hxxp://preschoolattrinity[.]org/

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20250619-en
resource tags

arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system
submitted
06/05/2026, 04:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://preschoolattrinity.org/
Sample260506-e9wd1sev7p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134225159465862918"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
6048	chrome.exe
6048	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 5360 wrote to memory of 4912	5360	chrome.exe	84
PID 5360 wrote to memory of 3348	5360	chrome.exe	85
PID 5360 wrote to memory of 3348	5360	chrome.exe	85
PID 5360 wrote to memory of 5868	5360	chrome.exe	86
PID 5360 wrote to memory of 4244	5360	chrome.exe	87
PID 5360 wrote to memory of 4244	5360	chrome.exe	87
PID 5360 wrote to memory of 3520	5360	chrome.exe	89
PID 5360 wrote to memory of 4072	5360	chrome.exe	90
PID 5360 wrote to memory of 3520	5360	chrome.exe	89
PID 5360 wrote to memory of 4072	5360	chrome.exe	90
PID 5360 wrote to memory of 3276	5360	chrome.exe	91
PID 5360 wrote to memory of 3276	5360	chrome.exe	91
PID 5360 wrote to memory of 4372	5360	chrome.exe	92
PID 5360 wrote to memory of 4372	5360	chrome.exe	92
PID 5360 wrote to memory of 4944	5360	chrome.exe	93
PID 5360 wrote to memory of 1104	5360	chrome.exe	97
PID 5360 wrote to memory of 1104	5360	chrome.exe	97
PID 5360 wrote to memory of 3956	5360	chrome.exe	102
PID 5360 wrote to memory of 3956	5360	chrome.exe	102
PID 5360 wrote to memory of 5456	5360	chrome.exe	103
PID 5360 wrote to memory of 5456	5360	chrome.exe	103
PID 5360 wrote to memory of 2240	5360	chrome.exe	107
PID 5360 wrote to memory of 3616	5360	chrome.exe	108
PID 5360 wrote to memory of 4472	5360	chrome.exe	109
PID 5360 wrote to memory of 6048	5360	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://preschoolattrinity.org/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb65dcdcf8,0x7ffb65dcdd04,0x7ffb65dcdd10
  2⤵
  PID:4912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1976,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:3348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=1548,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  PID:5868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2344,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3040,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3044,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4364,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:3276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4668,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=5180,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5184,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3152,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4704,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:5456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --field-trial-handle=5532,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --field-trial-handle=3280,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3008 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --field-trial-handle=4732,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=4492,i,16172753531568636395,14490515261391330911,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6048

