hxxp://creativeshadesolutions[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
21/04/2026, 15:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://creativeshadesolutions.com
Sample260421-ssh91scs6v

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4464	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134212586080869655"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
6056	chrome.exe
6056	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe
Token: SeShutdownPrivilege	4580	chrome.exe
Token: SeCreatePagefilePrivilege	4580	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe
4580	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 4580 wrote to memory of 4600	4580	chrome.exe	82
PID 4580 wrote to memory of 3528	4580	chrome.exe	83
PID 4580 wrote to memory of 4464	4580	chrome.exe	84
PID 4580 wrote to memory of 3528	4580	chrome.exe	83
PID 4580 wrote to memory of 3880	4580	chrome.exe	85
PID 4580 wrote to memory of 3880	4580	chrome.exe	85
PID 4580 wrote to memory of 1412	4580	chrome.exe	86
PID 4580 wrote to memory of 3716	4580	chrome.exe	87
PID 4580 wrote to memory of 1412	4580	chrome.exe	86
PID 4580 wrote to memory of 3716	4580	chrome.exe	87
PID 4580 wrote to memory of 5572	4580	chrome.exe	89
PID 4580 wrote to memory of 5572	4580	chrome.exe	89
PID 4580 wrote to memory of 2328	4580	chrome.exe	90
PID 4580 wrote to memory of 2328	4580	chrome.exe	90
PID 4580 wrote to memory of 3624	4580	chrome.exe	91
PID 4580 wrote to memory of 4060	4580	chrome.exe	100
PID 4580 wrote to memory of 4060	4580	chrome.exe	100
PID 4580 wrote to memory of 5776	4580	chrome.exe	103
PID 4580 wrote to memory of 4608	4580	chrome.exe	104
PID 4580 wrote to memory of 3884	4580	chrome.exe	105
PID 4580 wrote to memory of 6056	4580	chrome.exe	106

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://creativeshadesolutions.com
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1fc,0x228,0x7ffc861fc728,0x7ffc861fc734,0x7ffc861fc740
  2⤵
  PID:4600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1796,i,1020683582664940992,2211773908637483563,262144 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:3528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2076,i,12471936222453885429,5696612598272590270,524288 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,14387109380106044853,689754692817784433,524288 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2368 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3084,i,11106613867212003750,14241318279970601063,2097152 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3132 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3108,i,11134764002515885452,9078666147542241674,2097152 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,13008692651481845602,5987657798780758795,2097152 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4424 /prefetch:2
  2⤵
  PID:5572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4412,i,13278823018428166487,3813191405115634095,2097152 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,8984658863042462955,17906402897140527360,524288 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:3624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5680,i,13821314568294781880,395785542810711599,2097152 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5816,i,6698684608983787430,7134800066241270357,524288 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:5776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5788,i,2486452388410088318,1576830185103254352,524288 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3372,i,6010667672452486488,588638846419586223,524288 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3176 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5632,i,8061170467543993286,6040884154735944703,262144 --field-trial-handle=1996,i,8825471515529626388,4942785912677816457,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6056

