3cf6c464b0441473af
MD5 e38eadbbf1cdaabc083216c6076a2035
SHA1 dac69baa89b84f05713cb5994ad80eedb607cc19
SHA512 38dd1dd0dc4357ad999b99495d962b9753ea245fa6e3fec0f7654b2b9bd28efea4fcd1e68ff39ec0816553bcf8c307a0bee3f1b50ca25a77d9d53de414748aa5
TLSH
T13AE0266864D8C2ADA1649027037D630C8BE07B09E3DD2D8B0702C080729440872D06B2
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13433030951242347

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13433030951242347
Size 6KB
SHA256 c3135996c301e17319c25b5ea3d6fa48ccc6071f026f0677068a6fb557862165
MD5 366a035751241e3b3894871d294a9e0f
SHA1 291bbf2b30491e4aa6915cbe3d51242346034cc0
SHA512 0730ef7df9ffd8a6c3fd09d665cef4aa9809d15883e4d5425394f193c7c0c9c2a0efeae6d377f7828c65e61618ae6f9faa9c1131cacb94f7706eff8fd1725909
SSDEEP 192:3VCvu4EpRQxqjvkDOVDOHqjvNjqjWqjus:gEpR/yO5OCledus
TLSH
T1D4E10152A9F8043FE37FC53D987612E1AE3BB54225864D5FA07452090872B435FB8FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 7e937cc6cb72315f994eb314c0f2e815f25bd633a884cf72dc8d656f9b70fb3a
MD5 6bf040c05b5a051946c7a4cfb6619297
SHA1 b2586e7f0c0eff6230b4f83a3a835bba185d9a2d
SHA512 0632451b1ba9a7ec7ca2efd4e51d9f3ebecd470b765c6c317755a44f76f5ae2357cb28863871bc753c75e8113b52c6e929c144f3ccb89b68d1024e34e3bca017
TLSH
T1B1B022208B3B02CAC30023B0E0C0828833222C0A03030F22F2F0C0F8C0B0303C28AA30
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\db
Size 44KB
SHA256 69fe78da70ea590c91de266c6bc9787408aa82decf7351fb136169f1b6b279fe
MD5 156171c2c910e3ed3df96a40201e152c
SHA1 222840008f65049ab8ffda92305305f27522073b
SHA512 a223d6526c2743d44eafba7a93ac7cd87eb207ea22800b9a79a3b134ae4e8279b0bc3e25c8e6d25595428aaf9496468bd649d48376f5ef975b1ef6cfee6dec81
SSDEEP 48:TVOIy4m1b3fbUtbq0BksXJtk5tjOIc/3DTXSqe7:0LkPxq5t0vDOB7
TLSH
T16B130EEF2D147482D2E9C175A46E6EBE6D7B211C8EC3A8C159B052B35CD18290C1F5BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 79d01385aa8a715520beeece39a3df0d9547e72c469463d7b7e187d8bc679a3e
MD5 21dfdc2a0f302c24fcaa004316950561
SHA1 4f86e4bdb13d487312ec2d2a3c4a9bb70bb6ead5
SHA512 dddcf2af51924f73d2a479405780a003cee0846c32f260e983c7550b540dcd1649e7f3a6625e73c5e97a0dd9e5b0059d11b0e66aa516d391b74385ea31d1b952
TLSH
T160B012547F50C737E2C5193D02998F51B741F01232000A736DB55F740D096A4FE42DE4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 3d0f6a92c58b7593c9419646edf4fba553d89d50d8b3b95756ad4a2aba741af8
MD5 9149b7067ab554af4ae08a613ed795ec
SHA1 e492b4f1db4fb6be9396ba14904a2d3e5e3b5a5d
SHA512 68943974ac846b467c50a54a109887ebfa0c26a9cca455b52b02cb139bca83ad975150563417b15a3d3a28399becbe365c1973b46248560a1217c7270f692a87
TLSH
T14DE0202125C9C7AF11858027A339E30CCAF1F944DBDD36691F07E1407296448B1C3770
