hxxp://docs[.]dbgpt[.]cn/docs/overview/

Analysis

user interaction
yes
max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 03:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://docs.dbgpt.cn/docs/overview/
Sample260702-ehe8qabw61

Score

6^/10

discovery

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3752	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274382038718136"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4492	chrome.exe
4492	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe
Token: SeShutdownPrivilege	4104	chrome.exe
Token: SeCreatePagefilePrivilege	4104	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe
4104	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 4104 wrote to memory of 2588	4104	chrome.exe	86
PID 4104 wrote to memory of 3752	4104	chrome.exe	87
PID 4104 wrote to memory of 4308	4104	chrome.exe	88
PID 4104 wrote to memory of 4308	4104	chrome.exe	88
PID 4104 wrote to memory of 4136	4104	chrome.exe	89
PID 4104 wrote to memory of 4136	4104	chrome.exe	89
PID 4104 wrote to memory of 4328	4104	chrome.exe	90
PID 4104 wrote to memory of 4184	4104	chrome.exe	91
PID 4104 wrote to memory of 4328	4104	chrome.exe	90
PID 4104 wrote to memory of 4184	4104	chrome.exe	91
PID 4104 wrote to memory of 4396	4104	chrome.exe	92
PID 4104 wrote to memory of 4396	4104	chrome.exe	92
PID 4104 wrote to memory of 4340	4104	chrome.exe	102
PID 4104 wrote to memory of 2132	4104	chrome.exe	107
PID 4104 wrote to memory of 2908	4104	chrome.exe	108
PID 4104 wrote to memory of 3168	4104	chrome.exe	109
PID 4104 wrote to memory of 4492	4104	chrome.exe	112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://docs.dbgpt.cn/docs/overview/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffaa59c728,0x7fffaa59c734,0x7fffaa59c740
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,10185240582993849899,18027478209660909095,524288 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2072 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,10947198071894049061,4566993824092514328,262144 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,10482224592916491289,13663605823229378231,524288 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3108,i,9089355375470967114,11914515798879770537,2097152 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3120,i,3688382916356528331,11614995610216570849,2097152 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4388,i,17294451153513074891,13319509305331779673,2097152 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4408 /prefetch:2
  2⤵
  PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,655508019916926818,3158340819275237794,524288 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,1923128621957736660,7726374206897965826,524288 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,4836608973091029006,15727782067637590389,524288 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,4819528091717729241,2770370309837016931,524288 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4428,i,11256685796770433826,2818762775148055587,262144 --field-trial-handle=1984,i,10243238965219607423,6173301193053506211,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4492

