hxxp://clientes[.]ingein[.]com

Analysis

max time kernel
149s
max time network
151s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
29/04/2026, 14:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://clientes.ingein.com
Sample260429-rm5qdscy21

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2100	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134219459880754558"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1968	chrome.exe
1968	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe
Token: SeShutdownPrivilege	1888	chrome.exe
Token: SeCreatePagefilePrivilege	1888	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe
1888	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 1888 wrote to memory of 5104	1888	chrome.exe	83
PID 1888 wrote to memory of 2100	1888	chrome.exe	84
PID 1888 wrote to memory of 2436	1888	chrome.exe	85
PID 1888 wrote to memory of 2436	1888	chrome.exe	85
PID 1888 wrote to memory of 4604	1888	chrome.exe	86
PID 1888 wrote to memory of 4604	1888	chrome.exe	86
PID 1888 wrote to memory of 2848	1888	chrome.exe	88
PID 1888 wrote to memory of 3116	1888	chrome.exe	89
PID 1888 wrote to memory of 2848	1888	chrome.exe	88
PID 1888 wrote to memory of 3116	1888	chrome.exe	89
PID 1888 wrote to memory of 4516	1888	chrome.exe	90
PID 1888 wrote to memory of 4516	1888	chrome.exe	90
PID 1888 wrote to memory of 640	1888	chrome.exe	94
PID 1888 wrote to memory of 4352	1888	chrome.exe	102
PID 1888 wrote to memory of 4832	1888	chrome.exe	103
PID 1888 wrote to memory of 4980	1888	chrome.exe	104
PID 1888 wrote to memory of 1968	1888	chrome.exe	105

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://clientes.ingein.com
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x40,0x228,0x7ffcec8dc728,0x7ffcec8dc734,0x7ffcec8dc740
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1608,i,5922079042373856444,17141124684539625093,524288 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,17853637630069866081,312618976176140467,262144 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,5971533350364531966,10296524066202038074,524288 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3128,i,11106708604398742754,8745187031766333526,2097152 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3140,i,15903555308244409882,13948639715749010924,2097152 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4288,i,2461093976356509113,6565920689953057086,2097152 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5248,i,2989338031418160849,85030465110156244,524288 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5256 /prefetch:8
  2⤵
  PID:640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5624,i,2887427324611958730,7043554116079861539,524288 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,6619808733747376013,2962456958216072198,524288 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,9108890381246272401,12828152117477816623,524288 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5608 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5776,i,9077142972780272933,9882215408036505472,262144 --field-trial-handle=2052,i,8010687157722518109,15683507614901191903,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1968

