hxxps://github[.]com/Da2dalus/The-MALWARE-Repo

Analysis

max time kernel
307s
max time network
294s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 13:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/Da2dalus/The-MALWARE-Repo

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133533411111469210"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2828415587-3732861812-1919322417-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2272	chrome.exe
2272	chrome.exe
3604	chrome.exe
3604	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
2272	chrome.exe
2272	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 1696	2272	chrome.exe	85
PID 2272 wrote to memory of 1696	2272	chrome.exe	85
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 2020	2272	chrome.exe	87
PID 2272 wrote to memory of 4380	2272	chrome.exe	89
PID 2272 wrote to memory of 4380	2272	chrome.exe	89
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88
PID 2272 wrote to memory of 1400	2272	chrome.exe	88

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Da2dalus/The-MALWARE-Repo
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ff849269758,0x7ff849269768,0x7ff849269778
  2⤵
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1752 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:2
  2⤵
  PID:2020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2228 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:8
  2⤵
  PID:1400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3116 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3140 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4848 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5028 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:8
  2⤵
  PID:2492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:8
  2⤵
  PID:1308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4688 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5080 --field-trial-handle=1900,i,9384764683754020297,8314992139520664606,131072 /prefetch:8
  2⤵
  PID:3332

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3356

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1592

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
9e12699114457cfc6829dd2418d221b5

SHA1
73c20d6608c170590b00fde0e48bd5b3c3145d8b

SHA256
45ccb5929d1e287a65ccdea0e9f3c3780b81ff2b76bc8b77186d643f8e57f5df

SHA512
70d4a09a3e0f1d83dc69107808f01dd39743ad2bf3d7966772d758cef2d35be3aab791e6ed6468f3b97a144e89ab5cc93c85b029ca4463e7aa66fbf8a46b456d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
e26a2b022f2261b8148b11c6bead8aa8

SHA1
72517ac3d83d2a82ce402433db7c8e02554d5e75

SHA256
e42a15e4e497c94310d9a3ea0623054f986da2436ffd299fff0742319fa23aaa

SHA512
5a268f41cf81082776344097262d2938ddd1196f98bc5fa481982986c140803f7b2e0dd42b98415b66bc1d3a3e9684c62918602f05ab8844cda63e01ddb5a9e7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
d5f84dd5963048bc5a33103b98867217

SHA1
e38e94aa1251508a3f8e33660bbced6ad3de90ea

SHA256
72de8239bb87868f75e25215a3df925d08b34495b4ba640347e45506f065babc

SHA512
1725520d8007b55579c4ba09f1be09f7d5839b8959b13cba6de5fecb098847c1c33169e17f112208a185d5ba27908816f5b6b54ca6d969b69fcf01bea1f8a3ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
e9652ab1c6c26ea5991211b74cbd8c8e

SHA1
96fad6761bba18f5541cf3287973b1872375de45

SHA256
cf7ccdc87761fe2157bddc8fd9a43bbbc10464eae8c7b15ad66ff41b975ff2a5

SHA512
2fc58f27099be2d1c787fbf5e373ae8bf9a49df1023227fc5b7108c468fd24ea2ee1eca78617c1b2bdb99fe9c8bbcc680b578101944a2e8bfa4f64e845ec6a1e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
38d1d14ff0f7d84f180093071faf0c53

SHA1
c413955f585bff7dd1236a395ae84786efbd777f

SHA256
1fd13c67d92667ab4f0448916d1df4791e37e7a439b51df73a753526de90126c

SHA512
5aff54c42da559f672fb59198d46a2e9daa443728e85a4e7d8a65270bee8f48b20d27781efa825d2cd8357bc822a9cd599588300da7718c9c654ac021be7c57c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
9f3412c240fbb93e9b52c5523fccd651

SHA1
995a8106851f1f2026c20215d6621ceab89bee7f

SHA256
ae03cd97900e16f833ab7ac5ef664837fb57d84194ec2540b0d48c865ef88e4e

SHA512
b0a0eb124c51ab8fe12f50f322be5ab7739d875e964047bd3da211aa88282e3730445ca5032611645b4ecc89d2be1e79d669bed7b8ad89e6b5a01f6500625ab2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
240569e7c68cab25babbc1e7b0d1d325

