hxxp://vj[.]tools | Triage™

Analysis

max time kernel
1800s
max time network
1797s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/09/2026, 21:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://vj.tools
Sample260930-1rl9aabb87

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5604	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
5160	chrome.exe
5160	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
684	Process not Found
684	Process not Found
684	Process not Found
684	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe
Token: SeShutdownPrivilege	972	chrome.exe
Token: SeCreatePagefilePrivilege	972	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe
972	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 972 wrote to memory of 4640	972	chrome.exe	80
PID 972 wrote to memory of 5604	972	chrome.exe	81
PID 972 wrote to memory of 1204	972	chrome.exe	82
PID 972 wrote to memory of 1204	972	chrome.exe	82
PID 972 wrote to memory of 3624	972	chrome.exe	83
PID 972 wrote to memory of 3624	972	chrome.exe	83
PID 972 wrote to memory of 4948	972	chrome.exe	85
PID 972 wrote to memory of 4948	972	chrome.exe	85
PID 972 wrote to memory of 3420	972	chrome.exe	86
PID 972 wrote to memory of 3420	972	chrome.exe	86
PID 972 wrote to memory of 4404	972	chrome.exe	88
PID 972 wrote to memory of 4404	972	chrome.exe	88
PID 972 wrote to memory of 3948	972	chrome.exe	89
PID 972 wrote to memory of 3948	972	chrome.exe	89
PID 972 wrote to memory of 3740	972	chrome.exe	90
PID 972 wrote to memory of 3740	972	chrome.exe	90
PID 972 wrote to memory of 1152	972	chrome.exe	91
PID 972 wrote to memory of 1152	972	chrome.exe	91
PID 972 wrote to memory of 4648	972	chrome.exe	92
PID 972 wrote to memory of 4988	972	chrome.exe	94
PID 972 wrote to memory of 1180	972	chrome.exe	95
PID 972 wrote to memory of 5648	972	chrome.exe	96
PID 972 wrote to memory of 5160	972	chrome.exe	97
PID 972 wrote to memory of 1264	972	chrome.exe	98
PID 972 wrote to memory of 1264	972	chrome.exe	98

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://vj.tools
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffeccc4c728,0x7ffeccc4c734,0x7ffeccc4c740
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,3129949354438385513,8265376771456675005,524288 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2072 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1628,i,7407039357214732159,14511045470204835582,262144 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2032 /prefetch:2
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2272,i,7866993524617723804,14794527376550201160,524288 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2596 /prefetch:13
  2⤵
  PID:3624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,1249855386865771438,14652949723462446268,2097152 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3168,i,3497074482307829778,9381708897483197998,2097152 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4456,i,2323101678325202446,9532252369268563991,2097152 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4476 /prefetch:9
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,1598765480358067860,9461829931145382247,2097152 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3600,i,18188092343888909565,8304826300667546104,2097152 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3168,i,4317286012363574344,14670803140066692047,2097152 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5596,i,3614617731251502914,13943790586852731129,524288 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,7291344633627569977,17582925317956701968,524288 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5620,i,5803082467482407407,14047195247110274849,524288 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:1180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6096,i,17417192944928038548,14481043669605849511,524288 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6004,i,9318065768263371085,11879651993816369152,262144 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4476 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1496,i,2212974327166734142,6691497375823622944,524288 --field-trial-handle=2028,i,730415547280904368,16871248123856879279,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4564 /prefetch:14
  2⤵
  PID:1264

