hxxps://beacons[.]ai/zokux

Analysis

user interaction
yes
max time kernel
89s
max time network
91s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://beacons.ai/zokux
Sample260511-pc3ryacv5j

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4240	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134229752084112843"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe
Token: SeShutdownPrivilege	3952	chrome.exe
Token: SeCreatePagefilePrivilege	3952	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe
3952	chrome.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 3952 wrote to memory of 4984	3952	chrome.exe	79
PID 3952 wrote to memory of 1092	3952	chrome.exe	80
PID 3952 wrote to memory of 1092	3952	chrome.exe	80
PID 3952 wrote to memory of 4240	3952	chrome.exe	81
PID 3952 wrote to memory of 612	3952	chrome.exe	83
PID 3952 wrote to memory of 612	3952	chrome.exe	83
PID 3952 wrote to memory of 2856	3952	chrome.exe	84
PID 3952 wrote to memory of 2856	3952	chrome.exe	84
PID 3952 wrote to memory of 2376	3952	chrome.exe	85
PID 3952 wrote to memory of 2376	3952	chrome.exe	85
PID 3952 wrote to memory of 2336	3952	chrome.exe	86
PID 3952 wrote to memory of 2336	3952	chrome.exe	86
PID 3952 wrote to memory of 6000	3952	chrome.exe	88
PID 3952 wrote to memory of 6000	3952	chrome.exe	88
PID 3952 wrote to memory of 2456	3952	chrome.exe	89
PID 3952 wrote to memory of 2456	3952	chrome.exe	89
PID 3952 wrote to memory of 5888	3952	chrome.exe	90
PID 3952 wrote to memory of 1308	3952	chrome.exe	92
PID 3952 wrote to memory of 2304	3952	chrome.exe	93
PID 3952 wrote to memory of 2236	3952	chrome.exe	94
PID 3952 wrote to memory of 3860	3952	chrome.exe	95
PID 3952 wrote to memory of 3860	3952	chrome.exe	95
PID 3952 wrote to memory of 4880	3952	chrome.exe	96
PID 3952 wrote to memory of 4880	3952	chrome.exe	96

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://beacons.ai/zokux
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9e68bc728,0x7ff9e68bc734,0x7ff9e68bc740
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,8618330055733489945,3296399881978541541,262144 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1496,i,7874598457198064216,13683796038798316131,524288 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2256 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,15195115672290532686,2464949789169870411,524288 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2568 /prefetch:13
  2⤵
  PID:612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,11891660590029490735,13801493459562761732,2097152 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,5808115545015999302,11686324004142956569,2097152 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4204,i,13483512381315395189,11055929710538079418,2097152 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4216 /prefetch:9
  2⤵
  PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,16599452764446314021,2087586834426221600,2097152 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3848,i,8270514062639225402,6278599699027246468,2097152 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5692,i,17640725917362493089,11717736599201506771,524288 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:5888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5992,i,17592588472568668005,2801958714957346259,524288 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4740 /prefetch:14
  2⤵
  PID:1308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5976,i,11207502335267590816,13433676077336819689,524288 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6012 /prefetch:14
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4996,i,17236108726606921771,18385899276506540215,524288 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:2236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4188,i,5835137908562618212,402643163816869003,2097152 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4808,i,14654971432478079270,4700731051046321763,2097152 --field-trial-handle=1984,i,6518003096816993198,16461963006641384255,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:4880

