hxxp://monte-shop[.]de

Analysis

user interaction
yes
max time kernel
600s
max time network
593s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/04/2026, 04:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://monte-shop.de
Sample260419-ffae5acw7m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
444	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134210477368738556"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
4876	chrome.exe
4876	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 3512 wrote to memory of 2308	3512	chrome.exe	86
PID 3512 wrote to memory of 384	3512	chrome.exe	87
PID 3512 wrote to memory of 384	3512	chrome.exe	87
PID 3512 wrote to memory of 444	3512	chrome.exe	88
PID 3512 wrote to memory of 3968	3512	chrome.exe	90
PID 3512 wrote to memory of 3968	3512	chrome.exe	90
PID 3512 wrote to memory of 3160	3512	chrome.exe	91
PID 3512 wrote to memory of 3160	3512	chrome.exe	91
PID 3512 wrote to memory of 5244	3512	chrome.exe	92
PID 3512 wrote to memory of 5244	3512	chrome.exe	92
PID 3512 wrote to memory of 2520	3512	chrome.exe	93
PID 3512 wrote to memory of 2520	3512	chrome.exe	93
PID 3512 wrote to memory of 4052	3512	chrome.exe	94
PID 3512 wrote to memory of 4052	3512	chrome.exe	94
PID 3512 wrote to memory of 5620	3512	chrome.exe	96
PID 3512 wrote to memory of 5268	3512	chrome.exe	100
PID 3512 wrote to memory of 3116	3512	chrome.exe	101
PID 3512 wrote to memory of 2896	3512	chrome.exe	102
PID 3512 wrote to memory of 4876	3512	chrome.exe	110
PID 3512 wrote to memory of 2620	3512	chrome.exe	111
PID 3512 wrote to memory of 2620	3512	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://monte-shop.de
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc1b2bc728,0x7ffc1b2bc734,0x7ffc1b2bc740
  2⤵
  PID:2308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,5618171388250182155,17619921508017006798,262144 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1620,i,17034289777060821543,10417856483736643904,524288 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,11787656801122590866,9261051870970018811,524288 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3068,i,2624196372338509242,7988314287713049641,2097152 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3084,i,5680126105983748989,9724675222100088304,2097152 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4320,i,9018734761990772018,3738618836392359287,2097152 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,7544019108322336444,14766785557012444716,2097152 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,11162296082963934287,11038707895841920689,524288 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:5620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,9255337434011923861,5536732104587193109,524288 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3212 /prefetch:8
  2⤵
  PID:5268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,8833366879620248738,15303799910117457480,524288 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:3116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5804,i,10740169186072893928,1352405998792110787,524288 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:2896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4364,i,6142046367820611697,15739572774844706590,262144 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4272,i,10798041124155543058,16045782231868537681,524288 --field-trial-handle=2012,i,6725861311422744242,9865515132785095188,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3188 /prefetch:8
  2⤵
  PID:2620

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4416

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0eab9c07ae24f5fdf14f04df7bac5c4fd4227cebba5626f8c5c5bf5512377c43
MD5 0692afa7660a3e5964c4426ecccd55db
SHA1 e3edcd7ea071cd1adab5a944d558afeab096f68f
SHA512 8de0a174c18c7fff131b445b1e13ca795a7a4b1819a0b929715017c09e3b6bd1ac24cfb32b46d29ea34189df4d4c1f35b78261600cfc0ec6e2e7edb510ef90a5
TLSH
T1D6E02B9AC921EC3715FD1B6970940645E74543462B84495F7E3D920C8FB463B06C681C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 c2cf2266b13b1a6efa059e965c3d629fd1e1873b59fbfba47a485889a8555502
MD5 c91fc124cc0d3a7e28ea10a533942003
SHA1 d6417ceab101d634534a4bd0004b88ff24edbb23
SHA512 da96836064f7e287472357f8c523681150fa83bc4f48a15eec4b5b0aad4f8b6d5f5adc7e9f0dc6920385a8f3c6720c0c140ef69e057c114ef6537942d71a482a
TLSH
T13AC08CA0D580D000EB98103908F1000C32E83CAC8013144A20D0802C94907E1A0920C3
MD5 SHA1 SHA512 TLSH

