806b6bf8809465fba5be494777d75fb925965f263075d7112dbe8378bac25f62

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 02:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HjR NUKER/HjR NUKER/HJR NUKER-main/main.py
Size 8KB
Sample260813-dgbcpsyvhx
SHA256 806b6bf8809465fba5be494777d75fb925965f263075d7112dbe8378bac25f62
MD5 67472034a3e138464d1260e06aee9023
SHA1 e479915bdc822a430c8e0135012f196f6e2a7055
SHA512 d1bd3200a0df2235beadffa59043b5087760cf7a2627084f12900e941e8a197e24ee528b20d6ac5ad9ff980139cc10c0a900b743fb1203c6d9f95336f4edd124
SSDEEP 96:V7z/xJ7jJfFP25vT2Or51TbvYAJzB3h+Bv7E2yeaqSiPVH68i:V//tfFOgOrDwAJzB3h+x42yefSEa8i
TLSH
T19012657C964139217B47896C8CA568703767F423EC68D03B7EEC548C8FAA63DCD15A78
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4468	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3244	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310635505013604"	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
3620	chrome.exe
3620	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
4112	OpenWith.exe
4112	OpenWith.exe
4112	OpenWith.exe
4112	OpenWith.exe
4112	OpenWith.exe
4112	OpenWith.exe
4112	OpenWith.exe
4112	OpenWith.exe
4112	OpenWith.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 4164 wrote to memory of 4696	4164	chrome.exe	96
PID 4164 wrote to memory of 1896	4164	chrome.exe	97
PID 4164 wrote to memory of 1896	4164	chrome.exe	97
PID 4164 wrote to memory of 3244	4164	chrome.exe	98
PID 4164 wrote to memory of 4200	4164	chrome.exe	99
PID 4164 wrote to memory of 4200	4164	chrome.exe	99
PID 4164 wrote to memory of 5096	4164	chrome.exe	101
PID 4164 wrote to memory of 3956	4164	chrome.exe	102
PID 4164 wrote to memory of 5096	4164	chrome.exe	101
PID 4164 wrote to memory of 3956	4164	chrome.exe	102
PID 4164 wrote to memory of 3084	4164	chrome.exe	103
PID 4164 wrote to memory of 3084	4164	chrome.exe	103
PID 4164 wrote to memory of 2356	4164	chrome.exe	105
PID 4164 wrote to memory of 2356	4164	chrome.exe	105
PID 4164 wrote to memory of 2708	4164	chrome.exe	107
PID 4164 wrote to memory of 652	4164	chrome.exe	112
PID 4164 wrote to memory of 652	4164	chrome.exe	112
PID 4164 wrote to memory of 3596	4164	chrome.exe	115
PID 4164 wrote to memory of 2428	4164	chrome.exe	116
PID 4164 wrote to memory of 1480	4164	chrome.exe	117
PID 4164 wrote to memory of 3620	4164	chrome.exe	119

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\HjR NUKER\HjR NUKER\HJR NUKER-main\main.py"
1⤵
- Executes a command shell one-liner
- Modifies registry class
PID:4468

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc0e72c728,0x7ffc0e72c734,0x7ffc0e72c740
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,9558916416947965886,3318674764284356707,262144 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:1896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,14410145869649196759,3689902493217347630,524288 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,1315466247279122890,5632142410047971889,524288 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2312 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,8127591290319116591,11287638167089150540,2097152 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,2837556722915449069,4404666843265825443,2097152 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4464,i,9719822847468586275,1013224009641797695,2097152 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4680,i,16349351668576179527,3528059998381462223,2097152 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,6197950786146321294,7675980554885367929,524288 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5544,i,5874050317021797048,13910526631307010663,2097152 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3444,i,18235041826889682913,8847279957050766933,524288 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3408,i,8084367962309114686,14377892889802346483,524288 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3428 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3412,i,576630785385391145,8463987827108662893,524288 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3544 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3420,i,2371164309342705324,6957590465646836928,262144 --field-trial-handle=1980,i,3366463815248762115,15070841567761652403,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3508 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3620

