c7cfe86f0c9d94e4fb3696d3cd5035e2bbb6a8b1b0572f8b7395a4cdfd0c625e

Analysis

user interaction
yes
max time kernel
149s
max time network
159s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/09/2026, 22:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OptiScaler/libxess_dx11.dll
Size 152KB
Sample260916-2nhmcsfb96
SHA256 c7cfe86f0c9d94e4fb3696d3cd5035e2bbb6a8b1b0572f8b7395a4cdfd0c625e
MD5 e04c7f44bc073d164cbf603215e96eaa
SHA1 fca6ea9bc711b2e9c50e778a330184d8371f301a
SHA512 ad6675acd6e1a37029d3d97e9109a7ad1ab857a411c18e77c53b56689a7271e2e9ac96d96dbbbce3943eb652a617989f1e2b06055ef19ac43e975a1430db045f
SSDEEP 1536:l1X7ezCdcHIzJUT7+N09+GbTxiA07VX8dg8eAyMHI5C4Vs:lF6CcHIzJa+N09+GoJ8leAyMHI5C4Vs
TLSH
T1EDE34C6AF2284431F875D0FD959207A9F27270409722A3CB5590C2FD1F57BD9BA38ECA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5064	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340725206808348"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2757962786-3770611029-2102435697-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe
Token: SeShutdownPrivilege	4612	chrome.exe
Token: SeCreatePagefilePrivilege	4612	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe
4612	chrome.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 4612 wrote to memory of 2556	4612	chrome.exe	80
PID 4612 wrote to memory of 5064	4612	chrome.exe	81
PID 4612 wrote to memory of 4632	4612	chrome.exe	82
PID 4612 wrote to memory of 4632	4612	chrome.exe	82
PID 4612 wrote to memory of 2200	4612	chrome.exe	83
PID 4612 wrote to memory of 2200	4612	chrome.exe	83
PID 4612 wrote to memory of 4764	4612	chrome.exe	84
PID 4612 wrote to memory of 4764	4612	chrome.exe	84
PID 4612 wrote to memory of 1632	4612	chrome.exe	85
PID 4612 wrote to memory of 1632	4612	chrome.exe	85
PID 4612 wrote to memory of 1588	4612	chrome.exe	86
PID 4612 wrote to memory of 1588	4612	chrome.exe	86
PID 4612 wrote to memory of 4776	4612	chrome.exe	89
PID 4612 wrote to memory of 4776	4612	chrome.exe	89
PID 4612 wrote to memory of 3868	4612	chrome.exe	90
PID 4612 wrote to memory of 2664	4612	chrome.exe	93
PID 4612 wrote to memory of 600	4612	chrome.exe	94
PID 4612 wrote to memory of 2496	4612	chrome.exe	95
PID 4612 wrote to memory of 1404	4612	chrome.exe	96
PID 4612 wrote to memory of 1404	4612	chrome.exe	96
PID 4612 wrote to memory of 4680	4612	chrome.exe	97
PID 4612 wrote to memory of 4680	4612	chrome.exe	97

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\OptiScaler\libxess_dx11.dll,#1
1⤵
PID:3656

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff4b3bc728,0x7fff4b3bc734,0x7fff4b3bc740
  2⤵
  PID:2556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1840,i,10785126428699046714,3461190887222635423,524288 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2124 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,12750983527825472876,10388394759920761912,262144 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,4203952402657644181,8963156530462905790,524288 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2400 /prefetch:13