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 62bd766b03021e72611506c1beb7f12c1dc6e80c42269ecff5e309561ec06eef
MD5 4782adae7381b933db6188f91cd7b5a4
SHA1 489a2903b29c648d60c12fa8acc08bcc2779e94b
SHA512 878a90460fa747a8caafc264979b37dda04f8fd4149dad70eafcd44617888834be8f756ff9e50e223e7bc04ec0a383158416d6c812363bfe1e1b8ede3e63d544
TLSH
T1D1E07D7525C8C37D4040C003A374E70CCAF0FC48D3DD368A8706E040B19005D71E1BB0
MD5 SHA1 SHA512 TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 4adc45699a501b50861300c8dc5c7b03329cf5997227a0261731eff0d0a7411f
MD5 aa874676c16bb4fcfbddfcd57fb2664b
SHA1 9b9ea0290b164e4002311c1cadc20be1c1c3830b
SHA512 9e77d83925c944898587231241afe2025aba25610e0df4ba962e14baa0a8d0956beebe14313d06e2b5c559c7ec1db962cb77ab8fd961f0c991264e9a5554c17c
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4v+XvXhM:7ZT0nzXgg1fG
TLSH
T198034F8F562850F3D0B2C13EEA8245E2FC7C161CA7237AD519F947754EEC13790546AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 6b528187eb0a65acfbcbe49d8317662c26343c1bc01957c04c5c13c00eef3504
MD5 afd5a2338498c4ea9f374fb84548caef
SHA1 9f4d48fd3c7dd674dbc98cf6bf70db9c0e65274e
SHA512 b6ab4de6fbd22b828d14dc8510f453e1e6748028580d27c8c82abc9bd1fc4680b40893c19884ccb6065447dfabeb7d61234548a2de0fbf5d2eb7eadcfaf27576
SSDEEP 6:UqVkJEUvSr+Bcc/XKuqHKu42n7PCc/mLEJOgLEJLBK:UqVkJEUvM+BXXwX4cmLULI0
TLSH
T12902DFEF6405645BD822117EC69EA8B32D2D0A783B4B3A1A18D88A041CFC20380147DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 30KB
SHA256 4e014fe92250aa87f5ee2c18edf6483d04b710462dd83b3f4ec15d6242cdd0d0
MD5 7d775c37bfadff7f1a82531e46fba90e
SHA1 885bdeda39aa6217ff83c4a153935e6fee022ca0
SHA512 d47029bd12790abb1de3b099afe7418cb43f2e08119e268dd220b718957355ec0dd35d67c569bb67273c87ac313c86f368a5cdbb1652fcda45c8b7a74329286c
SSDEEP 384:afVLsdGO0bQXIIImbGMIMNBlvhYsdGNYPrnsdGij5GsjsdGCG0dGsdYmG7FGwGb2:X0bQyToS+dYb5Ma+iUxrYWo
TLSH
T178D2F89A93701A49EC8F97FFEC558D1E5BBB9C89494B004164A22BFA3C73D16884135A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 7f99922d211d6062c309c677c8e599138d1264e94b78335c1d3ad0cc6d72b2ff
MD5 581ed13d6b37ec9d0cce56d7880c8bf7
SHA1 a8fba09aff0f46648dd011b31b40a7d382731fbe
SHA512 5ced2db73b71347b2ad5875c7967b11808754bd0797293d900e9baf8ba09c6dffa615f01bcdf415f832d995939650c555b0e17f3b9383c61d3f4fc6a339a4aca
TLSH
T1B8E086537DD9C3AEA055805B2366A74CCAD47D49FBDC259A1F03C48461D5904A5D1E70
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a77549a35fc5c1077ba55c8ecaf31628bbd40b8d51cfa003ccb5c62e59828396
MD5 d10e1a71937e469f09680b72365b583d
SHA1 00ebe0fa866eba7650b64edbf7ed2b1e92200a6d
SHA512 b320b27326093681d7bb0a7a46a08c9d39e4d5637427210a7a4bf1ba1e5d025caee90c3973a2968192b178c9bccb09d917bd5d5135356b7b2357abc65673c01c
