hxxp://trustampersand[.]com/

Analysis

user interaction
yes
max time kernel
103s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/04/2026, 04:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://trustampersand.com/
Sample260425-ev4f3se19x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4852	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134215642111490228"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe
Token: SeShutdownPrivilege	1648	chrome.exe
Token: SeCreatePagefilePrivilege	1648	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe
1648	chrome.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 1648 wrote to memory of 1480	1648	chrome.exe	84
PID 1648 wrote to memory of 4852	1648	chrome.exe	85
PID 1648 wrote to memory of 3308	1648	chrome.exe	86
PID 1648 wrote to memory of 3308	1648	chrome.exe	86
PID 1648 wrote to memory of 1744	1648	chrome.exe	87
PID 1648 wrote to memory of 1744	1648	chrome.exe	87
PID 1648 wrote to memory of 4536	1648	chrome.exe	88
PID 1648 wrote to memory of 3388	1648	chrome.exe	89
PID 1648 wrote to memory of 4536	1648	chrome.exe	88
PID 1648 wrote to memory of 3388	1648	chrome.exe	89
PID 1648 wrote to memory of 4704	1648	chrome.exe	91
PID 1648 wrote to memory of 4704	1648	chrome.exe	91
PID 1648 wrote to memory of 2448	1648	chrome.exe	92
PID 1648 wrote to memory of 2448	1648	chrome.exe	92
PID 1648 wrote to memory of 1796	1648	chrome.exe	93
PID 1648 wrote to memory of 3296	1648	chrome.exe	97
PID 1648 wrote to memory of 3296	1648	chrome.exe	97
PID 1648 wrote to memory of 4896	1648	chrome.exe	99
PID 1648 wrote to memory of 4012	1648	chrome.exe	100
PID 1648 wrote to memory of 4776	1648	chrome.exe	101
PID 1648 wrote to memory of 2604	1648	chrome.exe	105
PID 1648 wrote to memory of 2604	1648	chrome.exe	105

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://trustampersand.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb9fd3c728,0x7ffb9fd3c734,0x7ffb9fd3c740
  2⤵
  PID:1480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1980,i,16728685892923636116,11295227156160711213,524288 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2108 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1740,i,5685173842341017216,12218051083066033997,262144 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,5987813904713886148,7914553583658495387,524288 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3044,i,3826030960583529281,1749577875187315862,2097152 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3056,i,9666204701191383850,12570785252194963052,2097152 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4284,i,7135937220956083737,14702645681140745532,2097152 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4688,i,18269840560070174057,3982016640194618749,2097152 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,13535173304829057483,17855141036028209544,524288 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4480,i,8859995089863982440,9383260490911364822,2097152 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3392,i,8342310572554831061,17713651538326128079,524288 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4916 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4664,i,4659845715550704650,17848092639038685562,524288 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3424 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4884,i,13121384957148203016,16493261471490828640,524288 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3888 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5696,i,7080304048757109836,10971776742933933652,524288 --field-trial-handle=2008,i,14280448914880523209,12980394509084277475,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:2604

