hxxps://gist[.]github[.]com/jczzbczz-rgb/1e0bbea62f703389865e4f098376ce9f

Analysis

max time kernel
899s
max time network
891s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
10/09/2026, 23:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gist.github.com/jczzbczz-rgb/1e0bbea62f703389865e4f098376ce9f
Sample260910-3cnjxafa64

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3504	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335561569726160"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
5080	chrome.exe
5080	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 1860 wrote to memory of 2588	1860	chrome.exe	80
PID 1860 wrote to memory of 3244	1860	chrome.exe	81
PID 1860 wrote to memory of 3244	1860	chrome.exe	81
PID 1860 wrote to memory of 3504	1860	chrome.exe	82
PID 1860 wrote to memory of 3480	1860	chrome.exe	85
PID 1860 wrote to memory of 4952	1860	chrome.exe	84
PID 1860 wrote to memory of 3480	1860	chrome.exe	85
PID 1860 wrote to memory of 4952	1860	chrome.exe	84
PID 1860 wrote to memory of 2816	1860	chrome.exe	86
PID 1860 wrote to memory of 2816	1860	chrome.exe	86
PID 1860 wrote to memory of 4308	1860	chrome.exe	87
PID 1860 wrote to memory of 4308	1860	chrome.exe	87
PID 1860 wrote to memory of 5092	1860	chrome.exe	89
PID 1860 wrote to memory of 1492	1860	chrome.exe	91
PID 1860 wrote to memory of 1664	1860	chrome.exe	92
PID 1860 wrote to memory of 568	1860	chrome.exe	93
PID 1860 wrote to memory of 5080	1860	chrome.exe	94
PID 1860 wrote to memory of 3784	1860	chrome.exe	95
PID 1860 wrote to memory of 3784	1860	chrome.exe	95

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gist.github.com/jczzbczz-rgb/1e0bbea62f703389865e4f098376ce9f
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc5681c728,0x7ffc5681c734,0x7ffc5681c740
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1636,i,11121058045703598808,3897654519388560253,262144 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:3244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1440,i,16872323950829917037,17928780771228762188,524288 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2204 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2328,i,1281117899832440306,11448269317023311088,524288 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2676 /prefetch:13
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3112,i,7409317622965365115,9929733409777665073,2097152 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3116,i,1446673645890897320,18200301881221604541,2097152 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4428,i,6250224616498962249,16289670649633200347,2097152 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4380 /prefetch:9
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,5035567665370720950,4084485689115506610,524288 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5736 /prefetch:14
  2⤵
  PID:5092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5764,i,8179200753572980922,7304986323190774030,524288 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:14
  2⤵
  PID:1492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5864,i,16314515970021708330,9343396693998172611,524288 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:14
  2⤵
  PID:1664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5796,i,6831036418219676158,7330571656173209147,524288 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4852 /prefetch:14
  2⤵
  PID:568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5904,i,5011953995298089736,4826059890693714642,262144 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5104,i,3398343702742587886,9953090658080843260,524288 --field-trial-handle=1912,i,7194422584350765483,413610070265635442,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4760 /prefetch:14
  2⤵
  PID:3784

