hxxps://simplaza[.]org/rkapps-fsrealistic-pro-v2-2-3/

Resubmissions

16/05/2026, 23:19

260516-3a7j1ady5k4

16/05/2026, 23:16

260516-29dkjady3l6

Analysis

geolocation tags

eueuropefrfrance
max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/05/2026, 23:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://simplaza.org/rkapps-fsrealistic-pro-v2-2-3/
Sample260516-29dkjady3l

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5840	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134236942035164693"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
5352	chrome.exe
5352	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe
Token: SeShutdownPrivilege	2312	chrome.exe
Token: SeCreatePagefilePrivilege	2312	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe
2312	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 2312 wrote to memory of 4864	2312	chrome.exe	80
PID 2312 wrote to memory of 3524	2312	chrome.exe	81
PID 2312 wrote to memory of 3524	2312	chrome.exe	81
PID 2312 wrote to memory of 5840	2312	chrome.exe	82
PID 2312 wrote to memory of 5220	2312	chrome.exe	84
PID 2312 wrote to memory of 5220	2312	chrome.exe	84
PID 2312 wrote to memory of 3640	2312	chrome.exe	85
PID 2312 wrote to memory of 3640	2312	chrome.exe	85
PID 2312 wrote to memory of 4948	2312	chrome.exe	86
PID 2312 wrote to memory of 4948	2312	chrome.exe	86
PID 2312 wrote to memory of 6040	2312	chrome.exe	87
PID 2312 wrote to memory of 6040	2312	chrome.exe	87
PID 2312 wrote to memory of 3016	2312	chrome.exe	89
PID 2312 wrote to memory of 4868	2312	chrome.exe	91
PID 2312 wrote to memory of 4236	2312	chrome.exe	92
PID 2312 wrote to memory of 3068	2312	chrome.exe	93
PID 2312 wrote to memory of 5352	2312	chrome.exe	94

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://simplaza.org/rkapps-fsrealistic-pro-v2-2-3/
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbea70c728,0x7ffbea70c734,0x7ffbea70c740
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,10631486663283238162,6272242420354490089,262144 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1900 /prefetch:2
  2⤵
  PID:3524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2076,i,16610349855677760885,7009035795366926864,524288 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2208 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,17903771018414917378,12599983834242320467,524288 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2532 /prefetch:13
  2⤵
  PID:5220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,7374057074479221027,17280227260221215886,2097152 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,8250927835341649240,14551344764822598279,2097152 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4352,i,44168028708268155,4767556922950637442,2097152 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4360 /prefetch:9
  2⤵
  PID:6040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5444,i,17626679937767645075,1990522573886031728,524288 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4320,i,17298495273439071876,14153638709356369070,524288 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5692 /prefetch:14
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,12849842540822279082,17653802104636557588,524288 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5736 /prefetch:14
  2⤵
  PID:4236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5484,i,12350108866380022555,3481764801489894980,524288 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:14
  2⤵
  PID:3068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4388,i,7849689426545984166,12926133031149710247,262144 --field-trial-handle=1904,i,13790657855849000755,8879826873334197373,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5536 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5352

