28027455dc8bd439eccf51e4bfa58340cf9e6e1396c10d6fb4534f51d3c615dc

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 20:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Export Import Fixed hackvshack.net.bat
Size 17KB
Sample260922-zdndrafa26
SHA256 28027455dc8bd439eccf51e4bfa58340cf9e6e1396c10d6fb4534f51d3c615dc
MD5 de0ac1a18957583dc3857c2e287a0e36
SHA1 fe36c455d46d1d7188562c3b854a51e86e8b91f2
SHA512 7280947452b6b0bb926137f7803a3d1c61181b265a8f0da8c9d68b77d56025fead05a9e645738ac62e4b7799b94e96710ed9522bdd5cc27af359f3630d2352a3
SSDEEP 384:2thWOPcJOHYSAwfsFqpESBTEeeL0+z8eqDYzQhQE2GK8wQ00JHsob+LFsopxBl5f:2thWOPcJOHYSAwfsFqpESREeeL0+Ieq4
TLSH
T19B725457764F2170E8F7A69ACC47944EE72A7153262C055A3DBE03817F38A4C61F2BAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1148	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5184	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345829877950191"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
1828	chrome.exe
1828	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe
Token: SeShutdownPrivilege	6140	chrome.exe
Token: SeCreatePagefilePrivilege	6140	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe
6140	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 6140 wrote to memory of 3432	6140	chrome.exe	91
PID 6140 wrote to memory of 5788	6140	chrome.exe	94
PID 6140 wrote to memory of 5184	6140	chrome.exe	93
PID 6140 wrote to memory of 5788	6140	chrome.exe	94
PID 6140 wrote to memory of 4092	6140	chrome.exe	95
PID 6140 wrote to memory of 4092	6140	chrome.exe	95
PID 6140 wrote to memory of 2316	6140	chrome.exe	96
PID 6140 wrote to memory of 4968	6140	chrome.exe	97
PID 6140 wrote to memory of 2316	6140	chrome.exe	96
PID 6140 wrote to memory of 4968	6140	chrome.exe	97
PID 6140 wrote to memory of 4020	6140	chrome.exe	98
PID 6140 wrote to memory of 4020	6140	chrome.exe	98
PID 6140 wrote to memory of 5696	6140	chrome.exe	99
PID 6140 wrote to memory of 5696	6140	chrome.exe	99
PID 6140 wrote to memory of 4228	6140	chrome.exe	102
PID 6140 wrote to memory of 4436	6140	chrome.exe	109
PID 6140 wrote to memory of 4436	6140	chrome.exe	109
PID 6140 wrote to memory of 2240	6140	chrome.exe	110
PID 6140 wrote to memory of 2240	6140	chrome.exe	110
PID 6140 wrote to memory of 1140	6140	chrome.exe	117
PID 6140 wrote to memory of 1212	6140	chrome.exe	118
PID 6140 wrote to memory of 3420	6140	chrome.exe	119
PID 6140 wrote to memory of 1828	6140	chrome.exe	128

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Export Import Fixed hackvshack.net.bat"
1⤵
- Executes a command shell one-liner
PID:1148

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff9e51ac728,0x7ff9e51ac734,0x7ff9e51ac740
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1996,i,17941992516774379640,17797537644749908852,524288 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1744,i,11032409424131984037,10350143410580890919,262144 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:5788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2436,i,15472236824958194448,2245975774490074931,524288 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2408 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,4506218225838365712,1861098702837803533,2097152 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,13264270579252465578,16947105675286101863,2097152 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,15961103811837218056,14748127593221947568,2097152 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4488 /prefetch:2
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4768,i,5135282962041172881,335338126758296636,2097152 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5572,i,2557981016004107845,11757464629676282632,524288 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5820,i,3277801487555178022,2780343063517121151,2097152 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4776,i,1865976405203293438,3921128207132836995,2097152 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3364,i,13779167388962541842,4528376906046645494,524288 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3352 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4652,i,479834176695210682,1937769330405051017,524288 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3400 /prefetch:8
  2⤵
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3464,i,8825556776177312135,10183577628707749664,524288 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4928 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=868,i,15499348705590197938,5165439839281805340,262144 --field-trial-handle=2224,i,15924410967045753855,5227573626203889092,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1828

