hxxp://www[.]ekn[.]kr

Analysis

user interaction
yes
max time kernel
52s
max time network
48s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/06/2026, 10:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.ekn.kr
Sample260605-msg43aez3l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4744	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4388	chrome.exe
4388	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe
Token: SeShutdownPrivilege	4388	chrome.exe
Token: SeCreatePagefilePrivilege	4388	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 4388 wrote to memory of 2252	4388	chrome.exe	85
PID 4388 wrote to memory of 4244	4388	chrome.exe	86
PID 4388 wrote to memory of 4244	4388	chrome.exe	86
PID 4388 wrote to memory of 4744	4388	chrome.exe	87
PID 4388 wrote to memory of 5080	4388	chrome.exe	88
PID 4388 wrote to memory of 5080	4388	chrome.exe	88
PID 4388 wrote to memory of 3344	4388	chrome.exe	89
PID 4388 wrote to memory of 1640	4388	chrome.exe	90
PID 4388 wrote to memory of 3344	4388	chrome.exe	89
PID 4388 wrote to memory of 1640	4388	chrome.exe	90
PID 4388 wrote to memory of 332	4388	chrome.exe	91
PID 4388 wrote to memory of 332	4388	chrome.exe	91
PID 4388 wrote to memory of 4292	4388	chrome.exe	97
PID 4388 wrote to memory of 4292	4388	chrome.exe	97
PID 4388 wrote to memory of 2848	4388	chrome.exe	104
PID 4388 wrote to memory of 2848	4388	chrome.exe	104
PID 4388 wrote to memory of 2776	4388	chrome.exe	105
PID 4388 wrote to memory of 2776	4388	chrome.exe	105
PID 4388 wrote to memory of 6052	4388	chrome.exe	115
PID 4388 wrote to memory of 6060	4388	chrome.exe	116
PID 4388 wrote to memory of 6068	4388	chrome.exe	117

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.ekn.kr
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff93b33c728,0x7ff93b33c734,0x7ff93b33c740
  2⤵
  PID:2252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,10435496602973775174,2842260941236784429,262144 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:4244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,7431332362524755940,6526840236686928312,524288 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,5734667254271530484,4277356074275709923,524288 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3140,i,1196344955002123393,9556656896405538595,2097152 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,18167028654037674283,2354634046223763190,2097152 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4328,i,6565297149894857095,5911675539926593736,2097152 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4700,i,5793843954566616695,17411234677552201330,2097152 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4980,i,16481005602170758842,16703728121566713370,2097152 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5272,i,1325880422811728236,2578559626354680841,2097152 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,812256265692453152,16046657892763512536,524288 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:6052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5680,i,10492917969724314104,17941369129060033645,524288 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,10599825525878105135,5070232862628498869,524288 --field-trial-handle=2008,i,16487849106578627250,12315628109502739018,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:6068

