hxxps://s4w[.]in/roblox-com-users-4307842628-profile

Resubmissions

18/09/2026, 22:29

260918-2eqxdatx6r10

18/09/2026, 22:27

260918-2c4epaef8810

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/09/2026, 22:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://s4w.in/roblox-com-users-4307842628-profile
Sample260918-2c4epaef88

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5844	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134342440478045279"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
3544	chrome.exe
3544	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe

Suspicious use of FindShellTrayWindow 54 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 1164 wrote to memory of 1300	1164	chrome.exe	85
PID 1164 wrote to memory of 3824	1164	chrome.exe	86
PID 1164 wrote to memory of 3824	1164	chrome.exe	86
PID 1164 wrote to memory of 5844	1164	chrome.exe	87
PID 1164 wrote to memory of 1040	1164	chrome.exe	89
PID 1164 wrote to memory of 1040	1164	chrome.exe	89
PID 1164 wrote to memory of 2668	1164	chrome.exe	90
PID 1164 wrote to memory of 1608	1164	chrome.exe	91
PID 1164 wrote to memory of 2668	1164	chrome.exe	90
PID 1164 wrote to memory of 1608	1164	chrome.exe	91
PID 1164 wrote to memory of 5460	1164	chrome.exe	92
PID 1164 wrote to memory of 5460	1164	chrome.exe	92
PID 1164 wrote to memory of 1032	1164	chrome.exe	96
PID 1164 wrote to memory of 1032	1164	chrome.exe	96
PID 1164 wrote to memory of 4548	1164	chrome.exe	98
PID 1164 wrote to memory of 2936	1164	chrome.exe	102
PID 1164 wrote to memory of 2936	1164	chrome.exe	102
PID 1164 wrote to memory of 5044	1164	chrome.exe	103
PID 1164 wrote to memory of 5044	1164	chrome.exe	103
PID 1164 wrote to memory of 3092	1164	chrome.exe	107
PID 1164 wrote to memory of 3092	1164	chrome.exe	107
PID 1164 wrote to memory of 2848	1164	chrome.exe	108
PID 1164 wrote to memory of 2848	1164	chrome.exe	108
PID 1164 wrote to memory of 2956	1164	chrome.exe	112
PID 1164 wrote to memory of 2160	1164	chrome.exe	113
PID 1164 wrote to memory of 2272	1164	chrome.exe	114
PID 1164 wrote to memory of 3544	1164	chrome.exe	126

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://s4w.in/roblox-com-users-4307842628-profile
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9f269c728,0x7ff9f269c734,0x7ff9f269c740
  2⤵
  PID:1300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,740032632302904150,4321936536081474258,262144 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  PID:3824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,15801892821279145493,5152393503090655940,524288 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,18114633882360147257,9134420240865340416,524288 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2564 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,16772982696661690182,17681083155853013538,2097152 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,771191737650388042,16543634359262568935,2097152 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4420,i,5366377344610392427,4593701170990018937,2097152 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4480 /prefetch:2
  2⤵
  PID:5460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,14488376480752691052,13567748222690449437,2097152 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5736,i,6641268053365385628,5994694939523914128,524288 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5064,i,2002501717792355301,13118709154523065032,2097152 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4748,i,2816392391537904104,17400490388288408972,2097152 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3236,i,15354244763035455544,2998129497745951528,2097152 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4736,i,7777868757991684452,14131192368700721922,2097152 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6000,i,10770543850962623991,1563954949273997060,524288 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:2956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6288,i,5548722016232099759,6180668047163465644,524288 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6280,i,5556139588496111769,5639458415605808794,524288 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5092 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6536,i,8301534476017185054,14611786411853678165,262144 --field-trial-handle=1900,i,10000849312260701955,6573910631758835624,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6580 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3544

