hxxps://cinemaos[.]live

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
66s
max time network
68s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
01/08/2026, 04:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cinemaos.live
Sample260801-evd67ade45

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5644	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300313584228895"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe
Token: SeShutdownPrivilege	4664	chrome.exe
Token: SeCreatePagefilePrivilege	4664	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe
4664	chrome.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 4664 wrote to memory of 4752	4664	chrome.exe	84
PID 4664 wrote to memory of 5644	4664	chrome.exe	85
PID 4664 wrote to memory of 3036	4664	chrome.exe	86
PID 4664 wrote to memory of 3036	4664	chrome.exe	86
PID 4664 wrote to memory of 5164	4664	chrome.exe	87
PID 4664 wrote to memory of 5164	4664	chrome.exe	87
PID 4664 wrote to memory of 1044	4664	chrome.exe	89
PID 4664 wrote to memory of 1044	4664	chrome.exe	89
PID 4664 wrote to memory of 1580	4664	chrome.exe	90
PID 4664 wrote to memory of 1580	4664	chrome.exe	90
PID 4664 wrote to memory of 1816	4664	chrome.exe	91
PID 4664 wrote to memory of 1816	4664	chrome.exe	91
PID 4664 wrote to memory of 3256	4664	chrome.exe	97
PID 4664 wrote to memory of 5948	4664	chrome.exe	103
PID 4664 wrote to memory of 4848	4664	chrome.exe	104
PID 4664 wrote to memory of 4524	4664	chrome.exe	105
PID 4664 wrote to memory of 5628	4664	chrome.exe	106
PID 4664 wrote to memory of 5628	4664	chrome.exe	106

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cinemaos.live
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffed30bc728,0x7ffed30bc734,0x7ffed30bc740
  2⤵
  PID:4752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1960,i,6026116896414683994,578371536423828066,524288 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1760,i,15209901607934431796,4304471226618335730,262144 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:3036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,11992350693875520720,8571071876902044336,524288 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:5164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3160,i,12300083036843694991,10563918362491956081,2097152 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,8765716331439333786,12265722728266860031,2097152 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4292,i,5129502323889643858,5128133758757952825,2097152 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,14565218815961293985,585479829238965184,524288 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:3256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,15392385591780319284,1532416715923273939,524288 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:5948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5856,i,255347016625252636,4818645108023707531,524288 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,5848557663623436399,16114124568062177002,524288 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5976,i,14277350844363799454,11173940075773388242,524288 --field-trial-handle=2088,i,2626981170359025875,17211404300703899068,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:5628