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1160

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5556

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 82939eb574fe2f23b546bc9e9963bb9f84f00a5bd3714e334c4230e6502c13af
MD5 7654776b112cc0a415ec67d751ca50f0
SHA1 2f789d464fb02981ab635cce5961c8e4579808f9
SHA512 30e31c6e23a4b8e2cdf5330bfdb9ba2be3134d4c9d9d84f7e911f17330e8efe1162e607f351abc48917891829dbf7d6c3f679be791176cd2642e123300420a15
TLSH
T1D0F02DA6E921AC3759FE071870A58A46EB60232B2B40889B3A3D511C8FB453B4A9995C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 6b918ffe37e8db5c245bce0dd9b9a2a293780d54f8fd67e28f6c6c1dbbba942d
MD5 12c90e73f0d0ce1e7335e5feacbe1324
SHA1 d0dd47720aad9595edb088c7947845991ccd8bcc
SHA512 0f0edb31c8204447438b4b3be644a4e4fc22eba19388d87daa112224e099c7f5b68297dc1d80730ffb14ba60d684e6cd75d03ba55980cc4ac3240d91f8de74fe
SSDEEP 48:YALlh8qnq6q4DhUfSkfBsjRsRXLsHbfoKsJ4sXfs8osfKsA2psIps5Ogmzs523a:DaiNDD2RIKqCXVP1nyOC2K
TLSH
T163817EF7D7E4C66DC81156F49720AE2BDE6E0A68422C3C16C8D9EE5F53E2472D20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 a3a4eee622643273fae1c8141b918b505d238af6cd62d456e22703a746b53253
MD5 2a0eb1770c7a5166d6d4758ba0a8894b
SHA1 5e711e1fadb4501f559285ed00ad0cd888c9c6c5
SHA512 b88973f16b2b9c2b7a8aac6ac8479af50d12951059a6ff54c20e115ae0adfe62cfed554dabad2069c7599ac97d5338d3fe650a61a5c32d85e355d12f84c48f50
SSDEEP 192:xRp7SHkiQv78pAPRp2b9THsb+WNn7w0ePU2newLVyIsnAUgtaJ:xRp7EM4UXwJwM0eM2Z8
TLSH
T16E32922DAD20753B5CDBC22AFA627B57D7F5102130D42E84EAF88A7D25EB5CC621701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c111eac2c85cb138c44dc0253f63dc235097c0049013c4d5e45cac48271f3ef0
MD5 f30351c281e557746340b747677124a4
SHA1 4db0f6cb5c0319915269ced522bd02a07f754388
SHA512 e2ba657acee6ed4dce165ee761209d2b5842e3caea41ef5eceaf01f01ed7a48e734ebce0d989a6716507aac8f1a152355500731c7700bd995cd5b82003b17ca7
SSDEEP 192:xRp7j/72aHkivv78pAPRp2/V9THsb+WNn7wz5+2e/U2newgVyIsnAUgraJ:xRp7rBn4UX6JwMA2e82ge
TLSH
T15842922DED10753B5CDBD22AFA627B57D7F6102160C02E84EAF88A3D25EB5CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ec19adf78e3a0e9bae67b88319b4d41240f245496f0c8ae68c241d5f5144735a
MD5 2a3282bf791fa679bb2d616a1733f892
SHA1 35917774fb4ebc982e9a01b87c84045293a893a2
SHA512 b49271406394fe669e8b4f93079c72f42ef9fa19327d54846e3599b6bb2fdccf8ff09efd938a596bd6b0862583e36957ea1eee15ce649bfec39aa2d47aebd01f
SSDEEP 192:xRp7j/72aHkiNv78pRPRp1/V9THsb+WNn7wz5+2eGU2newsVyIsnAUgraJ:xRp7rBt4DXbJwMA2er2ke
TLSH
T18952922DED10793B5CDBD22AFA617B67D7F5102121902E84EAF88A3D25EB5CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 25fcd961f02abfe09f774add467e51fce5325020d28ab57e66f5a94ecac20c08
MD5 97441ea1b537713b5c29942ba09058b6
SHA1 882515c9be7af8d94146bdadae8d721992c45af8
SHA512 202e16a3d81a612e02af89b0cad6eca2e162c40bdbb0d6f2a1a9b633b6b27978b27ae49e31edc6deecdc795eac5646750abb738b9de86ed63a92d7fb2b48cf64
SSDEEP 192:xRp7j/72aHkiQv78pAPRp2/V9THsb+WNn7wz5+2eJU2newLVyIsnAUgtaJ:xRp7rBM4UX6JwMA2eu2Z8
TLSH
T12642922DED10753B5CDBC22AFA617A57D7F6102170C42E84EAF88A3D24EB5CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 a55c9d9bfbff27f4080d00af8282862be9cc6b021b0d1cf3b654e6d1857a1705
MD5 c8926c13ed1e541a9ebca052800d518d
SHA1 3522a9925410a3faf9a73cb924c1c1fb4dbffb5b
