hxxps://e5[.]bmtr[.]org/&cid=f38bce13-4a7d-843a-3419-f49a03fb45a6&client_event_timestamp=1786084074893&experiments=&install_app_version=3[.]87[.]5&install_timestamp=1736132842&platform=extension&premium=0&success=0&event_name=api_test

Analysis

user interaction
yes
max time kernel
56s
max time network
58s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/08/2026, 15:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://e5.bmtr.org/&cid=f38bce13-4a7d-843a-3419-f49a03fb45a6&client_event_timestamp=1786084074893&experiments=&install_app_version=3.87.5&install_timestamp=1736132842&platform=extension&premium=0&success=0&event_name=api_test
Sample260809-s7vllatwe1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4340	chrome.exe
792	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307640250015058"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4340	chrome.exe
4340	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 4340 wrote to memory of 3388	4340	chrome.exe	80
PID 4340 wrote to memory of 3060	4340	chrome.exe	81
PID 4340 wrote to memory of 792	4340	chrome.exe	82
PID 4340 wrote to memory of 3060	4340	chrome.exe	81
PID 4340 wrote to memory of 3664	4340	chrome.exe	83
PID 4340 wrote to memory of 3664	4340	chrome.exe	83
PID 4340 wrote to memory of 4044	4340	chrome.exe	84
PID 4340 wrote to memory of 4044	4340	chrome.exe	84
PID 4340 wrote to memory of 4880	4340	chrome.exe	85
PID 4340 wrote to memory of 4880	4340	chrome.exe	85
PID 4340 wrote to memory of 3268	4340	chrome.exe	88
PID 4340 wrote to memory of 3268	4340	chrome.exe	88
PID 4340 wrote to memory of 3668	4340	chrome.exe	89
PID 4340 wrote to memory of 3668	4340	chrome.exe	89
PID 4340 wrote to memory of 3832	4340	chrome.exe	90
PID 4340 wrote to memory of 3780	4340	chrome.exe	92
PID 4340 wrote to memory of 2260	4340	chrome.exe	93
PID 4340 wrote to memory of 1764	4340	chrome.exe	94

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://e5.bmtr.org/&cid=f38bce13-4a7d-843a-3419-f49a03fb45a6&client_event_timestamp=1786084074893&experiments=&install_app_version=3.87.5&install_timestamp=1736132842&platform=extension&premium=0&success=0&event_name=api_test
1⤵
- System Time Discovery
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb4f7c728,0x7ffcb4f7c734,0x7ffcb4f7c740
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,15644657114305136179,11468441563537153319,262144 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,15641863905577354006,7994522409970731243,524288 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2108 /prefetch:11
  2⤵
  - System Time Discovery
  PID:792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2336,i,6202606558396681188,7265169254765470212,524288 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2444 /prefetch:13
  2⤵
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,7532769593420849446,6817854424865112046,2097152 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,5092419565974144115,13718721927581343143,2097152 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4436,i,13996006412769828270,4898457020474006910,2097152 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:9
  2⤵
  PID:3268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5148,i,18301092727708644906,5133093640751742546,524288 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5152 /prefetch:12
  2⤵
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5796,i,7350848417646594361,6297601072796537613,524288 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:3832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=212,i,4801377718102594646,14561755181118914789,524288 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4956 /prefetch:14
  2⤵
  PID:3780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,12042802112942455485,3202316373197348923,524288 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4884 /prefetch:14
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,8443321410604107653,15996547397683764347,524288 --field-trial-handle=1960,i,15104845470469433317,5936710006659776994,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4780 /prefetch:14
  2⤵
  PID:1764

