hxxps://www[.]project-management-prices[.]com/s/?slink=jUWQXk7zpKPF9rpt9Wdyxw%3d%3d&shost=pCx%2f5dW9VwYoMgisRwZIgt1Ylze%2bJ9Xgj4KKeNuKm3o%3d&contactId=27599805&unsubscribeId=61BF6ADD-45B2-4860-9C3C-7E978646D902

Analysis

user interaction
yes
max time kernel
107s
max time network
105s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
04/05/2026, 19:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.project-management-prices.com/s/?slink=jUWQXk7zpKPF9rpt9Wdyxw%3d%3d&shost=pCx%2f5dW9VwYoMgisRwZIgt1Ylze%2bJ9Xgj4KKeNuKm3o%3d&contactId=27599805&unsubscribeId=61BF6ADD-45B2-4860-9C3C-7E978646D902
Sample260504-xpsrhaft4p

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3704	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134223949432925070"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe
Token: SeShutdownPrivilege	4732	chrome.exe
Token: SeCreatePagefilePrivilege	4732	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe
4732	chrome.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 4732 wrote to memory of 4808	4732	chrome.exe	82
PID 4732 wrote to memory of 3704	4732	chrome.exe	83
PID 4732 wrote to memory of 3888	4732	chrome.exe	84
PID 4732 wrote to memory of 3888	4732	chrome.exe	84
PID 4732 wrote to memory of 4940	4732	chrome.exe	85
PID 4732 wrote to memory of 4940	4732	chrome.exe	85
PID 4732 wrote to memory of 5504	4732	chrome.exe	86
PID 4732 wrote to memory of 5504	4732	chrome.exe	86
PID 4732 wrote to memory of 4332	4732	chrome.exe	87
PID 4732 wrote to memory of 4332	4732	chrome.exe	87
PID 4732 wrote to memory of 2560	4732	chrome.exe	89
PID 4732 wrote to memory of 2560	4732	chrome.exe	89
PID 4732 wrote to memory of 4216	4732	chrome.exe	93
PID 4732 wrote to memory of 6008	4732	chrome.exe	100
PID 4732 wrote to memory of 6008	4732	chrome.exe	100
PID 4732 wrote to memory of 5432	4732	chrome.exe	102
PID 4732 wrote to memory of 716	4732	chrome.exe	103
PID 4732 wrote to memory of 3856	4732	chrome.exe	104
PID 4732 wrote to memory of 1924	4732	chrome.exe	105
PID 4732 wrote to memory of 1924	4732	chrome.exe	105

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.project-management-prices.com/s/?slink=jUWQXk7zpKPF9rpt9Wdyxw%3d%3d&shost=pCx%2f5dW9VwYoMgisRwZIgt1Ylze%2bJ9Xgj4KKeNuKm3o%3d&contactId=27599805&unsubscribeId=61BF6ADD-45B2-4860-9C3C-7E978646D902
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffbe15fc728,0x7ffbe15fc734,0x7ffbe15fc740
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1856,i,4867466638783976889,11266320390688774127,524288 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,2108428927077303364,9088354878299745024,262144 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:3888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,11850586402505844390,6872075762806411082,524288 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3184,i,14913226001192430426,2400070929663490136,2097152 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3188,i,9057219533421464662,1783068489282197586,2097152 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4392,i,7816509597890705981,9905913411845889266,2097152 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4408 /prefetch:2
  2⤵
  PID:2560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5252,i,10481025940302681773,12113740971840677988,524288 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5524,i,17439831957752260470,6857947409402003013,2097152 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3284,i,7691273804834502816,14665199887953450671,524288 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4640 /prefetch:8
  2⤵
  PID:5432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3256,i,5360001063248349763,2566086837974575594,524288 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3468 /prefetch:8
  2⤵
  PID:716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3272,i,3478367972164659803,7932707931848638619,524288 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5536,i,10911319973449862629,6285721746906403044,2097152 --field-trial-handle=2100,i,11061572532713459471,2681859550260276472,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:1924

