hxxp://bzeco[.]vu | Triage™

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/07/2026, 08:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://bzeco.vu
Sample260715-j55jcaax9s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3328	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285769952780284"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4524	chrome.exe
4524	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4404 wrote to memory of 3248	4404	chrome.exe	85
PID 4404 wrote to memory of 2876	4404	chrome.exe	87
PID 4404 wrote to memory of 3328	4404	chrome.exe	86
PID 4404 wrote to memory of 2876	4404	chrome.exe	87
PID 4404 wrote to memory of 4084	4404	chrome.exe	88
PID 4404 wrote to memory of 4084	4404	chrome.exe	88
PID 4404 wrote to memory of 3692	4404	chrome.exe	89
PID 4404 wrote to memory of 4356	4404	chrome.exe	90
PID 4404 wrote to memory of 3692	4404	chrome.exe	89
PID 4404 wrote to memory of 4356	4404	chrome.exe	90
PID 4404 wrote to memory of 4396	4404	chrome.exe	91
PID 4404 wrote to memory of 4396	4404	chrome.exe	91
PID 4404 wrote to memory of 3976	4404	chrome.exe	93
PID 4404 wrote to memory of 3976	4404	chrome.exe	93
PID 4404 wrote to memory of 4336	4404	chrome.exe	94
PID 4404 wrote to memory of 4204	4404	chrome.exe	104
PID 4404 wrote to memory of 4320	4404	chrome.exe	105
PID 4404 wrote to memory of 4892	4404	chrome.exe	106
PID 4404 wrote to memory of 4524	4404	chrome.exe	108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://bzeco.vu
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff9e99fc728,0x7ff9e99fc734,0x7ff9e99fc740
  2⤵
  PID:3248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1960,i,12045355881653266229,490793579862296746,524288 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2420 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,11479873347354385778,14202325660539416715,262144 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2388 /prefetch:2
  2⤵
  PID:2876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=2032,i,12722368978130176431,8113905757641832324,524288 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:4084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3064,i,17708647960487638361,1356626590485334946,2097152 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3080,i,13925458417238541738,12214205832448882842,2097152 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4420,i,6490660349629889472,3227551223233683406,2097152 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,9116512254122733330,535426482761385319,2097152 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,14505044704054294405,7718140865317432879,524288 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5488,i,9236882805973681382,13297931625982853033,524288 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5496 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,5614191622669141755,15121157777396290918,524288 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5672,i,15419346010656794380,868136382131247383,524288 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4404,i,16988724558916164170,5344920309561007014,262144 --field-trial-handle=2392,i,12806730068929972344,11331298412943564716,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4524

