fd458d0f934c6d4db143aa58005646982ec0ff152d96685e4da3d17049a41e6b

Analysis

max time kernel
149s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/10/2026, 15:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ms-playwright/chromium-1179/chrome-win/chrome_proxy.exe
Size 1.4MB
Sample261022-sqrtdaaf49
SHA256 fd458d0f934c6d4db143aa58005646982ec0ff152d96685e4da3d17049a41e6b
MD5 c1c4a5ab3003a604cbadf555cf72185e
SHA1 b58516283413c7f5b75165415959d7a8e147cb01
SHA512 e070a0638e87de72286a175801347b2e4002adb21035720101478693746f0496c7ee4541f3c0cf84c7f413e17ef81e071d381cb32376dbec41228ef48c181426
SSDEEP 24576:CFElycFW+ydqAwxSWH6PRPR6hAHhRif9rLhQnqi7OnjljMkO7:nycFW+yQCPRRRifdhzi7sBc
TLSH
T169657C13F29900E8D05AD1B9C7568632EAA2BC460B24B6EF0790B7161F7BFE45B3D711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5544	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-3910894222-1156923469-2570249732-2980936814-616164974-3148484596-1729987795\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-3910894222-1156923469-2570249732-2980936814-616164974-3148484596-1729987795\Moniker = "cr.sb.net145B0066ADBAB77D3DA66BC1D6346E9EB6A1D44A"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-3910894222-1156923469-2570249732-2980936814-616164974-3148484596-1729987795\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-3910894222-1156923469-2570249732-2980936814-616164974-3148484596-1729987795	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2236	chrome.exe
2236	chrome.exe
1184	chrome.exe
1184	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2236	chrome.exe
2236	chrome.exe
2236	chrome.exe
2236	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe
Token: SeShutdownPrivilege	2236	chrome.exe
Token: SeCreatePagefilePrivilege	2236	chrome.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2236	chrome.exe
2236	chrome.exe
2236	chrome.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 5308 wrote to memory of 2236	5308	chrome_proxy.exe	87
PID 2236 wrote to memory of 5816	2236	chrome.exe	88
PID 5816 wrote to memory of 5836	5816	chrome.exe	89
PID 2236 wrote to memory of 3108	2236	chrome.exe	90
PID 2236 wrote to memory of 3108	2236	chrome.exe	90
PID 2236 wrote to memory of 2404	2236	chrome.exe	92
PID 2236 wrote to memory of 2404	2236	chrome.exe	92
PID 2236 wrote to memory of 2760	2236	chrome.exe	93
PID 2236 wrote to memory of 2760	2236	chrome.exe	93
PID 2236 wrote to memory of 5372	2236	chrome.exe	94
PID 2236 wrote to memory of 5372	2236	chrome.exe	94
PID 2236 wrote to memory of 5544	2236	chrome.exe	95
PID 2236 wrote to memory of 628	2236	chrome.exe	97
PID 2236 wrote to memory of 628	2236	chrome.exe	97
PID 2236 wrote to memory of 3548	2236	chrome.exe	100
PID 2236 wrote to memory of 3548	2236	chrome.exe	100
PID 2236 wrote to memory of 688	2236	chrome.exe	101
PID 2236 wrote to memory of 1184	2236	chrome.exe	109

C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome_proxy.exe
"C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome_proxy.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5308
- C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
  "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe"
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2236
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Chromium\User Data" /prefetch:4 --monitor-self --monitor-self-argument=--type=crashpad-handler "--monitor-self-argument=--user-data-dir=C:\Users\Admin\AppData\Local\Chromium\User Data" --monitor-self-argument=/prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Chromium\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=Chromium --annotation=ver=138.0.7204.23 --initial-client-data=0xf4,0xf8,0xfc,0xd0,0x100,0x7fff05b3beb8,0x7fff05b3bec4,0x7fff05b3bed0
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5816
  - - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
      C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Chromium\User Data" /prefetch:4 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Chromium\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=Chromium --annotation=ver=138.0.7204.23 --initial-client-data=0x138,0x13c,0x140,0x114,0x144,0x7ff6fd019750,0x7ff6fd01975c,0x7ff6fd019768
      4⤵
      PID:5836
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAQAEAAAAAAAAAAAAAAAAAADAAAMAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --metrics-shmem-handle=1664,i,9270126918389919582,10751111182425777568,262144 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:2
    3⤵
    PID:3108
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,10735280544632107406,4224447655294870849,524288 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
    3⤵
    PID:2404
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=renderer --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2952,i,7367776200673109997,9075994694877022567,2097152 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:1
    3⤵
    PID:2760
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=renderer --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2956,i,1585623773129046450,7901750555957817847,2097152 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=3124 /prefetch:1
    3⤵
    PID:5372
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=1896,i,5857288561377866023,15155888087979021287,524288 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5544
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=renderer --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4344,i,3873745528940523294,15834866978368343483,2097152 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:1
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=renderer --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4820,i,16348639610004321676,9848237671391719924,2097152 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1
    3⤵
    PID:3548
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,4036333739265190155,7815994116990335761,524288 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\ms-playwright\chromium-1179\chrome-win\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=UAAAAAAAAADoAQAEAAAAAAAAAAAAAAAAAADAAAAAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=disabled --metrics-shmem-handle=5828,i,10122258634087893534,5922087834370118884,262144 --field-trial-handle=2088,i,15356461933297048816,3144185077347603432,262144 --variations-seed-version --mojo-platform-channel-handle=1476 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1184

