hxxps://www[.]mediafire[.]com/file_premium/j0c9twno04emf9j/FL26[.]rar/file

Analysis

max time kernel
300s
max time network
304s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/09/2026, 23:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file_premium/j0c9twno04emf9j/FL26.rar/file
Sample260930-24dcks1w2k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3272	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1494457106-2582563566-1599095290-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1494457106-2582563566-1599095290-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1494457106-2582563566-1599095290-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1494457106-2582563566-1599095290-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
1144	chrome.exe
1144	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe
Token: SeShutdownPrivilege	2104	chrome.exe
Token: SeCreatePagefilePrivilege	2104	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe
2104	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 456	2104	chrome.exe	80
PID 2104 wrote to memory of 4092	2104	chrome.exe	81
PID 2104 wrote to memory of 4092	2104	chrome.exe	81
PID 2104 wrote to memory of 3272	2104	chrome.exe	82
PID 2104 wrote to memory of 4448	2104	chrome.exe	83
PID 2104 wrote to memory of 4448	2104	chrome.exe	83
PID 2104 wrote to memory of 4256	2104	chrome.exe	84
PID 2104 wrote to memory of 640	2104	chrome.exe	85
PID 2104 wrote to memory of 4256	2104	chrome.exe	84
PID 2104 wrote to memory of 640	2104	chrome.exe	85
PID 2104 wrote to memory of 2536	2104	chrome.exe	86
PID 2104 wrote to memory of 2536	2104	chrome.exe	86
PID 2104 wrote to memory of 1692	2104	chrome.exe	89
PID 2104 wrote to memory of 1692	2104	chrome.exe	89
PID 2104 wrote to memory of 232	2104	chrome.exe	90
PID 2104 wrote to memory of 232	2104	chrome.exe	90
PID 2104 wrote to memory of 4868	2104	chrome.exe	91
PID 2104 wrote to memory of 4868	2104	chrome.exe	91
PID 2104 wrote to memory of 4228	2104	chrome.exe	92
PID 2104 wrote to memory of 4396	2104	chrome.exe	94
PID 2104 wrote to memory of 3416	2104	chrome.exe	95
PID 2104 wrote to memory of 3112	2104	chrome.exe	96
PID 2104 wrote to memory of 1144	2104	chrome.exe	97
PID 2104 wrote to memory of 932	2104	chrome.exe	98
PID 2104 wrote to memory of 932	2104	chrome.exe	98

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file_premium/j0c9twno04emf9j/FL26.rar/file
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff822a8c728,0x7ff822a8c734,0x7ff822a8c740
  2⤵
  PID:456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,18283066312093376180,18252009944045166761,262144 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1816 /prefetch:2
  2⤵
  PID:4092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2196,i,17755320193042338950,13203857971101147946,524288 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1456 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2336,i,12621655954951621326,12309245231474900526,524288 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2496 /prefetch:13
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3204,i,3857281522538717742,8539590724620974559,2097152 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3172,i,3974901974316151896,16933739239709454688,2097152 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4376,i,3434975974349333434,9469065311478337329,2097152 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4388 /prefetch:9
  2⤵
  PID:2536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,7282578939385999464,3865624888274736584,2097152 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4904,i,13512143125590755790,3250494956518601046,2097152 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5104,i,117635428238678240,13942543359373958935,2097152 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,14701090249277316949,3538486764268573215,524288 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5816 /prefetch:14
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,653277233781222454,14758928973439373963,524288 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4892 /prefetch:14
  2⤵
  PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4828,i,6934432159489326241,18265362959663430715,524288 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4760 /prefetch:14
  2⤵
  PID:3416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5868,i,2921530642635457982,71857066037638559,524288 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:3112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4360,i,16426691973313418758,10526153213329244832,262144 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4364 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4840,i,1366985963344199486,13335971711592144071,524288 --field-trial-handle=1820,i,10761976945174896626,4212108386169263711,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:932