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4876

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e1c4fc2b325f37a863ea79a5ff793bfebbee10baaf26b213e50e8c3ac0ff3885
MD5 ddfd8f49da8e8c48e742068bfb6cb2f5
SHA1 f0df926cb79f2dfab6a2482136970cb43a77785f
SHA512 e7f2bd0af3ee3e7e92b362f4704af88f890deb9601c967efd1a4494829394fce22995de298ce7faea2bcc97be6ba8e8df4395080fec7aff2dbaf16a2ecbc7571
TLSH
T1DCE02BFADA30A83705FD0B5861504745EA5013577640582F3A3EA20D4FB027B029685C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fdc95acbfb748301bf4e8350d666be7775497605f723b57de26c4b15b7681070
MD5 c3a68bf45b7119a7a4d6f067d4d84226
SHA1 ea56b4bfbe1f68b70454455120d819e09c992f31
SHA512 19112282d889f326b8308c37f33984b4a6e865a94106f1c507c19b68f8318559c66781a596e531b2000d3d684d7a30791631e4d7f5a8dcca739eb0428f7a5c15
TLSH
T1C441BDF783B4997E860196E4EB156F2FCE690525032C7CA288E4AE1B43F2872D10078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1d5014a245e06f869083539c0992333c63db5b22144eca6d9ca0dd10f1db598e
MD5 c3f787bea24e796d81e9f762df96769d
SHA1 e725e66f80d467a68d6deada6ff76feec0e9f70c
SHA512 206609f93fead91b6ab61f2e9f2cb9a1bd59212b3096c9f0eecfbc1c5db4d9f57f90eec491524a1c6effc8ae3bf12f2b1782c560a89a639c969d558bfc7048c2
TLSH
T148418AF793B4997E8611D6E4EA146F2FCE690521131C7CA289E4AE1B43F2972D10078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 264038ff1abcb986c7b8aac6d4c15e45e2b8434b103ebdb9bad2ca3e97028d30
MD5 c67ad956114c1aa0d02a9c60f73b6b49
SHA1 8e4f0ea86d112f69f4dd2b005a7aec177b3dd734
SHA512 2ba34060232680cc323fc45abf82859c34cbdb8445134f251e097135c4bb7da3bd2a5214b31a81dd0d68a43454f8fbc074a3ca72347902d15c7db0ef38cda550
SSDEEP 192:6RcH79FIWCZ5Kv74npAPRp2W9GHm+b+WNnupPKn2ytiskwYVyIsnAUge:6RcHh2GEnUXpkXQPk2ytFce
TLSH
T1E542082EAA14743B5CCBC21AFE627757D7F5203221D42E88EAFC8A2C15E79CD2217517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5263841cd4a6946e3d9af13318ce7b652638cc79959e939d53bd75d18ae0515b
MD5 daaccc28269ae9dc7ae62b9cd852909c
SHA1 319817e4791de13d8905adf7b2ec8784b520132e
SHA512 63c2de535501699a70d81711a153f8dcb15c8f5a8e4e4b17998b4de951f716841146292c329f2b9f2759470f588c90ea9228215e08c3088ae98fcefb7f0ab9b7
SSDEEP 192:6RcHM9FIWCZ5Kv74npjPRpHW9GHm+b+WNnupPDn2ytiskw8VyIsnAUgE:6RcH82GEnFX2kXQPb2ytF4E
TLSH
T14E52082EA914753B6CCBC61AFA627B57D3F5203221902E48EAFC8E2C15E79CD3217517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c8b35b3777ce326ef940c17cce6ef24e174b8891c7550fc3682e57a55e265a8c
MD5 d5fc06adfa3081a89a46beb8858f9b99
SHA1 420cb6a7ba8d4c57e5541073c66af9a2ab1c97ea
SHA512 0c4cfb344a2d0f0bcf4f414ef590ebc1a825188405880d886427ffa242f6a6c7ee79c37472bcccf8bc5fb7562740730ab2129b887be57eb29857ef3659b4167d
SSDEEP 384:zZj/y7KxkXqKf/pUZNCgVLH2HfgslKn7pLuLcifd4XOD/W+ErU3bVHGzur5Rg:zp/y7KxkXqKf/pUZNCgVLH2HfgsUn7p3
TLSH
T17472F9A76C4CDA370F94CACCDC26BA4F9DB5014B65EDC86483FA981903D5ACF110A2E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d78f977cf0097b021fd4c8fcc2794c0f2d831bb79a0a9373f5ccd0e3a0daa035
MD5 0ba3757123c8814487b543fcbaa12f52
SHA1 d87bf077ff1cd997c338b4bc4fb9b4a251e103ae
SHA512 1dddac19355da72d6686e276c7b72d142eecca9dbb1f7a5912d04aaf7d15a69395cb4399ec02784c5c62be357e1db1bb440c62aeae57d7db96cf51b68a7f1aad
TLSH
T1C4B01210C0415A11C04702F515CA04D831546F118705130293F46DF1E82A1A1C015150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585649.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585649.TMP
Size 96B
SHA256 e13a412f98445f728ae077955d7367ad4a067b18169da784f2c4263eb143307d
MD5 ea92bc2395be9b3bd22f29b58eaf33c2
SHA1 eaff18bf1df6a9de29706bea1453cdb8039ae346
SHA512 d60f61b47ea87be1522b6ec1734e293175609cd7ab04ede6a8d7b4d0c089e69a5961275dcd9868facc5846db61bd72469fcb1f36afbd7e16c973293cba24a220
TLSH
T1ABB0222CE3022202C00303BA3082E2C83030CF32C223028282E00A2ACC222B20020820
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 d3d64c90e76d42026e7dd26ed6e38b6db760b3dbb49d6f76222ed1c37ef93943
MD5 be8db284210dbd0141bff38130d11fbd
SHA1 cea7c4ffecfee0924439115193024c0fead068e8
SHA512 8c4d7f8bab3578cb9b714df0e683e5acfe34a9774115cd68967e40b19d6432912fad24aba7656dccfd5b7ddc58e7e5dd750aec829151f22e7a575701b0f4f068
SSDEEP 1536:7MqKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:AqDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T18D9302B73A66EC37C9DC5102A53D2A4D2AC4B1EAC81CB57569CA7B7F00F1BE95103513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 80665c454d49f097d20e8562c3dd138d00d6345a25fd01765682036ee0c224f8
MD5 d1ab141ff3ca4c43a5b346f2f46d815a
SHA1 eb0afd62d589d25041af897aae3a89405c721b4e
SHA512 cd002d782ff3325666e18d53260fd4a68233d3111b72dfb0e5a73a19ba712d7572d98f6f13acd99b8f5b1d5a96550ed2c37bf535770c5ec88b63e042f0b57b58
SSDEEP 1536:M3KWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:cDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T1AE9302B73EA6DC33C59C5202A93C2A4D6BC4F5E9C829F66658CA773F41F1BE55103112
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 80da1f858420fd4cbbd57e78783e200d0295a163d169266a6eb415cfc226b999
MD5 a7d27817f17e55e1baa42527e4f66d8a
SHA1 26422efbdaaac27d79fb39a457c060460f4bf3d8
SHA512 138bc4e02e2687365ffc8f061b2410899ba821d220d932f23b60998c31d5d35fcb8236337e61e7d13b31a5bf6c8e00e25b299f718a016549b7f7da08324a8d75
SSDEEP 1536:sjKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:oDlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T1199302B73EA6EC33C5DC5202A93C264E6AC4B1EAC81CF67559CA673F40F1BE95203512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 9984d673a5d7b385dbc9a6ce807d1ffcadb52ea3535919722282b13f78cba587
MD5 48bb3251f30a81cb0c6222e70f16254b
SHA1 375a8363e9ca5e867538d35083dc6894ba21f573
SHA512 f5f00684c0a5a8a04a28dc19330632f535db8f3cf2988f524d45ad37f7d813abd4bfdf76494965cad7ca21241a5bd5da8dad7ef7796a249fa69c579c3da8d37c
SSDEEP 1536:7jKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPk:/DlBshIZZwINsIrS2uJBLpAkLQqk
TLSH
T11E9302B73EA6EC33C5DC5202A93C264E6AC4B1EAC818B67559CA673F40F1BE95203512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download