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2372

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 09862ee198b91e3649a7909e034c281ba123bd282ed6598a9b0b172347fe5766
MD5 b8e88ead8bdbf0843ea0158a3df2d0ad
SHA1 b4c7b0f800a6227baca1319240f273a8827812a8
SHA512 9f41a72ab5edd500ba1eaa0748b250deac920593d8de5c7278a2274b45c72759125aa836a4df022d9c2b194499403495c03e27a80a7249817c4688f8b3ea9b7a
TLSH
T1A2E02BAACD21AC7718FD071C60245786EB51135B2B905D0F7A3D9108CFB0B2A45CACBC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 30f5ca301b5c17561e198ee1cba83b087190038d4ac84533fb64c8054f7e7166
MD5 b85aa176162c8206bafcd44cbe519a95
SHA1 864e39ab8dc4c4ec7aca4a37216bad11a9c162aa
SHA512 e485a80c9f6355ade2b416076dd679817f89928610ebf1096bf089d852634e3f76b74ec137343a3cd108bab19b325e9af19827d410f3d5ab966831e3b6394439
TLSH
T1F6B0123170CC34C1CB59517715C42DD331236C68131B2B12E5F012E445B17DC2129143
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f9df979d0ec48065b0a53d518b506d87e4d840c32d5842823a0c48a335e5c9de
MD5 fb80451b373b4d2dae38689d20f8d878
SHA1 50fc6ab48666de313a436ba0a5276225314fc0ed
SHA512 2d86087e5cba1d2a6bce5eaf37bfa9cd373737dc23e0fc776c5369faabf6b3b756f9f8dc466d6434b42d0330da663b64e011c6a71dd8ccd124a807c87d542597
TLSH
T16D517DF793F48A6E891192F4EA146E2FCE690554532C3C66C9E4AF1B93F2871E10174E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2bcbaccc266af577cb7f5fab466a0ede24e47035221889d7dfdc07cd205208d8
MD5 5608d140a36328616fb1595d4d5d5d7a
SHA1 5e095e3bf93b6a0d0cf98297cceb053863a5abf3
SHA512 4dbc8898a0e2f2e0a9f18ecb7718f1c453488e21eb9519e95444a8ae8881ab8db0ff473955935b1fff8dfcbd3ad4d1bd44ccf959fc3560e13b907ced8ef38e41
SSDEEP 192:KRs7fC6pK4nJKSiv7spAPRp223r9wHsb+WNnwM6o12+EHgkwYab+VyIsnAUge:KRs7fn/uYUX/bKwX32m4ab2e
TLSH
T14142D72EF914693B5CCBC22AF9227753DBF5112122D42E98E7FC8A1C15D79CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e9e911029f8378acf41900e96c9dd2e91c3624e601ac87f502e8bdfe083fb245
MD5 57caa2e898d4742d542cd7c660a5298d
SHA1 af949f2fc96337d541e2898a26c054da2f9b7681
SHA512 83fa1a131f7528f8e8f145d7869499890ab57e4680eb87f9cca5e3023f3c25404b9b3b0ce8d7105d171105c55108734e3d7d9194465db6acfa3ccaf64c53a498
SSDEEP 192:KRs7fs6pK4nJKSDv7sp/PRpL23r9wHsb+WNnwM6W7e9EHgkwYaL+VyIsnAUgE:KRs7f1/7YhXCbKwX3ej4aL2E
TLSH
T1BD52E92EF814693B6CCAC229F9227B53D7F5102122941E98E7FCCA1C15E79CD226742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 41d37ce61c6c925cbccdc35f8a86848dc75ebb3cdb868fb3392fc8fd244ba3e0
MD5 2f4b363e23249c82be4e264caed67d4a
SHA1 06d6523f7fe02eacfb458dada79e2d581baf4bd3
SHA512 fccac7c841d64b4ad3b466615f3eb5b21786c632210abf46f09837e15139e5c03981136502274e3511234c03214e8b45c25878a71d0c099484551d92a616d829
SSDEEP 192:KRs7fC6pK4nJKSDv7spAPRp223r9wHsb+WNnwM6W7ejEHgkwYaR+VyIsnAUgE:KRs7fn/7YUX/bKwX3e14aR2E
TLSH
T1B342E82EF914293B6CCAD229F9227753D7F5112122D42E94E7FCCA1C15E79CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 f32d2b589d8a23eb4879a6382079e7f6db21545ae1e332e5f15fe947f13c8c58
MD5 8444c595d600eba07ec487695ea8065b
SHA1 02cce1a034a83c8570b3f03a08df1adf924ecdd5
SHA512 8408703eb97b7841fc864b1d56ac98873f25395e4785d5ce72892036205d4184690587345d873c318915b517b6c7cf13433a540f465c033995ba9cf434f3f6de
TLSH
T15CB02200C00A3203C08203B03C88A0C8B2B0EF32C2030A02C2E00A23EC32A208220820
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 dcf5075afa59736d492e920dc8fb3a6331c24c12af0107662ccb310f4d7bc8ef
MD5 34cdc5e032a71df9684a508db3a1b436
SHA1 1fd7230d48c878eb9b81378e87f4109c9133cf08
SHA512 c8465a802e14742a258db71da1248ed97d90f1c22e71180fff4fe3d52e33fa6d62837587398f84fd7fa9be6bd0adf23b27e355665ea515df5199d73080b85edf
TLSH
T13DB012D0C005A502C00A03F472467488B1249F30970B170293E46932C8291508124090
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 159KB
SHA256 9eafbbdd7fbe9b10342b5eb0623979e6ef811d0e185026dfc0307dcbf926e2e9
MD5 bcd2b3e2faf87d06e251d8508202749b
SHA1 254004168343a00cf9e2712b6bad18a975db2fa0
SHA512 83ae2fbda84258cc5e132e5a1db91aef0843cf8f49ce9133f5a88b069f6151dec2d6c5f5f01c2d12553dba2b6bdeaeaf94c1c052f6033acfb09aaebfd4afb71a
SSDEEP 3072:fkMKlrQGwuVAXVSUGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:fktxSVSXm7Rkm1tYpBeh2BAoK
TLSH
T107F3121B5C36987719B9B72DA14D1E1F2AF08A92D934EF6B8CD8570823FDACD5E04834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 95c81cd7055a706fff05bd9ac11e624a15e919d11c160e0e02f42d596985a9eb
MD5 ebb71888266825cc0211b0bb2d125950
SHA1 8186d4ce6e1738ad18b2eb83660957eb75296177
SHA512 a6248660798803da585311e3b1210ed30a31e6809aa4a72744b3c0602932923381b8d0cfbf2d369993eb4864b9fe21f7235471e4b147a8ca261bc668c4a21c9f
SSDEEP 3072:OGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Jm7Rkm1tYpBeh2BAoK
TLSH
T158C3123B5D65ED3759B9BB5EB08E0B1F1EF149A6C920DE52C8D85F0423E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8545d16b17327e079fd024bffbfe5ee27c82118c5db57e20eb6adcb4aa506f38
MD5 8f0b1bea16a1c11add5a4b52ae02b227
SHA1 b76f9fcf2bd6f4db41e730091a1fce12e380f28a
SHA512 dd6fb0e52524220daa18ed70ed1b6ddab63e58ca68bd2e6e9bead1036409c0cbff795adfbda255aeec0ff2793482b33bc6e1562ca525e34f1169eecc3ee3b26d
SSDEEP 3072:nGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Gm7Rkm1tYpBeh2BAoK
TLSH
T15CC3123B5D65E83759B9BB5EB08E0B1F1EF149A6C920DE92C8D85B0423E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b1b38dd6081848f5e49e09aac57a627fea033e20cd7532e0636b16a2073742c2
MD5 25d56b9046e2320d4ac7a64c6884ae26
SHA1 55b59b73b73e28bea82e25def80794fe2345a6c7
SHA512 779e33808900a4c9c5af518480c910384e3d16b918bebaca3c8589cca383eeff3b5ffe666b45b4a60e04307eebe9c16a9062c8b2205cc9ecde155a6578912a13
SSDEEP 3072:yGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Fm7Rkm1tYpBeh2BAoK
TLSH
T1F4C3123B5D65E97B9979B70EB08E0B1F1EF149A2D920DE92C8D86B0437E97CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download