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5304

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2504

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ab6cf376ac2499ac392dd968f4eab2b7e3da5be4f9163c42e06064d1c680546d
MD5 230f3e03c5e36930a03077f7053b144c
SHA1 9ef718974eabbc4f15e97651f130e39525acdd82
SHA512 87fb4317c943d018cf36ae911f38c4fa338fadd51a25bc447b3bfc8bb5591ff2f52aa056f9e0cc0e331704b181882c6e8c9f2a8281d1c68c0b09937ff85dd24c
TLSH
T12EE02B65C821AC2B08FD0B5C9050078ADB0013672640CD5F3F3E951C9F7097A624191C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 18KB
SHA256 2508eca817cfbab18046a371401ac91887679251e7050a696e7981f28af18854
MD5 97ffb58a0dfcdc3a0664efb11fe7f891
SHA1 7291efcd9d75bf394b7e4584d3c4eae2093f730c
SHA512 3228a683218e86bfb690f6d3d29b05171f1c572ebf62240693fc3ff0a693fe28a1f20fdde31a57adb95c417a998266bf9f6962df224d994c738d91792825637c
SSDEEP 384:3fa3HiCmwB2h1YcJoFXNRVi0poLeFHT31YeS+uQLKjyhTZU5QKeREv0g:3fa3aqTs6W0p+IzRSEmjy925QKeo
TLSH
T1A282E1A1C14F91B35C7C86B0A393DB422A7B0718BD457D1FAC3E21F649491245FA8FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9eb92c79-a412-4aa0-b9a9-54b7957ed7e9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9eb92c79-a412-4aa0-b9a9-54b7957ed7e9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4e7c4e75be0382d7eec917bbb5b25ac89481f7794bd81cfc66cf08d33803e859
MD5 a0780ae8202d17645ff1b99934d3a1e7
SHA1 d6dd6d6bd906060bc2b8607ea9fcde8c6a3d81c8
SHA512 ae8b7ae818942119d563ecb608d20d21509a417d05618f0c5d0164d48392522fd85b545f601d7c2a76289fb5c422d9cada012e921b3b0980d6eb97db324716d3
TLSH
T13B4147B3C6D889AD8A0156F4BA152E6FCE6E0E54536D3C5BC8D4AF0B93E2971D20058E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6c4388416a36a9b0e5eaacd703860a6083d7c0e15d2ad94b61beee20dba8ab9a
MD5 d6e35074e00df4a53752d146ba5b0934
SHA1 99d0db588b159b904f1462ae7b99133c5e1d958d
SHA512 ed0f39a453d36d5759c843b0d9baf491869f34bf1ef7403274429dff78e44a8a73b8da9aa4f6a9d3057bdab318091af31f02142abefcef45e4ffc6234a259ea3
SSDEEP 192:bR8db8d93smv7apAPRp2Ffd9FHsb+WNnsPB6f2QzGzkwqU8+VyIsnAUge:bR8dbGWSmUXKzwo22KOq2e
TLSH
T14042D92EBA54297B9CCBD229F9127B93D7F6103621D41E84E6FC8A2C15E75CC3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3f008d3843b84718d3f7ab6d08c1ec5df52538adb2b39fd3e1c03faedc0f3865
MD5 1a9547edbb2e132f5b044f0bb5987d44
SHA1 150f9a83e66b53ca64ad5bdaeac6b6deeb62abd5
SHA512 9c9ac374b0f0586046d7b3e3f5c9706fdf96ae02986f6037a3140dc3e2c213a99a08ed5d85d2d25aea8d3a1016013c0eb36122a8eaaa672531a2be25800621c8
SSDEEP 192:bR8db8d93s9v7apAPRp2Ffd9FHsb+WNnsPBeLeQzGzkwqU8+VyIsnAUge:bR8dbGW9mUXKzwoaeKOq2e
TLSH
T1F442D82EAA54253B9CCBD229F9127B93D7F2103621D41E84E6FC8A2C15E75CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f51342faa4965c30c6b7fec51c9dca3de874dfdeef3e64079c43365ea8ae788e
MD5 6c6307ca33adaeaaf14de485b0c281ca
SHA1 381f9278f392a31b33515c4c1f31fb92d121aeea
SHA512 a5164831bed9b7dfb912b69cd3282748531aa6a2b804c21b8f0944cabe384668692e9f05da20e0d6f0c860889b3ad27bd8d8e60450a5a419b0304e7b9c58834f
SSDEEP 192:bR8db8d93sqv7apAPRp2Ffd9FHsb+WNnsPBrkYPzGzkwqUt+VyIsnAUgE:bR8dbGWmmUXKzwoOYbOj2E
TLSH
T15652C82EBA54297B9CDBD229F9127B93E7F2103621D41E84E6FC8A2C15E75CC3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 fc32979121b240bbef566b9b999a39027d13aaf24b8d04b24b690ec94ef0de8f
MD5 dc5fdaf3902b40054a6c326e3e669358
SHA1 8ca200a55af737f802700125de920585611c1515
SHA512 8dc0418508a0051cd25a6a2a127f5284666847945ab19f98178c1a939a85a1871a508a6b2532246e7c30bc18380e7ab540e3ce35ac675ce4e5233cb3e17fca47
SSDEEP 192:bR8db8d93so2v7apAPRp2Ffd9FHsb+WNnsPBUtESzGzkwqUt+VyIsnAUgE:bR8dbGWoCmUXKzwoOEsOj2E