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,2685428555780917767,215368316452114575,2097152 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3364,i,9964714867980991120,14510569440353649290,2097152 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4316,i,17689930245169083341,975376739544105119,2097152 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4328 /prefetch:9
  2⤵
  PID:1588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,2175138542254076584,11489755352463425710,2097152 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5476,i,7730426394452342529,6103986774300196356,524288 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5776,i,13393398883871717260,15490963224174000876,524288 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:2664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,17030166265872605739,16908607387101975945,524288 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5836 /prefetch:14
  2⤵
  PID:600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5844,i,3133150177548120146,2259103649044634522,524288 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5828 /prefetch:14
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5888,i,12336886829116838200,14444616610642807205,2097152 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3416,i,11037112063112693977,5698237143975021145,2097152 --field-trial-handle=2092,i,3631989853680273583,13360810201972109430,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:4680

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1908

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 19c3ca792cf815a5ad72e050ceb35121f958d4ffe1e7666ee3af3e3b9fa1b8a4
MD5 b9b3d01fd9aa46a76db53b97f85b778a
SHA1 0af2ed00eb56177956b64fe8f6c857df15d0e01b
SHA512 aaa846c75df3ebb59cb77643df4438868c6a7b8cf27281c2aef43c66a5f223333b6b5cede26dfcb4a12366ee859057a334a064e15ae6606e7739de09c36c07d3
TLSH
T128E068AAD831EC3B08FE0B6860504BC2F741072B26A08A4F363C920C8FF423F8685C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 345KB
SHA256 af74444f93c1a87703c134e8e3a1762932e8c9ed17b5781360a51435080b8704
MD5 a3b1bd33206689c75f9acfb640a6ef7f
SHA1 88d1a94a23fc0b9702d6857e71038d5c01a0bc27
SHA512 7d2ab5783a9640015ad2215944cf3bff51babf2ca59fa0ee7e2e587c1ef56901b6ddb399c2a435757aa66bd2d5c7933326c606df7942d354ba6493c51c49acfa
SSDEEP 6144:dt6B0ZtO9WZMN5KSdoaPiC1ghYvx4BmlxTbD5FuTbb1cc:dt6B0ZtCWA5KYP8qvx4klZqTec
TLSH
T1927423E3AC113A4A630789E74DC8A1AB7453C5C32A56FF4237467887A6D8D8E365CF13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 0f961729a186510fe172ab0ef8a9d2c899047c2255f268aa327bfc1a24487ec8
MD5 6b75fe3ef0e878b1c0e02cac1da01d18
SHA1 46fc3af4ba80f18090adf2565adff6b6837f348c
SHA512 27c104cb701bf283f5f6f7cee80df8ac6ca1d12059af1da6d289f00143bee30c6c9d00ddd7bfca03a03e262a7d0698e334854cab3d24724e8df33c1c9d4ab8fa
SSDEEP 192:DyX4pNbgQTJNJdhq7e2Ol1IcLBIMaPLvhfPvNPuIDXfsHwE:DyX4pNbgQTJNJdhq7e2OzIcLBIMaz5fs
TLSH
T108F1DFF7C7D8C62DC81156F4AB216F1ECE2D0A28831D3C66C8D9AE5B93E2471E21535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 e8e84580554e9cf3eae2de5989006cb3c8556aa27667212cde08e8d7db298acd
MD5 4ec3c15606fc873ea3c88a08c571f7d3
SHA1 6d9700934766cc3006277a3476473f83dd3c58c9