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4768

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 19b75ffecfd4ff676db1e68e53f0a0ad4a98b166523d289d1cf8b868b95b7b3c
MD5 47426a875ca83aaaa4ed4f5549afcf1f
SHA1 47316b42343a7eae50cc086f3f876d4a3a2b93f6
SHA512 b953823bc806838c4eff2c8e8ef13d9a1bfd01b406adf674a16a6013ce1ed3f17512264539bb6fc7a67210e961de5eab0288a4c35f7a4415200d4d23b86df571
TLSH
T1E6F02DA9DC21AC7B18FC0B2864A54B4AE755136B2680895F3B3D510C4FB163B868581C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 55b99eb027901aba9962cf52b0187233bd63be41d16058ff618040b7afbf77ca
MD5 86183c253d151887e0b382fbab0fb6d9
SHA1 1faa828d427b0325cee086ec74de46754a532bdb
SHA512 a0cc696c150ac22883820ee0febdb775751978c22702519698233bd76067441f102d6f6c1256add27a9bec8204d420bd8cad467e60464c1a3f17ac09f4ba2033
TLSH
T1ADB011202088008BE220B23AE8A0002832200F888202822BB2EA0A8AEE022B20380082
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 55a6f4443bea005660b65bd190deb318e54fb96a6fdfdfdff8359208da77c05a
MD5 5b99e1ab9e3039a0e4b4d1cc8a40c714
SHA1 21538c18188777611b7906790a88287072d4c1ce
SHA512 836cf77d8a073e40ef91f0be1c95ebe6bf7caf985e87d6bd7c7cbeb67c33e4d719dde69ecef0c895ebe65603add85b3e4a0d0fdaed71cdc80676fd10d416aab5
TLSH
T13C819EF3C3E8866D880156F4EB196E1BCE6A0918532C3C66C9D5EF1F53E18B1E250A4E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 e562ef645de6ad45634c0d5aad50dd7a6ac227456d049e35a282117e887467d7
MD5 704d6b17fd5a99ce6871e12161e17667
SHA1 4da822e304643410010513dcbe2b6739b088e644
SHA512 4991770d034250d6f757d835193f90e8435b0f8e2392569f285836d2ed0ec733022acee64cc73c55b6d5402ddc85babf499d928177901a5420ec719139ae89eb
TLSH
T1B471AFF3C3E8866D890196F4EB196F1BCE6A0918432C3C6689D5EF1F53E15B1E25064E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 83bf35f864903c548b6805acd1c364e2b05cd5c14339b30d6e63989ac0a79375
MD5 b8156f8aca3a46eb4b557f3a9eba56f3
SHA1 bb30fae9c01ecd27834f2274ae31200bb4106313
SHA512 e773db81f3311fec7bab38c7c64944a5685b82a21075d779473d1733780e113eacac3bd91eddcf307e24fa7ae6ee8a8bbb8be7f55e3f43f0f3d60c4d84b9e676
SSDEEP 48:YALlCDiCDuCsSVhS+NswRsIXLsg1foKsIfslos4KsJhgmzsJX4sjCTsJCCNsSCA5:DP1Yb7r1PAotijWoKLK
TLSH
T1A981ADF3C3E8866D881156F4EB196E2ACE6E0A18532C3C16C9D9EF4F53F18B1D25064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 912a84e0296a9aea20cf6408d07a0a3a5467a3a570eeefabeadb73f8e2fbe0ce
MD5 2b0be118b5b4a96fde208473e2033c87
SHA1 387a41ece033b684a05012c900f660e2dce00e61
SHA512 9dfaa618fe5d9f13f1d663ad03d4658c3af442bd13170878576b16ee084549f55478b0bac5fc54a12c3e0e217d1050c2e6b169694bf5c8315657c2aff25d058f
TLSH
T19D81BFF3C3E8866D890156F4EB196F1BCE6A0918432C3C66C9D5EF1F53E18B1E25064E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 6851c097189ceb15828d37e0dc605227d7ef93b5569dfd8468d6d9f205172564
