hxxp://bestmeds4you[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://bestmeds4you.com
Sample260731-pgdnlssemd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4876	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299738802406383"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
1772	chrome.exe
1772	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3212 wrote to memory of 4612	3212	chrome.exe	85
PID 3212 wrote to memory of 4876	3212	chrome.exe	86
PID 3212 wrote to memory of 1612	3212	chrome.exe	87
PID 3212 wrote to memory of 1612	3212	chrome.exe	87
PID 3212 wrote to memory of 2256	3212	chrome.exe	88
PID 3212 wrote to memory of 2256	3212	chrome.exe	88
PID 3212 wrote to memory of 2144	3212	chrome.exe	89
PID 3212 wrote to memory of 2144	3212	chrome.exe	89
PID 3212 wrote to memory of 3164	3212	chrome.exe	90
PID 3212 wrote to memory of 3164	3212	chrome.exe	90
PID 3212 wrote to memory of 3044	3212	chrome.exe	92
PID 3212 wrote to memory of 3044	3212	chrome.exe	92
PID 3212 wrote to memory of 2360	3212	chrome.exe	93
PID 3212 wrote to memory of 2360	3212	chrome.exe	93
PID 3212 wrote to memory of 2320	3212	chrome.exe	98
PID 3212 wrote to memory of 4748	3212	chrome.exe	108
PID 3212 wrote to memory of 4044	3212	chrome.exe	109
PID 3212 wrote to memory of 1976	3212	chrome.exe	110
PID 3212 wrote to memory of 1772	3212	chrome.exe	113

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://bestmeds4you.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff81d56c728,0x7ff81d56c734,0x7ff81d56c740
  2⤵
  PID:4612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1816,i,1964336899691413244,7813355330178555521,524288 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2100 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1652,i,2236349448487080369,16772918594249695161,262144 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:1612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,766129929522242162,15759849287093823791,524288 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3144,i,16685122865036317389,17463994889342064691,2097152 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3172,i,465847523037470323,18341086085473391404,2097152 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4424,i,3332915669146233150,8085106518344662414,2097152 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,9066153867008563823,10752075923446764337,2097152 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,7067768614740628189,7271809327493990622,524288 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5816,i,16471190930566310782,3335014680135773378,524288 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5792,i,5552044610762947855,17254181024680114715,524288 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,10558064149970856301,11302542635502162858,524288 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5672,i,9483960858459119583,13879285542937585960,262144 --field-trial-handle=2072,i,8023903120561321467,158356315456750912,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1772

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4796

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c126328cbbea0da38948e4d0c8367572c6e8c14771a89a059108d9e5f15919aa
MD5 813c210d380b64f5f41fc7235854ff69
SHA1 0278b24948c333a0df31fcff9e75555109acc2f1
SHA512 4be90d5a6d5e4168ddfb6d184891a7d304294d1e099770e39f0e99f5d6f7adb4c83a66c5b286b473b38b32da1b01a6c4b4efbfef9cbddceb2bb4567356653e52
TLSH
T11BE02BAACD23AC3718F8171964664B15FA5113172741985F373E810C4FB973A8587C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 9f3b9ab77729f1897906035102914722e2d320fd7e3f74276752ad66d4e3b692
MD5 87081e2772d2c85069bacdc9e27e9c57
SHA1 80bc7cd76c499517267b35a745755bf4bcbf0a20
SHA512 59f67154f031e66b48b1a34ccaaf59325a2501784ccde1880ea7ef2f39435691123949ba58deb2d3a103aa2dba369f5ae7e1e7113138bed2c444ac31488f611f
