hxxps://www[.]ctgva[.]com/events

Analysis

user interaction
yes
max time kernel
60s
max time network
55s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 15:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.ctgva.com/events
Sample260710-tbe2psew9t

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3744	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281723766753085"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3736	chrome.exe
3736	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe
Token: SeShutdownPrivilege	3736	chrome.exe
Token: SeCreatePagefilePrivilege	3736	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe
3736	chrome.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 3736 wrote to memory of 5944	3736	chrome.exe	86
PID 3736 wrote to memory of 4528	3736	chrome.exe	87
PID 3736 wrote to memory of 4528	3736	chrome.exe	87
PID 3736 wrote to memory of 3744	3736	chrome.exe	88
PID 3736 wrote to memory of 5800	3736	chrome.exe	89
PID 3736 wrote to memory of 5800	3736	chrome.exe	89
PID 3736 wrote to memory of 4884	3736	chrome.exe	91
PID 3736 wrote to memory of 5448	3736	chrome.exe	92
PID 3736 wrote to memory of 4884	3736	chrome.exe	91
PID 3736 wrote to memory of 5448	3736	chrome.exe	92
PID 3736 wrote to memory of 1476	3736	chrome.exe	93
PID 3736 wrote to memory of 1476	3736	chrome.exe	93
PID 3736 wrote to memory of 3596	3736	chrome.exe	94
PID 3736 wrote to memory of 760	3736	chrome.exe	105
PID 3736 wrote to memory of 2968	3736	chrome.exe	106
PID 3736 wrote to memory of 1088	3736	chrome.exe	107

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.ctgva.com/events
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff470bc728,0x7fff470bc734,0x7fff470bc740
  2⤵
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,17737631817335450323,4296367017340268110,262144 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1912 /prefetch:2
  2⤵
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,12313823257204802145,646708356696934906,524288 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2356,i,9491284973912143465,8413185868005972150,524288 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2284 /prefetch:8
  2⤵
  PID:5800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,2670387641125834937,2389628076739204579,2097152 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3140,i,12453712036764716962,9118189093257498854,2097152 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4424,i,3874899197765024576,15262938107307867496,2097152 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:2
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,9207724612933685033,2300767044865871295,524288 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,13128017628457360996,11931536425565962288,524288 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5888,i,8784823766435509572,8845333217887235751,524288 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,357602974353342964,112178566178373282,524288 --field-trial-handle=1916,i,10827234564247686668,38871657617652245,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:1088

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:828

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ae0b328d03a1f2e201cbe66efc37a8aae9e58f93229cc21269434bf327eacfc8
MD5 912b8460433ef1b3456f1239fb0578e6
SHA1 2d387513a1479a7fd05e6eb3af845b59f5345540
SHA512 00984891a912f1438a61773b5a2f41612b88684215e01fa85844ad764eaa7530fcadfbd93204ed735651926d193bb62b4cf1f0b756d017ff78f9f6dcd3488e7e
TLSH
T1CDE02BBAC8219C271CFE1B2824505786E74013567F90C90F7B3D920C8FB5A3A856AD2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 ec5098015e3f9429a126f4e1ae04cc36f4c1d50228c1009e3e29e5b363b08c07
MD5 86495965cf8d28c8f756c8eb0045a318
SHA1 9f5fd62ce1d9c3f4124f6cfffb352fcd1fc5a435
SHA512 eabe8fcd1c6faf13d546d928ea469b2f1629fea8576ad740cc974a991f5db254baf413f656cb8d460ca77732098a1489fed4859bfa506663d1350109741645be
TLSH
T19601591145C16951FF1B02B0D8BE8FC4FEE151A84D6CE3574BB55C8F61433D161098D0
MD5 SHA1 SHA512 TLSH