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3300

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5080fa272ae85f1cc619f2776683b0891185871d0a60ba3f058510ef592e754a
MD5 586ed3ea462c4d5d3c2e2cad2288ba78
SHA1 8f843ee0e73cca443818b8c689379b526ba13468
SHA512 bd9a1e6809d38584b19f8c42aeb8a4a83e8db34b6f1f8a54b0681a6bcc7371e90d20701c5e0897c4dd7714fdee4ef2ffb708159ad436ca81887aa9d18b4a008a
TLSH
T18CE022EACA61EC2B2CFD0B1A54484B86EB10036626504D4F3B3D811E8FF227A858AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 054c16e69c8ada6f95551c08fc7dd6267ed4d6c42a200836545357ee5639082a
MD5 723c12b2303e4854c45f7d35ad2832e7
SHA1 739c72effe2f39c8b8de6f7558a7e4c2c6b55a40
SHA512 ff60b0ce5a9629e1f7abd22b770080eb2b88757ae1b7638d039b2ee3e97db675a13acd04762058a64a85e63f9e27eea96f0e9d1d5383c7ae8f5187e29561d590
TLSH
T12421CB8A24CA3919DBC07EBC2BF74D07BB3A264C00479DF668F4D97D6690302DC1B562
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 06790ebc107bbd7eaac4172bcba4505f1df53eecb7c90a2b6ad68edb54dcd1c9
MD5 1b778db9e818678dd794a79e8751ebdc
SHA1 9a26457571331e819b5b15ca51d44b2652440085
SHA512 6059eef70af33f5a61f27ad28875bd903b969ddf8cd5a8d8419d1947bc8bcdcab10e5dd41d24695257c148f7894605fbeb62f8c3682b48841c9b20f31efe7e5d
TLSH
T1A76189F783B4966D8B0295F4EA14AE1FCF690524432C78B688E46E1B93E2972D14079F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 e1f3e342bb46ae636277a93fab851c222d9c6ebb3cc7c050c25d9d0cd96dd0c9
MD5 7248da61f8062562d533a2dc7e29ecf8
SHA1 e1632e7f47d1015dede6e62832e1a6476fecb3e7
SHA512 31ce353b79e88f3ba78e790a2b738b12dccccd568e44b60f8f797cacd0c6dca24f90778675ad2577ea92fd3a13584061a524b5f7602724dbde00835e2a4045c0
TLSH
T1915187F783F4966D8A0296F0AA14AE1FCE690524431D78B688E47E1B93E3972E10075F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 873c8f185f977ae38def1748106978675b95c72b641007742b4ae5660a01022a
MD5 2d0630c8e0209b5ffbb9d95babbde653
SHA1 dfb3d4b25dc525f744defa5cb655c92680867c90
SHA512 223aa23fb3460a228daec9c4acd65cfb72da9d9a0e304f7c0875ba688d7bf66c6a3051537404e3a582ee9faed755c1f6cbaa40fe1f1945e4eaaa921eeb1d0935
TLSH
T13B61ABF783F4967D8A0296F4EA14AE1FCE290524432D387688E46E1B93E2872D14074F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 11393275cd9b59e3ffb6c0669459e2a24aa4c0c7bdddd910815e688694f91a61
MD5 2c9d5d2010281386c1241d79e3228629
SHA1 7ad42453be64d41567f46b1fe2e5d25c8d8be03b
SHA512 b1534d27c409897b35f8cf75e76c4f00f16cbc981eb12491fd5bc7f08e1572bfdd38f2d45e2f49e33b38baeabd7a54832f413c892ff869936f4b4c55d62bd664
TLSH
T1E86199F783F4966D8A0295F0EA14AE1FCE690524432C78B688E46E1B93F3972D14079F
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 96963aebdc342d92643f688ec7dd0b47de83c8f0bd3da8b82c3c9c19cb10ccc4
MD5 f17ece1ab24d54d86becbd55a3441299
SHA1 d59a9d87ab00788d233cdd8b80c97fdce62615e7
SHA512 203b5f7362a12c7bb7d6c1c234709fd39a596f7c79284999cac95edd5ac530b3c16186cb709195df4013cda75b5a5bb23494664664d6a53545d2dda1f63d17fa
TLSH
T1772183639A7F752F50BD04BB1E15780DAA7EB8314392ACF0DFA6862DA0C15F34721426
MD5 SHA1 SHA512 TLSH

