c503d7f324e34eaf5f9c46a09e81fdec4503e430ea9764f86d37961590605a05

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/04/2026, 17:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NinjaClient.exe
Size 2.6MB
Sample260420-vxcddacz8v
SHA256 c503d7f324e34eaf5f9c46a09e81fdec4503e430ea9764f86d37961590605a05
MD5 619e74eaade811d5c3242a3a260e9a2d
SHA1 2afc5ccc2a02848af6fa9d10eac3c33653c02d8a
SHA512 9b715811812a289be111bb16b3c7298e8faa3ee7f224e07aba14ba4ded6e95d111a1fe3a65ffecf242e227d74fa2c04e274b1d76765c5dca72c1bab45e96b10b
SSDEEP 24576:Jh0PPgi1FGvCqQZ1xNZICU0G2nmhbma4uzrvghGcrQg6I1lzMg/zyfu3fncf8t3E:i4gjYEzThD0XFAyLqXVwi/jn
TLSH
T1E1C55A31A08CAB5DF062B174DC87922793F17C4C2660CFA7A6E04DF75A5F998FBA5108
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4136	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134211793210828222"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1092	chrome.exe
1092	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe
Token: SeShutdownPrivilege	1748	chrome.exe
Token: SeCreatePagefilePrivilege	1748	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe
1748	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 1748 wrote to memory of 5344	1748	chrome.exe	93
PID 1748 wrote to memory of 4136	1748	chrome.exe	95
PID 1748 wrote to memory of 628	1748	chrome.exe	96
PID 1748 wrote to memory of 628	1748	chrome.exe	96
PID 1748 wrote to memory of 5756	1748	chrome.exe	97
PID 1748 wrote to memory of 5756	1748	chrome.exe	97
PID 1748 wrote to memory of 3052	1748	chrome.exe	98
PID 1748 wrote to memory of 5720	1748	chrome.exe	99
PID 1748 wrote to memory of 3052	1748	chrome.exe	98
PID 1748 wrote to memory of 5720	1748	chrome.exe	99
PID 1748 wrote to memory of 4476	1748	chrome.exe	100
PID 1748 wrote to memory of 4476	1748	chrome.exe	100
PID 1748 wrote to memory of 2044	1748	chrome.exe	102
PID 1748 wrote to memory of 2044	1748	chrome.exe	102
PID 1748 wrote to memory of 4928	1748	chrome.exe	103
PID 1748 wrote to memory of 332	1748	chrome.exe	114
PID 1748 wrote to memory of 332	1748	chrome.exe	114
PID 1748 wrote to memory of 4268	1748	chrome.exe	115
PID 1748 wrote to memory of 4268	1748	chrome.exe	115
PID 1748 wrote to memory of 4468	1748	chrome.exe	123
PID 1748 wrote to memory of 4736	1748	chrome.exe	124
PID 1748 wrote to memory of 4824	1748	chrome.exe	125
PID 1748 wrote to memory of 1092	1748	chrome.exe	127

C:\Users\Admin\AppData\Local\Temp\NinjaClient.exe
"C:\Users\Admin\AppData\Local\Temp\NinjaClient.exe"
1⤵
PID:4648

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf8,0x124,0x7ffe231fc728,0x7ffe231fc734,0x7ffe231fc740
  2⤵
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2028,i,15123135392852535963,15382012819413783962,524288 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1740,i,5164563489501606005,8987980738363673705,262144 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,9508689732799310533,16988111367370916382,524288 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,15511607166033011941,16898484836964966237,2097152 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,5972529414217410227,12747512914611235967,2097152 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4332,i,13467536211219698271,14769610765169075284,2097152 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,14617901334082904567,6907494657973139039,2097152 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5456,i,2299629188084155138,3814922839595263502,524288 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5972,i,14957631937496485886,3391331232618047487,2097152 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4872,i,1803704807540474887,15719432398417347114,2097152 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3504,i,16499342328694903044,3737027517766753803,524288 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3936 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3400,i,7999880079046686860,2563479122714440699,524288 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3280 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3240,i,9461322248110812779,10230785407761115274,524288 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4332,i,9281137024623452786,6005835895721195569,262144 --field-trial-handle=2236,i,12276209246845939619,1754381197139971146,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1092

