hxxp://rijschoolhetrijk[.]nl/wp-admin/about

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
149s
max time network
145s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 02:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://rijschoolhetrijk.nl/wp-admin/about
Sample260602-cm2amsbv41

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3500	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134248399612355967"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
2180	chrome.exe
2180	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe
Token: SeShutdownPrivilege	3252	chrome.exe
Token: SeCreatePagefilePrivilege	3252	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe
3252	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 3252 wrote to memory of 1148	3252	chrome.exe	80
PID 3252 wrote to memory of 3500	3252	chrome.exe	81
PID 3252 wrote to memory of 3504	3252	chrome.exe	82
PID 3252 wrote to memory of 1948	3252	chrome.exe	84
PID 3252 wrote to memory of 3504	3252	chrome.exe	82
PID 3252 wrote to memory of 1948	3252	chrome.exe	84
PID 3252 wrote to memory of 3364	3252	chrome.exe	85
PID 3252 wrote to memory of 3364	3252	chrome.exe	85
PID 3252 wrote to memory of 4016	3252	chrome.exe	86
PID 3252 wrote to memory of 4016	3252	chrome.exe	86
PID 3252 wrote to memory of 4180	3252	chrome.exe	87
PID 3252 wrote to memory of 4180	3252	chrome.exe	87
PID 3252 wrote to memory of 924	3252	chrome.exe	89
PID 3252 wrote to memory of 924	3252	chrome.exe	89
PID 3252 wrote to memory of 4564	3252	chrome.exe	90
PID 3252 wrote to memory of 4564	3252	chrome.exe	90
PID 3252 wrote to memory of 4828	3252	chrome.exe	91
PID 3252 wrote to memory of 2292	3252	chrome.exe	93
PID 3252 wrote to memory of 4916	3252	chrome.exe	94
PID 3252 wrote to memory of 1088	3252	chrome.exe	95
PID 3252 wrote to memory of 2180	3252	chrome.exe	96

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://rijschoolhetrijk.nl/wp-admin/about
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff974b3c728,0x7ff974b3c734,0x7ff974b3c740
  2⤵
  PID:1148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1944,i,9345129837640413399,7570708746055451745,524288 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2076 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,7690918594955592363,18229926678875925734,262144 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2248,i,8586091327351096387,3862381797018470338,524288 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2604 /prefetch:13
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3156,i,2668731775763313765,12463828990150454792,2097152 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,159641703806746782,4143826337622333038,2097152 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4332,i,2875963889972370281,8690817731436612501,2097152 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4348 /prefetch:9
  2⤵
  PID:4180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4776,i,10890926976593494881,5058553081011835689,2097152 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3948,i,7875492825094109185,3727633592193701311,2097152 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5568,i,13183068247188456336,5270939325524772963,524288 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,13005668173584244631,4074337822835955522,524288 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:14
  2⤵
  PID:2292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,5389919165283725176,12037682814429171102,524288 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5592 /prefetch:14
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3412,i,6525362193525448675,6859093655854958556,524288 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3400,i,9378764784356043165,10666075698818680150,262144 --field-trial-handle=2044,i,2394493661458607899,4809330209338170951,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4372 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2180