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 768B
SHA256 f1699e643d6b480d4cf51b40ac379b873aeab8bdbb095c633010d0cd2642f90c
MD5 32cecdb349cb69b03b42b7a7bb8a9a74
SHA1 b35ebcb7860c6263e6abe9407317ad8312010813
SHA512 080ce3aa148f813f57a1169057423b2855a14fb97745775e837784f46f6ea3e8f3a6bd472836f11549152d4ffb31c243dc60e54924f7fc8b8065774b8a266855
TLSH
T1620146C3C5060035C7AAAC391BD34520F8B02AE6A2DFEC3E4F422038DC657D8E90D923
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 9ec463266915272787c1bb1f8e153ed26a79f03c2f3549f68fb7267eba85c181
MD5 152dc79086d6a7370c45bed0b4d590e5
SHA1 b18edcc309b5d1be9163f265b26e7dd485e5c02d
SHA512 bdf32675fe2054706045ac6fb8005b3b91d3cad852e8408cf1425e941e0b3cf37b9478dad40104dc464b9e78581d7f3ca35c79e210349a9df8f68c08eb57be2e
SSDEEP 192:DtW+Getc+pJphTS+XUctRNQXAXzOeXVN305IyoXPXUoasXIgHBkrbLK2f+1XVQil:DtW+Getc+X3TS+XUctRNeAXzOeXVN30E
TLSH
T1D42281F7C7E8867ECD0251F5A6142E1BCE190A1653683C4B89E8AF4B93F6C71E29054F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 29bf1e2a2d47cdea92440e797287b9f2920e9205fea2fd1177728f3ab8380947
MD5 56716f98b610a55b5daef0b06805e8da
SHA1 96946a4a6d713a5c92e998454e9d3b94d16fa9b3
SHA512 0ccec16ac7ac3386567822a19bf0525bc2900634c50f3bc4f23be6d5e4f7065ba32a23ffb3a399af8b0ddd67e7cebcbb772e00837ec5df9b90e227ccd1bf0363
TLSH
T15341C0BBA17FF4A7206858AB0D407C0629BBB8350AD318F4DF66857CB0814F72B17457
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 84949ecb7aecccf431272d74984e873f2d64560400dbfdff4c7f54ab60d55a84
MD5 170309311875e693d53394a35fa753b6
SHA1 196053e0f67af281e36dadfa34e137636430b947
SHA512 0ebc68a63acacb5d213cc62c800398dba8aeba1d4f491a7404c34f481676af12d996187fb3ca08e76f273c70ac864f0c4a14acb88e6d179542208119000ab9a0
SSDEEP 192:FRj5Wz0VapEwQA0v7MF+pAPRp2Nz9HHsb+WNnincqa2F/e+2XUVyIsnAUge:FRj540cRwgoUXg1wmk2p2ge
TLSH
T1E842B52EED156DBB6CCAC229FD26BB57D7F5102121C42D44EAFD8A2C04EB6CC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1f23d392acf1476e780f6943f74482384577e826006d5800be35bea51ab033af
MD5 757c0ea6ed7ac14387ed400d1d030773
SHA1 4209f248bb292e9e24d58049a29faa101b860274
SHA512 034fdcc1db7316f99b88d4c4f8ade366e68ab7cff9cd2a94eedb00421eb6a1b782738bf5288d5073b1a13e6be89e0b09a7185cefa34372e335fdb741acce9d25
SSDEEP 192:FRj5Wz0VapEwQAEv7MF+pAPRp2Nz9HHsb+WNnincqa2x/e+2XJVyIsnAUge:FRj540cRggoUXg1wmk2N2/e
TLSH
T1C042B52EED116DBB6CCAC229FE267B57D7F5102121C42E44EAFD8A2C04E76CC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 be242901964743714800d9d8d5c87822ca37f9d29180cdcd5023250fb54bd3d8
MD5 6138c9dba54dc4d9665d7f8de84893a4
SHA1 1228b9441bd54ea2e44f6ea74883f2a140f43774
SHA512 a428e10db9cea1fda86d516991efa59a4729cec32c4b39fd7ba6d0c5555cc9e7cc74734cb061a335c54e57d082163381e561f72e64b58a469902b1ee94a7cfb4
SSDEEP 192:FRj5Wz0VapEwQArv7MF+pAPRp2Nz9HHsb+WNnincqa2F/e+2XUVyIsnAUge:FRj540cRTgoUXg1wmk2p2ge
TLSH
T1F142B62EED156D7B6CCAC229FD267B57D7F5102121942D44EAFD8A2C04E76CC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 587345fd1edffbdf2e472a7ac9c5f636769f94ba7017fe4968ea7e93d33592fc
MD5 889284d3de39d09b6dc79c3c976ef66b
SHA1 cfb774f087d813050e48a71100ff83bf46476ea1
SHA512 cf4a957fa8df93835b808d0738266fbee25d6a56f916af3b0445dae3cce0979a38675ba0868660adfefe9c2a2713e170e2201b9efe554c442fd600f232e04126
TLSH
T167B01280C0055501CC0206F41382158CB1649FA09E0A5701C3E4792789252D08418171