Submit Download

f304e5ad-0238-4a98-bdb2-2aa3cbb37d43.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f304e5ad-0238-4a98-bdb2-2aa3cbb37d43.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 215587e48039f911b877b08bd309f968b4e3c07112118dfae38b6fe42733802e
MD5 e3d31f5d8dba65f388859e63260c28c8
SHA1 365e8d88d7f7d40bc09c7191e72dceea1ad5ffce
SHA512 bad3913d72f85e6c14252a97ef60eb4526eebc2fded8657a4790408c1b5e37510267400a8231df07a487d6c638b21a1f68ea805bfe6f7dd720355f8e0e88f83b
SSDEEP 192:NRsn1I7clTmtmdv7sBpAPRp2zX9NHsb+WNn77FSo2lqmecvaIMbVyIsnAUge:NRs1plFd8UX6rwn/2l9a7e
TLSH
T13C42E96EEA20A97B6CDBD229FA227757D7F5102131D01E80E6FC892C15E79CD231781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0a88bb3e0b0c6c9e68293a77fa41c285564153db25e8de2e83c8d08c4819a873
MD5 60fe5e7447d0583f24c67d43f9127b83
SHA1 1c12f1bb3dfc9bc739bba76dbe62c096a5f29ffe
SHA512 1613dc1e37c514bcbeb62ef095710c82ba79335f769b897a4d88b62e050c64870d3579531ad63d9310e178b1ce36c61b0e1bdcbb17ffcf16df2726af4bcc1ae2
SSDEEP 192:NRsn127clTmtmdv7sBpYPRpyzX9NHsb+WNn77FSo2cTmecvaIM5VyIsnAUgE:NRs1rlFd84XGrwn/2xaJE
TLSH
T181520A6FE910A93B6CDBD229FA227757D3F5102125D01E80E6FC8A2C15E79CD2317817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 0d2a156654c1c543f684a1b78fc1acde7a605db8760d180da55c6029bd11d4cc
MD5 fca0a080e03e1f9f1f1ec2f425ee2b0e
SHA1 04435d408b3c935d0c54889e9019a986e7e3d26e
SHA512 0133469141ee35d9bb385a53718d74af5f96fe7ea3c4d774df026da6bbcd201abccd4b10b8b4bb6f9e60e57cecfd324ba1f320a5bc5ef4bba05fdb56deff9ffe
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLuLcSj5EXODtw+ErU3U2HG4B6T6:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pa
TLSH
T14572F9A76C4C8E770F94CACCDC16BB4FADB5024B65E9886487FA581903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 13fa1812cc1cee4233fe4c3a2fa27ca2212640a0b686caa8fc76bee6a35bce5b
MD5 bdba24a3f70a0ea3d30c1dfc1f48330a
SHA1 b8de974ee88ac8ec0e1b1c79438ce1fb92fd56ed
SHA512 f25d1deecde038e23ca0a3eec4bb676ceef5fc31fc9a7600e8101897265c9beae7064cd5f848d3b1113c1fddb44f625d24272f4c1296ef2d492ef446e56d1cd4
TLSH
T11CB0124180416141C44202F051D318887114EF10960A370193E4A973E829172C015090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58918d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58918d.TMP
Size 96B
SHA256 6cdd3defe91bd16f567495369fcf83484a69ac77b90e72dce7822b3b91ea5a3c
MD5 609a178d68e114d63837ed4c5c9f14d7
SHA1 c4a56e06980db9c850990986fb24ebe6a1929535
SHA512 0e4f327ce7aff8cfa341c99d7b4e75d8b7205d65290cee04732a02725282b16f80ce3fc09c9cbb0d166a23c38c989036942be30855d0cdde71e66a859e3b9010
TLSH
T1D7B022ACC0023383C00283B0308080C83020EF28C2032203A3E08EE2EC222B0C0220B0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c4cebe9ae74e6b9caa1bc4f2cd698b3a06b553692ff947508d10c9ff76c90a3b
MD5 848f0ddcee152b7022252f4f69bd0d06
SHA1 09f44df246120abbfe3004c707222d6ce26ce6c2
SHA512 5590058f46a4b5c78aa9bc3640a13f38a553ddf3237d03351adb0eef5f2a6c1a8e43a3b08ccf638a9f76166e34cb1c7ea3dbbae220bf22609aec942b0fe834bd
SSDEEP 3072:MGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:/m7Rkm1tYpBeh2BAoe
TLSH
T16DC312375D74E9375DB5BB5EA08E0B1F1EF14AA7C920DE82C8D85B0823EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 128eb2235334f180cce3f4fca2fea99c1aa565c659f0c0e840214560f32999f8
MD5 097f19e6168e3d46fb79bd2aa8d24fa4
SHA1 b1b932204e8f06cbadad5002a77ceca3a38c09e5
SHA512 72800a8712159f5229e5a1820346a199477f03aa7a3765093a88ada85d4ff11a757efa35dec589bcaf33245fdefc263a6a3739ac77ccf7cf969020c8d69498da
SSDEEP 3072:1YGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:1Tm7Rkm1tYpBeh2BAoe
TLSH
T1B7C312375D78E8375DB5BB5EA08E1F1F1DF14AA7C920EE82C8D85A0423E9BCC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2dc2004ea41cc221ba731d967b496024b091a02c250be3f48bde7ce0de6a7dd9
MD5 c2c399aa0775fc9debd60df3cb70b841
SHA1 f9e3aa17b3b6fe8dd7e504a82f5ff08cacc990f7
SHA512 1c5f2ea881a82274bd015b3c7f20e55ec18b68c26124b5b8bbc304f8cc68233515df4d2197c71e2c72f99258d5bb2d9198fe7162a17b4cbef2936048fe3c43aa
SSDEEP 3072:hYGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:hTm7Rkm1tYpBeh2BAoe
TLSH
T180C312375D78E8375DB5BB5EA08E1F1F1DF14AA7D920EE82C8D85A0423E9BCC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e697f496418fc00b2104c997c6e726d211e6c1a0259655e382907b67d28f76df
MD5 99a75cffeabaf0377133ea57dc3e545a
SHA1 dc4cc920ab039c5de3d7b3ae17de132950d4532b
SHA512 4222d0891f48cdc8efec9c1ea7a7c27b64f9009a345a457cfed828133267aa36dc19fac1b6ee4d914e0e42533e243f37b6d61c305a249f37abcbde13964fc3c6
SSDEEP 3072:bGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:Cm7Rkm1tYpBeh2BAoe
TLSH
T1D2C312375D74E9375DB5BB5EA08E0B1F1EF14AA7C920DE82C8D85B0823EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 64ac9ca8466f07bed4c63508d0ca04864aa6759117f3d4a98312a8458351efb6
MD5 57a73573fc3943a1eb6471c78a349c7c
SHA1 8fec38ce9cb3379a7d766a2465f6a55e843e3309
SHA512 8cc99b0fbdc4cf3ac9e2723f7f50c4745a12c352b24d94d2cbea484936a2afcc8f647d18f7f72bd2ec45842a0dc9fae490637e999521a7534e02c893eb81b9a8
SSDEEP 3072:yGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:Fm7Rkm1tYpBeh2BAoe
TLSH
T15BC3123B5E75E97759B5BB4EB08E0B1F1EF14EA6C920DE82C8D85B0427E97CC0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download