hxxp://megaup[.]nl

Analysis

user interaction
yes
max time kernel
46s
max time network
47s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://megaup.nl
Sample260503-e71wqafs9r

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2344	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222565619731695"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 5016 wrote to memory of 5068	5016	chrome.exe	80
PID 5016 wrote to memory of 3192	5016	chrome.exe	81
PID 5016 wrote to memory of 3192	5016	chrome.exe	81
PID 5016 wrote to memory of 2344	5016	chrome.exe	82
PID 5016 wrote to memory of 1500	5016	chrome.exe	83
PID 5016 wrote to memory of 1500	5016	chrome.exe	83
PID 5016 wrote to memory of 1060	5016	chrome.exe	84
PID 5016 wrote to memory of 5064	5016	chrome.exe	85
PID 5016 wrote to memory of 1060	5016	chrome.exe	84
PID 5016 wrote to memory of 5064	5016	chrome.exe	85
PID 5016 wrote to memory of 1172	5016	chrome.exe	86
PID 5016 wrote to memory of 1172	5016	chrome.exe	86
PID 5016 wrote to memory of 4480	5016	chrome.exe	89
PID 5016 wrote to memory of 1104	5016	chrome.exe	91
PID 5016 wrote to memory of 1104	5016	chrome.exe	91
PID 5016 wrote to memory of 2320	5016	chrome.exe	92
PID 5016 wrote to memory of 2008	5016	chrome.exe	93
PID 5016 wrote to memory of 1688	5016	chrome.exe	94
PID 5016 wrote to memory of 4404	5016	chrome.exe	95
PID 5016 wrote to memory of 4404	5016	chrome.exe	95

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://megaup.nl
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa41cec728,0x7ffa41cec734,0x7ffa41cec740
  2⤵
  PID:5068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,1510935515560285406,8593597609632349890,262144 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2228,i,8052818168664563904,12026192810129639542,524288 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,11427049107708433596,11465864494940246758,524288 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2740 /prefetch:13
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2992,i,3123281107942682623,2182267117953390002,2097152 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3100 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3080,i,8233925303510903405,10559740775516670031,2097152 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4192,i,12412621571514303536,10109091401087193029,2097152 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4208 /prefetch:9
  2⤵
  PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5668,i,16832498554640130306,7351804051423624250,524288 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5672 /prefetch:14
  2⤵
  PID:4480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4908,i,17824253231306644977,8569757963832073772,2097152 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4760,i,16683912027369290912,17719604396614033271,524288 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4756,i,1927561778205166108,15511925166396521763,524288 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4736 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4728,i,6190203222328784813,3803258020022078351,524288 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4312,i,6845646495700617496,7213635013393721869,2097152 --field-trial-handle=1912,i,9870187533298295453,2915076423941497501,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:4404