SHA1
632bfa53c3fc65ad8cd0733e3e2ad314099e4c9a

SHA256
e8ed908e3214197b0255d1780861bcd89adc472f19555eeb427045737d1c1314

SHA512
759e32791bc70ca9ea5862c172705bd46cd2ccb69f2913da6d21f93614de3ed6c0acc367e111b86d173d378840204fe0c68fdbcc0837a1e2f51ed1ca99198835

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d8d0174b93d64f321c39676f7beb4ba3

SHA1
108dab5b50c4088740f4d3218fa861bae77c58a4

SHA256
f406e824ca75ec5989825f2485425df85b9cb346cff2b425fcd4caff034cd162

SHA512
73a920734a535d107563951a37eab21b23c7693a26e8a15ee8a15c9e8d425c7d126ae55ac97cec7d68917c48a7731fb4fb032afbe7f88ad773999230c455d761

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
23f53ee62733eb24060276af0f595d41

SHA1
0dd136ced50c6bd44b47f108b590d44ecb3725a7

SHA256
27098df441b69217431be353c51a9473088e9951612d4f9c02239b9e04569e71

SHA512
f3026ecf3400c7daa32b3448740c137d414d346778bb33e1efff5774657dc5118ad9366333ea98268a6c51a511d3e699c5881b70564191b5a51aa65c0a1fafad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
130KB

MD5
77c9677ad2c4ce05af25ac1ed5948ef3

SHA1
63a9f29983238fff8c2c88f0342a8df7f79e0746

SHA256
05475531e6c805a3d0e6f0b8c9e5e5268d5aca64203e77eb68903a9846e82a0a

SHA512
01c3325aa52ac5dc2dcc91aaf25bf9769fcb9ce5101a16324ac6e60ddcdb92d1ecf461b91ee8707153d706aad21a037a305a23318f18bc85a026a8a179719cd7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
103KB

MD5
dd007d5eb3f3737b8cb62294df6a973b

SHA1
e94b6af9b720ff2747b108b9eca524df2fee4163

SHA256
7ba0317d65556e16431a99df510af20c37e0f0e6a37d547f26d5a10ab261cdc7

SHA512
a944e5c86da2c8da6de2553e9873d78cb048ce7cee62043f97be442779ade9ec82fefb3d0503e6af53b66732082f82e3ef67691f689a813c4ec1626b72f1aa0d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58580e.TMP

Filesize
97KB

MD5
d82c56b2a64d3568ae3ca27481fee0e8

SHA1
efeedd60ed9944d4ad45652ff3c375601979d67f

SHA256
24ca1172a8a6ed3952f0b3ba2641d8f062c4dc0b3c184019a61b298c95c8afe0

SHA512
60d97b5306a78e308ce7d7b52a239c6c22a085a98f46efcca8f8745ef5b629a035d79dad93c29cb72b8f33ecfb380003e87cadb7ce49933443ccc26efe2debde

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\bd48abdf-4d3f-4f26-9305-8fccc39e6412.tmp

Filesize
106KB

MD5
1b24e197bc1eb33b7367e88f7a60ba2f

SHA1
4d891c9f720f941c3c8518f2ef5b75ec6fb0fdbc

SHA256
5190f4eb22c1399c10e5aaf7866dabeb109fce7ce068bdbc6bd6fe8045b77dc5

SHA512
7b3a112941201dbe5b42c672756cc35170354d37787f0d3abe4dfec10911cac53c45a76bdc56f5b68a455d1a3d7c46b5ca42140871dfe68c19c29e23f1fdb0c5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\Downloads\The-MALWARE-Repo-master.zip

Filesize
10.9MB

MD5
56a1fce44c291657b6239e5e41fa9b6e

SHA1
ff4ffc43b333ec98c7ca6c40de861249b4478063

SHA256
b9fcd3d7554e8c7c7586344ebc51dad2189bb13c7979880ce19481230612ab68

SHA512
13b07e9e423d6e26d834f72aa579d188b5fa1cb1220df152bb70ab212562eb0c0c2e5c4010d6d60167b194eb86a61908b6e83a1974057af5d38b5ccbcea7d077

Download Submit