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"
1⤵
PID:3988

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 cc4a3bd61baf9b6adfc3f21a3d16c26623e7335a9e15ba5e3de72da0f485b330
MD5 d04c7065466a847c1354d4f2eed74402
SHA1 d0a891935c016572543b22f10247c897a225ce54
SHA512 a4412bdb92e7970c6f050b3683e331f5b23de9440622d34572be2ffb7778c564d490072afe6f3d76c65bfb0676cc17ef1a26e7f54ce951e21756c1e3aa0ff01a
TLSH
T1E7E02BAECC31982709FD4758A015074AD75003571BC0885F363CC20C4FF473A9A85C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 552B
SHA256 d1801d22a5962785b33a2660ee224ef1dbbdf97f0891c9bb439dbe9b7e7df653
MD5 7e0c153d944daa27f407e2565df5232e
SHA1 af922151eda2c41adafd7e639ed0a763d88ee745
SHA512 d4413df3fc5c3c5022f5678ec2dfc26543238a4349856b65c267433f54d1085d64b5ea17ca6305914eb56098ef7f513459ec058302f4fe3ec0074efd56f42b3e
TLSH
T12BF0AB801DC06123EF636A3448AF0A1120340917FB126B97C14A21E447E37DF4898748
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ca31dc5900bf4580bd4a0a6a78b8a6c5cb4941cc8fb22e4fd9b148247ce0b3fc
MD5 7a270016821a884f7d9e53da92933e2a
SHA1 c299e1f9320e12f28fb85b9bf43455ad1c69848e
SHA512 7d8cbdea08dad190455c54b44cc6af5ad023a8a7a6163dc8da6e9b838639ea67d06c07a6c1300e2c7edc3042654c970057e5e15851acf95457216231590ab794
TLSH
T14581CBF783B4097ECE1192F82A246F2FCE2D0526136C3A558AD46F1B93F54B2E25064F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a0bc260afa21d2022d646c5423103cfab5f34988909ad01ecb80dadb0e6d19b1
MD5 5de11af9fa0083aaf6b2b3bf0a6bbbc1
SHA1 83ed0632ff7ec2317d9c61ea4cca0f299c323103
SHA512 6081e5d76c5df1dc978e3990347f6b4f261fe642a074d9d6955d7a3b373b820b8c98c6bd45cef6d61ba6790a04b50be4abf2f0ff7d041a477999fa4ee5c13589
SSDEEP 192:JYt6Jl6GkZ8PRppvuwNHS+WNUCGZXiOF+iKDe4WiOIpQyIsnA/gPA:JYt6n6CXH9cQN+DW8ZPA
TLSH
T16C42D52A99205E7F4CDBD729FA227F16E7F5202165902E84EAFCCA2C14D7BDC512740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 1b7469ab23d61a3b462c4784ce33bd75e3fc1372b3f2774d1efe02cd57a4d55e
MD5 c0ab503a6c07b3d0eebbf2fe39a53aa9
SHA1 92a318a82818024ad1f2202667d6e11ac418217e
SHA512 87e2ee66de1e78c8e42fadf616b491aaff4a5d261ef7b3e2f8e83e30ef04879477e6654b334033fe407dbbe7af6a852d2ba69983d8d60521caec1346117a8265
SSDEEP 192:JYt6Jl6GBZ8PRppvuwNHS+WNUCGZXiOF+iMDe4WigIpQyIsnA/gPA:JYt6n6dXH9cQN+BWgZPA
TLSH
T19E42E62A99606E7F4CDBD329FA227B56E7F5201165802E84EBFCCA2C14D7BDC512740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 8070e92056934b5f57764931f4181df55be35553715b4b001e8f90c6ea871fd2
MD5 3da169f3ba67c01f6f634f10b6291bb4
SHA1 73a92fc3dc6d8525bfcf6a55a824020836f58e97