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2936

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 241c54ac0ae8eea2ef5d03a264c24613e8aa57ffba47de9bba033fb05701a5e1
MD5 ccb9c032f4a932e7bd5507c31683fb06
SHA1 764ab3c1b19e7ed3b0a7eeab115027ea63651e94
SHA512 18e5751f839d19711f81d342369b0502bc7d052b7d5d8d0219fa537e837924d9f0e3fa643b754738c949ad7ef145d6425f97b881d9c10cb2f798abf82edd0684
TLSH
T13CE022ABCCE6FC2B08F91B296054170AEF11275B2B41590F7A3CA60C8FF163B56C691C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 29ff0ace664434fcdd70217c7ef93e5f5bf9fc5250310a21472990207db60f31
MD5 b4977752912f03b10bf9e52f41b87d90
SHA1 b36da33d1fa07792176beb85d5625874a93910b9
SHA512 bffb3e586163a8150ba3edb062abba474715f5d970eda56bd3047cc9f210d82d611e31d2278688320b274d28a654f8bdc070f9dbd4bff5adce1fdad1231dbbb9
TLSH
T104C08C04A1E0C000DF803774EAEA88F0223C95173DE67F3322D641AFC046397210F50C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 fe952455819cf94b77d73311653dd6fb15f0d2e654e5fe0fabb6c781d3c7c06a
MD5 d04d0c6dfd7db2b1081dd9061e085822
SHA1 a364ec73cb99596c353b55833c2e0a8fe390f911
SHA512 b18b5ea67def9ab122131114fdd77a713b88a63a6076ad16f38ae93969548e75a6b1dae2f78639eb6ded4f935e1fd1205719a633388f04feb2fea7badeaf88f4
SSDEEP 96:DXcv2PaaIS6xd1VMNdpdd6LVBKdLxFjDjhIj:DXcv2PaaIS6dVMNdpdd6LVBKdLxFjDjE
TLSH
T133B1BEF3C3E8866DC91151F4AB102E1BDE690915632C3C56C9E4AF0F53F28B2E261B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0d8740b0832beb40f2852e0a224b040d4d3b5685dbedecd8734d4aa6988e0f02
MD5 de7e50f29e364dfeab31cc45ba9b7409
SHA1 1b70c296cae8d5a140d3b810405be72bb2ac5b25
SHA512 907021b852914e231acc56d672d0abf98a9cc78b8ff70f02883b5a9859bbc954bcf23b6bfd204c3cc68e4b261e03688fa0531573e02c9588927db2dea5fd6a87
SSDEEP 192:kRT/fxjhYQ5bv7jahAPRp2At9mHsb+WNnp2ZBx82kmdMunVyIsnAUgtaJ:kRT/Hpa8XbIwsW27XB8
TLSH
T15642D82EA914697B4CD7D229F9657B17DBF5202170901F88EBFC8A2C15D76CD222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2d45eab70753e97c00a9518d5eadb81abf453cee72d9c73c5ff244f399d7baae
MD5 a62a192d1b17d1e033c4298f5350444f
SHA1 d5e6bf12888cf8ef99c6e9095119032112912862
SHA512 d7c42d9a7a5cf5674f99d9f4a5fce8dbcecae2590c3db54dddcd8ee01612fa685d5a19948dd054a88c6507609455a31f0885a6a7797bd37788eddfc5968f1c49
SSDEEP 192:kRT/fxjhYvbv7jahAPRp2At9mHsb+WNnp2ZBx82kmdMunVyIsnAUgtaJ:kRT/HOa8XbIwsW27XB8
TLSH
T16442D82EA914697B4CD7D229F9657B17DBF5202170901F88EAFC8A2C15D76CD322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 efff9909b0644c686eb2c53454efeaf18747c4017b1a532f5389cc3d46193f1e
MD5 49c79438371ada7fc0f77f84594c72ed
SHA1 77d5aeea4c406df511ee20bea7dd7591d8d9f144
SHA512 9ca50bdf909574a5b48e2439d423f9cfe7fd0328a3783d3b4b6f2a43d442103d45fc2031067cdd5d21513f5876e5632bb831590ba754e50f009139e2509ec258
SSDEEP 192:kRT/7xjhY/bv7jahAPRp2At9mHsb+WNnp2ZBx82KmdMUnVyIsnAUgraJ:kRT/r+a8XbIwsW2tpBe
TLSH
T17C52E82EA914693B5CD7D229F9667B17DBF5202160801F88EAFC8F2C15E76CD321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 552c0b9ed39a5f81ecdb6bf6bb7f840de407a8b38851f9743fc0d30d020fb703
MD5 136fad0b7498f14217df3ae2d462c72b
SHA1 2497846797b8c4d4c06969384f14f649671e03bf
SHA512 733e74cde92cb38044fed25c16fd4b7f2ebd154d742eb031079e645da79494ab3ddeabdfde1c58995ac219461723251a1c8d370255211f63ff5a69e3c57ff85a
SSDEEP 192:kRT/fxjhY/bv7jahAPRp2At9mHsb+WNnp2ZBx82KmdMUnVyIsnAUgraJ:kRT/H+a8XbIwsW2tpBe
TLSH
T1B352D82EA914697B5CD7D229F9627B17DBF5202160801F88EBFC8E2C15EB6CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 56a1e8c00cba78461b814b7af7b99a3de58a4329a7a44475b23e4150677716ca