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3548

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9fdb3c96035e4c8ba12cefdd211ae40ee67c6f41248a278f3f819d9cff5251f2
MD5 9a114544844bf5661ea6805306ef67d0
SHA1 30d460407da9cfd6e6be99e3fba6993c89e19e70
SHA512 2c72d2b7201fd989116b8a0619a850550b01619355dd6127c857dad648631505250bfdb7240971fef188527d7a0260dc13ac7a7e591fc7beec020df253554750
TLSH
T178E02BAACD65DC770CFD0B5865444B42E74023172B81484F363D920D8FB163A569286C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3af665911046112361aa0105bf41f73dccd727f25499c6fc692c03e55c12e459
MD5 dd798f47a89689ea2036be682ed9a82f
SHA1 45aa3f5303c7b240c4ca27427d4ef58e77f67ac0
SHA512 ae91046a474051e4932480680158b5ba14f1b755e5bc65ac4af753486db6c2d29545ec60789226c4966703a5df0c90dc959730c11756758343eae9f83ffd4d5a
TLSH
T1B241674986E3F8ECFB12C7B452ED6DA9A138048DD0A61FCB5DF3AD282616B853671501
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 311a1691fd6afa31f512dc7f40aafc57e4706f0dddd6283b864baae3e65a9ef5
MD5 e3b8de5fd1fc1cba2b351b66aad4ed7e
SHA1 d0fdb13a157ecc4b97c85f3b759eb673a23c088e
SHA512 46ae6a29e1bec1670ac46a0feb1b83aadbccbc680dd8165aaebda80bc5b819c699594f6cea37c7949c8b66c5d66e5c4cf1f1220a949cf05703a4bb3dde4e818c
TLSH
T19F41894982E3F8ECFB22C7B412ED6DA9A138048DE0A61FCB1DF3AD281606B853671501
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 b3e758025cc73532803d21d400879ba1e58bf66df814d9d7a57012c988069dd9
MD5 768706004951a0f8ff383e8ff1a19a87
SHA1 99910646a6c602b90e147c0ce1ad62bbfbbbd8a5
SHA512 cbdfd94e23d61122c78018719980d710d07e7c87efd1c6cf09f0c5a7c1fc3161a0b7cb27b012eb2af2c1ce96d073b901f57f799e44bf42e6e1bab131c507c3bc
SSDEEP 192:DbZbOb/bxebib8bCb1bybXbIbfbmMaIaEgd4J8byVPbYDbPb+b6bnboNbqbYbpb7:DbZbOb/bxebib8bCb1bybXbIbfbmMaI7
TLSH
T196226DE792F8877D881266F0B62C2E1BDE6B4528435C3CCAC8E4AF4F57F15A1E20054E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 930a77256b7c3bdbb66e9ef37cfb26548949474a4a5323a9ff134b3303f92470
MD5 8da76558df6b6d19bca6bdd72c771bc4
SHA1 0bdc9b8393d201294d9b5defd3d5bb98680cde67
SHA512 ac481c669700e2a3b032ebe9d1018789ebe4b140e21388f494779cf5c08e37724918b6a7c3780aacc5d72baa8011aff91719ba4d53844038747fc8d126f1c69c
SSDEEP 192:cRul1LlJCKhBv7rpAPRp2m098Hsb+WNnAYVMyJ2Srukwa1KnVyIsnAUge:cRul12+RHUXC6wAy/2QuuCe
TLSH
T1EB42D52EBD14697B4CDAC229FD297B57DBF2102161D52E88E6FC8A3C04E79CC2117497
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e3549c521348ba1f41d24de9876f76a714094b297842552595bd2cfb87558a98
MD5 4f6dead40b8f570b8c022e59bcad1726
SHA1 7f132b8625a14e60e0627a4c25509640f35ed0f3
SHA512 cc933c8662efb864b5a5e00dc76d5bb08b1e01efeeff11099d7b4532ecf33aca2b8d6a73eb4f21a1acd9bd7b0843b77620b16f494868d869d219c90c8a020a3c
SSDEEP 192:cRul1LlJCKh8v7rpcPRpumf98Hsb+WNnAYVMzIgLrukwa1KsVyIsnAUgE:cRul12+oHIXp6wAyPgPuu9E
TLSH
T18452F72EBD14697B8CDAD229FD157B57DBF2102161D42E88E6FC8A3C04E7ACC2117097
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a3fa2e9e24f7b124751abaa59e9c43de9564b630c558d36cd17d9dca267973c3
MD5 c3a757481857a97a25dbf92920c4981a
SHA1 f2ba8e71e32298b56ef4622dc96e03bcb74d0bcf
SHA512 f0a1c48c612bea4d1ea9dc8fb7ebc20244322b8753f2b449302ac0593b348eb44ba64c6b3fd9b8bca39cda0aadf4ceb6b8e65b1a00187c630dca7377f4888b1d
SSDEEP 192:cRul1LlJCKhpv7rpcPRpumF98Hsb+WNnAYVMeNEqrukwa1KsVyIsnAUgE:cRul12+pHIXb6wAynEIuu9E
TLSH
T17652F82EBD14657B5CDAD229FD15BB57DBF2102160D52E88E6FC8A3C04E7ACC2117097
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b52bed624d01fd4000a28784f2813a69c8ec31fe50b0953e5e80bf3eb4c8bae1
MD5 8084f98dae4e87f5dea1baeff21cc2e7
SHA1 cba2b968c0f99c4d5277325f1881000af1a328be
SHA512 2bad04ed08bcc86dc1eaef8a24bab0ec6d2d0550f27ad0ba5bf8080eda64f3363251bc538e38f1cae379f3877383ac1ce3f351b0599bd96ae849c64fb816af68
SSDEEP 192:cRul1LlJCKhhv7rpAPRp2mi98Hsb+WNnAYVMdierrukwa1KnVyIsnAUge:cRul12+xHUX46wAyDevuuCe