TLSH
T1FA216892F330C148D209467A643E9B290734C4669FF8FC0F16B620792EB7E000D4B2E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 aa61e15072a1975970db31418092a503a62da8985e7311e611bb6e3543a28526
MD5 7908d901a180ae73fcec24b29c866e25
SHA1 c0b924fc4ac3e072f716f2a99092aad62c1afaad
SHA512 a75679428d6e4fb4bbe2c1eced6129080b26d92a04cdefdd1afff84c47340f2460e81df0b0e1c1f067a7fc54330967c7cb781b5ad45550bb49efa3d466c33355
TLSH
T118E026857888C3AFE010C02B1365D34C8AD43C88EBDC3F4A0F03C844A1E3048B2C2A70
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 6d94cf388a3f13d8671c55158e559c16821cda5f110d0777e0f5dbdac589ec7b
MD5 a03148c2d7b29358f70817924ac55add
SHA1 79cb2f155b9908a0994f9a19dba1ba75858fc166
SHA512 6051e9f09d519669f4b1784d2465aacba19af05e7e6f2ddd6c1a75fa7ebb82aef7d7d3f016eb7de0722b9446bf4fd784e20c64bb4d912c0dd0afbc0628d998ba
SSDEEP 3:MsEllllkEthXllkl2zEklpz/:/M/xT02znp
TLSH
T14B44044C7FC40407D50410344031CFD00370D41015115F433C714C135CC57441C04050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 aadf6a1e3d6540fed61313ba8477efba38edb331e901f78d2b7c4f8c39e06b58
MD5 e34b1750a106c8c527fd64c70e5dd1bf
SHA1 5116e91fff6b8249227cece0602ef6fda10f3133
SHA512 82a2423a61e3b59d5662662ad5a66abe3c7c5cdbebcedebc618c55ef66f7c2ed33b469ae5fd0eb914424a839a3ec7ac93a22cf9c2d799946b57de99a38bc8c42
SSDEEP 3072:N9AMPP+LJWjtT5TqaPZZYGCZZscE5PcQYED0R:vJWsjt1TjvYGCHW5n9W
TLSH
T12BD31291ADEC7A3B8F47151ED5D7AA2281507CB536E0EFE826854F0D783F7262313622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 2c0917364938b06a5309d4dda5b4c4be1ec8d7c53a6e36ec1e458705408f013d
MD5 a9cec7530da4ce0b15c45bab0e1c3e6d
SHA1 63d48fcdc81c565e46a60751fedc793259efc8d2
SHA512 811031a2c7e2a897eef2b28da82f11edd991571a34c8ad48faba7ab49a9495e897600376d5cff84e4a87166bbfa43985223c007b68dfe3068653fc3499001f80
SSDEEP 3072:tbAMPP+LJWjtT5TqaPZZYGCZZscE5PcQYED0dqfd7NtZL8cHQRZEQ6Spsp:xJWsjt1TjvYGCHW5n9OqZ/ZLW3Exp
TLSH
T10E341272AFD52F378F834A28E5934EA692B26CB470B4D7452A5D1F8F7C2B7223503464
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 3460fced6b7f8c88c0c7755b88869219365cbdf95a03dfa29596e7d0f48c79de
MD5 98ecb62f373f18f40aedf2f9d2c17031
SHA1 9782789e4337bf999949a73067a7d356da554fa5
SHA512 f357007604c032bf3410aeca89655945dac3a677869a8387001a00aa98fc9d08593858e7a5f3e122f49d96f979f092b03b9888a16652f67de52e8e5efe53a3df
SSDEEP 3072:mIAMPP+LJWjtT5TqaPZZYGCZZscE5PcQYED0Sqfd7NtZL8cHQRZEQ6Spsp:dJWsjt1TjvYGCHW5n9ZqZ/ZLW3Exp
TLSH
T1AF342272AFD52F378F834A28E5934EA692B16CB470B4D7452A9D1F8F7C2B7223503464
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 8b7d2a44d5ad53dfbf22b9b921a730b78d8cb43f2e6813deea5b4b7d04653bb3