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3820

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 df2a2607f96ee3ff9ee39bd0c24e11cd6bc84c904aff219ca0ab163e135d5592
MD5 fc73190f9e154956119251a7dd9b2e0b
SHA1 7c2289b80cc04dfd6e04dd82f8d3a83159c39e88
SHA512 958753cefdeebead87e029f404b49d0f7edb78b6a33330af50193fb9288b88678ddfc3a33ab8649da2a4a3bf7bd9263662b4ed7cb21bbe81c75934271565c365
TLSH
T176F02DB9DD61ED3B08FC4B5864640B0AE75513172740C59F3B3D950C8FB563B469585C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 816B
SHA256 8da749f8f15e59f2d89f04735c62388f56e64e8b566ab9eaeeab3e6d14fdbb42
MD5 112e9c272b1c9020be77b11537aac62a
SHA1 6f14373550ce8db50a0a0acc9f6dc57d87ffe602
SHA512 7bd46e677e120518042567314953c7671e546ea7d19bb250dd985e695576c675422cfb2e78fd6a6987b88ad4c2ba7eb831c33a2139c5f844af346d57cc399f2d
TLSH
T17401FF6090E320A1CB88257368FB080DB279E78950D31EBB43645773BCBEFA00561E13
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 46e48045e7413b967375d3ab7e431acbff669b772fae84e837c67d625d043f2b
MD5 2e32bab1ebd79ceaf61a0fc65df9a53f
SHA1 cc417f236847737a71f9699792f63dcada2ae5fb
SHA512 28a1dc57cb099c7fbeb4591b057025f363a591086119066f0f60f5d9adb14613eef08efcef68a6b414a646437bf270fc72a92bc83c4f6ebd5629e70efe2c2626
SSDEEP 192:DLHTdP3AwNeRhNp4G/eLsHddLyKYFZL4VbhSYPrY+LAV7eVTNPZorzMFJkzfOmb7:DLHTdP3AwNeRvp4G/eLsHddLyKYFZL4a
TLSH
T115329BF383E5C56E890157F89A10AE1BCF1D1A59432C3C1688D5EE8BE3E2472D169A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 23afa1d1fa7ccd84e6fe41cbf6e2e93c6167f968a17868d482be66eda5e7a3cd
MD5 9d94015ea8e8a120ff9e642560b4cb91
SHA1 a0ca4478bbdb9a2602c7c8f678a8203455cd5880
SHA512 fe4dfafb4a0f4ebaf6f9e0e4f46c6179007c382ef4f1f8d5e3c0525a5bfb28854025eccbfed7c5f9c77072ab5a7d217e65ac1a3c10fd204036396b6b6d59faf0
SSDEEP 384:DLHTdP3AwNeRvp4dN/eLsHddLyKYFZL4VbhSYPrY+LAV7eVTNPZorzMFJkzfOmII:AQZsge
TLSH
T1E5429BF383E5C56E890157F89A10AE1BCF1D1A59432C3C1688D5EE8BE3E2432E16964F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0549c148f5804212b424c1399886a47845d0f5d53dac3ec2c59e91dcbbd7fa99
MD5 d854180a1944fe4e5797d1b35e1cdef3
SHA1 ad145f8448cc0a6c00871c1d148899ac602b23d9
SHA512 22851ad48776b043656967edb04e646f516a323e07c27d28147801fab172375fb3b11aa03c4a44e4280ed36a962972bec1245cce688b1c3f9e9b12e28397a2c4
SSDEEP 192:kRmA64Qtmv7BpAPRp2tr92Hsb+WNnvfox225p2pecd0VyIsnAUge:kRmAMSdUXGwwXj2f2Qe
TLSH
T13942B52EAD24787B5CDBC22AFD667753D7F5102220942E84EAFCC92C11EB6CC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 6b7cee8b1a5eb6f1d44c20ace754a545db0a1024ec3af9927adcfd7fb5491934
MD5 6ebf767a844f07086ae64536124c4a52
SHA1 dfdc2ed2621b56af7ab86ee74a08835c5544579a
SHA512 3d3a2843ec32079f785bc015a3dfab1b143f21902675eeccd9fb84c1a22147178feb9f7d146c1c8203d46344ff8432180128aefaab9fd51e9a50a3c74b2f5ee5
SSDEEP 384:Uijon7KxkXqKf/pUZNCgVLH2Hfgsl3i7pLuLceSijXODoL+ErU3pTHGsUXIoi0lA:Uion7KxkXqKf/pUZNCgVLH2HfgsFi7p9
TLSH
T1D1721A677C4C993B0F94C9CCDC2A7E4FADB5024B61E9886483FA5C2A03D5ADB11062F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8415f3aaeab965ce8c49029c5a6e13b8a3a0bd646b496338b65d93488abca1e9
MD5 d3445dd66a5085ad1d08af3d7022caad
SHA1 825c2735eb98ffddd935c22cb3cdb387903d38d0
SHA512 3fce2d6b6145bde45a858449faad65ba06293507aafc9377981d5723e8bdb03d81ebea356a5220294487c4f5f0149d46923c5a1e524d108ca5bf2b500132a5b5