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2576

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4ebbde8b26ea0acf6e7813a4e0545c7fc826c5e8efe3a79c1c2c721b1a58668c
MD5 cccc58371e27f73e54c0e6fcf6f02310
SHA1 a207e52c9ea434b6a866e173e28570186aa508be
SHA512 1e0284969bd076619a13cffccaf252477702431d4ab74d7853ebabcf4e1fb09556dd958b1881626e724ce6a0403f2bfda434081b7c77e426da4aaecef956dc72
TLSH
T125E02BA6C921EC371DFD1B2C61551745E76013572F805D5B3F3C810C8FB177A554586C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 16KB
SHA256 2dc3fe1c8a0a7b667d6202adca48339d16f367c48e173ac24cc65525e8db3ee3
MD5 56af702847e20691ee55f6bc0b3000f7
SHA1 b5a767c3c380d56a8c5689642370c862895ed975
SHA512 96b1375e00813abb67199e169c2188a11eb6b84150f29fe5976a4bcd58697cc95a5b9a192e9193cb61727ba79ae532f0eef82640aa6dcb5425f279907441e72a
SSDEEP 384:KNu8Jr/BiETOjd2iXLxxzTFkJi4LvIFMwfx4XaqHEK:KNuOiF7xrkeMB5EK
TLSH
T1EE72C0172A554AF1E801DD3C3E908FBCE6BA3954E42D12631F7CE8039A6F0E8673160A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 6c34b2b2d3004fab4e550e14f3683e75eaa1ebd4d6ddd28b6aea624cb3d3cf32
MD5 1c078501eadcaaf4d082cd2aef0c4032
SHA1 8e8bbeea9dc2d7083d146d605fa015cbc26427eb
SHA512 4b6b0770fb146c41748dd04a0af3bfb28fb4572437964a7da7d2fc42fdaa11971629c536bdd860a921d803c1c3c777d9bf1a58f079ec97e22f2e95f1fffbc86b
TLSH
T118E0A95402E43641EF980EF824824EB020F18A2BB1065B33E7ACD09AC8B3FE96207088
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 250e872e7818f7e0a76e48e2daad0c9e349f7d4c9602ebe6a12e41d092508c03
MD5 d7dec881a67555b8c9a2b0e22439c380
SHA1 59029c69e996b77972b6844cbd968e4badba312c
SHA512 503df4bbcb2547cd193fcff753027ebd1aacb43bde6f5994996955ad080b9277377973a758783008ad0278e4aaa0a2585f29df71f0b78e3316bfce4b10ac7742
SSDEEP 48:YALl4+4Khks8Rs3XLszfoKsBfsvos9KsZgmzsY4stFgKs65gWsx7sVuksi3a:D1hykOOOtTftWICLZGK
TLSH
T1EA919AF7C3E8863D891152F4EB152E2BCE6D0A24532C3D56C8D4AF4B57E28B1E20165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 3fceec2368f93ddd3be7eaa1465a3011c325ff47801261d2e3bc86a459460fa8
MD5 a9125c26694a66613be5174b13bd716c
SHA1 d0abfcc6f0e0b8d2779b7f996521b8ebdf6cd039
SHA512 5811381d70a31e2f21b2051a0c5593e8505bc21c15a15c6e78f2f2a296602ffd19c6ce03bfc0a32c575a8048dba5ba42472a9bf5d2aadd73dfc95e4c5fe7a5ed
SSDEEP 384:97jJY7KxkXqKf/pUZNCgVLH2Hfgsl6y7pLuLcSjvKXODJ4+ErU3rQHGjLsHHG:93JY7KxkXqKf/pUZNCgVLH2HfgsYy7p8
TLSH
T13E720967AC4C9E370F94C5CCD816BF4FADB5024B65E9C86483FA582903D5ADB110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 10e120dca496833ced5b999408bc057dba9570f687f2d1157ff7aae40aa07f24
MD5 0ee2b996b74799b9b2688c4f95ce61b3
SHA1 d664283e759ae91f2244169d2d9d758a83eb1168
SHA512 0c9a4f93cbafc934e59063628687fde25a5dbb190066f7555a3e011130846f16c8204bfbf4fe49daf78687da6b1ab2cdd28103f1fe767e585caeb1dd08a2bc84
TLSH
T1E4B01200C046B102C45606B4358254887268BF10D60E170143E06922C8352618078150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588ba1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588ba1.TMP
Size 96B
SHA256 56a4d047a92fc29afdbe9c492cddafe02037eb055fbc8497a1b466a1b470f9c6
MD5 1bba51d2d3212ac9c965ae0a7736ee08
SHA1 57d966ce1e31bac637579f9ce60066156487acd4
SHA512 8caf6456fce2a70641a42123bb5c657ae9c452dc26feec6d49bc72f540607da889bb59f1d885070601be3f7d33637d7ec3c168208598dd8b9be3c0e9e1d8c638
TLSH
T1A7B02200C302B202C08383B2208088C8B220EF32C2030222C3E08E22CE283B00838020
MD5 SHA1 SHA512 TLSH