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1640

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 b92ef98fa2cf3163580ad2fdb48a73067217deea71ecc11558fe7fbc504cd5fb
MD5 52ba31e573473a152d4bff08d3d23574
SHA1 2986766f38ebd965ae386401b9b8bc7562110daa
SHA512 231ff9d483891e8e8f9068eb7a93696e3e04add63f452a09f83cd7cda9869472ac1b963751f47d2b78a09d69bd34387bdf8597d52a1895001040956be95bff5d
TLSH
T113E02BA6C962AC3718FD172875668749E65113173740AD0F373DD10C4FB573A5186C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 d734b61b026389ee304df8aa6f1c01731ab9435b9d286a9b624a77984ddc9adf
MD5 1eb12f8023d538af1a2dd26e0fb6985b
SHA1 293391126f1af6578a030c1aa06bdfaf5b9a611b
SHA512 84414e033ddb9f987d418b11b8cd24bf50ef6ae8553645a30958cb2887ad95cf14f3b080b6da5eac53f5bfec6d3042f7398981f75c300d218cdb8d346dc06aa5
TLSH
T186D022B833308CC0D71030B857E31C8732B0483C11BB6DF2378869388800390424AF03
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 cb17e9f9ed254b5d01c4c8b49f38bef90d7f1bbf39d07af4d94d15c37d87b154
MD5 0a23aecf63cc4d8c82d5a4c998fc3179
SHA1 74a27ca619870dbe8b235d95cfd881ea9ef52165
SHA512 29d7e225744e2b13033bbf69b144bd966bebdfd3e40bf8a4bc0f4e2a243cd1eb808018cc010fd9ddd268497accf7f9e4f07f121f76287d3f307c0fc2613c9c0c
TLSH
T1D5418BF793F4857E8A1192E4AB256E1FCE6D0525031C7CA689D4AE1B53F2972D10078E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c6610b759bf4f0533ca369db407b39f8a605556082d659faf0c179a3f96bb917
MD5 c66fa5500cf1f8438f5ce5f149859d06
SHA1 1ea788c5702689e29965aeab5275f65fe8be2099
SHA512 8db65d803dd4c99511106227f31e4196e46f7289747c73fc9a5c57ea89d1e1d6ae71160a46c80feee55441e97b8e380b74f81a6ba9ff2556df485a569fa0e008
SSDEEP 192:FRBhS+5mXEDyv7MF+pAPRp2xj9HH/hb+WNn1WOdfl2O5AGL3kwqfVyIsnAUge:FRBhZASegoUXi1/7r2O+GL3Ie
TLSH
T1A242C86EED24697B5CDAC229FE227B17D7F5102221D11E84E6FDCA2C05E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0ad97121717f35e9ea1b5aef240d1927a49c093e7721cc0874e488f21c8f2adc
MD5 68750b10ad76f43a3d827ac0ec09dc59
SHA1 be2b4fdbd6b91e7c644a8433e138501bab356930
SHA512 30d8a39d7fb8577dfa71bd1e5e107cd0132de170c28eba6d18b9f95065e3316ddfac82a19493fec2772b9b883961524cc6459f1a743bbf8513dfd0793481d819
SSDEEP 192:FRBhS+5mXED/v7MF+pVPRpZxj9HH/hb+WNn1WOdY2exAGL3kwq8aVyIsnAUgE:FRBhZASXgoDXj1/7feWGL3yE
TLSH
T16452C76EED20697B6CDAC629FD227B57D7F5103222911E84E6FCCA2C15E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9dfff15b0cb99ae4524d57c648678e8f13c6013c6a4945757a5f9eb43fc81efe
MD5 8d1ebe90834cd7ece0b4e44c27ae62a1
SHA1 15ea6073b8b02d1020427f40a4259771cec1d61b
SHA512 f2d9369054ed8576a171c7da371032d7eef7178bd8e6cfcfb49496e915f5a59b4cbd086c72f2d918f213599bfe7c5efbe6f9f1744308acabc06a309de3ff69fb
SSDEEP 192:FRBhS+5mXEDGv7MF+pAPRp2xj9HH/hb+WNn1WOdfl2KAGL3kwqyaVyIsnAUgE:FRBhZASygoUXi1/7r2zGL32E
TLSH
T16D52C76EED10697B6CDAD229FE227B17D7F5102222D11E84E6FDCA2C15E76CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b6d50c94ab4863ec2519be140b6069e9e299b6e9d49d8e427dd980988f6f4d88
MD5 12323720951d10533c0f454bf580a364
SHA1 a6beed2d5d66d18cddb6950e70201d1c745027e6
SHA512 473e01a65046daf23a35a03b2cd1512c5ef5edc646bd3d7de92299a5ca8fa270ea35db8c0a2e3169f49ab39a94b59fa923a51648aff4ebf6ff2588c85c00daa0