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4524

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8869876d5a30aa2f040ab8cbc7e99cbb9aec576e4e06a0ec4e7d24e7fec3dc02
MD5 67e3fda141b7f7105cac8e4cb6fc56b0
SHA1 9d72c561343347592ed84107f320c930c27fb9fb
SHA512 45c9ea91c01ce58c696a3c1d168a165ce1fd3483074352c8776f9c3e57af783a3442feb00cda2e22bc176946836d3b89adaed6b8b22bacd68d3c4eee183807cb
TLSH
T121E022B6DD21AC3B0AFD0BA9A0550386E75133573B4085AB3B3C860C8FB4737078686C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7a35687dd6f75540ba2d909473dd2066dab4193507aea288a4824cf561e87512
MD5 ac93f3439df5b6aafcf96ade828c78c2
SHA1 d01c867a8944fed2cc087497b1c02ff408c1a108
SHA512 5bc8edbe656644b6d46f4c0722f7ce33ac68b0969c425688d60128d780cb32caa0bd5031ebbd53e6c8c5813591c41c49f6bc239202bee1774dc8a7d2170a62f0
TLSH
T154519CF793F48A7D851196F4AB146E2FCE6D0924131C7CA5C9D4AE5B83F2972D20078E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 61bfce66a29e23719f5e0e015d1ff6177fe820e01d0a70c52abbf8f1f9f6cdf0
MD5 76d2a63d186fca25e07ee8a789102539
SHA1 2dd93df35694ac2a3753617408294f841725ab61
SHA512 7f0f3dc1fa1bd34781ed45104ef036301f26f7c03a48346326d72b96ddde223b228863efd7dd19e212d03f20ef0e4ad89dec54b12eb404e00ffde94cb9f7888d
SSDEEP 192:gRiC8r8QSOm/v7rpAPRp2a9dHsb+WNntRPYPeY4oNsfOwq+ofaBLVyIsnAUge:gRiCGkX/UXdzw/P9oNsf1q+ofaBNe
TLSH
T12A42D52DA914793F5CDAD269FE627713D7F5142171E02E88E6FC8A2C15E79CC221B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 be78dc81c4cfa9650aaca38c53f624c43d24a7c9b17f8c6b3f6dc9567689086c
MD5 426ceaf7b5d3455e8486ab70ea5e9357
SHA1 982949bd600c977a6073168d5c7b4ebb0116d7b3
SHA512 dd62206a2573ce172efd1edd7d6496a20c42019cf264a860383b562b2852633edb355d5391fd979a5bdc61b05de7d182417323e9e5e2b8fa1202f3987de7ed8b
SSDEEP 192:gRiC8r8QSOmSv7rpAPRp2gk9dHsb+WNntRZCx23PeY4oNsfOwq+ofaDLVyIsnAU3:gRiCGk+/UXGzw/y2koNsf1q+ofaDNE
TLSH
T12442D62AA914797F5CDAD269FD22B717E7F1142171D02E88E6FC8A1C11E79CC3117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9fabeda17f155876951259552247f3619ef154a0f802179e53d4293da11864a0
MD5 12104e6221a4dec66b8c5c14869aac92
SHA1 1ab6a8757785548afa9d1d54406361d05dd6ebde
SHA512 aa606ff7307d0e0ed18d2dbf26517e995b330a8f17cf0c55cd8c9396fd3127a133a8b16dc7ef40aeedf7ba4445413803bfa678d3ee47852f1fa1b3898e011858
SSDEEP 192:gRiC8r8QSOmuv7rpfPRpjgk9dHsb+WNntRZpOYjPeY4oNsfOwq+ofa9L8yIsnAU3:gRiCGkK/ZX9zw/iYIoNsf1q+ofa9oE
TLSH
T18B52E62AA914797B5CDAD269FD62BB12D7F1143171E02E88E7FC8E1C11E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 006b45cb0bf839588ecc39c71bb30885f2496b345715226094160b951ee9b32b
MD5 43208d01de3f09fb56f2d6612ae59516
SHA1 a2cc2b41bbfa09e5ba5ec46855645e76f47f22ad
SHA512 17f5a5c19cd7036fcd0d3ff906b3fcbb63efdf7dda17ad906842ec313cd04158b07a32f1e33c84b850e66a1c166b045213b08d632d7d4e61186673ddfb8bfcc2
SSDEEP 384:YujUr7KxkXqKf/pUZNCgVLH2HfgslV77pLuLcifmnXODUH+ErU3/mHGGgzCweq2l:YeUr7KxkXqKf/pUZNCgVLH2Hfgsv77pT
TLSH
T1C572F967AC4C9A7B0F94CACCDC2B7A4FADB5014B65D9886883FA581903D5BCF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a9ceadf98eac907764f87f0ba857d8b3fa21df041f9124ca54c3a820ff4a7361