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3652

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4224

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 425d35ba6eca61688364343608850fb7d8eb9eb7bb5f80c17070012a65f7227b
MD5 2e91c5cb71c0c7953626181306ac53b7
SHA1 a60ef8313bb06c38f8181865ba16c7cd69299003
SHA512 b3cd6a32522f15f961ada3499ce9c12d971368216ef80d6f1d3d6bd0f0294c1ecadb95b36569b3fdd83a5fae0ada3217c5cc49f5d8e891d1ea2a44cb121d63a5
TLSH
T1A6F0F9B6CA21EC6718FD071960544B4BEB5013672B40595F3A3D520D8FB16378595D1C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 df566517ff0bb4638dab5ba439c22073369146c3353a8efe855611ffb8e0486d
MD5 bb9dcc29b98160235948e0bd4142d7ac
SHA1 7dbcf843a1c0c494e7a572fefd3ee7e950470a1d
SHA512 8a3f19f0bcebb1d35220a7ff0badc3a0f498ee40b84ee3b47e29210438cd63f92995f55c255198ad13bc414b4ad7b038a0ee98f39997373d2456447e85166777
TLSH
T1A0815BF7C3E8852DD90151F4AB152E1FCE690A64532C3C6AC8D8AF5F53E2871D24164F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0a1248ce31a0a2c0b48efa8564a870706ca527fdd14b3eb826cee83aacab5a60
MD5 e1e62f0082d7de8b10dc0e73aea65cd1
SHA1 0d7a346b73f81c9eb9a40d09655fd1f9d835f0e7
SHA512 0b5a480389cab5f5ada416970ad4dfe3bacb64056b7337cbc6846513e9dc12a40d3881f2616db1ab196fdd7a4d183c08ca2cfa69dcba07338fdb945853e987f5
SSDEEP 192:NRVkU1yX/74wv7sBpAPRp2OQT9NHsb+WNYsE9SvE2b7egeVyIsnAUge:NRVkY6Es8UX8rwIN2ye
TLSH
T1E142DA2FAA60657B5CDBD22AFD227767E3F5202635D02E40E6FC8A2C15D79CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 0d2a156654c1c543f684a1b78fc1acde7a605db8760d180da55c6029bd11d4cc
MD5 fca0a080e03e1f9f1f1ec2f425ee2b0e
SHA1 04435d408b3c935d0c54889e9019a986e7e3d26e
SHA512 0133469141ee35d9bb385a53718d74af5f96fe7ea3c4d774df026da6bbcd201abccd4b10b8b4bb6f9e60e57cecfd324ba1f320a5bc5ef4bba05fdb56deff9ffe
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLuLcSj5EXODtw+ErU3U2HG4B6T6:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pa
TLSH
T14572F9A76C4C8E770F94CACCDC16BB4FADB5024B65E9886487FA581903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 17071b63038a7bd7f3566b34d27bff8539606bef4d7ec03f555c973a96a7dbe8
MD5 8086868c770d45b839dfed75b75354a5
SHA1 5213093482645f2e83c6708dccfdf85866039770
SHA512 535a8028e12f4b96cb29f56021d84fd873b2f250d7c3b1ef2dde2e16754b6c3f73fbfc29f2f1df908d8f871b9e53501647e79665040cfa9bc2678314307f2f28
TLSH
T18AB0120284025201E44302F0154254CC71345F21E60A170143F0B922C825661C224051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585985.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585985.TMP
Size 96B
SHA256 536905718c80c34c382f1c03b06718fa1a07993596da1aaf77d2f8cf4fd2e02e
MD5 6b2c0bc6a136b62b6720b0195fcfddb7
SHA1 9c30a087c41b396b326491cb18b05452a2750cfc
SHA512 4274b0a20f097d7f3c0be1581e1cfbdc46af969cb4d194f799c8fdc443fba4f14f52cf41b18d5be360a96959755929e6ec173a6201dca3adc332cca7d238a62a
TLSH
T1D9B0025AC1426622C44243F0359699EC7160DF2AC6439A5692F01AFAEC256B14635560
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c8192b27d05520f30ce661fc9a80f1e1338ccfc2d2c7cb36175d847d83b995ef
MD5 e9c3e1f6e89cc9bae2a8c25bba4ecf28
SHA1 d695d38a38b776785bb82cd3f2bbc62433a8f15f
SHA512 9118235b77c8d40bb10b7e23cf4ff1f0fd50095ad149b2d5b808f9ac65fbda33814b7cdf77d60c5eade5b13952b47a42935cd6af8ea973203ae0adc165606a8d
SSDEEP 3072:LOGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:LJm7Rkm1tYpBeh2BAoe
TLSH
T1EDC3123B5E74A83759B5BB1EB04E0B1F1EF149A7C920DE92C8D85B0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 156KB
SHA256 f49884b1413007820d84648112f7df28c24ce614b26a10e2d61b9039cada5e63
MD5 8e5dc7920d2eb6bbde53849e296ab5c9
SHA1 bbecaca784278671465398e00878f32bd9b83592
SHA512 517fdcb8ebb759d3fd44884175e846256a712b767eb8dfb0843612546f9cd9751b36b31087829b08a09f11e8dbf760b4f88541196a42b53269827d6f9cd3fac3
SSDEEP 3072:LRU5bKX4+GK/Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:Lwh+GKum7Rkm1tYpBeh2BAoe
TLSH
T13FF312375D74A93B5CEA661EA08F2D2F1AF25AD28D20EE51CDD05B0073F57CA1A12E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e17dc282a4d140a09f883161b1c93fb3b4acd8300170cfedb0af0e5166bd2152
MD5 737889cd9f44022b6ad922e43bbcc956
SHA1 2dea64751743b2588f9eee546a6d490809f86389
SHA512 1b6cbf90871383056efa224468bbdb94d5f6a0baea5b0c92b6faec9393b2f04f08ab96a9b87d27adb9418510a1bd3b5581059c821bec9e6aeea0d09579634bd8
SSDEEP 3072:sOGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:sJm7Rkm1tYpBeh2BAoe
TLSH
T178C3123B5E74A83759B5BB1EB04E0B1F1EF14AA7D920DE92C8D85B0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 976e1e15b9b41425f2a3b7c1a004b5a60a3ca53acc72623b69f2863f68722e0d
MD5 6f9fbba84ae6fa6ff060304578dfafd4
SHA1 3f167d012aa561bcc2197015b0991892158d3322
SHA512 cb38d01eeef4589cb94c81b186893a3057d45ae48a93eda2cc05444c17ae9f1b78e71623e80033d6a5a655a6a04d855fb24b11d7ce5ac74c2fa155e395444e89
SSDEEP 3072:smGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:sRm7Rkm1tYpBeh2BAoe
TLSH
T150C3123B5E65A97759B5A70EB08E0B1F1EF14EA7C920DE82C8D85B0437E97CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download