TLSH
T1F652C82EBA54297B9CDBD229F9227B93E7F2103621D41E84D6FC8A2C15E75CC3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d45abaa9b496fd0e5800db2cf35d85ef81aaa2b72d9ed9688c3f93acd2f7cb10
MD5 61f5d090934eed060e5d097f7d4a266d
SHA1 258491ad3c73ef122b64ecc1aa8b782932fccc91
SHA512 fe8adf16ce2beb0971dd9750fb726d7794fc3184fb8a94564ede73d369e4c84d5b93896465fa022b44f9450535eadbcbff3578b8a685fc03a1afb152c2890d39
SSDEEP 192:bR8db8d93so4v7apAPRp2Ffd9FHsb+WNnsPB09E6zGzkwqUt+VyIsnAUgE:bR8dbGWokmUXKzwoyE0Oj2E
TLSH
T1C252B72EAA54297B9CDBD229F9127B93EBF6103621D41E84D6FC8A2C15E75CC3227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 28d839bcfb204efc07b4fd905c67b665b7ac963845fbb1076a952430e84c9580
MD5 623df45ab32f98fe9333da65db20fa6a
SHA1 3aca3990ec7e9c1a4e8ee01676e4e78ff050d667
SHA512 9d9f6980470a8d4379ef5581e62ff9365b414f4ab44aecf1494a184ca90b2d36d560d251cec4e66f08d691dc5901d526c1e9510e08775f0ff1ff876d77a77b50
SSDEEP 384:vNjzO7KxkXqKf/pUZNCgVLH2Hfgsl457pLuLcSjZkXODzq+ErU3p8L+HGyN423w3:vNzO7KxkXqKf/pUZNCgVLH2HfgsS57pz
TLSH
T1FE721A677C4C9A770F94C68CD8167F4FADB5025B61E9886443FA882903D5BCF114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2a90c3d956869c850e2b4d745c375a7ef6944ca5061cf7200329ab41cf884902
MD5 8aa9d63ea77410baa895b5b9c9fbbac0
SHA1 4072ef2f0748ef45a8cd0c5d12ed5096181562f5
SHA512 118c5b6b47589a214cdc3d46d1d001de23575b60f3dce175b363440f4ca090031873211facd9d20d23d23bf76b4299d12f7a694f03a1843e2f8eca376c741a9f
TLSH
T1DFB0124280015211C00606F4224614C872189F20DB0EB70143F46D62A8261508015070
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c5eb.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c5eb.TMP
Size 96B
SHA256 26b40999893d2ddef8a324c2e1c5f233c87689b5181ea12965baf2c420c78154
MD5 59a007f17d5227832538dd265cd93b0b
SHA1 2022a87a7391e9491230fa87b7e8fb43a7324a70
SHA512 3b72185d04e985b67be14e641f6c7a61d9f1e0465e58a011e6015a221ac94e46cb42936cfd7a3eb4f2780baa1f3dce3092d6e8d11fd53085cfb61845eab98910
TLSH
T1A7B00259C106E332C04B13F0299595E8B360DF35C6136396D2F11BF6DD256605A3B560
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 35182d85414c2dd57680f5d06b600fe200bdaaa7b2760c3fa73fe5d380397b6f
MD5 253bc5625cf2cb5c0991ffecf6428247
SHA1 b17748e0dc3ba6f8ea771cef112b607458678b34
SHA512 b1cf992e067e295fde4059cf3aa07eb86d9c972617b9d5b763d19b5213e206c566fb126175595fdd2e60c81de340d0e2344a26b456f28bd3e30821bd8b27aaa0
SSDEEP 3072:2zGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMn:nm7Rkm1tYpBeh2BAon
TLSH
T196C312279D64A9375DB9B75EB08E0B1F1EF149A7C820DE52C8D85F0423FA6CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 a0facf42b85b87c68be0f1ff5eb1e619480eb3f2d4dce6b8fff0f273cc95f451
MD5 c9c45ec3ca319486026698c42924db66
SHA1 08fe189a75eae1cab8ac8746a88f2d376053e30b
SHA512 ceaaceaba5681c3428ccdc10da2a5e89b51fd5559e92371ad0e3d492f928f1a41b8ab4b14406b437334f4eaf798110556f167ae34923fde84f8f3a1ae398ca25
SSDEEP 3072:TRGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMn:Um7Rkm1tYpBeh2BAon
TLSH
T1F4C312275D71A97B59B9BB4EB08E0B1F1EF149A2C930DA92C8D85B0437F97C81A48D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 60d6e1c7418732a17187fba3ab3e5c0caed2aeedc3ae1b198ff08df9478fbdc8
MD5 c228963d5d57a8118877febd09bb69b4
SHA1 9a1518dab5bbf222472a1c858757b28a37694066
SHA512 50c9066900f2dddb8f37e5dac4a750d32b1bd65438b8b19fba4111d3ca7c92db506b530a1c8d745c8d063b73aaa1e9e1fdaa7a2923f8e785f853219b2f622392
SSDEEP 3072:NzGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMn:Um7Rkm1tYpBeh2BAon
TLSH
T112C312279D64A9375DB9B75EB08E0B1F1EF149A7C820DE52C8D85F0423FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download