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4084

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 822e9b7c3929a2ed25e9509241da010a65c582e7f507b3352b617098c1b0ac9e
MD5 35458f61d4ac22bfa0d18dc6d5733c56
SHA1 37505961aeb33a5a13fc38ea5d9eca4b1e5a4bde
SHA512 b868df90dc6cf4ac80f76d498955fd0ad45cb33708cfc2752fb189914f174829a962a8ac7e6d96f276d372844f90dc7048b974b21b6f6c3930b50162a8c89aec
TLSH
T19EF042BADC21EC3718FE171C30A58B46FB54236B3740494B3A3C822D8FB153B8A9591C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007a
Size 51KB
SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
MD5 588ee33c26fe83cb97ca65e3c66b2e87
SHA1 842429b803132c3e7827af42fe4dc7a66e736b37
SHA512 6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04
SSDEEP 768:VtCYamkOlFDUPktxoMggUfuuyDS2/wNsr9qdep/t0LDCzBr8VcdYM2YLx+jYRatF:/HamkonKVfM/ks9q0Nt9rnLZ4jYcx03+
TLSH
T1C83302F9E03A27AF3A55A372F131FB506455EA8C82FF4789E87DA3508EB60560F03084
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 1f1c9a3e0c1c0b21fc0fcbcac183653342cc0628c8c9b95fcfc9b354ae06e8a1
MD5 0a8f3935c86bdbf25151c67577fdcecf
SHA1 6ae16ee3f1399f9f739395babf2ecd536adc0b35
SHA512 3297f82edd2f81bca81a110a0114a6c4edc1b3645b7ebc0c581ad58060d062e86d0703d08a24e5dd85bdebc58415b6a8ae81be07b523f143b48058d5bacd8a37
SSDEEP 96:h++XUqLmI/O27HePfuAa+VCoqaQMdOBEvkVtgZjh51f4AQB4LXju2FGYu:Jp/RQfUoqs3koZ/B1+uXKOG1
TLSH
T18FD1FE8558E24D50EF6032BD6A72FECE28A0945E8515072B35A1D8D438C3BFD98F9FD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
Size 347B
SHA256 91229273d0d450f8aa90f3b8ad5eb2fe640fa83166cad4623d8dc8b67716aa3b
MD5 ca55a876940bd88077ba75522cdeed0d
SHA1 910cb6a8bedf9901c17b830efaf227ab7ba65928
SHA512 f62d9f3055d420843dadb9dc82f0f10ba85c4fa36a2759b76d8b9032f299dfacd178669cd49f2f045d8b05e6e0d14a1bbfb26e1ce422f2dccbd5507b8033ba3f
TLSH
T10DE0C02C61CAC65F3090816756387B0EDEE2760DD7CDEDC18F41F81030C500C556C270
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c00f3a22a54d5664f94f58a492592e038b444bcf3e3e09c8ee12230a4c300c07
MD5 ebc0638d8bcf92c88ccf787c3b16ca4d
SHA1 a9d89b9f4b9e59399cc2b7debc7ab96ce900a55b
SHA512 2d88255ad1e8fe373a6ef7b7c2ec5ecc5be2fddc04ec127814c1358c9dd9104ab8e9f5e3d9e1a16cdfc50e45f1fd732e5451b1fc3f724ff0f709edbad9e43a56
TLSH
T1B7418DF7C3E48ABDC90066F4AB116F1FCD690918131C3C16C8D4AE1F57E28B2E21168E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 be69b4479410d52debede1170022e765a80c439529b147f5090fb80102fbcaac
MD5 677d0f94b6c1e42c9e4a4453b045f036
SHA1 3eeb76a01086e1c77ca8886c0eddbeade6985129
SHA512 260eceaaec96ed6fd4974daa41b9db6b74f3adf18f35128d893e346769da970a791526f8a3e539d558c2a2cff1ed35c02688b3c5921b2a86cfc85a3a23ee867b
SSDEEP 192:DLD2+YNt63sKqqfXcjwz/+F4SYxfnxf7WfMhHjuGATQLV0xULzNOx7dAHA:DLDzYNt6cKqqfXcjwz/+F4SYxfnxf7WJ
