7490a14f1782c5e1442348aa512f912a0fe45e4d6fd43bb6752ee528d9709be2

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 02:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Launcher.exe
Size 1.1MB
Sample260905-dc3amabe74
SHA256 7490a14f1782c5e1442348aa512f912a0fe45e4d6fd43bb6752ee528d9709be2
MD5 1c092eb2d848b86188fd64fea8d1cf50
SHA1 461620196f37b2f5c74819329b3082d98bf5120c
SHA512 1fedad207ed778edce41c995b133d00ba81119effcb64b18141d7cf370d35398d1b0bcfde8a289c0d39372e61184de4a32d5e7c48ffc218718ff2b6909493fdd
SSDEEP 12288:Lbs/m0E54jwaFXGc8lEBBBHGBKq2IZwDuvfqItNqdg:LbOVE5ifGPRZw6vf3fd
TLSH
T1AB357B83E7A385D8C116C9B5534BF137F9627C8E4B157197ABC41E633A67BA4E22CB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
103	2016	chrome.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
89	api.gofile.io
91	api.gofile.io

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2016	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330503668225149"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
2152	chrome.exe
2152	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe
Token: SeShutdownPrivilege	1020	chrome.exe
Token: SeCreatePagefilePrivilege	1020	chrome.exe

Suspicious use of FindShellTrayWindow 40 IoCs

pid	Process
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe
1020	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 1020 wrote to memory of 2476	1020	chrome.exe	90
PID 1020 wrote to memory of 3644	1020	chrome.exe	91
PID 1020 wrote to memory of 3644	1020	chrome.exe	91
PID 1020 wrote to memory of 2016	1020	chrome.exe	92
PID 1020 wrote to memory of 4820	1020	chrome.exe	93
PID 1020 wrote to memory of 4820	1020	chrome.exe	93
PID 1020 wrote to memory of 3272	1020	chrome.exe	95
PID 1020 wrote to memory of 2436	1020	chrome.exe	96
PID 1020 wrote to memory of 3272	1020	chrome.exe	95
PID 1020 wrote to memory of 2436	1020	chrome.exe	96
PID 1020 wrote to memory of 4944	1020	chrome.exe	97
PID 1020 wrote to memory of 4944	1020	chrome.exe	97
PID 1020 wrote to memory of 3496	1020	chrome.exe	98
PID 1020 wrote to memory of 3496	1020	chrome.exe	98
PID 1020 wrote to memory of 1004	1020	chrome.exe	99
PID 1020 wrote to memory of 3484	1020	chrome.exe	104
PID 1020 wrote to memory of 3968	1020	chrome.exe	105
PID 1020 wrote to memory of 2452	1020	chrome.exe	106
PID 1020 wrote to memory of 2152	1020	chrome.exe	113
PID 1020 wrote to memory of 4052	1020	chrome.exe	114
PID 1020 wrote to memory of 4052	1020	chrome.exe	114
PID 1020 wrote to memory of 548	1020	chrome.exe	115
PID 1020 wrote to memory of 548	1020	chrome.exe	115

C:\Users\Admin\AppData\Local\Temp\Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\Launcher.exe"
1⤵
- Checks processor information in registry
PID:4896

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffa025c728,0x7fffa025c734,0x7fffa025c740
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,16061370588963948547,14818394592600561006,262144 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:3644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2208,i,13978316825836613387,9709553581273745019,524288 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,7904195385709993801,17727094044191765528,524288 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,6694844413057413879,8621673369365927020,2097152 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3452,i,10585837986057677318,5192318429911189583,2097152 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4508,i,12665486140433710626,5941038758781053189,2097152 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:2
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4620,i,15724275222625417198,7684298987104396632,2097152 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,1332935654408661557,3937654526128572703,524288 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:1004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,528053793075967735,14229627253000278214,524288 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,11867929768490144324,11414871295758236874,524288 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,18090056794376208873,17795039067441660131,524288 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5872,i,17530273530716028138,7301238973258973546,262144 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5928,i,2791437448832448773,7396326451781364533,2097152 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6032,i,4528067070948138941,13853546614504391652,2097152 --field-trial-handle=1924,i,6184774140045406017,13790921344600247554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:548