MD5 bf6ba0dc705f86190b9cbbeb6bd5c177
SHA1 6e0c6fc44b4e3d0d956d4b5a035c1a0109521d32
SHA512 c542a7bd39fa881e690a28437a689ca46b90775fbbc986a4164cf1689551b6e1133affcf69afb39c6f9ba747accad24d26231a167f47af465aa1f0978806ce5c
SSDEEP 3072:1sAMPP+LJWjtT5TqaPZZYGCZZscE5PcQYED0dqfd7NtZL8cHQRZEQ6Spsp:KJWsjt1TjvYGCHW5n9OqZ/ZLW3Exp
TLSH
T192341372AFD52F378F834A28E5934EA692B16CB470B4D7452A5D1F8F7C2B7223503468
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 a999190572840197bac4b1a336e054cccf0860dc05dea07031790de21b5e26ba
MD5 33ea7d015a3efd6bb40a4d3d6deffda7
SHA1 8fcd4fcc081cab70d3dfb4d4515d6b10d1b0d235
SHA512 bc4db01b566d6d8bb717774fa2baa1b5d8fe90342dd6a2e57f59c0e69761cb9e36df37aa63948bdde3c856ae55f5eacc45743f4375e9b6492bb00ed828b48784
SSDEEP 1536:bYLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:cqfd7NtZL8cHQRZEQ6Sps3
TLSH
T119C30237ABC21F339D92CB64B9530FD6A7B644A99030D301AAAD37EB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 028088659adc42561eeea665903b7fb29bced20b711ccbc00c8c23e587ec9eae
MD5 7c783fe9081abeb905a905fbd17fa1e5
SHA1 bff664e58e11c130b3e1a3f720aa7aec6b2c8d54
SHA512 111e4d0786ddd279452fe48b15afc91263840e557b70e7ab66afeed49601ac6e8b400bcfba2e60faa61da43190f05a0d408f1e8a5cbbbb6e72b2d04267eb1ddb
SSDEEP 3:MsEllllkEthXllkl2zEklWClt:/M/xT02znWClt
TLSH
T1AD4404447FC40407C50110314411C7541370D41005117F43345144335CC55401C44050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 ba4957589264e34ab31a89d0fbc136b5a979a50fcca595b2c13cc53658c83280
MD5 d9b0b45274222f04924aadea3067b3fd
SHA1 cce8b36dd9fa2fa030e7431ed9c8f637592bfe64
SHA512 659ba330fdc54f17bb587d8ba5eb36708d245bb20a3438bb138ce47550525543edd714e37e4deff4eb19ce96b456576e23d9c43de4d4e35572d58757655e4187
SSDEEP 48:TkkhCU2QB2zbBxx8m8V7/qzcqjvmzcqjGEOM:QUcfm7DqjvnqjGw
TLSH
T1DD23648F2A5825DAD0D6493EFDE34D61BC7E4F49C61B68C608D00D724CD14EA502F5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 291558.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 291558.crdownload
Size 3.4MB
SHA256 1f46064d90794ce6bb1f82cd2454d91e07ab3552c172e98ea4dc2b2f19ac726b
MD5 0fa6e992232679f84c60ca329efd0ec9
SHA1 c4863c7a1cda5cb180871cd32e91f03c994eed1b
SHA512 2bb38cf320bac371cd1612e31dec15d6a760e0e7976d8fd0e9aa0a5193ff6963c131ed5a6b85815e149d127d84f9275363e969e146e5c12b32a23727a379975d
SSDEEP 49152:eLf0ByUMHaJAInQ/Q32LiM8xBsAJ/Vr22mGEcatBDAs:KQ32WM8xBsAJ/Vr8GEv1
TLSH
T123F5198329DB0DE5CED677B8A1C75335A774FD718A291F2BAA08C2312D536C4AD1EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1816-397-0x00007FF6F3390000-0x00007FF6F34BB000-memory.dmp

Download

memory/3068-396-0x00007FF6F3390000-0x00007FF6F34BB000-memory.dmp

Download