hxxps://www[.]swisstransfer[.]com/dl/01a0d57b-2c11-7046-a94a-5394afe9c157

Analysis

user interaction
yes
max time kernel
82s
max time network
84s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
24/09/2026, 22:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.swisstransfer.com/dl/01a0d57b-2c11-7046-a94a-5394afe9c157
Sample260924-2apthstcmd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3836	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347622132329086"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe

Suspicious use of AdjustPrivilegeToken 48 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe
Token: SeShutdownPrivilege	4548	chrome.exe
Token: SeCreatePagefilePrivilege	4548	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe
4548	chrome.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 4548 wrote to memory of 4556	4548	chrome.exe	83
PID 4548 wrote to memory of 3084	4548	chrome.exe	84
PID 4548 wrote to memory of 3084	4548	chrome.exe	84
PID 4548 wrote to memory of 3836	4548	chrome.exe	85
PID 4548 wrote to memory of 4896	4548	chrome.exe	86
PID 4548 wrote to memory of 4896	4548	chrome.exe	86
PID 4548 wrote to memory of 2136	4548	chrome.exe	87
PID 4548 wrote to memory of 4744	4548	chrome.exe	88
PID 4548 wrote to memory of 2136	4548	chrome.exe	87
PID 4548 wrote to memory of 4744	4548	chrome.exe	88
PID 4548 wrote to memory of 2736	4548	chrome.exe	92
PID 4548 wrote to memory of 2788	4548	chrome.exe	96
PID 4548 wrote to memory of 2788	4548	chrome.exe	96
PID 4548 wrote to memory of 2148	4548	chrome.exe	99
PID 4548 wrote to memory of 2148	4548	chrome.exe	99
PID 4548 wrote to memory of 3968	4548	chrome.exe	101
PID 4548 wrote to memory of 3968	4548	chrome.exe	101
PID 4548 wrote to memory of 1940	4548	chrome.exe	102
PID 4548 wrote to memory of 1624	4548	chrome.exe	103
PID 4548 wrote to memory of 3636	4548	chrome.exe	104
PID 4548 wrote to memory of 3180	4548	chrome.exe	106
PID 4548 wrote to memory of 3180	4548	chrome.exe	106

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.swisstransfer.com/dl/01a0d57b-2c11-7046-a94a-5394afe9c157
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffd739ac728,0x7ffd739ac734,0x7ffd739ac740
  2⤵
  PID:4556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,11285349467270934043,7808141093725990375,262144 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1608,i,14959647011633567825,11984422517080850728,524288 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,3328918875649277281,9617538496208324081,524288 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,2536093220321055517,12620822032017788940,2097152 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,3800210088722709865,10910169191014861152,2097152 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5012,i,9628575404106755263,3929854409137358021,524288 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5016,i,11536856867074475550,6296986979007691364,2097152 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3328,i,7659115594834054156,5013574464550810028,2097152 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5756,i,13049458836080265659,9678062916592064916,2097152 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6024,i,10306272163147048778,9266587586076896281,524288 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,6945047137494338683,18417640644370749095,524288 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6040,i,10418763528701657511,17293244034460181194,524288 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:3636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6080,i,5059466942769361531,7201124168105710016,2097152 --field-trial-handle=2088,i,4516569544650173626,2606158478427466192,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:3180

