hxxps://czk[.]lol/

Analysis

user interaction
yes
max time kernel
599s
max time network
592s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://czk.lol/
Sample260702-vmtvnsav21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4376	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274856329085626"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
2304	chrome.exe
2304	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe
Token: SeShutdownPrivilege	1476	chrome.exe
Token: SeCreatePagefilePrivilege	1476	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe
1476	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 1476 wrote to memory of 5012	1476	chrome.exe	88
PID 1476 wrote to memory of 2496	1476	chrome.exe	89
PID 1476 wrote to memory of 2496	1476	chrome.exe	89
PID 1476 wrote to memory of 4376	1476	chrome.exe	90
PID 1476 wrote to memory of 3328	1476	chrome.exe	91
PID 1476 wrote to memory of 3328	1476	chrome.exe	91
PID 1476 wrote to memory of 2652	1476	chrome.exe	93
PID 1476 wrote to memory of 2652	1476	chrome.exe	93
PID 1476 wrote to memory of 4984	1476	chrome.exe	94
PID 1476 wrote to memory of 4984	1476	chrome.exe	94
PID 1476 wrote to memory of 832	1476	chrome.exe	95
PID 1476 wrote to memory of 832	1476	chrome.exe	95
PID 1476 wrote to memory of 2384	1476	chrome.exe	96
PID 1476 wrote to memory of 2384	1476	chrome.exe	96
PID 1476 wrote to memory of 4116	1476	chrome.exe	98
PID 1476 wrote to memory of 1128	1476	chrome.exe	106
PID 1476 wrote to memory of 3116	1476	chrome.exe	107
PID 1476 wrote to memory of 3944	1476	chrome.exe	108
PID 1476 wrote to memory of 2304	1476	chrome.exe	114
PID 1476 wrote to memory of 4460	1476	chrome.exe	115
PID 1476 wrote to memory of 4460	1476	chrome.exe	115

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://czk.lol/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffe256c728,0x7fffe256c734,0x7fffe256c740
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,12834342390222049698,319970477768096806,262144 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1860 /prefetch:2
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,11601454710055299030,5330289140186047177,524288 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,15392234311350400000,4257069003356025462,524288 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,9871411942384386086,5613385051256098572,2097152 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,12226966746880917920,4979088060120648084,2097152 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4440,i,16219599800414896767,170631388467042632,2097152 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:2
  2⤵
  PID:832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,7230589087531387969,17877004534380170411,2097152 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5488,i,7088624173214614641,12083055981415071640,524288 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,9076733792044239211,1634342917823667200,524288 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,16961797946465280894,709864060087066454,524288 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:3116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,10557929006930818921,3088125000856296196,524288 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4500,i,16727799937888939627,7170942687985176374,262144 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4552,i,8473091564381339886,11155464329634292064,524288 --field-trial-handle=1864,i,11755245965972704516,3851854420378244137,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:4460

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3844

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f4bc5fe1b5b0dddecaa6c1dca0b0aa8fe11adb8b8395d2b752b9353cd8f55fc9
MD5 ff711f3a1e9461da0113751a48d7c4a3
SHA1 645f0154d6c964c4c5ddc11893ab38fe568868c1
SHA512 217bb447919920c8384ac36be3d4ff22f899f9e1bdbf8821c3765121305f1fa84419465fa9010f529dc996621d003210f5690383c9cad760b38f57a4fae08432
TLSH
T16AE02BAACC31EC375DFD4B1D50944A4AEA2113572BA1855B773C92088FB16A7158585C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 1a99efa60952ef8970514c61aafb3c9facee0a623bad8e3971f902f64bc6f0d7
MD5 e67e631c42cc0bad9ed8cba39998baf1
SHA1 f880459bf7e69472bd020fa4254b7f79ee6d66ae
SHA512 c3bc6d122477da1e7ac34dc275531f23d11195d005b711279b054b7a712810f5f9a0ed21861105805250523eef9164d5fce72a48a1d4be5b1d4ec741da3367f8
TLSH
T1D9C092828686F241C7974EB0296789882632443A405DE62A52D2A0A4FC6A7942129E81
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 752350e0e3be97438d64e83e0d38eef70645d85ca971fc7b97c865dc602913ce
MD5 aaf1300f3e20fbc03a01bc8a46807b7a
SHA1 48463cf7236ff5bac3e5e920512d76ba8c0f7082
SHA512 de3988a8c00ea17c697850c60c6dd89363fc6f36f6128864bbce1a5f12a947e505a46e330d5d3a77fc56ddb50fefbc74250a572f0a80d8ee7cd03b4edf7df69c
TLSH
T19A619FF7C3E4856DCA0252F4AE146F1FCE7E0A19432C3C6689D4AE1B97F2872D24064E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 5d618a28ee9357aa72a4c36bf8f18191d1281d1c3f6c4dc61bc4766e7aa90d04
MD5 ac251a62f49f6a891fbabda5006163d4
SHA1 8765bef6115e0ddd00b1cc480a4645ac750257e5
SHA512 e6a0503cc69e5db0a19d704043dfbc9e6737ee479dfe4b0ca660830fdaa205f6575370e28d0a720b345dccb045bb0a8a10e9e8ae5d5efbe39ca0872c8da08234
TLSH
T111719FF7C7E4856DCA1292F4AE146F1FCE7E0919432C3C6689D4AE1B97F2871D24068E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1b2462432c4d0ee28cf6c7e5231499c97e1fea9c4c3eab71f26cf2be86c3f062
MD5 5b4fcf0cbc76b17d1a29efe623739c0f
SHA1 5c1f1e9067ac167d1bc024beffb0e9f945b07a7d
SHA512 a7a8e1df0cdc7f463ee70b3843c90687b5fc74509448de0c5e40d933bbf48b60608cb1dd7417f1d281772570e195d69c01dc59494c10d96b63c37a20a66b5eeb
TLSH
T1F3619FF783B4857DCA0192F4AE146F1FCE7D0519436C386689D4AE1B97F2872D140B8E
MD5 SHA1 SHA512 TLSH