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8b9a95c0-f505-4769-9645-9d65be1fbe0d.tmp

Path C:\Users\Admin\AppData\Local\Chromium\User Data\8b9a95c0-f505-4769-9645-9d65be1fbe0d.tmp
Size 7KB
SHA256 c9f40ca33fa917324eb7f1866ece2928ab35397226b8219e7f2997e69a4fa8fd
MD5 50faab816293ac6e6e98bef1074dc730
SHA1 da1e8c7751ceec3cea28e66e3c69ce12537175d1
SHA512 6affe60ccce73277f94243f2ea2692db9ea0675aeec5cfcb8ab89199c9e763988c21598b9bd7f5223caad98d06393778737bf22115d1575d93b28a729423705a
SSDEEP 96:zqboe2bJHfnLbqAoALswF/R2otop5duRDmB6JG+cvxUqwsjqBtNJNgRhJ4PZ+rMj:zqsftIqR2U2dK2d+FRyq+nnRhr7w
TLSH
T1D6F185BAE662CE67E8EB979553027F87EAA0226951D04ADC9CD5CD4C00CB5EC3206C1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9cab8dcb-7266-4609-9d69-dba4815f5559.tmp

Path C:\Users\Admin\AppData\Local\Chromium\User Data\9cab8dcb-7266-4609-9d69-dba4815f5559.tmp
Size 3KB
SHA256 610b11f7b0fb73e9e00f2f79c13e0d0612d21719778c081361570fa70a87c0eb
MD5 1a2e7bbe5e563ed4a9d595044473b3d0
SHA1 c3aaf1c7c529fb8e338cc574d4bd7a95a2924573
SHA512 2551241aee59bb5c2fe8b3255b038921b525e2a57384b5c309da28cf080c81efb83ffa0927ac5d4abcc2f42baae1a975048a0076278f9d1cfb6ca1d719ee4ad5
TLSH
T1D971A462A454DCB359BBD695B6033E13CBB5916AE1206FA4D9ED4B0C02E75EC1343E0B
MD5 SHA1 SHA512 TLSH

Submit Download

7b81452a-8fd7-4146-94bf-e415e9730191.tmp

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\7b81452a-8fd7-4146-94bf-e415e9730191.tmp
Size 11KB
SHA256 b15ed8453fea20bdf8757a8b4f9c58cfbe85b8860b1d8a58b06399f768b0764e
MD5 59395bd4f30aa3a10beed753a7747b5d
SHA1 c2c44a6f6c391eee7aec251c0fa3cbcbfd84a142
SHA512 f836ed89c42cd9352b6086ca82a2587445df137d6209c110d2a54f7dc14f443d004ae416b8d97fe16d5d2248170cb1c8d67605ed2f0766ed782fad967652c8d4
SSDEEP 192:ivdSVXSnFEa8PRppx9wHgb+WNag02e8XyIsnA6glP:ivoC8X/mc22TlP
TLSH
T11232831BA914B87BACDED618EAA27B53E7F1102274942F44E6FDCA3C15DB6DC2117803
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98430882-36f7-402e-b224-f411b362595e.tmp

