hxxps://gist[.]github[.]com/jczzbczz-rgb/1e0bbea62f703389865e4f098376ce9f

Analysis

user interaction
yes
max time kernel
900s
max time network
889s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 23:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gist.github.com/jczzbczz-rgb/1e0bbea62f703389865e4f098376ce9f
Sample260910-3cnjxafa64

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4544	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335561566859326"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
5792	chrome.exe
5792	chrome.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe
Token: SeShutdownPrivilege	2448	chrome.exe
Token: SeCreatePagefilePrivilege	2448	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe
2448	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 3400	2448	chrome.exe	85
PID 2448 wrote to memory of 3960	2448	chrome.exe	86
PID 2448 wrote to memory of 3960	2448	chrome.exe	86
PID 2448 wrote to memory of 4544	2448	chrome.exe	87
PID 2448 wrote to memory of 2428	2448	chrome.exe	88
PID 2448 wrote to memory of 2428	2448	chrome.exe	88
PID 2448 wrote to memory of 4688	2448	chrome.exe	90
PID 2448 wrote to memory of 4688	2448	chrome.exe	90
PID 2448 wrote to memory of 1336	2448	chrome.exe	91
PID 2448 wrote to memory of 1336	2448	chrome.exe	91
PID 2448 wrote to memory of 3868	2448	chrome.exe	92
PID 2448 wrote to memory of 3868	2448	chrome.exe	92
PID 2448 wrote to memory of 4660	2448	chrome.exe	101
PID 2448 wrote to memory of 4488	2448	chrome.exe	110
PID 2448 wrote to memory of 3452	2448	chrome.exe	111
PID 2448 wrote to memory of 4976	2448	chrome.exe	112
PID 2448 wrote to memory of 5792	2448	chrome.exe	121
PID 2448 wrote to memory of 6000	2448	chrome.exe	122
PID 2448 wrote to memory of 6000	2448	chrome.exe	122

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gist.github.com/jczzbczz-rgb/1e0bbea62f703389865e4f098376ce9f
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc9d01c728,0x7ffc9d01c734,0x7ffc9d01c740
  2⤵
  PID:3400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,16163658790898438429,12842003753309591553,262144 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1900 /prefetch:2
  2⤵
  PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,16255218069621508852,15683617461726534936,524288 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2364,i,17593551800384590902,16599570780622565575,524288 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2532 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,1065624390667861411,16550051782989719476,2097152 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,6578441353871664922,7771250242662979464,2097152 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4424,i,13272018088111507597,11415505774799695125,2097152 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:2
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5456,i,9489155393988298482,18417582379272846584,524288 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5464 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6012,i,8862226811971448937,17594517397898342043,524288 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6016,i,4718276305767317589,1600892164343457425,524288 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6020,i,6511541784739746148,6431729434930581788,524288 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5668,i,18393658479355751893,2352152535516810788,262144 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6048,i,7156225860427814567,6992532032806463764,524288 --field-trial-handle=1992,i,17548343436427933015,16540091359398866121,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  PID:6000