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3636

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d6e918e10474ee8dd68bd5670482d6acdcf4a167dea8b2f302c6a45f95de41fe
MD5 eec1759748c2171def45d33f519119da
SHA1 5361c9936508ba4b8f5c38f0186aba191f84ed14
SHA512 105b4b420f894aa7149f9cc2aabeda6890687df3a1b9de2b511c503d87e701de1e49f178a6fbc21381644662f8c27cc547cc4b1326948533200f25c59a54e061
TLSH
T17DE0E5A6C825EC770CFE071954905742EA4013572750952B7A3D820C8F71A2E0585D1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b75ecd2daa2cf19567e101c665c995b344e9fa0b0f7ad527eddcfe97c9631c42
MD5 9062f17d1aa9f9fbd983c0c4a76d69ae
SHA1 240c01ff1d243b2e91b3637a7621fb3493a3589a
SHA512 96946394d83188aee028adcb117b6d85b4ddc06df50239639831179d39c6184ce29ac8aad263ad183d4a1b0c7106739ba16f01404ace09a04fa278b1e1e70ab3
TLSH
T10821EC218CD52311EFA783F741922D81F136356C8CA33F27B52D612A643BFD12A1D098
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 7644dfe297bfbc62838b0975062607a27f9977765ea4d9c9ea4b14039321d3d8
MD5 7f0f593e2d89205a74d79e127f72e244
SHA1 39a2ef13e57d3376235a4328566e56b48c9d6bab
SHA512 0d58c2ac0e57d90f5f23bbea25cb5f6d521e8d8f5548571008061898d33ab2b5fc3e2ebca04d3d6759d274a58aa2fc8e9c3fa91eb7cdfbef0b83bd553fb403a3
SSDEEP 96:D0CnbaIaEgdM1NAegOY0WYmpN8Iwrwtwnp:D0CnbaIaEgdM1NAegOmYoN8Iwrwtwp
TLSH
T11EA16CF783E48A6EC91596F4AB156E2FCE690524432C3C7689D8AF4B97F2872D10074F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cfb84065c98ca3f7d484cd4be6a92fd1c2ba08f5b8db9fb4936d586bc97a538f
MD5 02b0316cb40e23d55ae72e4a327ace83
SHA1 c8da9b3d371632d84ec20c9614e0b6a6ab103008
SHA512 ea5bcbe38a6eb164eb86914e7e0ec1552fa26efc94ff5afe4b15c9de9661ab04bb9751df0fb956a9c883b6ed817aa30fadaf386d3cf93b8a86f349bd746147e7
SSDEEP 192:zRJPhLqvuGMv7+FpAPRp2fpF9hHsb+WNnh/teF2sk472ibaIooVyIsnAUge:zRJPEY6FUXmbwpy2F472maGe
TLSH
T12D42C86FF924693B5CDBC22AFA15771BE7F5102121941D88E6FCCA1C25EB9CD222740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 548895387d37d5f73783b580b25e2b15a41b3911472446b68cf88caeb377b542
MD5 2a4bd8a2fe54a99521c9ccdbdb24e1eb
SHA1 e4e6797aaf1ef385003eef667944ca14998a2ad9
SHA512 664fefbea93e643489b786f78851db685be9118621519ff0b1924d1c8b4e987691a4e200b76c6e7561cc621fd04ab04aa70037e294ef092a84ec4dba41320b0c
SSDEEP 192:zRJPhLqvuGAv7+FpAPRp2fpGE9hHsb+WNlwh/tYHEzY2uk472ibaIo6VyIsnAUgE:zRJPEc6FUXabw8yn2H472maIE
TLSH
T10352B8ABF914693B5CD7D22AF911771BE7F5102121841E88E6FCCA1C25EBACD322750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
MD5 80e775e497e26256725722f158c1a7e7
SHA1 24ed3e37ba5a437a46beacb73c33c43eae3aec98
SHA512 09ac01744410777e518bc948ab2c8649e18de947108d5d4afd77f70e32dbc68ce133ca9306edde725939c3c02ac6e14f160c2e4f358579e678e152b19c349bfd
SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrL7pLuLcifyTXOD0b+ErU3wRHGU/QT:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1L7pY
TLSH
T1E77219676C4C9E3B0FA4CACCDC16BE4FADB5024B65D9886843FA582903D5ACF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cdf4eeb2a4c94563a1b1dafb08f9f20c1c90f473ebcf8a793bc9768b47451964