TLSH
T15CB0124D84425341C41202F4116418CC3554EF10BF06138941F40D11D839590C01B456
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e7ea.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e7ea.TMP
Size 96B
SHA256 c8e9cb8431199da13a0ad6d4c9e96222ed14c3e142baa03d039a0b7e24e5b553
MD5 4547ee22bc5e5b553f0a42a8379e0ede
SHA1 85fa3c6763adb72c382d262b65422478660edc53
SHA512 d3cf04979b1e8d6075274ccf8512f64c0bf954f2095e19fa5af5ec588d824be9af7ee805d3ab6d5608df288bc8c54eb45a412c71afe154a47580fce915c77fea
TLSH
T1E2B02200C00322A2C00203B228A380CE3020CF38C223020282E00A22EC283208030C20
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 81d8dfd5d1626413b6b4d180e5e09e8ebb26864ad9a0e2b471bbbd0b39c1f5b8
MD5 ce23fca412fa65442556498aa6f0135b
SHA1 7df0c94181f95fb0092ffb77a3b4711726f4ed63
SHA512 39e8a12e56368dd2f786e47119337b155582c53cb48f7a598b04921c930cfbccc4db0074b1b7b85e2e9e88ecc3366036159065ab9e2b098f81f3935fa1535ecd
SSDEEP 3072:qSH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJja:qCt4fLJ0L6nGJxi3bzqapJja
TLSH
T15AD302F1D1E06C6ACBF7EE4145756E908EB1D5C689CDBE2409FD8D1806CEA344A13EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 c89ba64718b53deec4c9d708f62a23a4b58b4450ff849b3d61d9858f043e4e28
MD5 9a4e9a23de47a20c99e49c80b5e046eb
SHA1 9f245bf0cc579feee40fa4a03e054757a6268cd6
SHA512 7244573a4743639fa4ea0375cb9d6d52ea742937341cc07bb7dd8f7d2fd446b63869509f4e4cc04277e9ea33f70528876a10d170b10c67c71e7f0f0780d6ff9d
SSDEEP 3072:q/9H2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJja:q/Tt4fLJ0L6nGJxi3bzqapJja
TLSH
T1B8D302F1D1A06C6ACBF7EE8145756E908E71D5C649CDBE2408FD8C5806CEA784A13EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 7d709fc3449a3cd34df07dbc8f4688c09eafa77095f7e0dbe557b20a6d1dc2ab
MD5 e2c0cb180d276876080599f8e4640cf1
SHA1 7308159524519762896e6988566933b2e9295f3b
SHA512 e48f111f41ccc8a9566121141b1866585ffb449d519be744bc36cafcbd69b899af382817e60080e42e93575efce10086d6deafedd6fe86176b4abce510b34a07
SSDEEP 3072:R6H2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJja:R6t4fLJ0L6nGJxi3bzqapJja
TLSH
T1E9D302F1D1E06C7ACBB7EE4145755E908E71D5C689C9BE2409FD8C1816CEA344A13EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 4bb97d595b7c65027ba1368f5908f423e965cdaee3524e7161015090dd9e98ab
MD5 141a8fa9e06cc0691e0a4af13d4a7d4d
SHA1 b48fe7d0b839358757abe0a9f7ea0057d2d79b17
SHA512 df4d485d7ea5c42faa0b35675963034753b07d63c6a1a652e279077160f84526854508c3d2efc5c8a59ad49d6115a5a788392857a453582e49be883d78d29912
SSDEEP 3072:G/9H2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJja:G/Tt4fLJ0L6nGJxi3bzqapJja
TLSH
T1B8D302F1D1A06C6ACBF7EE4145756E908E71D5C689CDBE2408FD8C5806CEA784A13EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 a8102c50eac033cd554fd291438b08e6a433f71c6309d2d74c736edee52d646b
MD5 870472a02349b4ad45935b81624352c9
SHA1 ff6c95427e295037481f622cbf9f7d39f18ad9c2
SHA512 64071c04991684dfdd2413553688c1e35d5ad24a2691c69590959920e7a867f0bae8af892db491bf22b487f1a4ebea6b3c87e733856897efa7e87a4bb6a69797
SSDEEP 3072:RSH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJja:RCt4fLJ0L6nGJxi3bzqapJja
TLSH
T134D302F1D1E06C6ACBF7EE4145756E908EB1D5C689CDBE2409FD8D1806CEA344A13EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download