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4552

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3b166325f2cbc72968f8f196e4c0f2077ae1dc6a1f7a2a22385a20448208f301
MD5 896ca04d9ec41552ea633c24df7ca039
SHA1 a01b1b1dbda082e1218258879e1df1ba516b2c9d
SHA512 59a11349da940cc6425722faec8027d848808a88d6c2feeb486233a7f353bf8c38c756c80389a85934d621c1d692bdffb1e37006b81622dd2887c6bd97b83f1b
TLSH
T182E0ABB9C920AC3B08FC071824180646E35023172B40486B3E3C820D8FB96770486C2C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7191c66a734932e3b2a1d5dd7a96e9f3fd077b5d3de98d2a75a362d4ecd91940
MD5 bf0578540def256912bbd14dc4af6eab
SHA1 87b3e4e8ff7af06df50a46acde340bc5bf9f9ae2
SHA512 4bc52967a157268e736fafc2a77a5843fccd1e869fe6a9e740cd3ffe1c87ae54e4f63d1e3467c8deb7f1c3b0b89da776ecf5d8d1d958d7ea4bb582817bba7209
TLSH
T11A51AEF3D7E485AD861152F49B256E1FCE6D0A18021D3C6688E4AE5B53E2872D20179E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4d5cbef945aed8560c94021ede99c9266f7aecf67ddfcf0fb6bd48b1ebfef8a1
MD5 5a7da0a24f1d7e1e0171b217b7b08c3b
SHA1 7ad0f11ec22aa25d8127a31caaf99e3fd82a2d16
SHA512 d5ae050e3d0d6059ea0fb104f50258aefa6b3524382fe67910fae8f145518605cee027f5de0a3df55f2942d71c7fa60800b50d44412989b1fd1b282bf3fef688
SSDEEP 192:wRN8HhuDOAv72ympVPRp5tlL95Hsb+WNnQf33D2UgT8fW9QVyIsnAUgraJ:wRNWjcQXX17w0j2ZT8te
TLSH
T16A52E72EB910297BACD7D219F9127B97E7F5107225901E84F6FC8A2C19E75CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c49e35c8aab9adb3e7a9a3d194cef5d78ffe136c37a23a485c3b2a929dcdc5c6
MD5 d181a9414d3e14a835ecfde31df2c281
SHA1 4c1bcef9cb42cb87ff2a7d206e45340436ea26d9
SHA512 b064ec7ecafba9a1092c00f65129687498a657a03846a568f528700ac9e8a3088b3c4d5413b0ebd2f95b68353910a6573dc65901aa9250e04806f87a6ea02dbf
SSDEEP 192:wRN8HhuDrAv72ympVPRp5/95Hsb+WNnQf0/gT8fW9QVyIsnAUgraJ:wRNWGcQXX17w00IT8te
TLSH
T13E52D72EA910697BACD7D219F9127B53E7F5107225901E84F6FC8A2C19E75CC221B42B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e37482db61b5d0ddc19343f3c430832b81c67e773b6f7769ed1f4f8d0564d0fb
MD5 e02eca679156703e2f5d3aedea883518
SHA1 37bdcbc645524dde8a6b7f209f4e3b7b2b82af99
SHA512 085b1dab50ba146b265ea039aa1fc731f489e5d1c5334f946edddd84b06f2c328535df5ee846b6118402ee33641bb3d0da46c2615f8bc8410eb758f64b8068eb
SSDEEP 192:wRN8HhuD1vv72ympAPRp2/95Hsb+WNnQf0zgT8fW9OVyIsnAUgraJ:wRNWonQUXo7w00kT8xe
TLSH
T12142E82EBA10697BACD7D319FD123B53E7F5107225842E84E6FC8A2C19E75CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8c4e8eb6891880cb3e8143bdd90fb0046237f331a1bcba734bd9387b4430513c
MD5 b0b0127892eac10d25b3f2697d6301c5
SHA1 11ad4cf2c1f384036709a7ee12274b44fedb598b
SHA512 17927fd1f5a686740096b0682b1051f0012eee1cf8e68089c78309d44be2fe19f28f27d16a375e676e75e050e34298a3c23b1c36319accbc7ec2838de87169aa
SSDEEP 192:wRN8HhuD1Fv72ympAPRp2/95Hsb+WNnQf0XgT8fW92VyIsnAUgtaJ:wRNWo1QUXo7w00wT8x8
TLSH
T13342D72EAA10697B9CD7C329FD127B53D7F6107225942E84E6FC8A2C19E75CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e999f08d81e61df844ee43752abd980b5f46d49eb14c31dc0997b56d700fdda6
MD5 a701872228fa4b07ed9ad5f505131b8c
SHA1 8c9983bedb231603eb82d86582ae5508c703b5e4
SHA512 b1e69af0e153408debfe99b282989901e51285bc3e3832ed146b2969d64ebb3570669d5d06a931b012678dbdd188d1ecd0029e6033037cc2797aaf90f9ecdd2e
TLSH