MD5 7e9ceaab7071dc54c0f2ee6839704c08
SHA1 747011b1bf2f6eb79740092b6b6d4c713d0b424b
SHA512 dcc8b1b70d4ce5142319a171b0747989c30ee1a2a5135f246821ebc3757574c3c09f3115c68a2ef784511297f68ae3bcc0d82000d6c3cfccd3c0ec3e1d58b7bc
TLSH
T16F014C67F7BDB427507B456B1E08F80A6BF5A831016168F4CE5A426CB0998F30A26413
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c5cfd1e4f15d5637289c9a71d87f313835d817c0d2def1f7a8f30e2219825c18
MD5 2e0633540a93852b40311f28aec709df
SHA1 aa10ca34c79fafda4fdd89c76badacdf82c10506
SHA512 3d73e166d0ba34685cda02dfb721669678403e158e67c79d3fabb3730b114d86d4466d7441b28eae62d5bd0ecefa22f8906c8357c3ae573471cc9a96419a0ba1
SSDEEP 192:qRpgg6Q/jjRA9pT9L8nkMaZv79fGpAPRp2Q19+Hsb+WNnoVE2ZW2sFeu2EXVyIsR:qRpHcnNGUX1owSEN2U2ie
TLSH
T17942C62DBD50787B5CEBC21AFA617B6BD7F5102224942E84EAFC8E2C21D75CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1b4a9f7ed717460a513ff7c3f4b613006d5e0000433d889f0324b8581adc6a00
MD5 809d8d1690eef960d2239d32b1259989
SHA1 bf6182508485545076eb48b2c801bbfa96a34f95
SHA512 8d46b1c6cc3e605932723815f2691bd443d0e71bb9f01f2140708c99abf83546b4627efdf74240ef55f90b6fc6340c6ab6335f5597c8a5ff430555500376063f
SSDEEP 192:qRpggfQ/jjRA9pT9L8nkMaZv79fGpKPRpMQ19+Hsb+WNnoVE2ZW2IFeu2E0VyIsv:qRpHDnNGmXjowSEN2Y2RE
TLSH
T14852D72DBD50787B5CEBD21AF9617B67E7F1102224902E48EAFC8E2C11E76CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 52faa1c0a2c145f24cb6bf0e4a48b0237ba969495c82d742d374c6759b4dc290
MD5 10219fe671f251c5a102a95887dac447
SHA1 7f90b76134fd16f85ae158bfb5c71425e83ed0ae
SHA512 caee2e22a50a8965d0fb94b1a22f1071e58b061efd33cb3d9eeb5e5a6d58e48d84366477559486942f9c5103a8a77cad8186aef0b09c97ec8427f2be08e3f9cc
SSDEEP 384:SEjml7KxkXqKf/pUZNCgVLH2HfgsluN7pLuLceSMtXODml+ErU3I6HGCX2v41q:SIml7KxkXqKf/pUZNCgVLH2HfgsAN7pe
TLSH
T18A720A677C4C9E7B4FA4CA8DD8277E4FACB5024B55D9886442FA5C2603D4ACF11062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b526507fb29a7c91f86c2d3d12d6217dc3c8bfbe214f17b84180cbfcc33a0e49
MD5 a3f49782ec7683493c778e9de5bfa4a8
SHA1 8f41ce804ea336a9e43c7c73155813ec366501b0
SHA512 4c9f19c3f0c8195b744eaf20d2711fc9943a992366196c953d6997345ebbbf4dcb82bcb4a5d20bc6198a6aba0292d9ed875fba4724abaa2002ee0b7ef7a6e2db
TLSH
T116B0128580415701C08202B01560548831D8DF25F60D134351F40D55DC35161C05B0E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589006.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589006.TMP
Size 96B
SHA256 f3bc8843a1434bf4a1afed86335374588498e89eafc12b2865b2cc6eba8a353a
MD5 ef9a23ebe87ff2d4a46a536a4af1304e
SHA1 f587ea00ab37c474127fbfbfc0df95e3a241e202
SHA512 30a2d33e9e157434596cf6171287219155e6c71a49dee8081f3dbf17f3c0603f4df4e804d5992896979e92b40f77386e0976e7dae9bdfa48c1bff25d43c3b0b5
TLSH
T19FB02202C0022222E80303B020AC8AECB028CF32CA030222E2F02B32EC22232022A020
MD5 SHA1 SHA512 TLSH