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4208

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4260

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 90fcda3c8aa5b553f1e4b0e6af94ff117cd9bd422c254b5aa96e712d235782ff
MD5 60224bd6a497dc5390ea185fd8f0cc03
SHA1 c511131ecc3025cea6209b6594381fbb041a6ce0
SHA512 fc77940ec2f78fc936b55b45082543e9485c27a7393ab5f3cff5c9fef085f4fcf62510c01cfa6d6b2b3c0075a049377c253b5777a37d71fd644b3d195accbd99
TLSH
T169E02BA9CC22EC275CFD576D50640A46DB5013572B60855B3A3C821C8FB06B7018685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 e91edae52150cba3a93dd9080f22709dcc01c2dcf163f173517a705e3295ff54
MD5 bbf446224ef5d1fd6469ecf829cfc928
SHA1 0d53ef4ec0f06be5b79229d1adefaeb3a6c3463b
SHA512 cd6fa0c254badc4e203b03e34d40164c9e3fce24cbeb13a10bbb72acec67a45295b17344f0a1e7b5cd377a2c6380dee19a238dab9e27df173668673f7ab90db9
TLSH
T17AC09208D2835008D3AAB2F13862448029AC0A799F9361A9C1A04D8BA423BA29104970
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 4c2bd394183f3579f1f258cf864a2706a37d151fa90f78d4c48bccf2bbb4269d
MD5 8b17dad85fae58f27419ebb04b537c8f
SHA1 54139792b4f593482dd5cd8291991b5329ed9180
SHA512 4633a2b157741a1586f883bb347155c95f08f067a876c5348f9e08d939a44881f66ac938b91271fb1602547c9bee682e4584e7a37e9b12892a3c0553af7bd0e1
TLSH
T17C719CB7C3D8C52D895156F4AB256F1FCE290A24422C3CA7C8E8AE5B53E2972D21174E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3dd0c92966c177373cd70073ee69955b0d359d72f2ed61c8215fd2b6427a2cef
MD5 ef54b73859fe3b8871e534eed37da885
SHA1 367f47e8ba8077cb31ecaf8a4e36ce41811fc03f
SHA512 ca7f52d2075394c47cdafdc23ea5e796dde43f9164938b4e0781d2e064cca2bda8376e204168a59be91f8ed748c91fc4301092afe085369928c71f32045dd9b5
SSDEEP 192:SRVout0388Lnv7ApAPRp2l9qHsb+WNnCZ0+R2GHkwskVyIsnAUgtaJ:SRVojlvkUXmkwE062GHJ8
TLSH
T1FC42D72EEE10693BACDAD22AF9557B13DBF5103525942E84EAFCCA2C19D75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 669f631908e26eddebcf7663cf8f41df71e328586b56d8f4eba9b6bf9cbabd86
MD5 14d6223b0bff927d0f9d6f49512521fb
SHA1 da22a204e7290e9d8a1a7f13bb4806f659843eac
SHA512 b871edf2957a6f74e563b2246b4f4ad79fa9658e19aa1655fd534603301a3e9d4ef6f46eb1de05f84926b0a6d14e5271f6c0db0c88ed4f3ad82f291d524aba5e
SSDEEP 192:SRVout03885RKv7ApfPRp7GiS9qHsb+WNnCZ4yB2MR2GHkwsqVyIsnAUgraJ:SRVojFGkpX0kwEz2o2GH1e
TLSH
T1D852D72EEE10693BACDAD22AF9117B13D7F9103625942ED4EAFCCA2C15E75CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5286dec7958d6991fbf35ceb91432112590b41934dca70959eace8d1ff19862f
MD5 c9ea3f0054bfb03f88a5b23aef4e9ae9
SHA1 c723fd310cdf924fa28027ef2282cb1e929d7624
SHA512 a864f30322c692447403c673d6014de60b83fdfca2e3ce9aa3cfdb14997e9aec668c69bb7f819d1f075016523ffd3ea40279041b40304c6233c43f6388c7aece
SSDEEP 192:SRVout03885Rnv7ApAPRp2GiS9qHsb+WNnCZ4yB2eR2GHkwskVyIsnAUgtaJ:SRVojFvkUXNkwEz2a2GHJ8
TLSH
T17E52D62AEE10693BACDAD22AF9517B13DBF9103625D42ED4EAFCCA2C15D75CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 37b15cfab1dec7e612533feb602610f489031fb335ea244e2031edf03e7ce5db
MD5 60c62d5aa152c9a5ed3d030485196383
SHA1 7ee36e18a3e18543ecaf7028d2b33c0ce6029c52
SHA512 6d9078cfcca12a2c353c9da249463db8aed88709dbeefb6ffd87abff2eb8f6d705d7155b8e0a23417294f6f1c9f34787a5aad6333382bf35042d58eea52b70b5