Submit Download

54f2f5a8-89cb-426c-86e3-6b21ea69017d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\54f2f5a8-89cb-426c-86e3-6b21ea69017d.tmp
Size 2KB
SHA256 44910e549e966b2e7430b4cd35523eb6cfad6a66801d885b91197139e2286c83
MD5 be91beb4cc0ddbe7cbf12521ad84e1c5
SHA1 752ab6518221cf98b03eeac8f9c955ce1c29edb1
SHA512 4e4fcdde1a997a5daea9eb7919acc8aec7ff745ee35ef0fe093ce52ccccf60cffe01d8376fffa5f0f3d43038ce3ba2a24088e4750d994b97786cdf4f91c54543
TLSH
T14151BDF793E4897E861196E4DA247E2FCE6D0924031C3C62C9D4AE1B93F2972D20178F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3448b1acff742ecace8efe2a7ff1120faacf876a8a8018ccbef90968534a76c9
MD5 a73bd01b34a70febb608e003e9269b98
SHA1 ccfedbefbb2e1521074905b1cc37b3569cb4bece
SHA512 c01106882f956213f061b6a392f593771667fbcb9a512fae50b2d132d12ab90f59d196672d5089af0c9ca2ed6c58a37f2c39d8371983d83ea4e234c9003135bf
TLSH
T13E51ADF793E4897E861196E4EA157E2FCE6D0924031C7C62C9D4AE1B93F2972D20178F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d93890057dd17a059cdb6a509f2a26f01d74b8ad530c4790089f718fa7ed8073
MD5 9fc6620993c2a37631a5135e41157c70
SHA1 3fbdbd3ec463638941abd5a01246f81b1477e80d
SHA512 bd2928e3ab18df8ef60c2ab95a98f68a20e7c8b3b5400462e62643157537eebb2ad8556dbb0a93c416b582ea16aa5696bc0114856858363990b609a8d9f40493
TLSH
T1F451CEF793A4857E861196F4EA156E2FCE6D0924031C3C62C8D4AE1B93F2972D20078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a292e2b2d2f555087ec5671d9dbd5728f02c0e7fb9433ae4a0a6ea44feb6a6ed
MD5 cf99254196182decc0efd6c9af61f31e
SHA1 cf400d0b4509ebb06bad78c9dee922dfbefa7513
SHA512 433d944a5e4894a0eb9130b96270a87f58cc5b5f16ebdd0ee282c7d2bea508cad0f150cfdc56e1c129149076b9bf6105225a26f01ce1a0d659ad1aea4e4ba5d0
SSDEEP 192:VORk9PCd9kLyv7tYpfPRpjh0T9CHsb+WNnK4REt2Ez22EkwzaSFzVyIsnAUgE:VORk9jehYpXVa4wN22O2rTamVE
TLSH
T11952F82EB914383B9CCAD22AFD617757E7F9102121C82E94EBFC8A2C15D75CE221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d4be5b16f5b3a0eb21f56a0e0fcf6c94f240cd9aa974a2db0438936f23a92bac
MD5 ad890a0d3a485ea6d3af0af6d5af40cd
SHA1 ff32a843ff12ccc8dcc24c03100fe9a4e0faece1
SHA512 5639a4c23a438de2e5bd98b44147d94aeee2a30c49efadb05b1733d9eca98cbcd2ff725819b266cff18b12bfbc278cc216e17bad71b6ceb2205a33164deff7d0
SSDEEP 192:VORk91Cd9kLXv7tYpAPRp2h0T9CHsb+WNnK4REt2Gz22EkwzaSDzVyIsnAUge:VORk91/hYUXea4wN22I2rTamVe
TLSH
T12642D72EA914393B9CCAC22AFD617757E7F9002121C82E94EBFC8A2C15D75CD222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bee14abe1fa62544631992dedb336ad029361ce0f17a9e90d1c71146e9cd257a
MD5 b29baf9cf03857b5195feb7df95bf587
SHA1 472db5ca8d6086b66377e0c0c7ccd23b8ee29a49
SHA512 ee750f3133356e66ac0ec7b8059cb1078b5a56a2ffc6ab9ee3d787ae4d9beee0f8f88540557fd2fab516e2edc244a67e8b25f8dbe7590bf4facb7429e75a1327
SSDEEP 192:VORk91Cd9kLyv7tYpAPRp2h0T9CHsb+WNnK4REt2uz22EkwzaSbzVyIsnAUgE:VORk91ehYUXea4wN22Q2rTaiVE
TLSH
T16F42E82EA914393B9CCAD22AFD617757E7F9102121C82E94EBFCCA2C15D75CD222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 e3e85507733b74e650902d1645f4c8e2a47131f5f4d003efbf580d80d51d1e18
MD5 d25832a19ff9c1c57c95ef5ecf3d457d
SHA1 30d5ae73ddd9dfab1127bd841aef79ad540016fb
SHA512 680876039281bd13201af5a0d12b9eed3257e3547eb60a743076a4ef44ddf64d39464fedf9d363ec15f80fae0d8dd3610e3a09d4d4a9512ce92d01878e2ab95f
SSDEEP 384:S0jWV7KxkXqKf/pUZNCgVLH2Hfgslvy7pLuLcifcdXODW1+ErU3IQHGtHkr0:SYWV7KxkXqKf/pUZNCgVLH2Hfgshy7pd
TLSH
T15372D8676C4C99370F94C6CCDC167E4FADB6024B65DD886893FA582A03D5ACF120A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2a86122cd9d4ae9466fe2ca9fae6adfae8960ff1b207cba0138911b9cd23739e
MD5 10e996ce214ba95943b804c1cf33b7fc
SHA1 ec8a082180093f22693c1988c0c2093d79606f69