MD5 0e462c872f90afbdfbc5cc06f5e2570e
SHA1 2020c775a1728c3164eec73ee732460c5478c756
SHA512 99b2db47b1ba3c02ed740cf0fdad77d13d6b3e1ec1b4504bce92ec65b3ce6407a1a1b9ff5eb1073d57470e5cc76a5ebc8ab5a54c23c31fce871602393d781a28
TLSH
T1ABB01220C4095502C05312B911A254883B249F228B05230953E07F72F8361E160143A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587819.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587819.TMP
Size 96B
SHA256 8b0e7eb4567a44a2a9b16892c2a0c34f0b391e15911591355c6b85d0acbb464c
MD5 92f726ed2509161a6a9d77c782ae3751
SHA1 40cfd62edcbc5da77245f09f4a929f83d3d7c981
SHA512 30a10a73c38706fba9e1b1a8f26ea2ed62cc7f66dc90f5471dbda2f56a7f2944ff6d699285d7aae989e131c3ce00e2a23609b14e769888dd2befead01eaa15d4
TLSH
T122B02202C0022302C00203B020A080E83220CF30CF03032B82E02ABAEC203B000202B0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 a64a53f967c0556cdaf6eb45144452416b7f8787b27ac38f690703fb53873398
MD5 d19eed8ec7ad3d60cab190affa3906a1
SHA1 cb8ec57e38b55fb1a8790476741bbaa1ca073bef
SHA512 e8a97e93d263390d9ea214934db17e5b0ef28eae1c77d36cbde7939f7f05727f89370ca105b3d4b54b767f02aed914c64826e836caa350f60206fd1bfd542b9f
SSDEEP 1536:MvhE4eUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19fz:YE4NL3dkAdfifD0jj+sxdhdenFnHYZx5
TLSH
T19A93127D616808BB4518C2C6326E6D97C77C6DEA96742F7835F44DA14AE0B8C0BC781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 3aafd142da884b2f90a0591b21f84a09725c3a8146e74d5a4aef88a62037e383
MD5 e0cdf2bd157d9ac33632f542f490542b
SHA1 24c586b2481ec95a952693098acc423d5442f3de
SHA512 c34dc6ecc8167b87a4be5800b5230e62673ca0e218c4ce910608ccecf37089b5bdf60e145c8ae40146d363f8307e5cc6ef5ba5ed4da9e74f3a4810d0979cc449
SSDEEP 1536:ovvueUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19fr/:6uNL3dkAdfifD0jj+sxdhdenFnHYZxXJ
TLSH
T17693127C726405BB8118C2C6326E6A9AC77C6DDAD6605F7835E44D629AE0B4C0FC781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 6d9b71cbccf2dd9e788e864f807eaafa0885827de93b76edbfb7c928b70b567e
MD5 20617ac58982f9969030c48e932b2635
SHA1 acd06672e4fa81ac89265f85e273b03b555c0d93
SHA512 ad8b4a9b5431e3f1cbda9f67ba097f57e5161248130156584cd4c5c9df7d6c78eb587aa09866e33861514ee0a12d8c3b9121bd011959f39ad784dc4aa4c7681e
SSDEEP 1536:MvdeUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19frFp:aNL3dkAdfifD0jj+sxdhdenFnHYZxX9b
TLSH
T176931278716405BB8114C2C6726E6D97C77C6DEA96701F7836E44DA25AE0B4C0FC781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 c5ea380528b6f4793fb44de5182534c3eca6deb6df3446e11952da1a4d989e1f
MD5 3b9e5460e12604e63b38935f6d52c553
SHA1 6bd693bb69027697ae8fb0b04f3c3c6ffc1ba655
SHA512 d2cc600f200e75b199c03118b1a2926c1306d3ad9e8ff1b63f5db31ab61b68a06385935c427d255010c43729b074485684e9f6b392e929edc7600f97ae5079fb
SSDEEP 1536:9vdeUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19frFp:XNL3dkAdfifD0jj+sxdhdenFnHYZxX9b
TLSH
T169931278726405BB8114C2C6726E6E97C77C6DEA96701F7836E44DA29AE0B4C0BC781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download