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1672

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 598aa2f6f407623b8727896abfa9b162c1223985d2a4430f0fdf945efa5350a0
MD5 fee16f7fb7b630cb4069855fa181c769
SHA1 1238787f3cbeb701e476540d46551b1808bca57c
SHA512 d0a3a968b10b606879a21215796b6d8bb08ac7fac376e4e1fd8487a35dabf4c9c494b676da3d08d020a9b1b506af851bd8673bb5a10098c59da276da7b0ea333
TLSH
T13FE02BB5C912EC2B3CFD175890644656D71413073A41599F3A3E921CCFB1A37559686C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8cf25468e8ed4012ce5e94c48f1dfbfeaaead97691da579ad83f0504ae0b6b54
MD5 491e55f81a7561e9c415ab40b0e2b875
SHA1 3f6b17cdb1e564495746e87a9adffb1e673cf6fd
SHA512 c6cbbf1ffc79ab4d74004c44661a7610f1f8cb9a739e0316ea1ff00e05c1d172e1777328c1213bc651d7acbde39b76f82808e6f78cec7bcdc04b956af70906ae
TLSH
T18B4167F7C7E88A7D890092F8AB196E1FCE6D0E14536C3C56C8D4AE1B53E2971D20158E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 071e155df62393de7357ec98eda7c29a755f2c3d1021bdb8276099c7310c6edf
MD5 89ed65d7b2832e9021e72d282a574704
SHA1 72e47d9348f1300ebc3ec85e33cf7d1559316318
SHA512 1167e0bb279446051973b32f6a934ad0c26312a455d609353d56712537aca6728644ad772021e46076dcc1f19070d8b55e9492d394553c78f95f153af768c2f1
SSDEEP 192:qRfdPtqIGTv7lpAPRp23i9+Hsb+WNnpLh75eZa2KeffaCVVyIsnAUgE:qRfdP4rRUXb0whHe42/aCDE
TLSH
T1BB42D77AED11797BACDBD219FA657753D3F5202120D02E84EAFC992C15E7ACC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f1eae235f05b13a6ee28737c2a07c2271b93465df8f6305cd22019243817c110
MD5 f65ba3657c6617c5cacf2dea9aae4a60
SHA1 d096ca7acb15b7035149228bc6e4d511af106369
SHA512 7b22ea240a848f5dc1255c49b774452aa492394afaac91a5ed7e16d683803fa9310fa5bcbf452831c973c8a59531e8d3d4aac4b2f36362afdb822cdb2b33e9bf
SSDEEP 192:qRfdPtqIGyv7lpAPRp23i9+Hsb+WNnpLhh32oa2KeffaCKVyIsnAUge:qRfdP4eRUXb0whD2b2/aCKe
TLSH
T11442C87AED10797BACDBD219FA697753D3F5202121D02E84EAFC992C04D7ACC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c48ea4851d93573421a1f5e92dfdd9c0cc0bbeca9216e615794ab2013501d5f1
MD5 9365e110646fce4577746230e9396c69
SHA1 43e90a5f0d59e1baf6618dc088b25f7ee4f34390
SHA512 9a5685ed76a706c9438a8141f54d0da5f900ed9164cb7aba717892a4e4661ae16db249ed13fc8eb242bd0321b328b8cf3e2f2ff69067bbe412ad1a880371f8d4
SSDEEP 384:RXjVs7KxkXqKf/pUZNCgVLH2Hfgsl++M9r7pLuLcSjzOXODV0+ErU3O3MDTHGRjs:RzVs7KxkXqKf/pUZNCgVLH2Hfgs8+M9k
TLSH
T1A97209A76C4C8E7B0F94C6CCD8267B4FADB5024B55D9C86483FA582903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 51494f82033d65d54e06a7f92c6fc47fd0a4246c066d989f64b900f2297fb426
MD5 68b5cdb947ae5a578a8af5d1d9487dea
SHA1 d180b27be781f34aba77edcedf313054d2cd248f
SHA512 2099350dde2d6d275c1efd43d3eb89688d3a96dcb7b6877ddc940497bd47aee3d7aee54e146ed6cc206b81571b9a58058d9ed1ae7d93d79f6481d52a09cad825
TLSH
T15FB0128080019601C402C3F8115658887114EF20970F270143E8FA3A88252628024050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58db09.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58db09.TMP
Size 96B
SHA256 7d0a55e45d941aee5b1756cb5c286f26c660a5cf4075f32ef3adf008a70601b6
MD5 b2b8574d5dc0c5d4404325db988ba6d7
SHA1 b63fe4cda43c5ae5200f0451f57be920b5148f6b
SHA512 fb44e8312100523e186b6cb9df369dfc55abf840c1486efe2ffe9c5afe3581c9c69908f545e22f524d629a06496c62202534a485d527eeaf0fb159658f1c8bda
TLSH
T129B00255C106A227C04307B02EB5DED87161DF35C613126BD2F01EA6EC29A60652A560
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 021514d8a757ad0888cfbe615c46edc2fa9f9ce014388b3a05601741de885bc1
MD5 83d3a55f1b548a1d5358d4d85c98c525
SHA1 8599dd7b447343692174b7e1dbc35753f96e92dd
SHA512 34802b538ac6d76e679b447c56aa4e94352876c4029fb9c0c60b3d771950065ec63829f9cfd9bc0521dd755f2131aa05f60fc00ed6c015e7ca8aae9d3215208a
SSDEEP 3072:+Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:Zm7Rkm1tYpBeh2BAoa
TLSH
T156C312375E71A97759B9BB4EB08E0B1F1EF149A2D920DE52C8D85B0437FA7CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 570ca5b4a384561f1b02e2efd932b7ddddcbd39d0e84eb431a4f738cefa54035
MD5 da51edba7da4f57f17c0d13d0eca62b4
SHA1 67c71267bde9e6dbc9d203c96bc8c54c8ab18f1d
SHA512 a9030d7bf3c34769a69bfb68a3215a85a1c784d54168ac7167fcfb802f23b80535449ac3aa12c842efa04d8a290b6c471247839371af92081f2e0a9b53949b98
SSDEEP 3072:hGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:wm7Rkm1tYpBeh2BAoa
TLSH
T17AC312375D74E93759B9B75EB08E0B2F1EF149B7C920DE92C8D85B0423EA6CD0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 38b83a0a7733a37568ebf6f9c1170c0078496a57d3737cfae0d919487c2b6b1f
MD5 002a21dbd2f6bab654caf28dfe8bab4e
SHA1 583466ba59513d6eaecda379e1ed5c1204917325
SHA512 0a6b64de882dfb90ca682afc52097e087e35f7f455f41280100f7127c4d20aa689083c072119a9fa505cd84cbc02df6777d921c919719eaade5f9cee90b9c048
SSDEEP 3072:6Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:dm7Rkm1tYpBeh2BAoa
TLSH
T15EC312375D74E93759B9B75EB08E0B2F1EF149B7C920DE92C8D85B0423EA6CD0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download