SSDEEP 192:FRBh6+5mXED/v7MF+pVPRpZxj9HH/hb+WNn1WOdY2exAGL3kwq8aVyIsnAUgE:FRBhxASXgoDXj1/7feWGL3yE
TLSH
T1D452B66EED20697B6CDAC629FD227B57D7F5102222911E84E6FCCA2C15E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 450dfb5bad11f3426d269b43f346012f3f07c9a5833a45432a972ed89649951c
MD5 255e7879205b1da399c8ffdb8a36468f
SHA1 0def003c7871dda730057bf360d4ad97dc275630
SHA512 738410d0f19e09c6c6a386172b39e45127dbf4d1b3d5216a9fa15bb1b69605abe553c1d639134be73e6c173a6a0d2c3dc4b07e46bfc8b8cfdff633317bdee2a4
TLSH
T196B0124180016601C14202F41147148871549F20960E171163E4BA72882A66088241B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b10b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b10b.TMP
Size 96B
SHA256 31888b6a4e420f23cb06845a3b5cd436664d0d85c7a63a0ed56d93571ff8d00b
MD5 48c33a92a39469a7a79badb5c048f25d
SHA1 e07ef1f4ba8e27ac2cef5fcb803a30cc6f08c18e
SHA512 8f3010012c60aa64f1c3c75afeb471338fe992825862cad9689c61c7cfc3af3dc0cea6eecee8d5eeaa242cf3ce657ac83695db296aba556de618c94f32d5da63
TLSH
T159B02200C20A3203C00203B0288280EC30A0CF28C203023283F03B2ACC20A2000208F0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 65702451b21802b71595f8bcf7c013f29ec47ce53d7b3f20841eb9b683d93725
MD5 7eec39f1485ec446c3606fe9b043557f
SHA1 41239fe3e79fc5d33ede16d42c0cab4392f089ba
SHA512 bdbc07e29e2a58be68e3dc39f5550e4b341ea95bcc53c51ddd97aa2cde79b863d2ee2c5c474fd311e57447c98e10086570490f7c582d52579815881eca8018e5
SSDEEP 3072:BgGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:BLm7Rkm1tYpBeh2BAoM
TLSH
T1D4C3023B5D75AC3759B9BB0EB08E0A1F1EF14AA7D930DA52C8D85B0423FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bb4a7d01d7a709fea7d36bc87590a019d92aaf2d478d500fa1308d8c0b96fdd8
MD5 a4500244cb88b3126126679afbf19abb
SHA1 ddba07f8768966a9c2387118567c1a920d24435c
SHA512 cfc19a283dd4091047fbae0d9b86d2ab90c1f589039fe21ce4eec33d7048088ae32ec491928d941a42c46bba9c35411c4f51093149d8a1b09abdefc9c7b8cabf
SSDEEP 3072:aTGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:aqm7Rkm1tYpBeh2BAoM
TLSH
T1CDC312375D75EC3759B5BB1EB08E0B1F1EF149A6C920DA92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bb7b48391e777907a2ec078e30232ed3d98f2bb5d9ca37bc85c10442a7af5620
MD5 b64b28d21eeff9c480ae99d6362e0e89
SHA1 44d2dadf890647f1287ee500e1ec3326c345949e
SHA512 74f0a8302e0985d94eae8c88381faa1e335c4f06897193b699ea0d0f7f51822b9728f43f1302f2ecdae61a71e52815efaf5368a68288925bfec7437c6d32472e
SSDEEP 3072:BTGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:Bqm7Rkm1tYpBeh2BAoM
TLSH
T1BFC312375D75EC3759B9BB1EB04E0B1F1EF149A6C920DA92C8D85B0823FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2fafa42a20b8888b5a9f495419409069f9425705a5f4a7b22ab2fb4a5682c721
MD5 44a000517fc9e929d304abbc6d6ce3b1
SHA1 64cf11fae536bfd76257929bed516102284788b6
SHA512 977981c34d478a9334c31a4cf964ab9d83fc3da9e7dd208f98c8bcf0c0df19609caf8c69ce5c1827b7b970627e29fc91e72107186e352eaf558c5d6263e8e255
SSDEEP 3072:/DGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/6m7Rkm1tYpBeh2BAoM
TLSH
T1AFC312275E75E9375878BB0EB08E0B1F1EF14AA6D930DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download