MD5 6932e737f9fb5bb798f741f34796b7e1
SHA1 58bd5e6597f4a5801de9e176eca39fb244cddab8
SHA512 6e0d027f757f85c0e73419b5d0cc63c8778e317595fc91efbb163ddebee9c4ad7ab8467ebddc43b66b02293c61347fd81b0b3e241e6794b5bc99b05d775c9885
SSDEEP 384:y4jGR7KxkXqKf/pUZNCgVLH2Hfgslyi7pLuLcifIpXODGJ+ErU3DcHG8akl78fPY:yMGR7KxkXqKf/pUZNCgVLH2Hfgswi7pz
TLSH
T1FC720AA76C4C997B0F94CACCC8177F4FADB5015B65E9886493FB582603D8BCB11091EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 569266569752e10b27a5076affd63d739c1e974b0f7ed4a85a65fbd58a19610d
MD5 f78177cc1372897cc72a57f30c07bc70
SHA1 6eea3536277181c324ee6808d865a54901dda9bf
SHA512 259a5a2534f0d99c3631981ef19959a4f75554ede10c351101bb8a626266334ebad5dd0177dd487a12136989d7fa0edb3ef6042500d4cc57bb78b09be04eeec5
TLSH
T159B0126080019541C54302F521C306CC39389F108705330253E469B298361904114190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589b41.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589b41.TMP
Size 96B
SHA256 1c516eccfe08fad36cdc96d904a605b51106f66d1dd5f0aaf41da440ad4d0585
MD5 bb6820529d883769db003bcd31cebbce
SHA1 73313e3972de92a72b34884480705b3abdb5fdca
SHA512 30bf4c9c33b4b4ff9998596a0cbe3fcbd89af8fca3295efad6a17ede5f8e38a92efd81739420c80ac8ab8f77915564146f16709b6289eaeab9469230a7f9f18d
TLSH
T1FDB02200C002E202C00B03F03CA080CA3020FF28C203020BC3F00BA2CC20AB00230EA0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 af1fd0957d9be0b7acbcdf54b9f56cb8d758401cbca5f773b83cd7ddd8dea9f9
MD5 3a9ce817fff5be673b369d1a660d5044
SHA1 e393de3cdc53605ca4e98526a39549d78880c792
SHA512 a51d5e0ebc04bf613f9885fdddbceae609ad2209de94b0b1088d483700cbb902f49bc914233f40130e783ae05583392a821556671ea2225fcae9f8076b2fc42e
SSDEEP 6144:0/rLTjXbqJ6rgEKv7NRkrOk0HOGm/SFyEEM:0//KM3KpKrOjuGdF2M
TLSH
T1031413FB8E2A355214ED1108225A381DCF32731A319EB5DCB11CAB6C95892CE3FC2D93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 5878db051d50c6a4cf9078eb2c678bd93f427d8012a9a78576ca401d467f9762
MD5 f3908c1135667fd8ed4a13ffd82630c7
SHA1 3d5f11854b0aed4e37ca43db68492e798b1464fb
SHA512 382ded050c8138c483d4c765a1be571afaa31b7fc6359f9bfb06536553fc4a501e9a56602ae312ad8689319ac85e236cebef6e8f9621103a0aaf95f4a01f8304
SSDEEP 1536:0cCUcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9Yj:0I3Qw/xLANk0mUW5GmRntSFCjEENW
TLSH
T1869302BA9E2646EB957E468176AE780CCE13134D709FA9CC315C639C21D42C92B72F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 1669911f4bd7d95cbe3ff34783acdcf72c799b2c761792d78fb1d753ee82135c
MD5 b5ed15c6bd3e2753d03de28a788cc3b5
SHA1 e4f3754579a33fe9e32b0ac6d84c67d2b9e47260
SHA512 be5c7a2c92f89199c37e4d31efdeb4401104bfa51c579eb5f17e340c2b89e5d85f5785e0441f20329cf0dcc38b6758675701f6445194ef1292ebb0ed62c60236
SSDEEP 6144:0WLTjXbqJ6rgEKv7NRkrOk0HOGm/SFyEEM:0Y/KM3KpKrOjuGdF2M
TLSH
T1E81412A78E2A355214AD1104329A7D1DDF322319319E76EC721CEB6D86852CE3FD2E53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 bdad28e41174c82c6e19dbbff5241e7194e4d353c7446c3ab97a6b5980ee7e5e
MD5 219ea38187529ebd7fa5562aebc91a11
SHA1 e5056d77afb4aaf062eaf0866026e80edcad2056
SHA512 35c40dbc8b5371c76b63907bc921f9936b1d438a16fab4cd2e89b61d2e6c5cff38196303b036ffd424b69705ec8c1444df2c0fd1a3d308786bec223051432215
SSDEEP 6144:0bLTjXbqJ6rgEKv7NRkrOk0HOGm/SFyEEM:0H/KM3KpKrOjuGdF2M
TLSH
T10E1412A78E2A355214AD1104329A7C1DDF322319319E76EC721CEB6D86892CE3FC2E53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download