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b3bb.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b3bb.TMP
Size 96B
SHA256 45d8517d692067ee9694fbaa765f12e32e82ed003cfeecbd0369626bd5e3f8ea
MD5 87ecf4cdd19787263831a30fa30f3340
SHA1 6a1eefc4d7f254dc23fba082b0d61629b5e107f0
SHA512 908e1268c063cb4967c312314656cda08c2e6939a59ecfffd0d2723bc558d0c69309c84e7da12346956a07557f753907b3c7196f268654ac1032d1c38aa3e102
TLSH
T1BBB02200C0022203C00303F82C80E0C8B0E0CFE0C2030222C2E00A23CC20AA2022E2A3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 de507eb3816afef0a5fb6d3da8f45653e96d0e1e78cf70a06d1c1b78412e42d2
MD5 3c2a5b781e6f8a5870ffa05cde6b3aa7
SHA1 f16712c00198ec9d8a3d929c538c39b0674f4c15
SHA512 5ab7828fe96e385c1890123814c9706b392e31cf556f1c779cfff7735dbe45bda97ccf979b426c25d031822b0feb574540c74baf45c874fa85545b59caf702ea
TLSH
T1E6A002A025E04009D004427090C1C194B324BD9502118211E5D10D5ECC565D04116806
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f85acab142d2acb6b3bbd6a8dd8010084b633381e51e9be77d2be931df55f480
MD5 6f6cbdcfc89d9df842f7d8540f6f17cc
SHA1 ab708129b41194f0b927941f2e9711ffd41621e0
SHA512 2a77a0c2000428e3a4b070146c41024da6069091ad5393d4574983af8765602b09cb338f2abb13d8f2feaa921bbf6f40793187efe2b971f86e574f14873717f1
SSDEEP 3072:/tkGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/5m7Rkm1tYpBeh2BAoM
TLSH
T10EC312276D75EC3759B9B71EB08E0B1F0EF149A6C820DE91C8D85B0827FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 bd030b8bb1dc4077dd632fdaa43341bbea122658d5c3e0a4c87b037cf89db6f6
MD5 74feadba50ce8326c8ff8e3d78c1bbbe
SHA1 2ac13b802a87ab01e7db04c9b4c43c6fa7c58e19
SHA512 16d7057c19790874ee2697002c361bf01c64e0e5706eb1d87eb03e1ab5c8a89331a1e80b0b788365625594834d5076a8cc862e29ed14669fa769e4d4d7f65d42
SSDEEP 3072:/9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/Um7Rkm1tYpBeh2BAoM
TLSH
T1C5C312275E75E9375878BB0EB08E0B1F1EF14AA6D930DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c4c0a891aed878cc2fb880359b3d6a6525400f7aa77c76aedc218f98eb545347
MD5 db67bc92bc7b6337f6e34321d886843e
SHA1 12ecf783dc64f649077958af3175db28143b42ec
SHA512 ef473a898e5d106add2cb7e8afa533d70dfe3637bb5a4114bf0f6bee762c20e0e494d684291eb3b186f3574e3d0925e5c83d02365187f3f98672bee059d150b9
SSDEEP 3072:qtkGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:q5m7Rkm1tYpBeh2BAoM
TLSH
T11EC312276D75EC3759B9B71EB08E0B1F1EF149A6C820DE91C8D85B0827FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4cab07062fb2a5648df6299c250351b7876b6013c992c41297d2cdc7f4a4465d
MD5 fdf9edb85e3d44eb14c50e0dc6f46884
SHA1 edd0ad3efff7e73c4900c289fdb5de4ab8b7a654
SHA512 33b4e1a4692ca970f2e72dc3931fdf454b1c4cb98e82b1d58af4076905c9d735242ba439d4610ea424da0bf260c47591f1f02a694842ddfa31f81bfcce7a8dc9
SSDEEP 3072:q2NGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:qlm7Rkm1tYpBeh2BAoM
TLSH
T1D1C312275D75EC3759B9BB1EB08E0B1F1EF149A6C820DE91C8D85B0827FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 1378b1beb3dc138b9804df5d297618b36dab9356eaf3aa8dae6120033864bb37
MD5 521535d7be4615ad7e4daffbbab7eb64
SHA1 5ced5a687c24941fa29d18b73792389c210c965d
SHA512 1301b0a511a730ddb6081ffa3e364405472450456e0289c488d979432b7101c493a0094cee09d64e3c6a18dedc2b1c605bc5102f5064385dfee25c89013de129
SSDEEP 3:MsEllllkEthXllkl2zEklFqt:/M/xT02znFO
TLSH
T10B440444FFD10405D51010314111C3504371D5D50515575F3CD504537DCD5400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download