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2056

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 8a9759ff5c7ac0014593b5b96e97eaa4caa511c6e9412c7028091cfb77484443
MD5 07baf0d2873702f3dce2e81116b2fb76
SHA1 e75e3e36c6a94308f85ec543b419ca86dc7d9d3b
SHA512 ba9299da851c32de93144c5c7ca06f67726f356016bb515af75a8530cac9a57169575bbea1274e0e2daa0b6675c062e52fefe8e38a51be71355743436fc1565f
TLSH
T169F02DA9DC31AC2B18FD172D70944B4AEB6113572790955F3B3D820D8FB067B438585C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 9c1af9accfd6d0f9fa46ddc606ef1775b77fbc04d49e9c0529b70fb6100fb9e8
MD5 6f23360119c0166536cf6f51de12a298
SHA1 1957b0f27b688e0a938583e26f7f02543bba8b80
SHA512 bf45ca8cbea98b987b7103d594d289bdc8957cd12a989bbf344e9860f9f38efd88d5f70a66aacc9962bd56b4943d625538f4c2bd41f631a178f1ceb94dc056c0
TLSH
T14C21641865C81315EF70307719C52F46AEB9065C8E0A0BD3726795AE55F3AE6A00DF43
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 fbd5333397285dfee1cc9266fb3a6f4ccf4ff6af11ce75d2f2a1058dbc245ff1
MD5 5c598bd00d390367d72eb428054432ea
SHA1 01db1c04068562302cf6b9dd7068509363db066d
SHA512 e14a9420bce158771e4bf1045fc3c1a275d9f185cfd94fa643408cdc02df7e10739ab8a77a4eb8d13da687450622acb82a24c77a550f8db1c07cd7ec53dd5293
TLSH
T1AF81EEB783E08A2DC91592F09A116E1BCE7D0924136C3C65C8D8AF5F63F2572D24179F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 4126dfe55a245081e9b918f3042bba73e061ed36da066a6a8a6455d9a7ffb89a
MD5 5c7de623807459dc63d4eabcc9ee14d8
SHA1 7a74f8910bdd3e1480f2dd8b19e9b4e126edf422
SHA512 903cca71402c52fe7ce6418a6434ce2e0924183b14b4bf0158c48bee8adfe6d56251cb2f8671b6440056d7fe05a186c7a8a76fd869e5c6cdfc4a91bdea715312
SSDEEP 192:HRKr4Wpv7YcNpAPRp27r9YHsb+WNniJsi529QgeQ2F5yVyIsnAUge:HRKrppNNUX0WwwT29cFMe
TLSH
T1AD32962EAE50753F9CDAD21AFA617B53E7F5102131942E80EAFC897C25D79CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e6543703dc4b2fd628d7713f59370d3e28a99ea36b0c82af5b63e337a428595f
MD5 dc808a8484740ca8e9a52d28d33e3207
SHA1 78c1799d1346c00386b8e6f50c1a91de410bf53b
SHA512 8e98e0de206fdc15bfe338c5b932ae2f8a1f5a4ee9f5f6a81a7e3676d37912aad00c40c651321ab302c33e3f4bf2fda04830b7d4f382df9135c64cfccaa3cde3
SSDEEP 192:GRKr4Wpv7YcNpAPRpq7r9YHsb+WNyZPM1HK2i52CQgeQ2F5qVyIsnAUgE:GRKrppNNoXAWw3It2CcFAE
TLSH
T1BD42952EAE50757F9CEAD219FA617B53E7F5202131942E84E7FC8A2C25D79CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 711601003ea01f100e0f578443fc17001c7355d0272cb4d44dcf420ee35b4ce2
MD5 3d86a8627dceade24f3dd9179870fa65
SHA1 3639608fda2468aad07893b130000b2615c6696b
SHA512 caac47747e26241cf1d6b48f80710896f7578889dbfb8d2a67f278b63dcc9fdf49f47de403edf64b737665b0a1601ab3cd106ceff6df75213b1cc49af3744c5f
SSDEEP 192:GRKr4Wpv7YcNpAPRp27r9YHsb+WNniJsi529QgeQ2F5yVyIsnAUge:GRKrppNNUX0WwwT29cFMe
TLSH
T12F32962EAE50753F9CDAD21AFA617B53E7F5102131942E80EAFC897C25D79CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 9d1c7ca62806f79b61c4169b9f88a543613edb46ecc0e472162e94d4cba82662
MD5 132b147722e42083919c8593964ecc6b
SHA1 791d3d46b94e0590138090657899493a2e41add0
SHA512 9819ea2b5a55d1380b6f675a2c68d481dfc8a95a68d2ff6a7590dad7ce1175c58ff89b1b97571cd3784e0a6451a651ab1c0918d9a56027ab18f7b6f15195c601