SHA512 af64c577c7146a35f7d34f04985b8dfb45408414bd6b1adb03af2a5df59bec232a4e0df95320b8126cd25ce1ed2134cedc3b1dfc1d287c3a25999093af9e6d0c
SSDEEP 192:JYt6Jl6GqZ8PRpppuwNHS+WNUCGZXiOF+iuDe4WiXIpQyIsnA/g4:JYt6n6cX59cQN+FW1Z4
TLSH
T10C32D62A99605E7F4CDBD329FA227B56D7F5202165802E84EFFCCA2C14D7ADC512740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 4cd044a448a50da6f8a0e90adf3ffe2f8d02dedb385833896dc5d9c835ca8ac4
MD5 6971f811f1f680949986cbe64ebd1b02
SHA1 bbcfe0b5083f8029f44d8c33e53e1eedca19b714
SHA512 f1e35102b370aa4250c570991d0174ff1226d7519111339ed6aa0ff02be55fe07b740380c92427a47dca243ace6fed1d04793dfc6c53f81fecfeca9ee6c06231
SSDEEP 192:JYt6Jl6GRZ8PRpQuwNHS+WNeGZXiOF+iuDe4WiXIpQyIsnA/g4:JYt6n61XA9cLN+FW1Z4
TLSH
T1AA32E62AAD206E7F4CDBD729FA627B52D7F5102165802E88EEFCCA2C14D76DC512740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 15KB
SHA256 2c4a07439c3cdbd0d1610339724883cba3e1d9f6f7a2ff784e847f73a32029e9
MD5 24a692ae74a54b32a180a3375100a683
SHA1 6e76e1b5d9e1a607f525b11bf9050c6ac178dfbd
SHA512 470c1f0e1be35bb396ccf5d9494f7312c383179ccd7574b4e68ed582e6cf56a66fd996687c53b9e064c16868a4f5a5beafe786b53b8da914a7b052e8efd286cc
SSDEEP 384:J5zA7pLuLceiBYXWnPkXqKf/pUZNCgVLH2Hf1NwrUo7HGGctDAnqwVHL:JRA7pLuL7siWnPkXqKf/pUZNCgVLH2HK
TLSH
T19472E8677C4C9A770F94D9CCD9267F4FACF6024B65ED886443FA982503D4EDA010A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e3bec57f9c1f8c1f121b1bfa19f31ac95939c227\c73e0d76-1509-47ad-b286-46b23f6ebe05\index-dir\the-real-index
Size 4KB
SHA256 73e02a2f2d8ebec8578febba0dfef89162d0c18eb1f369a881e945f8164bdc50
MD5 e138401e4ad15657f3166201930a0d84
SHA1 deb7cf41f903b1d7510c9d97e1f02434041ddc5a
SHA512 e5cd383a695a79d3ce6ebc30bf7fdb7189ad9c2af43b15b816d3852d0b503aa60731892bd387329900e2f2d631f56c3a84e4b06aae87ea04265ef4dbf3c51459
SSDEEP 96:cjnNiWUwwQLDc4RkxQe8z9k54Kq9NR5i3t:bW9wQLDcu5z9q49Vi3t
TLSH
T1B081F8341DB02A5BD5419CBD907A2384BBF0CAFF0393AB4B497CA0125DC3A094E159D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58502e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e3bec57f9c1f8c1f121b1bfa19f31ac95939c227\c73e0d76-1509-47ad-b286-46b23f6ebe05\index-dir\the-real-index~RFe58502e.TMP
Size 48B
SHA256 57e56c93de754ba00c0060a4316b25e25b44410af6e366dafa1ceb1acd0b5079
MD5 0162780a80798556045c422dddaa3b82
SHA1 87a194a823c650013e90bd5306749c400ba945cf
SHA512 4678ef5c94c0bf71ce28749d6bf0cff24e80a1721d11ecfd107e81dcc7779df7b2033cb93f90c46184887bc2fdc2c2383c863628f6f0863845f6045a81cd7bb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e3bec57f9c1f8c1f121b1bfa19f31ac95939c227\index.txt
Size 127B
SHA256 d6f50b832a10b98525d59dbc97dea23447432ae241dff75f6dc74281c18795cd
MD5 1a57dfcde561c779f283008930e867eb
SHA1 f31879e8cef96c82dceda128668968ece2acc265
SHA512 81aa3b5f8f3fac7d351201ffbaad3674abd6b2a06f8c8521f6982d2d7d6685e92f5fc50a5356fa105de733befe281aaad4964ff821d4746775e37c2dd39c8d75
TLSH
T141B09BFF3E01D525571911DDE655A51ED4164008DDD955CAC1A4A0B60491473211D60D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58505d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e3bec57f9c1f8c1f121b1bfa19f31ac95939c227\index.txt~RFe58505d.TMP