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1832

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2b53196c-1b9d-4c83-ae19-f98fe978e8d9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2b53196c-1b9d-4c83-ae19-f98fe978e8d9.tmp
Size 116KB
SHA256 572a28a545d331f0578256bef47cb78cbae308fa409b386308c91a0d22a87927
MD5 0ed0b777d96640a1118d3e96b8c1c776
SHA1 4abdf54a53558bc018943ef4694807fdda98bb95
SHA512 8383a28506d116175e564e07d0a5b8bb0d17a84c60cef665e919a262fbe0b095ead59c228f36395f3c1a06d4b523be1145afa53bb2e6fb1d7fd0ed717fef6b62
SSDEEP 1536:+VoyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:YKqfd7NtZL8cHQRZEQ6Sps9
TLSH
T183C30237EBC25E335DC2DB60BA130FDA93B644999034D301EA7D2BBB689345565828AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 125a4a45414cfe2faa110ff49bbacec450633ea28bb06eba4d90e9700b5146b4
MD5 bdb50b197e819cb3dd5627d550e51ad1
SHA1 5afb362a074fa0767c99f52a7b2c14aba46d41df
SHA512 91d5805e880fafbe49fbc8f559ffaa2f10fa444448aa384e53b7143151ef91c19a1a75453ae14fc3d23088e9e35bb88a937a41afd200c22a23364d0f1dbaa920
TLSH
T1F2E02B96C831EC772CFE0B1950A54F05EA6523172A80595F3A3CD20D4FF567A4186C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 5cc8c3e3cd79e725e2aa4440b4fd5c7ea74add69751015c5737400986063e29b
MD5 ba1d8eb092c5573423caec348319e2da
SHA1 00891ec2d773cf4b79cbae7ad4c40c5d1af3f578
SHA512 20a13a04acab5c29df021e62e0e9e07774419c1b2106bb53a3d604f11aa95fd753b1921b9ba87c9b1d871dfeb3b82d6097c843db2355595f5ec85e02b8da2ce4
TLSH
T1052115C124DD35D6E3434C717BC5C807BA79199C0107AD2724A3CC75B1A0341DC13D70
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 476bbdd04baa4ba923cd4c4da54cadb174f3c47585a6ae6cd3bb6e09d746fd67
MD5 7d9d9757ec2aa27e8bb9ce09aa52df68
SHA1 c1d76ef2266f797bd7375b7eac605af81cd54e52
SHA512 f978fae8b4bd794c3f906d65f75d19264f8504758ea5728af08f833a06acf7ff27c47165bec32350e8a7c2b3d905f18d16ba55ae9f7754e399e9b306c4da664d
TLSH
T1F5519AF783F5966D8A0296F0EA14AE1FCE690524431D386688E47E1B93E3972E10075F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 552e16ccbb9f739a58fd0bba989b280067f804986874464a5d0fe2f43facdaf5
MD5 8cdd3b6f04407a2bc23605939c806cf5
SHA1 582c883338981311e2da4df3bf534e34c383d842
SHA512 35ab154b026fff37a09e53bcda4db5b0b69fd1b62477ab657a2314bee4b36e11f56c1d5ef618783844ef2b2eeb06147c08a83413f64c7f8ad171c2f6147b00ce
TLSH
T1EA5188F783B5966D8A0196F0EA14AE1FCF690524431C78B688E47E17D3E3972E14075F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0ee1046892758aabc841b32589bc0aec361a009ba84c8e20391c58074fc267e1
MD5 475d2f662e023709898164f78ac59af6
SHA1 16b2d60df47943b160d9e03d01d3c197c9a21e14
SHA512 cb3506cf2e83f1f03bbf600c4a7cb80c217a02e85d6744edb09db74e0f16175ffbfdcaa2854fb8e4c169816fdaa18833760edaf4cdf53afb7db026deeaa6573a
TLSH
T178416BF3C7D8897D894156F4AB156E1FCE690E14536C3C5AC8D8AE4F53E28B2D20158E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 406a7815514d08a33c6d029cf5c90e717c8832c4a515595f53cafbe4aa002865
MD5 d684718ed76c60bbbf2d8219c8dad148
SHA1 590bbb3e6bc2b4b105e957527084e2a3c1adfc51
SHA512 84d322c24182af4d81512c3e44279c9232b141c151f473388b499da9610c88b152d92478b7c11da0088d424f268b10329cb0fab7631206d0b497d25f5c5a0beb
TLSH