SSDEEP 192:eRi4K6zn7KxkXqK4I40pUZNCgVLHrKHfFKslHpjXzKD/ML+ErUkKNLZScX3QRHJt:QijUn7KxkXqKf/pUZNCgVLH2HfgslJjx
TLSH
T17432D727998DAA3F4FECD549CC136F4BBDB5025277680D2452FB9D0403A97CA124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 82f93607c427fc156381a705d236c10cad58cb0459fefae1c2832a4aafd6c72b
MD5 f7cc607dc7bb925d1b9005a3f725cd23
SHA1 54a609459be1a9d37c0a862a476c637810bbf4d9
SHA512 a63fe5cf027ad095bf577191b4e55a3f051a6273cd6ebdbc5803e79893d50e2ac10bde58be91c03058478e1596950dc3816c9ee24d3f864c654a14933778c527
TLSH
T1AEB01245804E2791C84042703949208835906E3B8401070AC6D197C9D9530F12120111
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 bcd766e77e53911deac7ed317a5e14733f6fedc5b459e2aab5cacd2664cd1a74
MD5 ea3155301a8fba97a300f9a60ef48fa4
SHA1 f4cb91b8145597169b855d6c206599cb88d7fb18
SHA512 1c8a6f51e941bb22c2a30d79d920254c081e01ff68fc4d6f127ed747626f33c2b414225c41d3c647642931ba2c5900e4979834e058ce709f602c961f29dfd2ed
SSDEEP 3072:kIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzt:APtbmf1K49XLWbEPi4NTKlLzt
TLSH
T14FD312613E01BCB8E9EEDB21A1901A15EAB8D94B953D7BE61CDE3F4C05A36D9C304C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 bf1e5da0e2cabc4799d780b77df2e7709134112073b3925e58c2e728360e60f6
MD5 d75d4af81e09ecc2dd609bb95ee50de2
SHA1 5d971208540305a77a616b80924609ea01ce03ec
SHA512 45603b31b408654caad2d8084fbbceec10b7e3fcf80d4f1967e036a3381e0d3de435c6f45a55a6d85f03c233ced8c748b66252b91d4c1f2c1cf3da0ce68e075a
SSDEEP 3072:XIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzt:fPtbmf1K49XLWbEPi4NTKlLzt
TLSH
T137D312613E01BCB8A9EEDB31A1901A16EAB4D94B957E7BE51CDE3F4805E36D9C304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 0fd397c9ae27e03f5561867f569c5e52ea7440d4e29dea2fbd2f5f5d902b4d3a
MD5 8a5b777ff8c7f6f5e7408c6a7c63ee64
SHA1 dae1bac41b03b732c6d357cc0f160924226f63f0
SHA512 a41b21e9e0895cda7b187e46c1f0c9b7f6a79fde50b182abe0cc65e503bb307987fc17cb634ebd223d6b151011cd50269bc6294a5e9015f47f7a077abd750ed4
SSDEEP 3072:AIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzt:cPtbmf1K49XLWbEPi4NTKlLzt
TLSH
T1CBD312613E01BCB8A9EEDB21A1901A16EAB4D94B957E7BE51CDE3F4805E36D9C304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 95070b20b681bdeec72448957edac6d3b9608e652a9c984d859c32e852f84b39
MD5 c9f32c633bb7fad3133331c1736bf9a2
SHA1 58fe8d29b3b783897f836a23fdffaa8bc505fafd
SHA512 fbd8de29f8060ea7a9879782627d747f66fa51abb997c514e9107037f1dc8d0188cc9f8f95171a5e82531b0516815c6c0a7aac3c91b693d720d4ba6b2dacebcf
SSDEEP 3072:3IvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzt:/Ptbmf1K49XLWbEPi4NTKlLzt
TLSH
T1E8D312613E01BCB8A9EEDB21A1901A16EAB4D94B957E7BE51CDE3F4805E36D9C304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 002f6f46c4ff9d4e40ea34f384b7fc8e264e8fea61d7a39b4a9192905421bc0b
MD5 997feecff568c22d41f2c4feebb0201f
SHA1 3849cf4a1f54dcc7013a05d9cae899ace0f51ee3
SHA512 321f12ab9772be5102479c96b7783a002cc71dfb79d1b15337e7a4e4b7ea6d25877a4fe7dec87687779a5152c44cbb781d46eda49c16556908ad547dc5c7c282
SSDEEP 3072:rIIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzt:rkPtbmf1K49XLWbEPi4NTKlLzt
TLSH
T1FCD312613D05BCB8A9EEEB21A1501E15EAF8D84B953D7BE51CDE3F8805A36D9C304C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download