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4608

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

542c5180-b504-40e6-8073-63e7130bfc00.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\542c5180-b504-40e6-8073-63e7130bfc00.tmp
Size 414B
SHA256 eadecb51002ffafcb6cd0d1bad53b671653ec7480667df2886598ae85aa44a12
MD5 af8cacca249621098f06f39080faf3f5
SHA1 260d83eca5d45312fbf10900c8643e3453bfbdd1
SHA512 557f04d21ea166c012a55cad4efb94259c85978b693960a8b6893772933e72ac27222e4105bb21990421591a82acf680f932ae12e7b2331da1418bce8eec219d
TLSH
T1C7E02BAAD9719C2709FD0B299064474AE651135A2B50985F3A3CC5084FF1A7B455586C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 18KB
SHA256 a785ab60648d0714e7f98037d210b34575213a8ea7f00e9ab802720e10fda8f8
MD5 bded034aab97754bb36a8ff43f005528
SHA1 8d2eeb3ca3d5635b0dce98d3659fd3bcb0da458b
SHA512 67029f1161ca1a8e4c9150551ca55e38cceaf9716289321d56d5beae1da79435875822c0a37ff42ed56838ac6df24cdb3d95dcbe79a8b2a0add24396cd5022bb
SSDEEP 384:3sPUGFaLcXNtsBFwXJg2XVFfCcEPATz9ZrCkVaT:3apmFwXJnlRE4TzjrC
TLSH
T1CF82D0F47D610B9D1D028D06F49BD293F9D44D7B223AF6E5295EEA282D5842FC3B0B14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 26KB
SHA256 bc6e897fcfa4a51b630f40f76e03f7eedc18919fde60948f680144a321ec04cd
MD5 866d62460f15ef40a0eb5b36863f7ac0
SHA1 61b6a3b49b4613985f8f9f5d53db88bea0860003
SHA512 1b1f284ed6bdf93657d500ca37e851952ce880091bb769ead577beba0fae457234d24a3169e5adc3a45f4abedb503b1599c83f037946a9a1fc7182a37628d8ab
SSDEEP 768:jYbhOLFP+/5NqxzDVezUljejnjiz+2+RxQr/rrYOSKeY:+CF2/5NqVVeopUnez8vErrZeY
TLSH
T1A7C2E1C54358E0802C6386615F5DA07BE77FBC70A65B94EE78276C5C649F78013A6C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 25KB
SHA256 35027e23e2f4f8bdff595bd150dd5cdb7eb85f0ff83e20d0c228ae9cc1bfc205
MD5 488518dae2596ccc415f75a8243c7c42
SHA1 fd76371cd964d6b5fec324da39b2d331b0bedee2
SHA512 8121a39d6556d763076c535d1d82537930f00ce94261cd45229ade0a3de2543bd2a932dc632a1eaa9e1ef28723cbe41162b3282393369ab9b6efbc67598848b3
SSDEEP 768:ccsvV689HmoYW4DTfuTTHI8Vy8F7g7ZKTMeQFU:OV6CmjW4DTfuTTHI8Vy/KM4
TLSH
T19DC2E16AAC39ACB6371DDFB09368A81143D32D0811F47DA7D89E68C4E41164F8EB7F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
Size 18KB
SHA256 efb62713291edd91536f8bed4bfa39b10c889ab35a77520815f4f8f35adb2902
MD5 9fd35615f20015411ed17bc5847f8f73
SHA1 5314a0a03eb9aedf3e902b9e6e84a471c16f1913
SHA512 5f4afb4bbd9f00ae6c31c94f725006e658e7e9a22c01d4720ad71af0c5ac0a355149f5e224b5d4ef7eb792699dcd2b50d16b0e97feab408619bcf02eeb27606e
SSDEEP 384:0HsFWcA/rMR4GtGIpVzpffwf2n2SlpkCYpxpzjZ7ebiZyX9kzh/sq:asFWx/rM6KHR2+2qp+T1N7emy9Asq
TLSH
T19A92D001854A29D5183EB0364571D8BBDAEFB7DF8C2C9640FFD62D082938F4BA4D55B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 17KB
SHA256 b7c7acffa1ad638294086c2a47379f6755fee95518bee3e6a5c2854ab98bd3ec
MD5 8f3bc4fd0c1ae62577093a26be75f6d9
SHA1 8a08c136f3f3610da746c486e751172f64101163
SHA512 f37550d3b7ba4c73aaa096e8f582f4ac9c2341c3fbdecb6332ba6faf421401a61649703d22cf615da6b7509a1f7d254f7eb747e2a8e3c10fe28bf749b999acc1
SSDEEP 384:zH+fYqLsIIY3jSDMHpG+6OEMVtAFsMKErDFRHZQFBvTR:zefYLYODGpGfObt69KE/FsB
TLSH
T19582D172F97D0CA38C6085819B7B319F4F654DB8EAA2418234D12D5F74A31C76EBE09E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 71KB
SHA256 2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa
MD5 4b73e2ff3024784eca66d2120a9bcb22
SHA1 2870bcb8ece10145e089262bb6634d18ac85bec6
SHA512 9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a
SSDEEP 1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH
TLSH
T1F0630245820BA35EE09D4A79D27481F61FC2CB5C2BBF5C27538289AB5F57DBF6410134
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 153KB
SHA256 1f0189e087fcefbf654fad74a3a06668b782c01353a61d5c0b7f0bf23e33c020
MD5 237f4a0afbdb652fb2330ee7e1567dd3
SHA1 69335cd6a6ac82253ea5545899cccde35af39131
SHA512 27e8e1f91507179c207f93a19485738ed5d372a977eb27d44a4ed163013097d38b117c7a5bf4336ecc9862ca514d78ffcd2b8a07e304bbfe1b2cce9c087baa38
SSDEEP 3072:Qeqp46DjdHdb7UT/IGFc27+78oGmfIXe0pGRDH9tQm1pbYqup:Q16n/IqpoG2IXZYTtxrbdO
TLSH
T15CE3125BF5E6DBE5525E6D64FB5478972B1030823EE11CF12CE2206EB889317399E08F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 115KB
SHA256 c411f11975d26eb04cd2aa3c071181d4b18e489f1fb97060d4176a3531dfb36e
MD5 715d593456fa02fe72a008a72398f5be
SHA1 e948290773216dc1b50c2121314a8cf918c22b54