TLSH
T17C029BF783F4CA6D991256F4AA15AD1BCE5D0924032C3876C9E0BE5B53E35B2E20178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 3ab24f2a1c619a77d90f1f2cd22d425b2c827a29708409d6d8068237c9e81766
MD5 4d241afa48d08b3ecf3416c519b6731e
SHA1 89ce61722e05c81d506d5dc05674e0ca97eeb1ed
SHA512 69426f93262a92a691bbd49a7ea16fec8629476f13ec3ccfca14e08d2c681b8e594272c7ac05adf1d3a763418349a3c7fd4b6fb95feb78a637183a96a9a736f2
SSDEEP 192:DLD2+YNt63sKqqfXcjwz/5+F4SYxfnxf7WKHMhHjuGATQLV0xULzNO6HA:DLDzYNt6cKqqfXcjwz/5+F4SYxfnxf75
TLSH
T102029AF783F4CA6D991656F4AA15AE1BCE5C0924031C3876C9E0BE5B53E35B2E20178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6b180065954b8e38e4a5773c62733b500827ce2137acb9e279617e3e69a089da
MD5 58c698a1ffc4a35aef2a677c4090b0ea
SHA1 7b7422b185bb8b7579340492981872ca83b6679e
SHA512 ca4cac5d586f4f15aa9e8577cee7b412b44ed3f4a872717915ad59f53087eb3419decabf9ec84dd2cd9e12a12887d0f481a534846e2a7740ee304647d861e53d
TLSH
T1DB418DF7C3E48ABDC90066F4AB112F1FCD690918131C3C16C8D4AE1F57E28B2E21168E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 f9c83c4cfbc568da4e9734a981fde937e462c026121b21c581917c2c4fa34aff
MD5 d574abd42d80a65396b83a505205e178
SHA1 3cee8f45ad7999a6c83b3ebc42b13381afef8b54
SHA512 df79c0351f77cca45da4ac08aaa6d01a297fd8866fe8d85031cd6ee1da89138fbc21ad0282dcb7f9d45fa84af0c52e6b8f867cbebe5df2022f2da9bbfc1a7493
SSDEEP 192:kRx3SHpIN1v78pAPRp22q9THsb+WNnIGIQo62eQq/NkwKNqVyIsnAUge:kRx3NF4UX+Jw19N2eQKq0e
TLSH
T16632B52EAD54753B4CDBC22AF961BB53D7F5102160D42E88E6FC8A3D25D79CC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7dea045bd6d7eef3fd238fa744ff4d9222683aff2be049ed477a7f14efeb090a
MD5 3543b4ed8ab587bc2ad99280f77bac2b
SHA1 913e40431a6eddb25b17e9a17b55a8e44321ca9f
SHA512 b7e3b3b2f4efeaa7b0cc6c1028775ae569158bb77f90a7a08e7e60851e97ed903ed5e050384d845ec3c7ec0ac33c596771eccabc85e0104024119996ca8c83c0
SSDEEP 192:LRz3SHpIl3v78psPRp1BEEq9THsb+WNnT4/0rr6xYeAT/NkwKNsVyIsnAUgE:LRz3lf4MX1qJwswsYeMqqE
TLSH
T17642C52EAD50793B5CDBC32AF961BB52D7F9102164D02E88E6FC8A3D21E79CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b9bee4fbb4a68389ba43db90884b2d7d0ce6ca8164a3e039547b2b900c9e287b
MD5 d5d4acfbb75363db08eabcc89ad507e4
SHA1 6193a202354eba919232bbeae6744711dc36a695
SHA512 561aec8d56a9376fbf141f9f8c65e345550c639a6c6778d47dc2e7dbe1aa5dbb1bb7c278a57b511e7f63ddd7a2ba51a6a7c4f9cbbdd4fd682fec47f3bdcff13f
SSDEEP 192:LRx3SHpI7Vv78pAPRp2Eghq9THsb+WNnT4/0rrgoS2ega/NkwKNqVyIsnAUge:LRx37l4UXMEJwsw0R2egaq0e
TLSH
T1AF42C32EAD50353B5CDFC22AF961BB66D7F9102160D42E88E6FC8A3D21E79CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 81ca727acbf0093267eeff1fa87c025bc24da7a2151d9ae13bfbf70eeaf22d3d
MD5 530bc9f18d0734863bcb0001ea312eb4