T13461ABF783F5966D8A0296F0EA14AE1FCE690524431C78A688E46E1BD3E3972D14075F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 6d957f3fd5c4a5ef24b614817900d06b90817fbdfa55d7ddb89e2dd2e07bafa3
MD5 431597cb2eeca57688662b85e7cf8c23
SHA1 8e95bc3c332dde2cd9519a703e6502fe7ee81d69
SHA512 0c8d6f5db5cd48ab3f00c7a94c6422821286c8a0c33cde09f8863f4ed16c07420248ef1592b0ec5f3c6314849479bfb3bce7f70bac65aec154a967a8483dfbe5
TLSH
T1EC519AF783F5966D8A0296F0EA14AE1FCE690524431D386688E47E1B93E3972E10075F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 48fcb9ce7100a96484d42859de45adee5543541c22b53505b1295fc35f94da04
MD5 13a7d7f286e74ab1706610226d13b8d0
SHA1 0d37ce0ec4d46f6508db021afca3199714fab095
SHA512 0b4fac6155db462480b96e682d694d41d7344b5e52efb8391a9ebc333b5f73a87f94de3c2f4880a1889dd2a86394ed47c14ba83e94018d276da8013456b17651
TLSH
T1F1619BF783F5967D8A0196F0EA14AE1FCE690524431C78B688E46E1BD3E3972D14079F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 e4d9455185b42f12a39eb220fe25d6cf2207bfdfe91f184f53ae16e6fcbdd9d9
MD5 462c1b09aa8383e0206a8c1fafe41b25
SHA1 bbfe5dd3c734eddf7856369de58a93b3be809ff0
SHA512 ca04011ad45ee5d215a0b22968e34224b4e8e1878509733b64452c1c446d4a56c08d9880bd7a6a9d0e638452de9cc5f654c2887c05374bf886a4b00d96e556f7
TLSH
T1D621AC939A7B746F40BE4DBB1E017C0E697DB8310392A4F1DEAA822DA0C15E74B32012
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f1ad9bd889b9a5480924805e102c16717a411355813b16559310c6091825658f
MD5 489521ddb4e6ac8ef6bcbd177d33c808
SHA1 7dbf62d224f0241e2f1ea0a8670432a9d0dacc0f
SHA512 b2b12efddbd89814a38a693ccf5f09f7fdb9c04283016fd018f8d2a28f291fac35b324882a5c970e5008e4125172a05841b0b842872cccc0c74833f5aeea1efd
SSDEEP 192:LRY0LIy87O5xv7hpAPRp24u95Hsb+WNntDF3V2U1ewnaMrJr9VyIsnAUge:LRYyOqh9UXurwdb26aILe
TLSH
T14542C82EB914A53B9CCBC219F9267757D7FB146124D01E84EBFC8A6C14EB9CC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 108d1f6b196d1f44eddf527c28ad9306d2a10bab509eb8deb06ffade6bcb9af6
MD5 748db6767216051a9c587f8a42150bd4
SHA1 3ca1f5dd3d533127318c30d736b6c20972bc53c3
SHA512 9729c3e1c0bccfaa4718ad8a5f77b95ad465773a7fa6bacb5e2dfe228f874b1d20a030682a5b345122712db06d46b98b0be414a07ad0770bb68be9f02852f418
SSDEEP 192:LRY0LIy87O5Uv7hp3/ICiPRpB4u95Hsb+WNntDFoHgF1ewnaMrJP9VyIsnAUgE:LRYyOqQ9FyXNrwdigjamLE
TLSH
T1CD52FA2EB824A87B9CC7D219FD267B57D3FA142125D01E84EBFC8A6C14EB6CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1bf0d6992c887fc8f959620303c9ffe2fd2cd64e7b3181d1c4b10538d424c86c
MD5 06b5f217b55fd6b905be22c35dfa511c
SHA1 0fb661bc7356527d65b6f5dff7de4c2b6cadcef7
SHA512 77307c960d2b85f3787a7454ebe757ced38f37bd783be3ff047de0715821903e9b4eb69ea0d190bcdaf52e480bad1b3f6bca13825a2d4487191fdf33f725c197
SSDEEP 192:LRY0L8y87O5Iv7hp3/IePRpB4u95Hsb+WNntDF5ec01ewnaMrJP9VyIsnAUgE:LRYyqqU9FfXNrwdicaamLE
TLSH
T13C52EA2EB814A937ACC7C219F9267B57D3F6142125D01E84EBFC8A6C15EB6CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d2c79a4729058db6c3ad452414fea3477a657a9aab884e06da47ed9d9bfe431a
MD5 a170185454bf7f1e7818b79427cd4840
SHA1 cc8950de40e562f2656fb77b055b77e4369d7819
SHA512 3a66807e0ab707d00366206228d8520fddc30e08ba74417701b99b2cc41cb2913b4f9eafe14b395d2728f3edd3c06f3695f2f2ba757ac918a47e141b9d822bb4
SSDEEP 192:LRY0LIy87O5Iv7hp3/IePRpB4u95Hsb+WNntDF5ec01ewnaMrJP9VyIsnAUgE:LRYyOqU9FfXNrwdicaamLE
TLSH
T1BF52EA2EB814A937ACC7C219F9267B57D3FA143121D01E84EBFC8A6C15EB6CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a1f14fdbda748d5f5c0ad26d7c7f7d1dda9ee2f44307a03331f1fdecce75bc45