SHA512 1f63209c93a462c2690442c9cf1c3e5a67f2df7a67dfcda2cb81292a2dbb90641aa0ab81c25323a1f2d9f0fa09b3421d136ae5228c47e581c51912ba284de46e
SSDEEP 3072:3wqMZaMDlYfb+t0YI4WlLL7rE2ZjX+B+pdJpimtm:gpZNYfytUxH7rnZj+Szpiz
TLSH
T171B3137922E526408E9D0E3BBF7B6A6EC7F8719DDBD4C10AA7D18469001738ED8D842C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 aed2056ee8b67ee8224b9b77ac9c9c5922986fb796b9851aa96efb91dd72b41f
MD5 2a1a38d6ae52c28c7ec4542bfd4861b7
SHA1 212339f1a25965e95ece36a1a38821c857b00a10
SHA512 ef144e9b694f0e4f06371b6f42b8686c12a05d930575744802f1c4819c21cc8df44619a60781bf6c46cb137ab354904f30c447b5c72029dbea763bda25660d95
SSDEEP 192:NURAymRg8qbLmW/6Fdinev7HYpAPRp20Ap98Hsb+WNnAb+FA4so22OoNvkwFMIVi:aRiDzXEUXq6wnB2evhe
TLSH
T10842C72ABD147A7B9CCBD22AFD26B713E7F5102161901E84E6FC8A1C14E76CD7227427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 99558ed593868d02abe3d85ff975f66aa89e9ff6e3d40a5d3736c2959ccc80b4
MD5 de6b007a84644378e550eaff39ff4ddd
SHA1 a7e759abb369d6bd1f116d39e6656ea42ffe1870
SHA512 7109b8cc8e95c04be41d421f2c48798b022c455f4b02e7de1014356345e124e33d1789a865faab0dd1b3662b1a246d1491cdb4c269aa86a48fd8eac4175945c4
SSDEEP 192:NURAymRg8qbLmW/6Fddev7HYpAPRp20Asx98Hsb+WNWxAb+FX/eToNvkwFMIVyIy:aRiDzmEUX16wqJesvhe
TLSH
T18942E71ABD143A7B8CCBC22AFD26B717E7F51021A1901E84E6FC8A1C14E76CD3227027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 2328ea9073549adab02fe99e0127dcb5999d2517b99cac1f85861fd5d1268867
MD5 40aba898dc4efcd9988ec53e06a8b15c
SHA1 af8b73cd37e29a8d0b68b474702174d179201fac
SHA512 1f184dc588afff9f591e8a55398deb52c19ccb2c739739b1384e2a6da49836e5a8171b750e21fad998d39b550d8f4906b846178327f24be8db946220ec5b5a8f
SSDEEP 384:hTjVw7KxkXqKf/pUZNCgVLH2HfgslXa7pLuLcif3yXODVw+ErU3L5HGcHRXD:hfVw7KxkXqKf/pUZNCgVLH2HfgsVa7pq
TLSH
T1D172FA676C4C9A770F94CACCDD27BF4FADB9024B65E9886443FA981903D5ACB010A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 79a7ef8dfdc5bab886c8b74cacd85efe185ba888c8064e608da3289268805bf4
MD5 08bbf209b99f467edde34fb418e80d22
SHA1 efba8ef848c57e024e7405b76ee84cc3cafe02f1
SHA512 175ea8d897c5faae82b1cb2feb6a9b97d276749b0a048453c8a07e7d445a3d1589c9d6e73d7678e6f4bf30005979322823c8efb54249d24c34390a7017171d2c
TLSH
T1C8B0121090419502C69302B12182048C31246F168706130553E47975D8271A1C064650
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5876f0.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5876f0.TMP
Size 96B
SHA256 bbac1842592303de3aa8c429a40b03050b36adcb047c01184b5bfa3fe36543ab
MD5 007394872996be15f5a18efec62e4a47
SHA1 2dc585f4ee3219411eb7d647984e8207908409ae
SHA512 d33555c7c14018bfaaae9003e63a18f9b2f92ecf226c4dabee0432746b2f1b0d5b94299959c975ce57190a5752059dab28bbd8ea8b3811cef791880fcb397991
TLSH
T128B02200C0032203C08203B03882C0E83020FF20E2030202C2F00A22CC302B02838020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 02ff141a75f52504241f4014da0531bf85e0af7e179f3ff5fb971b610e936700
MD5 d5987db63d2bfda98380f3ff3b8d2253
SHA1 70d52f573f788687ddad8fb970909111ba7bf8f1
SHA512 672a304b7f4c61ba030ad35302ecf0d1e7cddae6d6ab3000fea7d9f282130756cd44da05787400bee7e5dfae59700dfee3ac14429c5fa4065f350558524fe258
SSDEEP 1536:vSmP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:Z++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T1649302B99D1E7C3963ABD396A007ACAD88D3DCCE1514157C30C65F1E14BB3A2A30B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 18ab1022df815d69a0c3d5d63f6831148712fbea12e1b494a21aa27331860990
MD5 71dd543c07d98eabb8cd9df0817104e8
SHA1 ef150c62ea583c6a36584b3e0325b42b8990330a
SHA512 d7396bc5533f83389d785ffd88b5c7ac6096beaffa7614307f5070f3d64d5e8c0a0fd91273d938c09b71a01957673f058003ee29a3d6e9dbd4ba21889528fe79
SSDEEP 1536:qSmP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:k++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T1909302B99D1E7C3963ABD396A007ACAD8CD3DCCE1514157C30C65F1E14BB3A2A30B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 4ffdf0a52f4e99c34c71b425847465a97589b65b3e91887c7118cf5a9243b2a9
MD5 45d34aecbfc22cae12f2c546f5c15b71
SHA1 8b0e7007f74ad90629547e0b59feccdc3de4404c
SHA512 e7854588584803c37b265d16777f16cf4f027a4e2d2601d284b0bba33605b1cf18eabdaa9f85e9b1a8df137e7e7b0395a491888a39322cc5f053c828d543c408
SSDEEP 1536:wSvP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:5++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T1299312B9991E7D79236FC39AA0179CAC88D3DCDE151410BC30C76F1E14BB392A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download