hxxps://vijayamitra[.]com/dcx47945593477539735/

Analysis

user interaction
yes
max time kernel
150s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/05/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://vijayamitra.com/dcx47945593477539735/
Sample260506-e1q3yaat7y

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3380	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134225151186088864"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
412	chrome.exe
412	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe
Token: SeShutdownPrivilege	4132	chrome.exe
Token: SeCreatePagefilePrivilege	4132	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe
4132	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 4132 wrote to memory of 4464	4132	chrome.exe	85
PID 4132 wrote to memory of 3328	4132	chrome.exe	86
PID 4132 wrote to memory of 3328	4132	chrome.exe	86
PID 4132 wrote to memory of 3380	4132	chrome.exe	87
PID 4132 wrote to memory of 1152	4132	chrome.exe	88
PID 4132 wrote to memory of 1152	4132	chrome.exe	88
PID 4132 wrote to memory of 1828	4132	chrome.exe	90
PID 4132 wrote to memory of 800	4132	chrome.exe	91
PID 4132 wrote to memory of 1828	4132	chrome.exe	90
PID 4132 wrote to memory of 800	4132	chrome.exe	91
PID 4132 wrote to memory of 2416	4132	chrome.exe	92
PID 4132 wrote to memory of 2416	4132	chrome.exe	92
PID 4132 wrote to memory of 3556	4132	chrome.exe	94
PID 4132 wrote to memory of 3500	4132	chrome.exe	104
PID 4132 wrote to memory of 2072	4132	chrome.exe	105
PID 4132 wrote to memory of 3256	4132	chrome.exe	106
PID 4132 wrote to memory of 412	4132	chrome.exe	108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://vijayamitra.com/dcx47945593477539735/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb959fc728,0x7ffb959fc734,0x7ffb959fc740
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,14832763946030272476,11287659120351457061,262144 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1940 /prefetch:2
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,7446713948205145575,11533738941725539879,524288 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,10047842070962126743,9959391054604480472,524288 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:1152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,1013996902331769409,10912746350956629072,2097152 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,14030190540042182659,5038307678419131562,2097152 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4132,i,15280834933082585168,14505254342209678318,2097152 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4140 /prefetch:2
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5328,i,14923200809680229536,2672560313819266323,524288 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4620,i,12344114386170600266,2645669220953419788,524288 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4024,i,11063293611129346576,15652133031177208029,524288 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5644,i,3091664703242661444,3166469590675109596,524288 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:3256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5536,i,13557983422015411884,2341894603195408446,262144 --field-trial-handle=1944,i,14426087338346388672,3730794860922538777,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:412

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2344

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3504

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 67fc7d1af295782262c434fe7e5a4a69846a63d4b628353cf0181864e511c4e3
MD5 658072fdbde7131caa9ecae188c70f48
SHA1 37015e170b5ed2bc0f6043c7c850bc546120ff14
SHA512 8392819b300fbbb76d7dd7fbd4610e689fe8a3faa6792cfb70f9070b5e7ae59fb3690805058740fc94d29ddbe9f22956c6f405ad40ce8ea93d568d861bfd3b2f
TLSH
T135E02B9BC961AC3B09FD071960845745E70503572B41594F7B3D420C8FB527A918A81C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 5d30ae7c9e774c37aec3d6a8dd8b835e5632ef973bb7845cee95260e721ee59d
MD5 037f1336b896fb9da94c0a7153b96933
SHA1 b921c93a1ee4f7dd062020d0116ed6c15b78d74f
SHA512 a406bf3dabcf9d47672f1b5d0150342e9ef2151c79aab844b11eafabebfc51fac98a9e6ea052592967a81fd37dad27bfc6f4836d3e4e7258aeae081554e7bbe4
TLSH
T18DB0220A2A8C300BCBC203B0B8A00CC032300E30023E0A22C2E020FFE030BB00E82380
MD5 SHA1 SHA512 TLSH