Submit Download

a7f14c78-5bd9-4c0b-b089-def9d58de7e7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\a7f14c78-5bd9-4c0b-b089-def9d58de7e7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 567181b91238aaed9418487346de31663cc874987c3ae43fe14560514b9e767a
MD5 e3f6b273b7ae1b6685bbad5d8cb9c617
SHA1 132d2d61e9708fc399f221295f03478e1063ac0c
SHA512 f30508b8826de69bd8eb65557a01c2995d8f9bd1213d26558b78542c3ef14c287eafbd5edb58214448dd171238d3544065d373097b9886d4b5347b5f4d2b63fc
SSDEEP 192:IRfQDjw8zdaQv7ApAPRp2srP9qHsb+WNnbOprOPQ2U+OTfVxLP6nkwsOpx/+VyI4:IRfQHyMkUXBPkwyBGQ2UPfVOt2E
TLSH
T10E42C66AEE10697B9DDAD229FD227B67E7F1202621902E84DAFCCA1C15E75CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2cdb554fbf6eb618e1582c65e274f412f75bbe539dd933b4222051a9de550e3a
MD5 2cde14d01a03cd5dc472d1c3dc360f31
SHA1 73ea089eb1838340076abffdee11d15f67bbe6bf
SHA512 74a077c8cf3191b50b468cc1ac253195eefc9a0e9a276f8dd8d38383f3d456d0fa2abbef61709635e2195b041f1faa4c9dcfe06be9eebc19821ca6a89fb3fc4f
SSDEEP 192:IRfQDjw8zdatv7ApAPRp2srP9qHsb+WNnbOprOPQ2U8OTfVxLP6nkwsOpv+VyIsR:IRfQHyNkUXBPkwyBGQ2URfVOj2e
TLSH
T13342D72EFE20697B9CDBC229FD227B67E7F1102621902E84DAFC8A1C15D75CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b9aca5a95114a4ff8560770b4bcea538e744d6689e9028903697af262352c45d
MD5 33358cce52bb5ad643d92a71d3094659
SHA1 18a452acce919e104b7ccc521400af8ddaa32745
SHA512 068aa5733defe323b517d04ff92fb73fcbc363296defc16570988fd31bca700f4de6e6a530f789d72fb6f343d8a686cbe8933185a20464f23df13e31bedd36c3
SSDEEP 192:IRfQnjw8zdaQv7Ap3PRpnsrP9qHsb+WNnbOprOPQ2UFOTfVxLP6nkwsOpF/+VyI4:IRfQjyMkFXIPkwyBGQ2UKfVOR2E
TLSH
T12252D66AED106D7B9CDBC229FD227B67E7F1202621902E84D6FC8A1C19E75CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1f71acc9663485e380c39acbce416bd1502804df0dadacfe9406edddc30b67f7
MD5 07950cd1ded1cd95dfcdcac9868821f3
SHA1 5a310134af09aba5357fdb4f5988f37cd2473434
SHA512 ed6d3158704e61e9ec6837497f310ab78406d30336094c80d624dd98548f0fc35b49f4545f9506b02cb5ecc6c3325fc71614627f3b7b84a163c46787d1acc2c5
TLSH
T1C6B0124080015205C01206F4124394887524DF10A60A5F0243F069228C351518025051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5894c9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5894c9.TMP
Size 96B
SHA256 b41ebb6284005d034a416869b75625dc032e106927b9f0e3a86672dc22bd7b6e
MD5 c9982f878d489260f28269cbb1a1f652
SHA1 335d3dc977ab2915403cf8a0f138f888516f1844
SHA512 507c20526c607ce4e649020e2c2588c079dca55ed99a31e12b4ebd4f40af8e235729611cfe1681085e211a2dc6fc3067215afc033fe206a5dbccd1f3e860fe9b
TLSH
T1A5B00255D1066253C04207F829A595DDB1B2DF2ACB03631792E25E66DD356A08525D60
