hxxp://nightcord[.]ru

Resubmissions

01/06/2026, 15:58

260601-tekflahy213

01/06/2026, 14:14

260601-rj8b4sgy8r8

Analysis

user interaction
yes
max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/06/2026, 15:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://nightcord.ru
Sample260601-tekflahy21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1748	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134248031625561622"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe
Token: SeShutdownPrivilege	4172	chrome.exe
Token: SeCreatePagefilePrivilege	4172	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe
4172	chrome.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 4172 wrote to memory of 4720	4172	chrome.exe	87
PID 4172 wrote to memory of 1748	4172	chrome.exe	88
PID 4172 wrote to memory of 4804	4172	chrome.exe	89
PID 4172 wrote to memory of 4804	4172	chrome.exe	89
PID 4172 wrote to memory of 3824	4172	chrome.exe	91
PID 4172 wrote to memory of 3824	4172	chrome.exe	91
PID 4172 wrote to memory of 3300	4172	chrome.exe	92
PID 4172 wrote to memory of 4420	4172	chrome.exe	93
PID 4172 wrote to memory of 3300	4172	chrome.exe	92
PID 4172 wrote to memory of 4420	4172	chrome.exe	93
PID 4172 wrote to memory of 3808	4172	chrome.exe	94
PID 4172 wrote to memory of 3808	4172	chrome.exe	94
PID 4172 wrote to memory of 4876	4172	chrome.exe	95
PID 4172 wrote to memory of 4876	4172	chrome.exe	95
PID 4172 wrote to memory of 3392	4172	chrome.exe	107
PID 4172 wrote to memory of 3244	4172	chrome.exe	108
PID 4172 wrote to memory of 4132	4172	chrome.exe	109
PID 4172 wrote to memory of 3452	4172	chrome.exe	115

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://nightcord.ru
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8b855c728,0x7ff8b855c734,0x7ff8b855c740
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,12647931032125374023,8159406254426973689,524288 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,12315092130121346348,11700858638435121591,262144 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,2382200360954680249,7663945855976476945,524288 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2340 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3144,i,8513666173675179255,6124321572725737146,2097152 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,12342769520274739057,5872055958930749725,2097152 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3836,i,18377055732281622832,11664901919256733105,2097152 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:2
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4404,i,9248480908088215687,15974783102220298338,2097152 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4868,i,10822577764749813650,257124644305842984,524288 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,11301422079836357982,9889533144855207826,524288 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4848,i,3118804353725384807,5701615297007931276,524288 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,10542395660830081177,2519759393380457464,524288 --field-trial-handle=2060,i,11927442074043322545,2082486226376795649,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:3452