MD5 98505ee7eda9ff7bc48f59009d7ad7f9
SHA1 757738b6a2c95dd9cfd3832d206eb1963c3af4b2
SHA512 5d2292ad53f88abeb466bd3b549e3fae3fa52ce5789aaaf00b71e3fd3b7328f3ae5c5662e9446bb44128bb300e8361dbbca2cb8bc39d093e6ac5b5e5d62c9066
TLSH
T13AB012D084015641C00302F4228314C831149F129707370553F079B298273908129151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c723.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c723.TMP
Size 96B
SHA256 6a5bd2b1a64ed5030d9e0ea6fd2d42654d34d69aa59b49151a11ba3d5169e8d6
MD5 75bf9d79e85ee72b394055f171fb73ef
SHA1 a77af1f3a0c50233c62803cebeeeba146ab1630e
SHA512 a431c19c0292e49cdfc02def822647047e28361c3a554f9e1c389d94b56fafe9d61bfb2ea3c93b27c6d91d61a23a6800f4606a600edf9c8756d7aa556e90f8a2
TLSH
T173B02228C0022302C00203F03FC080CC3020CF32C203020282E80AB2CC38A300222020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 152KB
SHA256 0408c3fbab23dc863ec51ab526195e12ce9235965416811b40d1cb037d1cc6bd
MD5 0de2c3ac2789aaf2fba5cc75b11bbd9d
SHA1 189e6b21699f3949d12d489afd821106331ce30c
SHA512 706b75f608c7a529a33053c7baad0f161fc96a51b2e8d33bed1f600091e86da645f15b1c9825e2afc4e570a13696cfd95d7b326449d4d7178d98f2c1c4044809
SSDEEP 3072:tF2D+opCCwUY5Ro/JpJjmMoZ7g8TlwN++J3qUQm08KMWF0bFTcVHr6zD:t0SojKRo/JTu7oN++JjcMW2VcVLK
TLSH
T17CE312759D1A3ABB132A829AA0175C9C59F2CC8F080D11AD70D7DF2D21BA746C60FAF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 a976a58addfcaf960ce500b84593eee3f40caa75d3f129985bd8742748facc4a
MD5 dc45aea853cc8aca50cd1b70f2e407aa
SHA1 c03a6074482fd4d9d9f3008ef148db500d661ad0
SHA512 2d14f7a9223a53c81105bc918478e49bf6fa57b22599959526a4b3e2916879308298ed7bc8a7db0139c559ddda8cd88eb69077d7cf674819b26f2865e8dc1a1c
SSDEEP 1536:UGpBP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:vp++J3qUQm08KMWF0bFTcVHr6zD
TLSH
T1D89312B9A82E7D3563ABC6E790079CAD8CE3DCCE1514117C31C79F1E14AE392934B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 d9dc7ae9553b3cbe8c59595a683a0f6e0ba0adc8c9202ddde69d3a542b404f9c
MD5 2041476e41bf3291efdeb1301a1255f9
SHA1 20cdd697b4a4f73f703404432232bc33451cd238
SHA512 2bb618ae61c34569d43548f079895ca2aa482835e91fb14a86cfcc6bcaa9a1bbc30b1c73492bb07e2cf60f3693c21604987bc7fd2b813298e15566a8b9fde833
SSDEEP 1536:eGt+oP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:Qu++J3qUQm08KMWF0bFTcVHr6zD
TLSH
T1519302B9991E7D75636AC6D690079CAC88E3DCCE1514117C30C7AB1E14BE393A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 a8447d141b7608627cacb1471ef582e8c544280ad91128e3a5edcdf47c39411e
MD5 fc0b4e17b808ca44230f0769b4149766
SHA1 29f8cf61314df1a8936774f6688f580a9ad30cf3
SHA512 4c28312f7ff53041b47837bff8d5b4f22269417ffc2486c1747312fdbd7845818634962d7f952cd94d68fe3f957791fb39e84e9342bb56ebdf4c7cd2e50594c6
SSDEEP 1536:vGpBP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:Mp++J3qUQm08KMWF0bFTcVHr6zD
TLSH
T1999312B9A81E7D3563ABC6E7A0079CAD8CE3DCCE1514117C31C79F1E14AE392934B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download