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\98430882-36f7-402e-b224-f411b362595e.tmp
Size 193KB
SHA256 98f40e77964d95e7b15982878f8dd24958adbc59af92af2886e89787d9b325f2
MD5 02a95635987838ed4ed0bbd39ee53985
SHA1 4fde94b9414efaa342c73642e4d801ef9a792630
SHA512 7412c88d2c9b0657a15b4a52ffc43e8bb1afdee3c19f2792bdcf5145b3752d13a67d226096eb2d17fbd3684f427748573e0f7a2bbea23ddf3848f061f94c0906
SSDEEP 1536:8y0PoLTDN7dptsNcJsfjzA4buZYRfvBYLCSEaphKsvb+uc/frbOkvM8U8LpDPk7P:8yvl7dpavYAmnEoMu36ZX43Uiuix
TLSH
T156145CA0BA7D2D01CE78CA309979111C6FE4BD05B891324A67CD3E13177F65CDAE6B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\Cache\Cache_Data\index-dir\temp-index
Size 192B
SHA256 41bdb23fa3e7540853558e02938b82539490c9aa48d83b3f768c2002ae98ae8e
MD5 b4e595da43983e8a0a76f65cfec73a00
SHA1 b0628d87153eb864bcee2aedbc71c669741bac2f
SHA512 23e7a3c38f856a02cf5fe064a728583ee0aa55c73ff6adf3b57679f69f6a2470c66787222716a4fbcff44cbba49328f50b96a8ce4665cedfb7dd7b92b417d1b2
TLSH
T1F4C08C3C243BC80AF79CBAB18F0353C22320DA61030C0282328040B0F790B04062F182
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\Cache\Cache_Data\index-dir\the-real-index
Size 72B
SHA256 1b11e98dd19a601659fd36bea59bd35d1f6d19c26cc17183a405477b02ed6ac6
MD5 0a69693c2079405ce1f00ca92676a138
SHA1 5636ca806ee5ebcea817729c4167dd206b6405cd
SHA512 9f1d87d06f3081f2290cfd7f8c186c01f3ff28efc40da8aa98810f7df42ca9dc9e52ae39c40e9df9c42ac1a4c7befbf4632e22727af5d03c0bc25eccdf943747
TLSH
T13FA0026976955054F504A671640107D6D74189262129172351E181B58EFD3C8550B084
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\DawnGraphiteCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\DawnGraphiteCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\DawnGraphiteCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

69a49402-f460-49e9-88f7-d457c6a73937.tmp

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\Network\69a49402-f460-49e9-88f7-d457c6a73937.tmp
Size 1KB
SHA256 065c9b5d1b3d25d1571b26fe4670d4f62c16869f86293785977758a482478560
MD5 83f19c83d0bcbea8a70ee57da6813ee8
SHA1 6eb1763f0dd27a184d78df458dd4c674d320b990
SHA512 6c03298e637d44f50f3c0aa61303d34b8ab76d1fe2baefa084ae86e6bf1cd8c1bdd8602f27df98b9238bec4a91f042bd9b75270ceb793425ad1435098f7624ac
TLSH
T17A318CB7C3D4D9BD891152F89B216F2BCE290A18531D3C12D9D4AE5B93E2872D21068F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

f19ef88f-58bd-4bf4-9da2-22754a4be8bb.tmp

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Default\f19ef88f-58bd-4bf4-9da2-22754a4be8bb.tmp
Size 11KB
SHA256 37dc7dad30de233a3b1f01213b299a3c0968477d5160b7a4938f2cc3cb5403ea
MD5 64900763f5f23bf14beee141b98d9886
SHA1 4706cff74e45cc8fdba10081ccfeae958862a812
SHA512 4f7a5f5da3ee2183d7aa102f0dedf41110ca710ae15e86decba1a4be4b737dd35e4e585104e6dbfcb6b0a1af6c9fbbddf30a130619eabc83ff0f11abb14becc2
SSDEEP 192:ivdSVXSnFEaoPRpjx9wHgb+WNag02VYXyIsnA6glP:ivoCMXlmc22ulP
TLSH
T1EF32721BA914B87BACDED618FAA27B53D6F1103274942F44E6FDC52C15DB6DC2117803
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Chromium\User Data\GrShaderCache\data_1
Size 8KB
SHA256 35bb2f189c643dcf52ecf037603d104035ecdc490bf059b7736e58ef7d821a09
MD5 259e7ed5fb3c6c90533b963da5b2fc1b
SHA1 df90eabda434ca50828abb039b4f80b7f051ec77
SHA512 9d401053ac21a73863b461b0361df1a17850f42fd5fc7a77763a124aa33f2e9493fad018c78cdff63ca10f6710e53255ce891ad6ec56ec77d770c4630f274933
SSDEEP 3:MsEllllkXl:/M/6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Chromium\User Data\Local State
Size 1KB
SHA256 eb667bd1e7eff9852c7cfb9990506ed168c74be9153fb5928f1cf8b7613e0dae
MD5 beeb37b77a767b8d524a5dadb1baa8d8
SHA1 616537e9cb1fc4a020db90bf2e8d17a38881bf16
SHA512 ba95fb9fcf29200c4cae4988f1d51620931f1554cb0204dcfe216783fd0b6ddf08d47ad7e2930f9870869c640773be2d741d058d351feff2a59ccd9095acc760
TLSH
T1F121B4F3A414AEB3AA9249E477477D631D31D176E2504E106ACE831802F76AC2313C3B
MD5 SHA1 SHA512 TLSH

Submit Download

4f02ad2a-4224-4274-a907-76a43582d623.tmp

Path C:\Users\Admin\AppData\Local\Chromium\User Data\extensions_crx_cache\4f02ad2a-4224-4274-a907-76a43582d623.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/1184-303-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-304-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-302-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-308-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-310-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-314-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-313-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-312-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-311-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/1184-309-0x00000238BBCF0000-0x00000238BBCF1000-memory.dmp

Download

memory/2760-16-0x00007FFF21180000-0x00007FFF21181000-memory.dmp

Download