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3852

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 d2e824ddfb13e46c98d1f9c618506c63b95ae5178e656b7d58512111605b502e
MD5 4a7e31840c752b2deff67dfa075e87b2
SHA1 e092303796e2d4a556affea308a52b6d50071773
SHA512 a021c44bfa050a8e24eb57d954d83449dcaaa1db95ceffe6fb096cb0106adee8026909b420452dfe6e6c7b4e7f9c2995358c5c6e62283e8c2cea224786437f1e
TLSH
T160F078A5CD61EC3B18FC0B2970A41B4AE75513AB2F40884B3B3C820C8FB1A3B4585C2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 09d05069838e380a13c4ab408f2acfc4798c5692e6250c41dd8a1545a30824ae
MD5 c7687435eb42469d5eaaeba936b61641
SHA1 d40961706c740e6cc2cec350e88836f8d8977e12
SHA512 528ddf338321b2a0794e591d491deb16f48a7be1a74a2e938001aa4af91aea76680a8e992236373eb8ca492e94f6465b294e09f1d1ec23dae51d2b5beadad375
TLSH
T1DCE05E9044405DD1C7402273CDE2D7D93130BB22D10BCCA68F908E70611B726D1D7D8D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 281090a2f64b829d340e0a19c3eb84ac269bea324191706af3cc4ca966df049b
MD5 bd433814fb9fd8b1cdefc1ae76177a7d
SHA1 ddbefd8d8e7e120a10b976d8c02d53c494f9e082
SHA512 25516145ff633bded761f158fd352353f25a288d7852d635a387f29fb8e4fe0840336663c45d9d8e092ea662cd4afef02955ac9d391e601dbab9c781a4716a72
TLSH
T1FE5179F7C7E88A6D8911A1F4EB152F1FCE2D0954436C3C5B88D4AF1B93E68B1D10168E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 226a7c05a4a979d2c6a42f234a9de7342538048723209a6d551f5df33011f3c1
MD5 946d43d213296e324e4ddc5d889e3390
SHA1 74a807806e9254416f1b825e85db6f0570dbe50d
SHA512 0b81cb1d30e452ce1ba5e9dfe0efb34b9c99a353a79f9a9b5a357ad8a4e701609a72d45847f95ae9186f7c981dead2963c1be2e6ea47ec9a6c69cca01c4cf6c0
SSDEEP 192:IRkHyARLe1v70pAPRp2dEL9+Hsb+WNnrUj3M2dDekwwkVyIsnAUge:IRkHVcFgUXt8wQg2k9e
TLSH
T1BE42B62EAA50693B9DDEC22AF9617753D3F6202121D12F84E7FC8B1C15D7ACC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0ff8f45d539d3be8ea001f7a8da334411058e1c880b3c8b61eab8a6542e40818
MD5 6650afbe801fdbfd261cc61967564a75
SHA1 682f0f1f3d795a0718849d4511bbc682658841fb
SHA512 ec2777758d3a34459405fcc1e0e2e33e228d16594301df5379fb8e7eee69b46cc3d0560d117c3ed4e9dca94fb0173435970991878c6792eda5ddb662253439a2
SSDEEP 192:IRkHyARLeAv70pb+qPRpUdEL9+Hsb+WNnrUj3M2uDekwwyVyIsnAUgE:IRkHVccg1+cXH8wQg2hxE
TLSH
T17842C62EBA50697B9DDEC229F9617B63D3F6202125912F44E7FC8B1C15D7ACC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a94f0d14a10b0d2a5b9d99180a1eb4d44ed24d517367fee5d2c0c7a97bcf094a
MD5 79c3d141ef012d77e9e79296c9c5ddca
SHA1 c837e4406795a919a0944089888b12c68f8886ec
SHA512 914c053a850739ea271a8c280870eca28fc571ae3dcb764d6b814b297754b0e209a0680344818b0e2b861d89bbc13a0e0235383bb89550c07647377b7ad2d385
SSDEEP 192:IRkHyARLeFv70pAPRp2dEL9+Hsb+WNnrUj3M2hDekww6VyIsnAUge:IRkHVc1gUXt8wQg24/e
TLSH
T14B42B52EAA50693B9DDEC22AFD627753D3F6202121952F84E7FC8B1C15D79CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 ad83627d20a8bade76c9bcee123d0505397b12130ed1d57b36ac004713090402
MD5 6b6c4bd2c574716aa9088924f33d478d
SHA1 7c9ca7245bbd89690afe70e6f2088f8d240bac9c
SHA512 bd3e50efa0e79002dacf06063af3e4e59ffdc7d33d6b1df2348ebde5a6ebf6cbddac53a859294f5c5c3fffbe48cfc67e4ce28edf42507354adacdfaf92dcc007
TLSH