TLSH
T172E0E2F590B63100DB851A31CDF159D238309BAF3AC72BF385AB4D70842A3B1800A05B
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_bestmeds4you.com_0.indexeddb.leveldb\000003.log
Size 15KB
SHA256 72a0dd2b6bed7abdf2ba0230a06e576af2999f4a214cd00eb004bec97b982ad5
MD5 88565e5ed95e210d1eb8a09d5f8983cf
SHA1 d1b82651f8841e551b13dc74a62522a27eea5910
SHA512 07b3614184fdfaab7d953696cd4f3d307124ee21ce58850bf4954589e76decea9de9c27f38222182c618a0b76b334ecf31a9a91ec5fb2944f18a43e77fef1e04
SSDEEP 192:92BuVMaFysTqJDlGFB4IEy6qc/6f7LUUO:gBuCfsTqfGFB4IE9qc/3
TLSH
T1C572D36A30FA494BF2FB8E3E20B96B81467F7E806C40CE1D51E1725D44BA161E870F47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_bestmeds4you.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_bestmeds4you.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 124fc5f750d508c7f5e0529a78468c884bba6760f8bc1c492cdd749b5ba53632
MD5 8ce66c87b7e11776cac202e475fad8e9
SHA1 87ffad4a96f1d101cdf316abb3b470f6929b99c6
SHA512 6c0fa4fdafcfa659ebd01a1b8b22faddab69d2012b37d2b1b8107e7aecf8d432dafac27a17789c0540dc3cf8a726c3efc3901c2ebfd38f3a985c562df7ebc7f5
TLSH
T186E0201C54DE865F51D4C0B75534BB4ECEE6154CE7DCBC964F82E81874C5048517E2A0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_bestmeds4you.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6db42f3bb26d9c31983c9a5830738e1d93ff0fd88fd9154aebcd9c898f0ad360
MD5 7220fe2933c4c13037f63f40fedb050d
SHA1 369194408cd08a2b781526a4ae73292739c6bc77
SHA512 544a43f3918ee90416e70adccf00722217fb9f383eea83a11aadaf22e92853219fe5da8fd9bd66cade1949823a9a90fef22e976a8542d630e49cd3bdd83019e4
TLSH
T1E6518DF383E8897E891196F4EB256E2FCE690524531C3C66C9D46E1B93F24B2E14078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d2033421bdb66179be8119c394f684c78edf4bf97760df5be129849f37289d2d
MD5 6b6a612afa017b7e86f93a6fc936b54e
SHA1 0e64054d6580a76b95f2d98b1e30582eb2ae558e
SHA512 f70e431492080de862da61afbcc075d0bbb6b323ecbec96be9fe5e5cf067baca7a07a8fa7753898524d608b842ddacdad548315f1d18ae4f03c598893f392ead
SSDEEP 192:FRdx8z5v/vv7MF+pAPRp2oT79HHsb+WNntvHHD2kcqZkwS+VyIsnAUge:FRdxkpngoUXr1wJD2RAy2e
TLSH
T15A42A56FAD11297B6CCAC22AFD627F17D7F1102261C11E94EAFC8A1C15EB6CC221B457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7b775a6faa313fa00a97e6593d20cd05342bb78ea6162a02c431088eb82155f8
MD5 6d386964277e55e88de734c206be52ba
SHA1 e225c6914887552f286f7dea36ac88bd73789f6f
SHA512 07a8fb9d783ca3a3da480e713aa71f36939df043d708898f43207f6c931c8cafb6a7950a03b8cec0ed28381b2c3538f7ded891288efc4a4692e52ece9ddad9bb
SSDEEP 192:FRdx8z5v/Hv7MF+pAPRp2oT79HHsb+WNntvHGKKyekXcqZkwwb+VyIsnAUgE:FRdxkpPgoUXr1wJreRAQb2E
TLSH
T1B752B76FAD11297B6CCBC22AF9627F17D7F1102261C11E94EAFC8A1C15EB6CC2217457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\84e434d77ada800f3e6ae9e090243aef7f1f9d0e\9b697b32-2c00-4d71-8b26-0375a30bbb59\index-dir\the-real-index
Size 192B
SHA256 c6ce58d7ea264d837be8ccfea740db5c0c71d0995e185d7c795d2723089d695b
MD5 8fd0a0c8d6f8ece6f861f1feeebec317
SHA1 93fcb0fdc6808eb585cd80156bf6d56b9deb1cae
SHA512 60c47f9531394a4a86db2cbe621f70eb58c96a40aa955d8d46772ca1323df5bb266b12a3b34a13403b11d75de6e5c3d13e11ac05d5e605e042ecbf643d28909c
TLSH
T1E6C02B394011390CC0CC323B2C0374EC32B558200311A70223E4B13AF8E10800B51128
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589843.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\84e434d77ada800f3e6ae9e090243aef7f1f9d0e\9b697b32-2c00-4d71-8b26-0375a30bbb59\index-dir\the-real-index~RFe589843.TMP
Size 48B
SHA256 147cb61b6f927a355b0981894db4961d6f822f7262ca07b5f9e3f294b8a21cc7
MD5 8d20ab728233cbc2aff280f7252665bf
SHA1 e10e3180966a1ecaed3ef7d35d20e17469a2fd71
SHA512 acf7f7ef551413c8ce1f06408987671186e38026c8a7feba82576639783ead6181bf1f48a685534a6d3a11b4394c4cb20d9f7b94005b325f5da15789ec51bd89
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\84e434d77ada800f3e6ae9e090243aef7f1f9d0e\index.txt
