hxxps://www[.]slu[.]se/personuppgifter

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/06/2026, 02:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.slu.se/personuppgifter
Sample260602-ddvbeadw7l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5088	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134248425280956780"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
1172	chrome.exe
1172	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 4672 wrote to memory of 2900	4672	chrome.exe	86
PID 4672 wrote to memory of 5088	4672	chrome.exe	88
PID 4672 wrote to memory of 1176	4672	chrome.exe	89
PID 4672 wrote to memory of 1176	4672	chrome.exe	89
PID 4672 wrote to memory of 1804	4672	chrome.exe	90
PID 4672 wrote to memory of 1804	4672	chrome.exe	90
PID 4672 wrote to memory of 4196	4672	chrome.exe	91
PID 4672 wrote to memory of 4196	4672	chrome.exe	91
PID 4672 wrote to memory of 1416	4672	chrome.exe	92
PID 4672 wrote to memory of 1416	4672	chrome.exe	92
PID 4672 wrote to memory of 1172	4672	chrome.exe	94
PID 4672 wrote to memory of 1172	4672	chrome.exe	94
PID 4672 wrote to memory of 1244	4672	chrome.exe	103
PID 4672 wrote to memory of 2304	4672	chrome.exe	111
PID 4672 wrote to memory of 5040	4672	chrome.exe	112
PID 4672 wrote to memory of 3712	4672	chrome.exe	113
PID 4672 wrote to memory of 1172	4672	chrome.exe	120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.slu.se/personuppgifter
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb74a0c728,0x7ffb74a0c734,0x7ffb74a0c740
  2⤵
  PID:2900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1556,i,7934858535747978986,14948978357473502789,524288 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2092 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,292640680866791295,11492702431428505609,262144 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,15078082177771717441,9220771096456232207,524288 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,17704292279902789122,7794411342109280349,2097152 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,8896887765804176781,10417326175868398239,2097152 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4324,i,17826845898439452149,1522172878882614586,2097152 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,11236952495254128136,13075088463891026995,524288 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5832,i,2492646254953451707,9248117134584577677,524288 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5012,i,2587218226606787572,13790883970299926694,524288 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=208 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4876,i,3655742138832563197,5631959971138123994,524288 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4916 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4288,i,15391086428925493103,9618895656880343739,262144 --field-trial-handle=2064,i,215874237250820561,5463228286289577699,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4916 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1172