SHA512 5095c6d90e471461b63090805234f9190852af044fa57e5316d274c71f66abc8aae5e8bf0b408ba9ade0586f200470dee8b5d458691180778868914f84a3e731
SSDEEP 192:bRXmtORqPnt4v7ZYehAPRp2o9zHsb+WNnpQt3GeH8yIsnAUgtaJ:bRXmdFkdh8XDZwitw8
TLSH
T1AE42B42DBD50B53B0CDBD22AE9617B57E7F5102660902E40EAFC8E2C14D76CC622741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 9ced9dec38f10e2024b537dfe89220a9638b9aa10d36308fd840aeb68f869002
MD5 10ab6c0ffcd9a4b31f7f0aae69ae4020
SHA1 aa347577b62d426b0ee7407c398e55bd83f52afb
SHA512 da223b0c9246dd365f17a7baa3e6cbc3de12a082a34b6d4a7c56dfc9e8f05425178f12201b691506ad6397a63251d0945bbbaaaac6e8ca12d7bf7f4a599153df
SSDEEP 192:bRXmtORqPnL4v7ZYehAPRp2o9zHsb+WNnMr0+GeHVyIsnAUgtaJ:bRXmdDkdh8XDZw80Q8
TLSH
T15142B52DBE50B53B4CDBD22AF9617B57E7F5102660942E40EAFC8E2C14E76CC622741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 26512679794a83aa485599068281ab9094d5d19b75b8e8bec5a57b9988a1854d
MD5 f3544cda83d1d1bf5ec92e1898716cc5
SHA1 d85eb98a761143eb1b8319e185266ddb34bf9d18
SHA512 4a96677c9658fe21fc640b2fefabb12c9f3dab33fdf7fd8f8b363f55ef483386f24a0709d4044c0f7eade419990b03b3560853fbac24fee171ff7f9af01fd769
SSDEEP 192:bRXmtORqPnC4v7ZYehAPRp2o9zHsb+WNnpQtbGeD8yIsnAUgraJ:bRXmdakdh8XDZwit4e
TLSH
T17142D52DBD50B53B5CDBE22AFA213B57E7F5102660802E40EAFC8E2C15E76CC621741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6ecb0bc2e83a4d08f432a29f6d69be2c5a6f4566ac63d6b2828f231efeeb33c5
MD5 60066a3baa81186fc93152e1f469f391
SHA1 9ad33371f4beecb126a5d78b1005437c06d363e2
SHA512 06f9fe627706eb6b24507cb4fe926c6e3826f4a61d72520459077ea802dfd38c09b5d4701d44b1d3155a3de071da2233c7955410622aaa9feddf8295539882ad
SSDEEP 192:bRrcBzmtORqPnCbKv7ZYehAPRp2th09zHsb+WNnpQrkj2cGeD8yIsnAUgraJ:bRrmzmdaidh8XtZwi429e
TLSH
T19042A32DBD50B53B5CD7D22AF9217B56E7F5102660942E40EAFC8E2C11E7ACC6217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f703484677a91ce6300352d8d18cb401f464f383b4a095385ae490fbaeae11d1
MD5 03112e6e64a330c6989310c058cb3340
SHA1 87264e6cd9dc27d9ef61ff30b938dec7b04257a5
SHA512 e8b66dabbb9a256094a9ce6366d60e8c3b6f7170197b1c6e46b7ba8da4010b1c2dc93a32d2f2f796205fcaf7f5c1b239f16ecc7f53b877d79b3aa0f9b53e34bf
SSDEEP 192:bRrcBzmtORqPnCIv7ZYeh6PRpEtht9zHsb+WNnpQrLgYqGed8yIsnAUgraJ:bRrmzmdaUdh2X6ZwioYPe
TLSH
T1BB52B42DBD60B93B4CD7D22AF9617F16E7F5102660902E40EAFC8E2C15E7ACC6217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4bfbe324691a23a534db53a22993451495e8f99857a002d285586cc0fc8ed7a5
MD5 d057b7c85bf32212a239f24a704aff82
SHA1 a42e5b02a5f2368064007d69b1a51f5d692b8da4
SHA512 6b8dffc50b71f5d7d42a1590b183c8bb0c01f98f894f6bbaef1ee3fc69d01aadef3e79c5706326ebda020c1bec9e5d800afb5f994457546546cfc2f47ed220be
SSDEEP 384:71j3W7KxkXqKf/pUZNCgVLH2HfgslsF7pLuLceSRcXOD3y+ErU339HG+X2tt7I:7l3W7KxkXqKf/pUZNCgVLH2HfgsGF7pN
TLSH
T17072F9677C48993B0FD4CACCDC267E4F9CB5014B65E9886493FA5C2903D5BCE114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 f627b5580940fea2cd94e05abb1c55cb1a4d93b9ad2c13eff80c894e9541dbe3
MD5 6426b11998177daf6f226bfe257c5f08
SHA1 785b8de5124b63eb0fc446efa558d41353503345