Submit Download

ad558cc3-dee8-446e-a05c-93262dbb5a42.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ad558cc3-dee8-446e-a05c-93262dbb5a42.tmp
Size 11KB
SHA256 d56c9b7a869aa5849b70f74110cf08178991f0f8b522fba0cb04cfa6e3b8ecbf
MD5 c7bdc7be05321715d617d29202fdf8ff
SHA1 c3f85a4912fe8832a1987f02cc13fbcc24c7fd59
SHA512 f27e8d5f09c274a617768605e107507b35be61a793b193f4ae2abb3f5ac8cacc5ad14cba172e829e916eee43963b6f179e1ea967f68c2a983cac77d5e3ca33eb
SSDEEP 192:sRJXvqmyMW4Pv7HpAPRp23e9DHsb+WNnpARW22Voe3VyIsnAUge:sRJ/24HjUXr5wuF29e
TLSH
T17842C82EBE10693B5CCBD22AFA657B67E7F5103221D01E84EAFC8A2C15D75DC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3e0f8cf72f598c8ea5bffbafc818b2ad30c8df34145224461b8aeaf736cac63c
MD5 3cbe839332e2a0b052bd09f6f5dff464
SHA1 2b7f59afbafe6be5848e85c0aee2fe7d1b9ed8de
SHA512 382f6a591596c63b0ed6834373491d3ba64c7a82276607fd6ea69228702d5c4025d2f036f80ea674e45f881fea04c31250b335dcbe7056e4af9eefa831843c13
SSDEEP 3072:OGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:Jm7Rkm1tYpBeh2BAo+
TLSH
T157C312275D75A97658B9BB0EB04E0B1F1EF149A7C930DE92C8D85F0823FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 28e99fe9b2b671cc22c7987e2e9adf70fcbe5625a458dbd1b9ea37527df2e4fb
MD5 788479dc7dae69645aaf80cead19603f
SHA1 b34b53c0718d88e4d36bc038e0e20bb58fc1da58
SHA512 d4c2ad8546999b4da04796358aba67d51af81420498de612bc3bc23f2d59b23e2e13807b6e1311beeb7424af6275bef795cd66b91396c0cba85c26f220b2ff07
SSDEEP 3072:2lGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:2sm7Rkm1tYpBeh2BAo+
TLSH
T1C0C312375D75AD365CF9BB0EB04E0B1F1EF149A7D924DE92C8D86E0823E66CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 1d7f51c5156cc3a002de94e2ccd272c6fcaf4a8d8fff566d520a40ce681dd57d
MD5 5cc5c013f62e2d25df108542b7394699
SHA1 50a0340db3c5c7252dc5dd0e95f4ddc799425547
SHA512 0dde52e0d1287ad513584c8521888008b4c16e2585c605bd1601d12ed8c74f67fca4783ca2974afecb2c0ce3b9a8f77d5a7cf1bfcf8d0768dd453550309452ac
SSDEEP 3072:jGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:am7Rkm1tYpBeh2BAo+
TLSH
T1E3C312275D71A93658B9B74EB04E0B1F2EF14DA6C930DE92C8D86B0477F67CD0905A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7fdcca88b5412870c1f00a63a52ab584ee9a64d43244586225a60ffe4b2b45d2
MD5 b019d6db8cfb4f41dc86ba5039e78720
SHA1 860d6184565005b8ef0781c923e4190ee0762a0b
SHA512 50346374dac23b3eae93af176c36f063c9fcf6bc38838a9b73a02b1c66d645e8c97d477f6d24a5e3ca02ebae0dcfe76c1dbdc31868766a48275ae7cbbcac3887
SSDEEP 3072:RGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:Am7Rkm1tYpBeh2BAo+
TLSH
T1B6C312276D75A97658B9BB0EB04E0B1F1EF149A7C930DE92C8D85F0823FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download