SHA512 0cc7f70f08f90753f1713955142d2f28c2b7b8284eb83bb86dea581036af8c57e30edda3af83eb81e1295de946e3c6812dc7f1671fca9c13e29cb035d90943a4
SSDEEP 384:j5j3S7KxkXqKf/pUZNCgVLH2HfgslA/7pLuLceS9YXOD32+ErU3tJHGT7LAE:jJ3S7KxkXqKf/pUZNCgVLH2HfgsC/7pO
TLSH
T1E772FA67BC4C9A3B4F94C68CDC267F4FADB5024B61ED886443FA582603D5ACB05062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 36653fbdd58a8034499e6295df116f5f3c4b65bf3fe0cd113481be425f5648d5
MD5 0c28c52ba0c42be2f7ca4389cf4cde5f
SHA1 4753cc941ac849ceede3baa23483a061c9cccaaa
SHA512 4c6bb2f828e950d51f326e291e15d88c32afac1fe7572f22534089c14245dc5a4c64a90c361c4d2aac098a3350dd61d9061f2091972c5e56711812a007673104
TLSH
T1FEB0122980857711C00103711190A05833608F3AD112138551E00D8188351605017108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592c75.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592c75.TMP
Size 96B
SHA256 b974c0c13d9dc8e91960d8e951ff09638e38eeb372f63e8ae93ec36cdfdd982c
MD5 405bbf3dd0a1faf8fa34830ae4c798a1
SHA1 227509536b14f1f115bd0bc2f118f4df8cec3590
SHA512 4e4950b88ea208fa6f5b3742c86054d4e16fbff2f0b7ed27c8ef35edd9b1512e496fbecece336b989eb1990a1da4c52190d0525d43ab09a807d7e6773c1620a8
TLSH
T155B0025AC1126263C04307B4299AB9DD7160EF29C6475213D7F81BF6DC697724525261
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 741ba98a515643895a15cf52ea7c2b6da11a772a54537b8862c1b3b9b78494cd
MD5 65daa46df9f7b28984ada2690a1cc08a
SHA1 5a8c697504cfa61ad074f182db181c6b879dea64
SHA512 26b377285fa7d4c6256a3e6ed8080f8ed0d3d18e1b6982294e7f87a680ec231b4b8314f099937083c727156d3d68a9e1ab5beacdeb8abba3bf855bb267d85500
SSDEEP 3072:2+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:2+hFD+7t56OD9ZfSAppry
TLSH
T1F1D31232AA91C8BBC9BC6541B157A304DD76ACED41DE3A0944465F8EE09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 261KB
SHA256 e3ec4e8f467616f843ca868a78e4a5ad55bad4dea1e9ac408415183e0b44a94a
MD5 40da840f13ff898c24f519dca83e8033
SHA1 7587082f91fd4d4e9b27c6fc187fd2c2511e90b5
SHA512 d35a5f2680a6c9214faf44dca89c6f405451b140ddac1e1a47ca05843f53ffd6dda23e8d12676a75268dcc3d8f915dd8040a3542d233511907d4ad757b103a2f
SSDEEP 6144:NgFH+NM7k6f4Po2zA3f4G6+hFD+7t56OD9ZfSApprQ:NgFe0kweU6yFSXD9ZfS4e
TLSH
T1494413326EA5ED268D7DB881B0376504EC76DCDA05CE9B4A425ABF4DC1BF48C1623D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 261KB
SHA256 960dada86d4ce17639636f4e73f2a555235f778a17caefa8422c96b386981d63
MD5 60d09cda0c8222c5aa4bd72b98e3d359
SHA1 8d7e96df05134f49da218218281683eab4fbfc03
SHA512 0e3fd25d073c4d0b1551bdda16c69bec89fb926daafd27298792285d2d10d1340cc9f2060517240580b24275f0d4ae3d8e02c28466eb1232de27da55b62a4a1e
SSDEEP 6144:YgFH+NM7k6f4Po2zA3f4G6+hFD+7t56OD9ZfSApprQ:YgFe0kweU6yFSXD9ZfS4e
TLSH
T1D94423326EA5ED268D7DB881B0376504EC76DCDA05CE9B4A425ABF4DC1BF48C1623D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 262KB
SHA256 afb6717add477506bf653d31e31df226a41c3e807131ebb177b5a0291b5f9c55
MD5 ae6d46cab8616816aaac01c0b1ee96a6
SHA1 aacebaaa7b5589b9cc4a279c64bd4dbd6a34bc31
SHA512 50f89429b1c53b45649d19b6432eddc5ca6757054d58d746ad5a79f648a0273d41b6c3f7b2f079f909fccdd1e6ab0907084cf096f1f51489da71a8b612f89caa
SSDEEP 6144:LgFH+NM7k6f4Po2zA3f4G6+hFD+7t56OD9ZfSApprQ:LgFe0kweU6yFSXD9ZfS4e
TLSH
T109441232AD65EC268D7D6881B0276604EC72ECD705CE9F4A425ABE4DD1BF49C1B23D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download