TLSH
T12F42D52EBD14657B4CDAD229FE257B57DBF2102160C52E88E6FC8A3C04E7ACC2117097
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 03973a25da0021eab19b8f1369a5523343654f3887234a1e1cc301245a48728d
MD5 e96921d5ae30116aafe48367f7ac6695
SHA1 c6641ccac61c68d82ff32eff425c15feb5074091
SHA512 7547cbfa0fc206b66f70451b792b574afeb0e98365fa6e0b5000e8553976425c99b5d9d4c5ead0b18d87bd8ab8100bb185fc97363145cbc0d2cc4cf9b3e8d865
SSDEEP 384:MajIf7KxkXqKf/pUZNCgVLH2HfgslPa7pLuLcifqrXODID+ErU36SHG6+AwTlTNv:MKIf7KxkXqKf/pUZNCgVLH2Hfgs9a7pb
TLSH
T1A1720B777C4C9E7B0F94C6C8D8167E4FADB6024A65DD886482FB982A03D4BCF114A1E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b8a95134907cfd6d714632641c14e2118cc9c046eec7542eb5403123d544d8ad
MD5 7b4417edb776de1eb9ab8a0b586a1a32
SHA1 d48e9f9127aa7f7c0931dbf99e32bc5bc5036b87
SHA512 5b1b62117e42f06a9c597c80885f6a473cb6995de0a33df4fa0d27215bbd229b6508f4117898a9465f271fbaadec8807905c99d75adfa78d9ffdf9b6140b55de
TLSH
T151B012A09003D541C04302FC138244CC71189F1587051707D3F0B976A8275A04058190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58726c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58726c.TMP
Size 96B
SHA256 483209fd9c8c6cffa7a7f6f6d9811b5ac181ca93e0c31033428c562d43f91e80
MD5 cf52e80514e7d5b37c5c5f04f1ac0b3e
SHA1 49c8b60f7ed312625e008d7b9cce47b1b024bc8f
SHA512 a4e7c1e9f1c0e6330ed69ca6e0f545badf1ad4837507e839b4b0348f68783e670b8de29e019862c5b6ebe8569ecaf8b2562842960dadc93fd23e6cae0e204c2d
TLSH
T16BB02202C002E222C08203FA388280C8F22CCF22C203030BB2E02B22CC203200B22020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 32af4be8646fe312f4d26f20198318931e75713503021fb8a3c52801a6ef6af5
MD5 f4f31af9f2e87c18910d633b49851c0d
SHA1 e81154b99b7c07b362824c80fedbbc2d72dfd6ac
SHA512 845ecf7c8c2e76725680064a8d2771bf4fb1827e7ad64f15fa94dbdecf8f63d99e0ba7d1d036dad1eb1fb1c8aff0aa58d678b2dcb96afc3f68be9ee844e99705
SSDEEP 1536:g8cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3b:F3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1E99302BA4E2A4AE7957E469176AE7809CE12134D709FA8CC316C639D21D01C92F73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 0a471191f5b5d9015b0f37c6a7959ca2059dd319b1ada1c0dfa8705ed83881d9
MD5 93376c9a0d8ffa5e3827cb63d325c0b9
SHA1 d3728a121de3c84ef89a5a03f0767dd1b7fe626d
SHA512 8bf6dbff0ed7de893e9f8b61bf7bd8138ce576c92b8b9f02b81350d97651832d4f53ea00ed7986a47acbf73a3efcd2eb16a0b5143e3f651c97d8afeccefda825
SSDEEP 1536:6FGcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEL:R3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1CF9312BA5E2A5AE795BE46D1725E380ACE12130D719FA8CC726C538D21D01C92F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 981e227a87fef1983e94c837d3bf9decd672ad27cf399d500dac9df2f88a355c
MD5 d9795effc149ab1b22eed033ce1bc99b
SHA1 5819d9873810264c585ce871c0ed4e1dffced77c
SHA512 c1c07f7264489712ffacb8c35150adb0be76ada74c363b19239286c6476f31495110d7719f565966359ee76ec546f03cc297c87ee8672fd584f855d4078bbbf7
SSDEEP 1536:6RT0cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE:Co3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T19E9302BA8E2A49E795BE5691729E3809CE12130E71AFACCC716C534D21D41C82F73E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 e6f15316143e89825be1d9f7ef7777fdfab3e5c08fac8ef54365e837292fe1e2
MD5 c422beff777adcf2f81594a33d27904e
SHA1 70ba3eba0cae4dc5bd6fe92819bb91143a62cece
SHA512 2cc594409861efeae017844b4c42d6b765419ba3d32a2ee51b837ba3c8866fa27eaf7a6d8895c3e5fb0f5145929a06837edfa88998d99839fd1a79648e7af972
SSDEEP 1536:VFGcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEL:C3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1AF9312BA5E2A5AE795BE46D1725E380ACE12130D719FA8CC726C538D21D01C92F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3548-13-0x00000195064C0000-0x0000019506515000-memory.dmp

Download