Submit Download

.usage

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\FileSystem\t\.usage
Size 24B
SHA256 fac0a85e4f5907c8036b0052214b777ddbacea9420e5903526272dc76bd4c7b6
MD5 e1edf83f1dbe0a1640e5800ef2f44b90
SHA1 58e8f31a1282e84a05c6960d6ab461d6ccef42cc
SHA512 151b19bcb34d72c304d02f2830f577036c5d2156499cb998643a87a3010544e5a4c236f8458786ea4b3416aaa4fd1ea96fc3bfe1ab0c5baebeac29e5427ca417
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\FileSystem\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 68a891e0532edc9da3d2b8ce5ce4fc5e34693156243802fe981e49fe0e2c8f4e
MD5 9c0a525d78138b16cbb03efaf9ca7a9b
SHA1 3845346117ae7daf3fb8f54b15540cb464e2f626
SHA512 e7c939550376e7db86c839d02715e07991c0669df24077a09eeede355d3aadbf122dd0b43680d8a4e452f0aea9d26c43d90f6fbf3ffe0b753439f68f011fe755
SSDEEP 3072:JZ5T8ThDUxx0Rghaj57THH/53w/7qclnYe/JYNfobTOLXE:JZiThDxWhaj5mjie/JYFobx
TLSH
T148D31223ACFE01FB15BCC50880793F0086F985B39640FF679AD86A4F51C7EA4A35A155
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 b0bf5882f0f2a91bb6a56fa2048178b01a6e28b908f69d8f71d2675262e63d61
MD5 929f9fe882747fce31d52e5287a1abb8
SHA1 2cf439eb1e0b1cfda821479e45988324ce637824
SHA512 c0dd2c8d87f9ac3cfd2b1abd5c7b5cdbdcf814936c152182703f291c87b1b24d84abd6a8c69e6332d1df69e0efeb2a3d32dfb65a860b0d8d2669d506f7e906ee
SSDEEP 3072:0SDT8ThDUxx0Rghaj57THH/53w/7qclnYe/JYNfobTOLXE:0S0ThDxWhaj5mjie/JYFobx
TLSH
T1E2D312239CEE05FB15BCC50840793F0086F985B39640FF679AEC6A4F51C7EA8A367166
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 bd13d51e2a04502d8a5ae08fd2f84e023c6efaa2ba0284d1d2d10a4ef68de34b
MD5 6abda7060654237db3a7c975033bc81e
SHA1 8a197002f194f804c9a60c3efa7bd5cddcae42d4
SHA512 802d1b9e90720dac6bbb3ba12092938e2a181fa9a8897a306ad65dd2b087304dbb32383472fff97cb3855b260366b1fd31f1fdfc99725cbd169bb20b99f12879
SSDEEP 3072:0Z5T8ThDUxx0Rghaj57THH/53w/7qclnYe/JYNfobTOLXE:0ZiThDxWhaj5mjie/JYFobx
TLSH
T134D31223ACFE01FB15BCC60890793F0086F985B39640FF679AE86A4F51C7EA4A35A155
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 997a00b6c5204269292ee743bf7a0bf2f732143bd8873721e42df90a0015fef0
MD5 182d6aa26ea009294a9486464c9e9023
SHA1 902ab6d097123f13d082b781c58a37b980fbd4da
SHA512 888fdb18328680cb01ef5a58b6e10222d0160ea42c7e910549341173713be77b19cc4beefd5971b2fe9903cfc40d16874ee150ad0c32ec61c5e0b99e9aa22399
SSDEEP 3072:JhT8ThDUxx0Rghaj57THH/53w/7qclnYe/JYNfobTOLXE:J6ThDxWhaj5mjie/JYFobx
TLSH
T114D31223ACEE01FB14BCC508907D3F0086F985B39640FFA79ADC6A4F61D7EA4A366155
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 1ab5f80e17d2dbf69895ec7732be8cf6a3d1d3f6a150183945dd61718ec8d4ba
MD5 62ce4764d46cf72e3fd32c8410ab3cb1
SHA1 4da3a8a9cfebd02d8d5388a14a7083c9034a45b1
SHA512 b21107947e24b263f21fb71323329e0fba17c880a16016c20f2f3c6137499819d7b634fbc2ab557d4832e7bb3ce073e93019655206f8dd3eee1bc953cbe02d4e
SSDEEP 3072:ISDT8ThDUxx0Rghaj57THH/53w/7qclnYe/JYNfobTOLXE:IS0ThDxWhaj5mjie/JYFobx
TLSH
T1FCD312239CEE05FB15BCC50840793F0086F985B39640FF679AEC6A4F51C7EA89367166
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download