Size 200B
SHA256 2b4cfe3cdf6a3b21266038db857737718d79f3dbeb3f83c4cb3fad9f24757cfa
MD5 134260de62a26b54c479e0dfa8c61d83
SHA1 3e355d78b7c43c1020c4756e2f350d13718e794b
SHA512 7fe80031711751b3e7e0ffcb7406f1cd740c917b35ab6734efbd4adcd5399d905b81881d3231a53f842fa67de36f50d64567f9b626a2f0a9bbc5ba65cddc4e49
TLSH
T1BFD012BB34A71C6DE6795E82A015B94792356FC48A80CD70D1A5325024B05A3B059E6A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\84e434d77ada800f3e6ae9e090243aef7f1f9d0e\index.txt
Size 195B
SHA256 3ec31359f218c09baddb2fa2f6de54cc4e9617bac9fe17333d397e0daa5f14ee
MD5 dcd76fe2f8c90df28a052302f9190d75
SHA1 ee6599111be4bf632c298f19f8d47440eda430cb
SHA512 875898701d16f6dc0d819fb54bda335d2e8c0091640dfc5d11af50d09e5fdfc063c584c062ba8a7bd4a72ef6de7d485ea1f678386cfc3b83c2ab22f03d43b96f
TLSH
T1DED022B7389B1C2DE5A99E82600AB95782256FC08A80CC7090A0224014400A37005EAA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 288B
SHA256 55e1e1a6587ac0dd93fee026455a0c7de9b9c8d8bce3a3a814ff7121c91957f0
MD5 58a00ceea11e888d53d856171b98d0ab
SHA1 700a1676d529c4eded6a38ef1e813600a66e2264
SHA512 f3b7e0455708883ba537bbdd46ca7da3ca2fcbd80e4511be7305e4211d8e0de65d0cd1ec00e852f34aaff68909ef6de309022fd550aa697f5a08781385f1c3ce
TLSH
T1E2D02217C1018302C525427525C360E97230DF24FB0E33C255A03A4B7D730B24A06262
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587172.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587172.TMP
Size 96B
SHA256 0d44149d74123e6a9c0349ee30c46de4c42524860cadf0161cb448176aedf916
MD5 7593ce1ae8cd35d345b2b8c4ee29a236
SHA1 a448ffa7acccca30c537a7d67e9043d1b6c788a0
SHA512 d36946f1c253347d4bfb53eddb68ab3883be15f1bed4d4d70b62cd3319abe861038f04435410d08ba2ce5102f570ea13e5cfcd413eab1f43d1e59e41666d36f7
TLSH
T16CB02202C002A202C0F203B02EA080CCB020CF22C20B020382E00FE3CC20B300020022
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 cb9e63f34b821782bdcaf3823e401d380444fb39f631659913f1e0401054d820
MD5 c8e4599a7cda0f3cd09c487f58fffccf
SHA1 b6372bf464decf591a435f69429ba1a931ebc540
SHA512 e5eedf3e493866e61b4930484c5ec43eff9ed9e8d14cb90855246f5dba4b76d1901f919fc9c7b0a1a770d4bd5dffecfb18ed511b57795d1700f15b32370af5c2
SSDEEP 3072:rdjGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:rkm7Rkm1tYpBeh2BAoM
TLSH
T134C3123B5D75A83758B9BB0EB08E0A1F1EF14AA7D920DE52C8D85B0423F97CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 1775af114d2a73c7436adc4f06ab21d3d674b5b23466b63f3874be30d3f46b01
MD5 621986bcec11da14766c5aec63cccd58
SHA1 f530dbec8af24521f8c708ecb80e27811f1307a9
SHA512 a5893747e06e4765f2d3e8237fff1390cdccb7fa5bae4330c1443b7ae804ced3b1d966a4de3af71a25f25e122781365a1607e9f303ce0d7be83ff5f7bc3b0d90
SSDEEP 3072:/uGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/pm7Rkm1tYpBeh2BAoM
TLSH
T146C312275E75A9375878BB0EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4f5394614ebf1ff3911223531d523d8fddf60fb1829ffe291d1d8cd72123181b
MD5 b1e34e30b38c9aaef2e47dd37501e304
SHA1 a217437eac1e3840864de91c844a2b08e7d669de
SHA512 d33bdcb37b3ceb3bae66ce576b7122f6ac8c0e4abe939e8a0eaa12245910c0d186ccdefcd60edd64956b86aad471aa16a7ded231b2999f94684b1a27d5f89a84
SSDEEP 3072:oZGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:oYm7Rkm1tYpBeh2BAoM
TLSH
T18CC3123B5D75AC3759B9B75EB08E0B1F0EF14AA6D820DE91C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5865b253c33ea33e347d77899eb3e2c02b95b811172af2c526b91a726fe0bfab
MD5 6f1ce5c07e8ae35b9a3b6f82c3938324
SHA1 484897b50efd253936e168f2f9737dbe0ad6aa63
SHA512 41337c737f6a9df3310db7e881305e7a9fcbe79c830bbd92be28c9181d42bbef23eaf4c12fd835356bb951a5c45814d8c7a8c4765ce73352354b0d3ff85a9c6a
SSDEEP 3072:rZGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:rYm7Rkm1tYpBeh2BAoM
TLSH
T145C312375D75AC3758B9B75EB08E0B1F0EF14AA6D820DE91C8D85B0823FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download