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4916

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 cad420adab5a6fd9448ee87a9f85c3365ee3078bdbafc1966e249d5b86854f7d
MD5 84d683a3bc1c3b43d1007d1e5158bee4
SHA1 297f08e6fe8a8544437ebb4eaa678d0d941557e4
SHA512 b68887d077e5b4916435c32a902e4d7dc2f37346c716dff04ed79a83575f22bad285121fb198485606d2aa36995b61fba74068ca808d0681d908b11a717c17f6
TLSH
T181E0E5AACE219C3B19FD472960554705DA5123872B40455B3B3DC20C8FB1A36064587C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00002d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
Size 167KB
SHA256 efcef4ab3f7c2ab1605af824b6522eed5b3a8f453edf29a45b9b0a3cb167d1f2
MD5 dde5020729ee52b1d5e8c4de7efb8ff0
SHA1 3d9f3e93c4581e34b486041adc2da3924764d4f1
SHA512 cf69ec05878860fab997c13d33b0febb903f5b540ce4132a2954cdd5620c4ca6244ae0dfb4294673c53e9e55e97c1b89577a3e70d8fd824daf20642d59e9821e
SSDEEP 3072:g3jPDUuFcddZ15GaeD6dYRR/teo4E3wOeTWx8DGvww3+2NXHDBMOfRUyhep/8ghQ:0Hueag6dK6BE3TSW+DGIw3+2xBxSJ8g2
TLSH
T1B8F312367C305081FD1AC6B6BF9C5A8DE2006AB11A5869347A8DC8ED43C96CD6E7D837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 6965cf77a2d964874cf281d9844cc5efc62e8e2b7c7ca36d605568d3ebce348d
MD5 ba96f575ebc2cf457ce3cfdc419a623e
SHA1 ac0cb92f94ec97bed2e8715a1978f60ddd85f905
SHA512 0ffdfdbe9d50583201960d6291cefb58300eff1844fd8f4ba00c4619445a098d58f2c19a55b8ae173b7cd574d95f404b6dd8b200fca3fbc0644d40145473e128
TLSH
T1FC21DC51AACCE3ACEFD5807D91A34B31AB6C975572A2C753D9C7806B66022C48001D47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 8bc96befb92680631fd350133563edc0fea594784973e792a87f59cd241d4f5c
MD5 14c9b80f80b3286c904a25d89132709a
SHA1 a683ef44a33d85dbf008da2f2542613a6a892b35
SHA512 ae41736cc68fd7ad5f690f9e0bdb30b6d119a2e6b0e1fbd5e31bbab043119b0f118b0740a6a862d56818c5b4f5ee5368e089f0e5bf53001d352988a3439aa738
SSDEEP 192:DRiJY1keHhD+ZaIaEgdtNHSVeIRS+25HikaG1ivs/ww:DRiJY1keHhD+ZaIaEgdtNHSVeIRS+25p
TLSH
T1EE02B0F7C3F4862DDA1269F0A6243F1ACF2A056497693C5689D49F4B67E1432F2806CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5c8b8d4435b1aaed17d482cf3fbee721da589112ae1d2463b2ef098d8bb940ff
MD5 02c61dab69fe875af3034a729863a716
SHA1 8d5de98f36d9eac1ec43b2f2fda7a5fd644607fc
SHA512 8bc72c87e0d34daf0236a5360049dd126b70260fffc06f04063e91f04ed86d964cb89ed472d15acedb05ce81d1d8ed85ae889247d83db6b573cc4e98290ba032
SSDEEP 192:rR++Wr/JPiSv7WgpAPRp26L9lHsb+WNn62UmyCNeN1Q2oY4e4dVyIsnAUgE:rR++GdlUXV3wH1DNeNq2oYOrE
TLSH
T12F42E72EAA10657B6CDBD229F9617B17E7F5102161901E84EFFCCA1C15EB9CD622302B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 526587dbb8f6ca6cd73df40aec4fba85d8263705555827ba104438bb8dde370d
MD5 6c7abf5b477aed92bb0777af188c2765
SHA1 736946bd6b1d63d14425f8a438ccc524f58f2104
SHA512 c6a8ed5d7d6056cc583c4e27a68b6baa6606975b55540d348d4e16397809604bd61ed969eb2d763c87bc3255fe9dd61cb84ceb0b1475624a5cafa464de7ffc0a
SSDEEP 192:rR++nNBJP2v7WgpAPRp26G9lHsb+WNn62UDY2GQ2oY4e4EVyIsnAUge:rR++NTClUXE3wHP272oYOAe
TLSH
T17F42E72EA914747B6CDBD22AF9657767E3F5102161901E84EFFCCA2C11EB9CD622301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 189265548246db8c5e9c2330d9d27d95af7edf6111d2821edd7d564b2d96f2e5
MD5 a4bdcc0a1d317d452bbd89517f804517
SHA1 8dfc1266a742ba832d94e9be25d89ef88180b870
SHA512 d8416deb3bba9d6b90b4edd305d5f49be39df6e34858b53bdfc314c5a7c63d506331b67b55dceb48ce837787ec7af397aec5bc885e4c41822021df1b85b05b7e
SSDEEP 192:rR++Wr/JP2v7WgpAPRp26L9lHsb+WNn62UmyCNeNQQ2oY4e4EVyIsnAUge:rR++GClUXV3wH1DNeNx2oYOAe
TLSH
T16E42E62EAA10657F5CDBD229F9617727E7F5102161942E84EFFCCA1C05EB9CD622302B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 25833e926f3ae85a7886772a5384d24cb60d4aef234de528b37de7159d82f3a9
MD5 87d4d01cb79df4117aeebd68fca03a0a
SHA1 96bc0c3325f8478667e9be14230791afbb051216