Submit Download

ad34c45c-7f14-46fb-840d-6652fb98c723.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ad34c45c-7f14-46fb-840d-6652fb98c723.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 678dd303e711919f5cb0a949ebf51654dd2728cec62391c028171cbca270d357
MD5 030a6334476af70ac73946056eba7970
SHA1 317476b40e0c5dfd075930f5cde646ec581b8d24
SHA512 1b5f1f1afe118fead596fa44b28f1aea3d2bbcd482543496ce598005916e1fe2e3232816cd7419b1d5f0a46f187590d3fe2e4704b48a36643dd69c262c6c6df5
SSDEEP 192:4RBdp1rS7OFsS42mv7cpAPRp2qi/9BHsb+WNntlixEL2bmFkwzCDa7c/VyIsnAUp:4RBdnvb42SwUXlUrwKO2K0aIZe
TLSH
T18442E92FBD10297B5CDAC219FE667753E7F5102126942E84EBFC8A2C14E76CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 47849ed37fe692b1629f06b38780a4d9bdea1f970f247fa4298bccf2fb585b71
MD5 f83e5ab63fe191700cd1658c26563513
SHA1 c68804d360f3eea057a0cd9958b9ec410744bce1
SHA512 feb7508d6680fb3d9e53ec9954484731aa5a97275f3624e02c1530321a1560ccc7d4cfadec8f9c8a5830528c9a436869e04570d17fc74289b7ec67f0a32157f5
SSDEEP 192:4RBdp1rS7OFsS49mv7cpAPRp2qi/9BHsb+WNntlixl6YtmFkwzCDa72/VyIsnAU3:4RBdnvb49SwUXlUrwKGYI0aKZE
TLSH
T16242EB2FB910297B9CDAD219FD667B53E7F5102135942E84EBFC8A2C15E75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 3c845f6470b73a2f14a1aa2ee985e3971db00491dd48ba5d00c87a448c9e791f
MD5 39496c4d541eb0c8bfdd221b119e77bc
SHA1 420cbdf84b28c97c94763ad68f631bf70aa90402
SHA512 8daf6c5f90cede4c982b2f39d9d07a797bd5de4928907d72349e65d74f4b9084f4a30a751bff94f9086ab1b417d6cd6c9875125422c79783c3c0209a407ec46e
TLSH
T137B0124080015102C44212F411822488B255DF219A0A1B21C3E06A23C8252508425051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593e86.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe593e86.TMP
Size 96B
SHA256 0c798fb359cb4c9ed92ba9954530385bfecb8d1ce0be5d37815edf70151bd318
MD5 adf489916a394684b53c9b8bfde415ca
SHA1 4fea0bae641ce299331b511f68f045d59da0ad4f
SHA512 5eecd45e9d474ea01629f59a7dad0104d95d5dbf7d085323f1b0e144e0e21a309e4adf032501d84eab0280a680ffdbf11ade52c64356ad089194740fcc2a6f54
TLSH
T17BB0222AC202A302C28203B02C8080C83020CFAAC3030202C2F00E2BCC2E32002380A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9940466bbe1ed634ea39d20b804e0421b6fc1712517ad1ad55e451fc659ffcd4
MD5 32d8a6cf9bfcf33e57da38463632057e
SHA1 89f5a11b67f5e23b0d2e81d351979465594bafc0
SHA512 4eb87d216cd36d12bbaf5aa332f85a72511fbe5a5b42cdd79d2f9bf0b7f2ad4f410b445139e9ca293be1df1a925e36f7ebf1a838057a59b1fd9b2d323a764a1f
SSDEEP 3072:S0FUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:RFmUi21rSm8uUVNSlzY/
TLSH
T1B1C313007AE3E8F2EE5930447BEE2A149D6C0D818291C6415773AD419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 6e8dc98b4262eb3739395048510d19a3004cf4cac102f1b529d42e7dc469d8f5
MD5 46c5c7d0261bf96bceda8b5cdf77a797
SHA1 d78a0184dffa2a6b5eb96d1e97b654dc8ef5c77b
SHA512 2908a96a40994a115251939cdd2862adee3bbf3c82f985c4d39c058901b32bac15ac756ca0e6d5849fbb727764034faf7f6ca3664b793b1a98fbb43b2d63304b
SSDEEP 3072:SVFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:EFmUi21rSm8uUVNSlzY/
TLSH
T189C3131079E3F8B2FE99304476DF26159D680D818291C64157739E419DEF3C61FABB38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d65628d52009ba5f60e18c413da3f4f1342572eb25b0e117f18579b72e397a70
MD5 608adb8ff565020cb84fbc22e1f9f657
SHA1 d8ce425e0126ff90ca23dc4979a6e3ae6d0a9543
SHA512 942911d0ff95707c0f661adc27f46c982fb5f9aaf0d1f8528b649768105c5e7fcc8bfa0dc199409bc3befb1d36808d45ec4ce212284bbf4d2a3725c7f52062a5
SSDEEP 3072:SgFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:nFmUi21rSm8uUVNSlzY/
TLSH
T194C3131079E3F8B2FE99304476EF2A158D680D818291C6415773AE419DEF3C61FABB38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download