SHA1 9764b905db19fff66901da8878c4446f2379fd8e
SHA512 1e8aafe7d4c91c9c8f118010ed0e430dba186ed998f24ddf3ab0b85eda5eca2f4ff8e6f3ff96a040ea335f6507d555ac624116c400068aaa7d8a4df40ebf1f9f
SSDEEP 192:LRx3SHpIlhptv78pAPRp2EEq9THsb+WNnT4/0rr6xYehY/NkwKNIVyIsnAUgE:LRx3lrN4UXvJwswsYeGqeE
TLSH
T19042C42EAD50757B5CDBC32AF961BB56E7F9102160D02E88E6FC8A3D21E79CC6217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 77e99a46dfe4bc91452dd5d256e756f1f10dea828383946e59cd796eea23c845
MD5 80814d6aa6f175e69a0a57a862c05b44
SHA1 efc4392838ac69cbffd7fc925e36517d5dfe314a
SHA512 28fb41a0f96b4265c5a11978e771cc3518a8585b5ad7dde1c05424b5e801bf738a67266c7218db582aa4e9844df2a45cd06631a44cc96c62ec9ef1de313df8db
SSDEEP 192:LRx3SHpIlVv78pAPRp2E8q9THsb+WNnT4/0rrLIWeoY/NkwKNIVyIsnAUgE:LRx3ll4UX/Jwsw4WepqeE
TLSH
T1EB42C42EAD50757B5CDFC22AF961BB56E7F9102160D02E88E6FC8A3D21E79CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 43f944a661dcb87870c8071d4b3e3691fb55e663cb355749dda9cfe5501cf323
MD5 89e6586be3caad0b5961e73393be853c
SHA1 b5e7888c01f2dff4bb2ed28b50e32ec3994fed5c
SHA512 7b0e81c1481c1f1f1e3e2db140828618c47217ea2971b61d96a0bf4520171028ce1bc3800b8504f0029f2f76b24ae99dc314dba7699032a8b47571410ac3e34a
SSDEEP 192:LRn3SHpIlKv78psPRp1BEEq9THsb+WNnT4/pNN3d6xYeprT/NkwKNsVyIsnAUgE:LRn3lG4MX1qJwsxD3eYep9qqE
TLSH
T19542C52EAD50753B5CDBC32AF961BB66D7F9102160D02E88E6FC8A3D21E79CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 a55c9d9bfbff27f4080d00af8282862be9cc6b021b0d1cf3b654e6d1857a1705
MD5 c8926c13ed1e541a9ebca052800d518d
SHA1 3522a9925410a3faf9a73cb924c1c1fb4dbffb5b
SHA512 0cc7f70f08f90753f1713955142d2f28c2b7b8284eb83bb86dea581036af8c57e30edda3af83eb81e1295de946e3c6812dc7f1671fca9c13e29cb035d90943a4
SSDEEP 384:j5j3S7KxkXqKf/pUZNCgVLH2HfgslA/7pLuLceS9YXOD32+ErU3tJHGT7LAE:jJ3S7KxkXqKf/pUZNCgVLH2HfgsC/7pO
TLSH
T1E772FA67BC4C9A3B4F94C68CDC267F4FADB5024B61ED886443FA582603D5ACB05062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2e61d8bf8da304d0c5fcc4268f5c9e0b48403ce0094f5afb3b4ec07e26872a8b
MD5 326c7c886478cd554acdbb00105fe6aa
SHA1 17d047eb9b4f5c84ab027131354fa0d29d6bc8ad
SHA512 34180a2e89d8c510de4e643d64bed19718833404605eabc40d13556c7d4b8e67d0308a5b2d5db95af5806fb51fa7809fb06b7796494baa91cf0fb2f8c1073d23
TLSH
T135B0120580413302C00503B01150D05472609F38D912239652F00D0188311605127608
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592272.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592272.TMP
Size 96B
SHA256 872edae1d8d49c96334d432cf9c89fc7e1b2dc9240593c108db95464777444f7
MD5 d72380be85969ab22c31d3a7566d29ff
SHA1 32763abc176da5f36ca4cb71c86d92ffb8b2890f
SHA512 df20740f387e843b3d7cb2227362a9edaa4f00cbc067dd473cc388f916aae73b784c7f8da3de1e95e67e2d3a659a7d3cd3b859cc9547de49a9f0fbb879a2f270