SSDEEP 192:SRVout03885RSv7ApAPRp2GiS9qHsb+WNnCZ4yB22R2GHkwsoVyIsnAUgraJ:SRVojF+kUXNkwEz2y2GH5e
TLSH
T1D652C62AEE10693BACDAD22AF9117B13E7F5103625D42ED4EAFCCA2C15E75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a394cc2b5ac0d53b76ed3f63a5d737ad6eff6c8ba7abcd90607a41c663bb6f85
MD5 73a8ad6fd199f48c94f434e8d5502061
SHA1 216bf2f116a258a0883ebd901d3dc491079f1bd4
SHA512 27209624be96ddc2158d0ee673137796924cd56787c9357a4f0662fa3fefabaa69960c73f7c281bc75734063f235c597e17b96cb6ffd28e73518ea37e12105ad
TLSH
T1D8B0124080015501C00302F8154218887118DF14F70A1B0143E46F2298291508418058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ac87.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ac87.TMP
Size 96B
SHA256 112e9c1e6383e6797f68f8d63af9e8bd71c0addbb6d09def69823b2df8d9c2b9
MD5 2d9e657ad97491c2c0ed2f9c15c78087
SHA1 b6d7d90dac1b28de2b597592f12c5933cc1af2b9
SHA512 5912e33b4e4d743390145176f8e343524d7554c369dd41c08643f1f4cf1ff39c45f9ab0a0be4400fd0c1fe7ef207cdc4807cade1f61a7cd49a238e3dc8803a54
TLSH
T130B00265C1466233D44243B139B59AD87264DF6AD6072B17E2F01A67EC256604929960
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 e7eaf4aadddca4f013b2be62bb55bc8c7e2e5783bc8cd6be3e69d85fcf6a228f
MD5 37e6fb3336d9821e1689165d4ad05f23
SHA1 058976c6b4df03ad1b372c484e450db7c4c2a551
SHA512 dfe2a83bf215f44de057e5e2a41d6cba4986940ee4f5165f6a79af15395f79695fdbba13ba0dfae1618a2fb6c82bfad69c4d491726a1ff9a07275b1de69c1473
SSDEEP 3072:A0Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:wm7Rkm1tYpBeh2BAog
TLSH
T144C3023B5D75E83B5CB9A74EB08E0F1E2EF149A6C920DE92C8D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 e9a6ccdd27f8e62ec07177af0e9ce1880d74b57f73edf5bedda7d846e75c07d3
MD5 d89fb331284958315e1ebf020f722742
SHA1 ff918b240f16b99eb93ec3c0c57fbbbdf39ba04f
SHA512 6aeb2222095b03d9bb41eea3c1d8e8768e10dfc87336357a50d551e1391a61f3e6a95f7efbff00ee54e8afa9d1f1b9453085d5f72743c8d2f1458ebeff8c4b28
SSDEEP 6144:G8LD3941xHol3woL1nkAFm7Rkm1tYpBeh2BAoA:Pf3i3ol5eAs9oBGcAoA
TLSH
T1E73412764DB59B398AE56E1F704F1F1A1EF04AFFC910EE95C8C8A70052D99AD0C86CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 8035334624788fed1051ec57842faeb89dcf09e3756f2842a8a402966d7b2651
MD5 0461bde434943c05156522ddea2b9704
SHA1 0944532efc607fef58a1e9b06f87bb3dc4d110b0
SHA512 b130c0cd427242990f55ac75464406ad0e302fd903e8f45d5b299d07acfeed808f4fd7a01cb6105b93b7e8c0acd6ca2a5c285636f2bda763ffa1d3e81e23cfc1
SSDEEP 6144:1LD3941xHol3woL1nkAFm7Rkm1tYpBeh2BAoA:1f3i3ol5eAs9oBGcAoA
TLSH
T1B33412664DB59B3986A56A2F709F0F1A1EF048FBC810EED2C9C8D70442E99DE0CC5CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 ab3f5e5c89ac959a2ee1334171c364323be30c86e3a77e2d2ff7146c36b76c0a
MD5 60443c821c976fdd4939a2d2b0c19f06
SHA1 033fcba4494b0e144e38e0959d8b884b5b42bc02
SHA512 bd8d05a30bbd485e42187b66253d5e640c3ee79152db11e7c4d8d7a9e3600fd03734717d21180cebdab8d51fca07ca05ee9a660d78624fafcada3db502d8a999
SSDEEP 6144:+LD3941xHol3woL1nkAFm7Rkm1tYpBeh2BAoA:+f3i3ol5eAs9oBGcAoA
TLSH
T1553412664DB59B3986A56A2F719F0F1A1EF048FBC910EE92C9C8D70442E99DE0CC5CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download