T1B5B012D480016105C00303F8214269887134DF21970E270153F4BD36E83A1918014050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588e9f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588e9f.TMP
Size 96B
SHA256 f3aa085904f357f0f336208bb30570f73127eb81bebc329b756b9cde265adc46
MD5 8606fb77065ffed71b654825594901bd
SHA1 feb61c1e6cd0454e8a22950648dbc0c790daf50a
SHA512 413fffd00cf99f8a888ebb465c9f3008e98256233047e81b60c8e873715485803b9065ac077712f2617bca59959e45acb1179a426a4602271b946b00469f28e4
TLSH
T1D9B00255D1036313C04303B579E596D9B1E0DF26CA07521A92E05AFBDC2DB7149B6570
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 674b1ca5c3e345bb261513aee9d8ae79b7a92267c9cd9138cffb0d7fef88dd0e
MD5 574646083d27020c6378b4c58d737468
SHA1 86f9ad74f0929cd6153ebf0f369acb1868b3df69
SHA512 597c62d38cd0a4e8a5c33ff695cbbd87b407903f7ed19316f2ce7a2e4adb855f51e4bc6014cb8e97bed74a454f0d52925f817dc0103cdbf48848187fee8589c5
SSDEEP 6144:bN9ZuN7WZJol1mtc0kjkQJxWvG7gq99mqZ/ZLW3Exe:rI9Wje1+k1u6gqSqZ/piQe
TLSH
T1C53423B6AFD50F33AFDBDFA162721F9D17B19041803CD348DA742A4B66DB5A06C43868
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 495a555dc0eb172b12cfa0969aba02e1254b5f6f03044f111e472678a51e3374
MD5 16c064b97daf8c9e6abf87e2d7c9bd69
SHA1 434a86855a09277c8f52a691f8a9bd62227a3100
SHA512 6cc15b1af6cb7a04cc824ae21779902bf7fe2494ac7923ac6140b345637afd97dd6a2670c69fed21dc497c6e39ba72a63ac67a31f0a4978218ee055e73d55447
SSDEEP 6144:K+H9ZuN7WZJol1mtc0kjkQJxWvG7gq99mqZ/ZLW3Exe:K+dI9Wje1+k1u6gqSqZ/piQe
TLSH
T1843413B2AFD50F33AF9BDBA172720F9D63729040803CE3458B752A9B56D75E5284283D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 e31bc4d1de04805c129c3bb18eb2f86ca4c55b2140e2b10469d36ed7aa59f219
MD5 77702512150b20649103ecb2083458e2
SHA1 1758a8c2eb5dcb9ed2fe2793ffdd64e96e64236a
SHA512 bdb1403ef60bea7e306cd1480f0867aff5cb89a3167b339c7dd24a355e4a9e4f0bd8665a1369cf4f20f6777180e1b0a7c6b467540d530472a49c2464402cc314
SSDEEP 1536:T+QyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Pqfd7NtZL8cHQRZEQ6Spsk
TLSH
T107C30237EBC21F339E92CB60B9530FD697F645A59034D301AA6D77BF6C83891644289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 09b67cc63add93e03b2ed4427b18807d33086a6852b9e80e1d0c19fd0b810496
MD5 e4f6cdeb17e05bda70c323d9dad1a9be
SHA1 40b8959249828da43808c5455d0f528b0a1c37ac
SHA512 ff772dfa97b47de2f3b44cf05459dbdae53a3cdab030bd5f4ec9ee8730a04c2b303dcfe37453ed6bb8b53d1cdedaa9e4fbec5822000a233cfcdbab22c36b6bef
SSDEEP 6144:n+H9ZuN7WZJol1mtc0kjkQJxWvG7gq99mqZ/ZLW3Exe:n+dI9Wje1+k1u6gqSqZ/piQe
TLSH
T1C23413B2AFD50F33AF9BDBA172720F9D63729040803CE3458B752A9B56D75E5284283D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 704814.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 704814.crdownload
Size 1.1MB
SHA256 7490a14f1782c5e1442348aa512f912a0fe45e4d6fd43bb6752ee528d9709be2
MD5 1c092eb2d848b86188fd64fea8d1cf50
SHA1 461620196f37b2f5c74819329b3082d98bf5120c
SHA512 1fedad207ed778edce41c995b133d00ba81119effcb64b18141d7cf370d35398d1b0bcfde8a289c0d39372e61184de4a32d5e7c48ffc218718ff2b6909493fdd
SSDEEP 12288:Lbs/m0E54jwaFXGc8lEBBBHGBKq2IZwDuvfqItNqdg:LbOVE5ifGPRZw6vf3fd
TLSH
T1AB357B83E7A385D8C116C9B5534BF137F9627C8E4B157197ABC41E633A67BA4E22CB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download