MD5 797f42881eb1db906f481ac7ea6c4fba
SHA1 6b1bf4b6d3985fcfe8a4bf1f7ea7a2a20686d29b
SHA512 265cac7351d3f16ed4d6ce71a4751015b5211abcbd7ed2f5cfc49f5d4959b3649fffa0744f01ba0e83d3bbf5196ec1281cb50827943c0aa0a71c00ff050cbda1
SSDEEP 192:LRY0LIy87O5Sv7hpAPRp24u95Hsb+WNntDFSoEv1ewnaMrJr9VyIsnAUgE:LRYyOq+9UXurwd/EhaoLE
TLSH
T1AF42D82EB914A97B9CCBC219F9267757D7FB142220D01E84EBFC8A6C15EB9CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a599b75441ff19d8543748448566cc641f7eff60faf166d8ff2b49babcf9c582
MD5 274d24a3598df64911a10a9129503aba
SHA1 363086379465fc63556fa65985c574aeb7893952
SHA512 e44fc69b3f1f9f48502a62aaa56a665483894629b141eb28735bd43a2dce1b84cf210911c601821ccff753acc7ad8943f3964590f6ed9f627514e8a768d29ee9
TLSH
T1B1B0122180416101C06306F01156249873245F10964B270153E0AE33CC26161C15D150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5862cc.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5862cc.TMP
Size 96B
SHA256 ff4538f02fa621b26f85bd9a9db6af2f99dcea5e5fd3dd0e020d37ddedf6b82d
MD5 97c5dbfeeb1901b329840dbdca9838e3
SHA1 cd08e2729ed2598427de9c9666daf4a60070a377
SHA512 6e84ec26a439ec962e7e7e8b8bab38c996bb1a64aaaa56e9c575767d276e27e811df6aca0ad677e729757f3751ebb4daca4a56e3487c3b3693fa1f0fca10cc41
TLSH
T11AB00255D1827212C04603F17999D5F9B160DF2DC613133296E06E66DC7E6758526160
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 93bacee288916bb61aecb1d61130e3e5f5734cbab750aa3a3797ea52d2aa0a15
MD5 09e10779c1921346ca43975546cad6d1
SHA1 eba502a53766a5606d9ebd507b94a3b987ccef2b
SHA512 ebc98417ddf2e0d815ebad74a3627c0fe89c738229f3666d527b5d267220c939ca648865c4c32cff31d34877ec0ee4ebb7b2602517f7077d1d98e1980f6ca4c1
SSDEEP 1536:OVoyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:oKqfd7NtZL8cHQRZEQ6Sps9
TLSH
T173C30237EBC21E339DC3DB64BA130FDA93B644999034D301EA7D2BBB6C93455658286C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 272f213befa7df04461a657fbdac4eb5a9d678a786fa9654593fa88623e9d27f
MD5 a7cbe9b18a275d42415cfdac40114d2e
SHA1 7e98cc9d5497a4c0209e8ed768e7f825df9cbbba
SHA512 8e7cffea6d026d022fc44dc02d276300e17b3a8b65572e7dd188a74929a7f16a5a3a25003a3df8bcaace6f6a4d05e2538f13870882581cf8b9ad0220536d8252
SSDEEP 1536:6NyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Gqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1F3C30237EBC25F335D82CB64BA534FDA97B644A99030D301AABD3BFB6C9345164424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 226b7be475f26a65d0e97e18a6ceaa6c85702c5200f83eef5d23bc092098567d
MD5 123cd868a2dcdce65a5b8a5377f0cadf
SHA1 d57bb14bee487e79c3f834a65877e52b8f2e8278
SHA512 2ab1d27485048432c8734d73ba12b8cda7d4437ace54dcd345928a9d1b51478e3f7be2a5a3a60beef09d46ed290a518381a45421bc3b7690823f72035afa941e
SSDEEP 1536:+84yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:96qfd7NtZL8cHQRZEQ6Sps9
TLSH
T13CC30237ABC25E335DC3DB70B9130FDB97B644A99034D301ABBD2BBB6883455658286C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bbf57b9788b0ad822f6ec225d00f014deb7a1142b9a84e545efc6a3f2fa9e76d
MD5 055acb36e11e62be636c9a521f0850a1
SHA1 cbb2b451e4a3c6e289620dd6520146774c0fd234
SHA512 2cd07b5c1eab2431200b166961d4c9856757389aa60d6c349e44f27b37150027e326f158630de4a180058fd61e43f815f45c993920bc1cffd17722e3a57602e7
SSDEEP 1536:J84yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:u6qfd7NtZL8cHQRZEQ6Sps9
TLSH
T1F1C30237ABC25E335DC3DB70B9130FDB97B644A99034D301ABBD2BBB6883455658286C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download