Submit Download

01532f7b-9431-4d73-a430-1f5427809ca0.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\01532f7b-9431-4d73-a430-1f5427809ca0.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e9df07b7c073a901d496797296d288db8a6fa8c2811b0ca28cb2a683036227f6
MD5 6d9317a31176b7dfca979242756b9c1b
SHA1 1f062092d147c21e2bb08ec35e6f9239ef897084
SHA512 eb3dfe7f51eef6008e3efaca1a988fd40e8f6d502536564073e5782eb43b3e925cb20b7affc7f5b9d38fb94300216334afd554c89a516ae699b051ef89c614fe
TLSH
T19D51CDF793B0997E861192E4EA146F2FCE790524031C7CA6C8D4AE1783F2972D20038F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1f4297cd18642e1742ce8918d58065330d6abbfce165b5e5547020155e16fc1b
MD5 2fac67061a3d5ee8816aabaae435d25b
SHA1 ae87f17996328b281c7e766a45493f0b817ac153
SHA512 e1d2a9aab04032b24ef7f709f0d5804317ce59d4c37b4802b26ce3a21395b7230eb0948b72f1f02ebf724239ab07bbdec2d41ce5ea739f006b6754c99cdb4744
SSDEEP 192:WRRfJ8vrqxfv7rpAPRp2U29+Hsb+WNnapYcj2ZPh4eHk/W/bb/VyIsnAUge:WRRfH3fUXwEwcf2b4mk+/xe
TLSH
T1AA42D82DA9186A7B9DDBC229F9517B17E7F1102171942D88E6FCCA2C14D7ACD221342B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a74f1b048afb77075445b69a4bedc0be62a50713949960e0c2f6eaa16d74735e
MD5 998ff9ed1ab699d1e463c3c6d94e41eb
SHA1 152cfc020f1615816190741f48511e3d2cfc7aaa
SHA512 cbcf876c565f28741e2a0254a4cfe60d5896733e7760f63d1ffec5b7a242021d97a06a5d515842e331272b904cc4361f90b5c862911d674ec220e70eaa084e3e
SSDEEP 192:WRRfJ8vrqxLv7rpAPRp2U29+Hsb+WNnapYcj29Ph4eHk/W/bb6VyIsnAUgE:WRRfHzfUXwEwcf2n4mk+/iE
TLSH
T11A42D82DA9186A7BDDDBC229F9517B17E7F1102171C02E88E6FCCA2C14D7ACD221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4c5dbe3f3071c1cdd70e39a99dd2a8e7a0233b08f2fef9e58bef03d6b9f0f954
MD5 eaf45e095eaf8d2e1b455626d5895959
SHA1 23bbb40f8390c77932f41805e60e5023c08cbcfb
SHA512 92ecc61b66421f057e483c277097699444f9b664b973b2ed4406a72d4c026914714c5b5c5496330675ccc8e112b23772dfe4e83882fbc0b2de5ba584e72837e6
SSDEEP 384:Wcji97KxkXqKf/pUZNCgVLH2HfgslE27pLuLcifU1XODid+ErU3+NHGSdTFO:Wwi97KxkXqKf/pUZNCgVLH2Hfgs227pA
TLSH
T1EB72F8676C0C9E3B4F98C68CD9267F4FACB5014B65EA885493FA982903D5BCB11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 64bd206cc630ffb65a6b572503f914f27f361fa08c396dff462138d8d64c370d
MD5 09c7bae427b7863bba92c6d77e504b75
SHA1 92a38fa3a3fae6a43fe88e3da0fdb08a9f3a9a10
SHA512 879685f7224c8fe60227540a1cae3511c37685a5b4d31010a418ed5b0f4d7a74de86eabe2a3edb0b4871e5bc133978f5c4755e317eb78d6fd5d8a0639cb2594a
TLSH
T14DB01250C1016501C0D302B019A2488C32146F10970F1B0153E4B97EFC275A24029260
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe582a28.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe582a28.TMP
Size 96B
SHA256 2000c6f82f46b3fb958d1944574125283ae43d107c72f3a78b74f256de09a63c
MD5 2ebd6b9e0187ea1f8861fe5e43d3e16b
SHA1 e90e9039c1e23ca04b2939e337141021dc07151b
SHA512 8c7ec5569466eee0ccb0cc5f5ae1fc7deaaec193fe7776a8d913334c8959efa3a4a6ebd858631aa89e75e6e6146d163f30af3809adb989ed181f3f9dc3f09959
TLSH
T192B00259C5036253C08213B02595E5D87171DF35CA03265A93E02AAADC3AA7156253B0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 8e260fff5993638b760f793d63abef5d40234abafc9a003dee31e49e024dee88
MD5 6366747b809b10dc65d31e1548d2dd57
SHA1 d700183f0a3bf457526ea5c5361d34f26aa73a24
SHA512 ead6a6379c4857cf8cc976d309edee4e3489d38757bf0fb0279ea01876f1c473209b03a41375abaead512a269d7d7d951bbdb18483c13b3fca56f813f2939803
SSDEEP 1536:UVZEcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:2ZE3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1939302BA9E2A19F796BE5A92769A7809CD13130E70AF688C715C534C21D41CC2F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 eac230256b556085a127472e72b5385ae3eb37b1b226be62b534b67199e75e2e
MD5 a0a62a298f765c3f051caba478e37547
SHA1 026c7ca26030031fe93fae32d78be03ffda8c294
SHA512 4495c00353e6d9b52863d6690d759acb8cb6f4aff4a1d0577187ad4fba83e0ffe28332fc66b118b9d2e9182355c29ee0ef5693704e917b5d21b7b8283577cbb9
SSDEEP 1536:jVgcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:xg3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T11F9302BA9E174AE7957D4A9176AA7809CE12630D70AFA8CC315C639C21D01C92F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 bbb4efe816f8ab0380bd4dbbee12684d64540e85c1806008f10fa0db377ca20b
MD5 fcc533619678902244da7bfb18257ee9
SHA1 a2b916e8f89c5bda3f92c355348ff2758ec7ca84
SHA512 a5c41e84d3f7df3fd4fdc7c55bd28e3427ab2a60fe099619856e882c2cac034e5b8caa130d55240c45521dada226d6f0431570adbc60b5ffe4c9741422fa4473
SSDEEP 1536:5VxcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:jx3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1D19312BA9E1645F796BE4691769E780ACD22134E309FA9CC719C539C21D02C82F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1b81862-120d-4e6b-8739-5d9d8f6c0830.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a1b81862-120d-4e6b-8739-5d9d8f6c0830.tmp
Size 90KB
SHA256 5fa002d48a1817b92c67406e913eac29f0e8b875078776e46dff93ca4f8f0630
MD5 2b79dc0cedd2d38d72d89ce8e41c6aae
SHA1 1b62810070840145bedd095f4c3165e4a33aa805
SHA512 33fa48dc36400e75b315903ca1421cbeef51f844b4df3dda86f31bd69b19ee7e05158b62a36e17b0865c6320863c510f469c0ccd463be403f84bc3cbac3ee4d5
SSDEEP 1536:UVxcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:2x3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T16A9312BA9E1645F795BE4691769E780ACD22134E309FA98C729C535C21D02C82F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download