Size 131B
SHA256 cb49cb31a519e5064f7b826d691fd3ab7b2ff209ce96f6e103cfef5a13248a02
MD5 21249f1b1f1fbf0db250d66f55287420
SHA1 113dd6f41325becab65258d09986143ce5899746
SHA512 cf0ee7fbe556ea15f0dc8636a48bd733d1ee5181d70626a9c40defad7564d4e7f53fca570703cfccde65052fa3e5a37996cd9076bc8bc6845370cfd81b44bbc1
TLSH
T1C7C09BFF3F019525570C50D9D754951EE4464C08DD8545C981A470A61470473215D64D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 aeaed574419f41f39817097e028ab43900133b73c9d1db9e97fd22c627f8b051
MD5 d89ff3d84b0cc8d62a5e6ad6d0619724
SHA1 ea5968085e39594454edcec7f54b807e212ba841
SHA512 45245058e3698b04302463efc6828b3dc0ec394a50fff8996151918de4c032ce7a2c5e6d7f54830f2ea826f0c5838965ad7074e42b644b08df3efe68a5f90f88
TLSH
T107B0240D144CC1D1C4000370D04D304473300C053315471340D444FC4F031C453CF44C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe582074.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe582074.TMP
Size 48B
SHA256 d0b889e39a6983e8c7e4b3fd752055aeb7fb19351a0dd99f76a6f027fabd2f28
MD5 ab455c1fe93dc7a11f9a1b9ae9abb7b0
SHA1 f43553358d756c99484ee2bf7d5ba9e845295c19
SHA512 eaaafdbdfbc120bf26161b1391f27514df7f40d4a4baa2a12cfb24be3cc95ca63483b39bc3170557a81ec51db9c60245792398a092aa9ec4ef4a6ed76938c6ec
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 83KB
SHA256 05ff002619dc2d7a49c3a10960f7dd33b964c4f026896ca8864bdbd9b8670eb8
MD5 7e25d3daa648bbcda3bde4a184d9164a
SHA1 611319a84b2d2c01d0e88d69856360855e22b48d
SHA512 14a317fb0304fa4fe6309335780d92eb3e08c90191b16974749ff7a1b1e69c4263b64faa151ff02d4e2073929ad7f5204e32709f019717ca7cd1e5149c3052d1
SSDEEP 1536:bSyoXj8V43bjn6ldz5eU1vkHzZYiVNoV8cWKNR+K7i9U39SK17W5HvTwM1:VoXjM4rTmN5eWvStRNoV8cWK7XF+TwM1
TLSH
T120830233A4DE3BD713645164841A3F934EC405F725C30AE09A793EE62B9B8DC0B7262B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 84KB
SHA256 ee45ed6783db5cdf7650708366a43aacde04f7d2198b201850f4f48f9a7ea4c5
MD5 5700dfb3b96ff0ee13af9178221a4f48
SHA1 049d2b995002c56b202f327c88e369b9f977773b
SHA512 c5391b12d90ab1c4b7b95ba9e13817e12263b95f523194608c4b48478557cbd13ee1a6cfa59f89a7c229c2d35795b848db2ba0015b31f4b00962f29757322c66
SSDEEP 1536:+SiwYXj8V43bjn6ldz5eU1vkHzZYiVNoV8cWKNR+K7i9U39SK17W5HvTwM1:gwYXjM4rTmN5eWvStRNoV8cWK7XF+TwU
TLSH
T170830233A8DE3B9713A55164801B3F930D9401F725C70AE096753FE62B9B8EC5B7262B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 84KB
SHA256 c4206e342d6b11148f9fc6d2bfd2349a1b04e95ab667505693db3116151325fc
MD5 f00507e72a36b98f044d69e318b1d9c1
SHA1 7e96b685c158486a9d545d6623190caec61a6a11
SHA512 42708d5f1f6de20a0736176f08ba2cae8f5db7c43475a6e1f755ba1b82ae6527f52ef761ec109b28798ecfc14c805bce9fc7d6221fa8ebac153fbb708dd7c65d
SSDEEP 1536:rSiwYXj8V43bjn6ldz5eU1vkHzZYiVNoV8cWKNR+K7i9U39SK17W5HvTwM1:zwYXjM4rTmN5eWvStRNoV8cWK7XF+TwU
TLSH
T1B1830233A8DE3B9713A56164901B3F930D8401F725C70AE056753FE62B9B8EC4B7262B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download