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4120

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 928489f312ebfceeb7cf3e5fe401b1acd7926f2ea8d535d7cd4cf6dba9770209
MD5 03ac29558fb1d5fad3f4f5f2b58b6bde
SHA1 a4eca544c5edba7727ade8398ee5d67b1e95de57
SHA512 ff3fe6cd90e97d287fa6c427f1e905fe79a62db27dc9e570229f208730cea171a701d36a3fd6c9b275b7619132623b1d00cfdb8764b85b5082e8e205a684b8a2
TLSH
T130F02DA6CD21AC7718FD5B1C20954B0AEB9513572F90595F3A3C930D4FB163B4556C1C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 168B
SHA256 51090d97f9412f7aa535e28381fe74f1a4a055ebef28c61b8443fc87fc516503
MD5 28294c93a9406c2460750fe7d782bb20
SHA1 e09f8743ae3afc1b4af9513a34e1d3167c3aab30
SHA512 eac4d5ea8fff656e6c7eb3b6ce4893e1537fd58c164bdc7d852971b31e3af5a12a0a068a714dc75fbcfdaf305d3273bf82480798d0e1e5cbe348b21717ca7882
TLSH
T173C092C462B4481BC3E402B579E59991F17725BF41231E1A83CC64E5A597FB2CA01F69
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4c67fb24c3c0a95589529766bf806c6090b1ea6130673e59e924259e10d64d6b
MD5 d8371a8368dc942d87eb7776354e8db1
SHA1 226259dae0383446c24ae61e34bb3107480a7cff
SHA512 fc4e142a649e5ae7a388cfbf570200f762827fd1025705b1abeb31cd8f026ca6c4aab1b984b007ab955ebfa738ed29b5d267bdc26611a2c2126e0938553c7a8a
TLSH
T127518AF7C3E88A7D894156F8AB156F1FCD690A14432D3C5AC8E8AF4F53E2871D24168E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ca6605c94ad5da67fabec47426c4644b606023a182a82b9cc916a263476b80af
MD5 5f189ccb9ec0485bba41781f5cb9ddd2
SHA1 504c381b2d1734b18f732f93fb4dc3a819d48ebf
SHA512 2404b78f14c94ceb6acdc5da21da714882e62a0e0ab6b2bbec5a0ea1e020a2b1a7b3f88ccb763ef3e8ce669378c432f60fcc821a883b31c0e5e3f338c076a8c1
SSDEEP 192:LRqILyXoQGmWv7hpAPRp2I095Hsb+WNnlOlxe22CWkwsRw+VyIsnAUg5W:LRqGsi9UXQrwg+2WIw25W
TLSH
T1A142D82EBD10657B4DCAC21AFD227747D7FA146171A02E84EAFC8A6C15EB6CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 24950c6323295bb88bd4eed4800511aa59976e340e347570c2c5a54fc290f47c
MD5 fa0908399fee8537cf943298a8e55bdb
SHA1 0c4ea58e4cf38d819d22623e2368e8e60ed7a640
SHA512 c29a56a397cd8133a0fe7265fe364bb869a4c29ebc9a6a31d91ade09b944f863c2783bf43d5bbffd0750cf8a35e441bb4e373dfcf5f642f681b0e7b301f7c7d4
SSDEEP 192:LRqILyXoQGmOv7hpAPRp2I095Hsb+WNnlOlxe2TCWkwslw+VyIsnAUgvW:LRqGsq9UXQrwg+2how2vW
TLSH
T1FE42E82EBD10657B9DCAC21AFD227703D7FA142171A02E84DAFC8B6C15EBACC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1cc72a4eec9bbd913a342b562fba47fe84065ed96d3ca90e41404ae4ae91a526
MD5 7afde52743ac3050f672e3c04c7cee6f
SHA1 b95add2337154f4bfc455dc10e98e98d6a12bdec
SHA512 a68d8b7e38487207c7401ef5c5b0d6bbc6294127d227bd5ddaecb8cfb98410a466f7c054b86fa1d5bf1947053a4b01a28f3038b6d235939165d3284b73c15b4e
SSDEEP 192:LRqIL0XoQGmOv7hpAPRp2I095Hsb+WNnlOlxe2TCWkwslw+VyIsnAUgvW:LRqGKq9UXQrwg+2how2vW
TLSH
T18242D81EB910657B5DCAC21AFD227747D7FA142171A02E84DAFC8B6C15EBACC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1f6f910b914aca5f5a81dfdd6134caa31521dbf32fa6fba48decfea5101fb619
MD5 0fc9fc861d5b1108a076ba701fd132e2
SHA1 da4b8780f9c27920c3dc758891e56052c87e4d14
SHA512 e910737d30db6c6a4306321a9f819e01f216e9b80bb283921689876ef30a9c1b0951adfaaba2953cdf437124d60537d1d754a4344039ca1bd2c77426afff7622
TLSH
T18BB0128184015241C48602F411822488F1149F25E60B1B0253E06A3398751608814168
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5858ba.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5858ba.TMP
Size 96B
SHA256 a70c7867c9a97d83e29bc3c07ea433cda1065247ce273159d005f0e1ad0f49f0
MD5 09bfed88718a26a4413866d744253045
SHA1 6fb3660eede7fae6bcf1021dec2c531856a4f0aa
SHA512 d00181b916c1672e7186f76d84772d433da5271a622c8aea308fd9e0fef3e8896868f564f1264294ceb30646ccbc8c43f7bb886e9da1a741a1b69f1d6257607d
TLSH
T1F1B002D5C1167222C09243B529D695D871A0DF3AC607121692E02EF7DC3DB609725960
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1379ef88624c570a318f76182aa151e5b1d49b07973149da26335665fae2082b
MD5 9650693cd801ef79f9a622bea9c60a3e
SHA1 146a6131614422962836179c05959b41bee59d7c
SHA512 541103a54a4cb7b77afbd2bf08f86a2ffc9f93a66a564da878ecf387ee60d5ba3daf6bb57ddfa974d2944843fd0ffe86013b42c7c1bcf833c706b70f01a5c35a
SSDEEP 1536:7ABfyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbG:MBhqfd7NtZL8cHQRZEQ6Sps9
TLSH
T161C30237EBC21E339DC2DF64B9130FD753B644999034D301EABD6BBB6893455A4828AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 53feb9d2248a5ee64285228e0beb43557697ee0d917910e1a6926e522136d4d1
MD5 d9998bef38c61ddb0d0b259702f23867
SHA1 5fa1a78f0ec7a40d86a964dac2c20a46c43555b4
SHA512 6e6884aaad958595176f3d7f7e5429314bd1355a0a67ebd81ae070fe192f4a7fb68bddb04b31397e06d8213a577e98ec98410d7e2291b4dc1b7db938994291fd
SSDEEP 1536:6wyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:vqfd7NtZL8cHQRZEQ6Sps9
TLSH
T135C30237EBC21F339D82CB64BA534FDA57B644A99030D301AABD3BFB6C9345164424AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 eef3376a2542c670f164ec564b31e2e85df2ae36746c564c8dd5fd83227e96c8
MD5 14a1ba237270da2e6f1b29d90035a80f
SHA1 fc908ad4e6df5a438a5ad6093564cfb75343db86
SHA512 672d5b16b7ab75bd7258723a8dcc55cf70725e065113d518dc14d4bd506fdece9bf5248629837fc7b8447841da3c81251bcd60c50bf37de739a7c9d38b4cd8d8
SSDEEP 1536:6GByD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Pfqfd7NtZL8cHQRZEQ6Sps9
TLSH
T11CC30237ABC21E335ED2CB70B9130ED797B644A99034D301EBBD2BFB689345565824AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 065cb3e70681d60d36488e1b3f2e6cd072538d11e321f9d8a05299cb9751c207
MD5 44c5a7bd542eba4d566a82e68e3c3a1e
SHA1 b2e3c16d32c3cbbd6b4749f01f6f1496776064eb
SHA512 5cbb14269ca4857ec91d4be84a2839c99cc99a7b7c32610b2e34a0bbdcd3fc666353f94aa65a597c60cee3e986073cee1a02c514f2881d6669bc3f99e08f8ec7
SSDEEP 1536:7GByD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:ifqfd7NtZL8cHQRZEQ6Sps9
TLSH
T18DC30237ABC21E335ED2CB70B9130ED797B644A99034D301EBBD2BFB689345565824AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download