SHA512 df1b83a6916f5bc675b675a6d9240c3ec317ba0305e0dc111b64101b973202d7e8844ad8e56055f1fdd0c929589c56d9396651e7eaaa245dac370846f73ea8b3
TLSH
T14BB0120590412303C00103F02290D05436608F38E13353D741E00D5288322585017208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a2f4f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a2f4f.TMP
Size 96B
SHA256 a2b867c0d65c0e18273917bc86deaebcec97277f3d153835867926f405327c4e
MD5 d3db23b0860de82dbb785a92f230207e
SHA1 83df7d78a3d98ea04acee0a5c12d90e5219342c0
SHA512 996848d9237fdbe964c8292e184b1f2d7955cdc09cab4173f857aba109da56ef0e3623bcc9c1e220ec7b032ac4c8ebeb5c0762164aadf4f496a6145ec5e4337d
TLSH
T1D8B02228C0022222C08203F02C80F0E832B0CF28C20F020383F00A2ACC2A3200032020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 f32f7a78db7ff98a9d7cc304ccec851d9f51391b92ccbc81491fc7c1a28293a4
MD5 4ce7f3c65ea1d494cd38d5db23cccb78
SHA1 599d06d3db5c059e2883aae429fefff5b11f8096
SHA512 66af5879f035c9ea4611467f6586fda71208338b1242dc11cb8b4b4cf6d2a6c7db6f392f1ef7f68fb36a95106648148861c1fecd71ef2f26b26f4e1fa287b607
TLSH
T173B0228800082F8AFB0B03F020E02A803F22BFA08303020280F08F8C800A3C00382C0C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 261KB
SHA256 2fb650777004bca12d466800e1a9383ee9283166e210236f51b2d0ff33177752
MD5 ec897187babd2c7e8d1057a3a26d9b3e
SHA1 595ce0628078fbf1aa0e520dc9af7a7271d4ec58
SHA512 c7d3db706ae8cb22dcd7f006d6ace63d888b48c3a46449c86b399cac2c553b85d11010489aa27199b8067a6bc2d96de7f5bf39f6ca314fb3ccc05eecc2f2ec70
SSDEEP 6144:8wwlVfVmx4YayJDfThDxWhaj5mjie/JYFobw:PwXVdFch/NmT/JYOM
TLSH
T1924412521CBC49E7166E851D40BA3B0056E5CE77F5C0DEA68BDD7E8F41C2BC0932B68A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 c9564eb3ae2dca7ac1702664756d7de344058e9152f23f1c45a5b8a6288490d7
MD5 931bdb1f5bfc5cb583dc0b5b6f8d9e31
SHA1 d7f5f50aca57fe2d117113ab489c161502265963
SHA512 f85affd2f0ee8a0f9a6c66d477c82e64bef8ee68b79e444a9a56c8b6302ae3ac067c8dd86f206ab463c0b868391e5cb9094646e23d08faecb8d0df8c2f3bb2e3
SSDEEP 3072:jT8ThDUxx0Rghaj57THH/53w/7qclnYe/JYNfobTOLXA:UThDxWhaj5mjie/JYFobV
TLSH
T1CFD31223ACFE01FB14BCC50840797F0086F989B3D640FFA79AD86A4F61D7EA49356156
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 261KB
SHA256 acf370f6207f3248bac7b7f448b65dfe21fdc207d7de739b1038664e67afd4ac
MD5 6520cb5f08a12ec9bd8501fcd201ea3e
SHA1 effed4c912f336dc1ba2c2889c9fa3e903d6832e
SHA512 95bc1d520920f7317abd4d2895c31081e3b662b0bed57588658cc767d5046977b26c28c74e329d4bde7d29976c0cce4f58c728cd15c1f08b5d5334c5d1c74b4b
SSDEEP 6144:/wwlVfVmx4YayJDfThDxWhaj5mjie/JYFobw:owXVdFch/NmT/JYOM
TLSH
T1594413521CBC49E7166E851D40BA3B0056E5CE77F5C0DEA68BDD7E8F41C2BC0932B68A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 262KB
SHA256 081bf747812bf130076bcfb52f39f5287be0ba7e0a53e2902fae01c82719df0a
MD5 42fec1e643bd5f7a855af0e362579cc1
SHA1 96173fedeeace2da73d67e74e01eb2d5ca2ed006
SHA512 997342f3edaa538524831282ffe3f538d91f1a82ecb67b62b266c7789cd654629245efc74a04b96f50d261b211e19f7025d17e4876b2e501a13c3ded4b3029c2
SSDEEP 6144:MEwwlVfVmx4YayJDfThDxWhaj5mjie/JYFobw:uwXVdFch/NmT/JYOM
TLSH
T1954412731CAC45E7167E854D406A3F0019E5CA7BE6C0DE9A4EDD7E8F41C6BC09327A8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download