SHA512 9db62cb3d04ff5dc04c7d776852583cb64605052b60cfaa56cf56fcbfc6e6a990de7a4f521c542023f03461717cc330badc00f7013a9ffc74b795c62244f405a
TLSH
T1D7B012108002D741D04702B11582188C36549F28D749130553F07A72DC371A14014150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5868c7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5868c7.TMP
Size 96B
SHA256 134bf80c7768982d5358d69a75aca097b5e27cdab087e3f4606a3878369dc402
MD5 2c7b24b622ff41328537178165d8ef56
SHA1 d924d2ccaf55e982620eafaa1fda1a02b366b568
SHA512 0c2ec971b2e71b9c1e4deea6da6b672d3cc7554fb8a6059d0065bd0425a1ac9fb51165f16aa121d8cbb00a30e2eb538e3cdb7e3a54c187b183898f4b9344e86f
TLSH
T135B00266C102E352C19623F5299695DC7160DF29C643161A93E41B66DC27BB245251A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 8168a5f6cc831cef6518ab63a137f20c6c97e69f7422394e89b20a5d8f363316
MD5 b91e7c418d1f2e25a38432ae72ec9e0b
SHA1 13555ce02f34fcefc152a05890dd34faa142d87e
SHA512 773d73882fe8e809b3a7f0ef8db5b066d7cb0c17c33909e431fb92ff5f3ce078724340b7fffee72edc9870e97b512d6c6609225467de4f4f2aa38b14c8bbea25
SSDEEP 1536:zaEcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:WE3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1A59302BA8E1A09F799BE5691769D3809CE23130D70AF698C716C534D21D41CD2B73F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 cdc08bbfe9051f973668aaa04403548644ae57ba79ec7f5662e4a36f6d2a9d9f
MD5 f09ce7bac2088558a464538192a2823d
SHA1 880db7fd600f86782e310612993f65c2a8029040
SHA512 9259e7621fc7f51ad07fee56d61b3ec0f6bd72bcf97f4e796566cdd30365115d4b6d5c8139bcf8c0563252c73ef162d37100e678b95918089649740803c22331
SSDEEP 1536:7aEcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:eE3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1209312BA8E1A09F799BE9692769D3809CE23130D70AF698C716C534D21D41C92B73F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 dce3cee146b7a29adebe0b31395547b5c5fdf8e43d634383c6ad3d174d2a2a95
MD5 c7012c725921be9432e5b5c4282f6ee7
SHA1 d0bf448061ec26eaaf73ace3ac8d920e58a83eb3
SHA512 d07be43633384f8308478c492f514725bcb875ef494e1a4073363e3c8c9cd32a0bd29aac896664aeae669b2a913620d532192ea59c17724075af5ac246a60134
SSDEEP 1536:7NcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3x:B3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1069312BA9E1A49F765BE469176AD7809CE23130D309FA9CC726C538D21D41CD2B63F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 bdf60ef6c70966a6a16a35f9ad23c5eeb47106156832b05cdb0294e8314a6d4d
MD5 55b51465f8805ac7b14080247f06c1de
SHA1 6bbc335bdcc7e9ddf5eb355e49f4e585db6d8e80
SHA512 63e7717d0632138d7732b4ffc504af32fea274f848c00102ba4d4eea7277c04e138813f23409a56b5c17cab9d1bcbfe224a68560e694585308bf437459dd40ec
SSDEEP 1536:wNcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3x:o3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1A19312BA9E1A49F765BE469176AD7809CE23130D309FA9CC726C538D21D41C92B73F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 7653c5114c554c567a14f1c3734f58cb63b90e44fbfd4f8fb76e1f1b6e5fb646
MD5 8af3797b8864b214dea1084581da2002
SHA1 fcb913b2e34a791baeff4ab3b2508d964131bd85
SHA512 e9f0077a04fb53f1c0fc2a7fa8c729a107e01a1c121a59bb748aee68b439aadb9c65363ea0992f81d313f61ff271b5322057b8478a764f0a6fe77383642efe6b
SSDEEP 1536:0NpcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:Ip3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1489312BA4E1A46E7997E46C176AD7808CE13130D70AFA9CC316C639D61941C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1660-99-0x0000022D99860000-0x0000022D9990C000-memory.dmp

Download

memory/4416-13-0x0000018D7A360000-0x0000018D7A48A000-memory.dmp

Download