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 9dcb5a70a4f6dc961d5b880d94ebe94bc5065888dadeaa2f039db6b8634a6624
MD5 8e27a672ef4374f516ebc59e6f5e698f
SHA1 9bd1e75d72213c3b65264b0f47da9a1fc96b75f7
SHA512 8932215ccf810f9b86252896d3f2c24b571c2a2b7f2de8b088f8c97a4a53c21cba9e76c06ff824caa252bf515902ea5332bed382868d5e7eabb4d54201c725e8
SSDEEP 3072:rdGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:gm7Rkm1tYpBeh2BAog
TLSH
T136C3123B5D64E8375DB5B71EB04E0A1F2EF249A7C920DE92C8D85B0423FA7CD0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 212ef7d4c4053a20f82112a86269edd7828b692cf48306e101ec504194ff231d
MD5 f04c7490927cab82399ee78ecf2e7440
SHA1 770fa1826d1915323150537c45281e6e2c6d18ad
SHA512 fb90b6747d22e6d2a6769910ec0e9ded2ba9459413cc9aca02d814a5269e5bf62a8ad44418fdd13ebffcbf9223875e7b26cd1f293cb4755977425348e579a029
SSDEEP 3072:bFlGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:am7Rkm1tYpBeh2BAog
TLSH
T14AC3023B9D75AC3799B5B71EB04E0A1F2EF249A7C920DE52C8D85B0423F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 331f77c3c6e09b38306f673d292078b941bc5711f14de2f9f7bbce2478854970
MD5 9e012ea46f7f5e58a05be33dc8885752
SHA1 0094207379851931a729457e677f164444970960
SHA512 365d12e5ede0aef70be658f65e6d99cbd1bfbcefe94760a2a5fd4b7a99e878da438ca8427de502e94e655519099fc7e16985dd8cc4b9dea349f629e0775aae75
SSDEEP 3072:AdGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:lm7Rkm1tYpBeh2BAog
TLSH
T1DBC3023B5D65E8375DB5B71EB04E0A1F2EF249A7C920DE92C8D85B0423FA7CD0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 87b0700fa8a2191b60e1097a39da0a1cbd3da3af733fd02f95c3790850c0c825
MD5 33f765ec5ef57c85f801dbb5701d28b2
SHA1 c8bb1a8cf1eb10e0a0be3c30ef418d2e4e5dc0a2
SHA512 72ad9b57b0a0d476abecfa3c0358a89ffb7aa240ddba155f03bfebc8e3ed58e3781e00b2b7b924acee68b4ce9785af02cc1bc56f27755b4f878be2d02a30b14f
SSDEEP 3072:rFlGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:qm7Rkm1tYpBeh2BAog
TLSH
T13EC3013B9D75AC3759B9B71EB04E0A1F2EF249A7C920DE92C8D85B0423F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 18690d0fe032445055847fa27631dc8423f24d72e69b0d631ec3a126dbdb4139
MD5 f06aed6026ee8724a4f011970fb7629c
SHA1 f4a39815fed235b09270cf4fb73f1de496bba344
SHA512 5d0064a7197bf5194671db15b867c41158e3399d89484f0ac8191b564ea85d4ff48de54b85c9c0a29febd67dea9ff8d90215328e6daa191cb48929442104f5bb
SSDEEP 3072:AlGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:vm7Rkm1tYpBeh2BAog
TLSH
T17BC3123B5D75EC3B5CB5A74EB48E0F1E2EF149A6C920DE9288D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download