SHA512 d0070590c86f6737242711102b65e462b37cbf035139d0901e476e481ba3017df96a342903b6c33c3652ec87c5ecfcb238836272237ccd42ad24d9ff148be8f2
SSDEEP 192:rR++Wr/JPvv7WgpvPRpP6L9lHsb+WNn62UmyCNeNVQ2oY4e4pVyIsnAUgE:rR++GnlFXY3wH1DNeNK2oYOPE
TLSH
T1C552E82EAA10657B5CDFD269F9617B17E3F5102161901E84EFFCCA1C15EB9CD622302B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 eead3548a15610f890614edfbafb1eee3b1eda1e8f4197f56d12c4e978140826
MD5 27a450d12449cb727e9ec769e3af752a
SHA1 5dc6334dcba2f5f3de7f71cd413dbbf27bcf3c4d
SHA512 52d9863068325f04686c67565f1f3f0bf6990331b84a27db2b4360b5dbf43a9c0661557ef430a78c49aeb3c61470c3f943593711fab62e6d9398a2c6a07711d2
SSDEEP 384:gGj8D7KxkXqKf/pUZNCgVLH2HfgslVM7pLuLcifOPXOD8/+ErU39nHG4F5KvB4tG:gm8D7KxkXqKf/pUZNCgVLH2Hfgs7M7pj
TLSH
T1FB7208676C4C9D3B0F94DACCCC167A4FADB5024B61E98C6883FA982503D5ACB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 0ffd4974cc6c4779aa1b0422e55104c45a34a39dffd14a72b6911087c6b0cb91
MD5 82e1aa4bdcfc711f4b12813425d3c6ad
SHA1 cb80083ddbb4c8043c7d939221b6abe685156a0b
SHA512 43beb20d876453fd92f81dbe77fbdebb2e11f852cb20df47c70603962bc21ca655e09774373e01ad9dabf95f1e3c590820840d4bdd1f733613d0bfbc377d5f91
TLSH
T17FB01250C001A602C02353F41597449C39149F248705130557E4ADB3DC263D08018150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586f4f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586f4f.TMP
Size 96B
SHA256 c5dcd6bb9dc0deb9af7f86a319e12d0d470dfb49ab45d9886611903952b762bf
MD5 fda7f217ed9e5d6cd742ee6bf9f1f5e6
SHA1 1bc2402ee3f9b3e0909d3fb2919a26ac55236ca5
SHA512 a7466dd1f6fb88f3ee95e1cc87002122732cc2a2e7409d9e8c088386e471b74c5af17d8e460d514c7e7035ead401d575bef7cc0b1e706e44072e621d468a7210
TLSH
T123B022C0C203E323C00203B0388AB8E83028EF30C203022A8BE00A2BFC203208020E30
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 6249f97f4b4a6a599a77cebd783ddf43440caf8ed3c259da845c3168bc2292dd
MD5 020cb61d8f88e085d360ebc72521e4c9
SHA1 df44a8e58c47681488fb0a6f6aad02004746f4e8
SHA512 f64191f27fd8ed5cc7104899bddf09bcbd6d47ed6a692b0997cc73f67c47c5cea9ccaa6613eb76f1a6631349f72a471e83cd2a1b6e816bc4d56ed6866ed8372d
SSDEEP 1536:6zKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPr:qDlBshIZZwINsIrS2uJBLpAkLQqr
TLSH
T1EC9302B73DAAEC77C4DC5102B53C294D2EC4A5EAC918B53559CA6B6F01F1BF99203113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 245033a0b4d91992a336dcf49a1948b20c6142a4c9ef75c73dabd423b8c2ad16
MD5 958b38fceaf643d03de5407de7f84eee
SHA1 c14fbd60afd653f4388276231e9f97e85f302b3d
SHA512 4c91a91c70aba7b8178ed65b728898f52cf714fd8b57527698922715f43d9af673f16ee36dfd2879114d153d0f561fd4c13aad885a9ccc18c4236761038e2817
SSDEEP 1536:I3KWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPr:4DlBshIZZwINsIrS2uJBLpAkLQqr
TLSH
T17B9302BB3EA6DC77C49C4102B93C2A4D2EC4E5EAC818B66559CA277F41F1BF99203512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 4f221ce3c477355ddd91d6bdc5343d2e3ee6b6f53fa7ae2ecee5571cab0c1d15
MD5 9e84983ef9cef230f9d0dbea452b90c3
SHA1 917d40bfca8b9e8d5c7e969cce9fec9bd5418355
SHA512 8b4e734123a9a2335bce705c56182a663feb279325eb61929e542a6e8b4fa43016756d06eff0f4d4c6de5aa21a1e76afd2a827804052141ce8c20aae54238833
SSDEEP 1536:19xu1KWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPr:Nu1DlBshIZZwINsIrS2uJBLpAkLQqr
TLSH
T1429302BB3EA6EC73C49C5102A53C2A4E2EC4A5EAC918B63559CA677F01F5BF95203112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 099ad1e483be7c1a704a531b0f40828838943dd5a6cac5c049b79401a67fcb8e
MD5 6f9c86a263f72a7f51997b075bea24b4
SHA1 d891ae7158c76e7fc75b874cf49554b1719d198e
SHA512 6bd3a26ebc2965fb60b8fc2e1180c15cb4044d6f46d5d11bba3e0cca376bff0438eb4e2e202a0bf3c9a2beedcfdba915f42c013263fc858d4f48989f0e32bf30
SSDEEP 1536:69xu1KWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPr:gu1DlBshIZZwINsIrS2uJBLpAkLQqr
TLSH
T14F9302B73EA6EC73C49C5103B53C2A4E2EC4A5EAC918B63559CA677F01F5BF95203112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download