TLSH
T1F4B0025AC113A223C44303B02597D9D87560DF29C6C3122392F05A7ADC256B275B5560
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 9e47460a6a0264e14ab4eca2f321950711cd616a8c635df4fbd4bc50c3761201
MD5 09e1430e1b9b44c49b37e4c451e15db8
SHA1 757066fa22ea69d7e9aff4ec4513066b5f5cda55
SHA512 a3b0ea4bc1d6d90454896e72750624fd42bcbd6c27228e4126cb99b6f5f44e55e1282b24e8d51b08a91f481c522aef2f11dc82668711961904559f20c977d214
SSDEEP 3072:R+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:R+hFD+7t56OD9ZfSAppry
TLSH
T179D31232AA91C8BBC9BC6541B157A304DD766CED41DE3A0944465F8ED09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 0a9f26c4e02602348af3b1f4cf821ce35ed47016679bb8f5bfae78d77a3acfa4
MD5 4315badb1d72aa2beb6bde64e325acd0
SHA1 7eea9cae687514787c8f71617096947321711ff5
SHA512 dfe5ae90104a1352c467e90f41ef24f8ef8453364f3bdd807b59d7d87256ef8f3dbff4a3a02eecdaa1d57781a1af64f14c9c9cc96a249a844513e3718d430408
SSDEEP 3072:m+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:m+hFD+7t56OD9ZfSAppry
TLSH
T18CD31232AA95D8BB89FC6541B147A300DD76ACED82DE3A09444A5F8ED09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 50f2e6d51d908af973ce6ef2e4374cb4f72713995d16189c24ca541de8e90767
MD5 0fae2a7129802a7b2412878ac9b9eb72
SHA1 f452c2ca0e9363c7f503ead3fcca2e87c06fb392
SHA512 8436bcc3db67e844a7a676f3dc0403223174a7f186cbf754f59434a9b23abb8305baf7df622329630a7469fe8df533933a3c5b1dbf532228fe52b99768fc2cb4
SSDEEP 3072:g+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:g+hFD+7t56OD9ZfSAppry
TLSH
T19ED31232AA95D8BB89FC6541B147A300DD76ACED82DE3A09444A5F8ED09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 226133d609f96e6eeadffaf508db7513680e89599b6737581c9b0b1078034e6b
MD5 bc1bb8c06f85bf5fa7392936ad337f08
SHA1 105f5dc0e375d25815a6287519e97e9599335df1
SHA512 f60c2ef2bf0e0cade93c9dcae40f9cd0f887bbe3486ad3d6cfab888666c0a4f2904a98f9edaa996872845fd09cae15c36340d3188d049f3b2f7a83750a710ba7
SSDEEP 3072:7+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:7+hFD+7t56OD9ZfSAppry
TLSH
T162D31232A99598BB89FC6541F147A304DD666CED81DE3A09844A9F8EE09FD4C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 171KB
SHA256 2f6ed8ce98de307913addc4fb6b7b741c6bfab16101adfdbb3fe0829cd79a15b
MD5 28924b1d71d6beeffc19a4c430dfff2e
SHA1 a5767151947591287ed07f1fc19f953fd452ce4d
SHA512 5747d6238c7ca5aa8710041bc53239205ca30ddcd147630b6b1b832edcec85976b62f0ea838e2785a14ae6e8985743bdf2ebaf2a213b1469e9336b81ace5cf2a
SSDEEP 3072:tn7aJEVuy3ZxoRne4ps+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8e:tnEEVuGZxY1ps+hFD+7t56OD9ZfSAppe
TLSH
T1D4041232AD50DCBB8EBC6546B1836704CFA268DC85EDBA0D84175FDEA11FC5C4662A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download