T185B0124180426563C04202F4114215ACB154BF20A60B1B0167F06932C8251618014050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5941c2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5941c2.TMP
Size 96B
SHA256 5f2459c31094d33a5539f9aa478d7d61f9bc4310ec139b7eb0bedb70872c1917
MD5 2e427c8b4ebeda0adf2efd187040179f
SHA1 fe14e8b2d9b57afe0d46e10d4699326b1a84b421
SHA512 70128e86f3fe5d8bed5422644fac500a46a2c0b758b20fdca77844c2e2813d01c6ada7670491f851d04a49e0700b648d3baab60fbb53324693745b90fa7d76af
TLSH
T1EFB02228C8023322C00203B02AC3B0F83020EF20C203022EC2E00B32CC28A200222820
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 48f5c4c0bbf2569567e9ce3ac5959b344264c536d6797e54e263c6ee4d59f6ae
MD5 b138842ec4fab29da4b2eaa6f721caf8
SHA1 3d20a3b5187369d6b7a2250d2b7c005931d2d8f2
SHA512 1a3ea9330e49e4d94882c6c664217c16ff4d90c27f230e9f0abfe969de052d2165221c80596609432da005c83899d6ff19f51e77c3d0fa04274397c2331084e0
SSDEEP 1536:iB4wyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:S4Sqfd7NtZL8cHQRZEQ6Sps3
TLSH
T198C30237ABC21F339E93CB74B9130FD797B644A99034D301EBAD37AB688359564424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1c48aa3ecf05036c683eb84fdc1c6b1cb92319195a8c5a543ec3b47a87350381
MD5 b77868f62a87e3193f000fadb536c219
SHA1 39e1454ad3168a278d9bd4c668b9dbe95d201dd0
SHA512 be723d66aa4f6466ead62b0ff8229b61e3600a0bb8054bd702edc6964d20671affff3e157c3572cdcecda29014e3b8a58f13ee10319fda181e5342f692d895e7
SSDEEP 1536:iCOyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:H0qfd7NtZL8cHQRZEQ6Sps3
TLSH
T183C30237ABC21E339ED3DB64B9130FD653F644AAD034D301EEAD37AB6883551A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 38015c3f3e9e385076351d87c94c087365d2972bdacc08d63cef7fe9f048078b
MD5 160767fbd73c48c5daf79bd0872479fe
SHA1 4e198c610b4067ce533be904bde5e8ef44a52f62
SHA512 e235343532cdaaf9414257b1df8c0ea5c1a36b757f2fdaaf5e55436ef3025cf7091f6680d0f59fe08031cd90bc5ed6e4499767336cbe251468401ee478e5f6ab
SSDEEP 1536:iN0yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:M+qfd7NtZL8cHQRZEQ6Sps3
TLSH
T195C30237ABD21E339ED3DB64B9130FD653F644AAD034D301EEAD37AB6883551A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 0746435eb9e1fe82f160f1b8bb7cae118452b1458972fcb323f686b6590dfed5
MD5 b85fdf5d9cc5578600be5d4d79f36675
SHA1 2f19ae8956c4324a0d9a1204452973125ea3671c
SHA512 d352b1bb91df99a0eaf02d1546ca61ea17efa372bcc2bbf35dbe624bd1d609635970a6ae11ec923274b40b85b4f6c23cbfc1817c7feb139acc4b4e2546ab6413
SSDEEP 1536:bVLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:3qfd7NtZL8cHQRZEQ6Sps3
TLSH
T170C30237ABC21F339D93CF64B9530FDA67B644A99030D301AAAD37EB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 de8ab6062d945bc5d3d2ee4e32292ac29f41c55d47edf35f77ceb8b58527abb1
MD5 87ff84c315d0cb9381ab1d8fa6a2e306
SHA1 1482fce3e3712e30a8fa2d4dca9a5c3e04c6d6ca
SHA512 f832cff8fb1bc1ff607aa6822e1fdf4fd57789938c98a11c0e439f01e73c8481ae74c159e22891bc0ec9643bcecb0c239bef8c546ff86b07aaadcf0292faefb1
SSDEEP 1536:bB4wyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICb0:94Sqfd7NtZL8cHQRZEQ6Sps3
TLSH
T162C30237ABC21F339E93CB74B9130FD797B644A99034D301EAAD37AB688359164424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download