hxxps://falvoaz[.]vu/_wildcard_[.]falvoaz[.]vu/int/tuit

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 14:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://falvoaz.vu/_wildcard_.falvoaz.vu/int/tuit
Sample260813-scftyssdrb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4948	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311067280520503"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
5056	chrome.exe
5056	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe
Token: SeShutdownPrivilege	4116	chrome.exe
Token: SeCreatePagefilePrivilege	4116	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe
4116	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 2228	4116	chrome.exe	84
PID 4116 wrote to memory of 3368	4116	chrome.exe	85
PID 4116 wrote to memory of 4948	4116	chrome.exe	86
PID 4116 wrote to memory of 3368	4116	chrome.exe	85
PID 4116 wrote to memory of 2872	4116	chrome.exe	87
PID 4116 wrote to memory of 2872	4116	chrome.exe	87
PID 4116 wrote to memory of 2168	4116	chrome.exe	89
PID 4116 wrote to memory of 2076	4116	chrome.exe	90
PID 4116 wrote to memory of 2168	4116	chrome.exe	89
PID 4116 wrote to memory of 2076	4116	chrome.exe	90
PID 4116 wrote to memory of 4328	4116	chrome.exe	91
PID 4116 wrote to memory of 4328	4116	chrome.exe	91
PID 4116 wrote to memory of 4572	4116	chrome.exe	92
PID 4116 wrote to memory of 4572	4116	chrome.exe	92
PID 4116 wrote to memory of 1972	4116	chrome.exe	93
PID 4116 wrote to memory of 3448	4116	chrome.exe	104
PID 4116 wrote to memory of 3344	4116	chrome.exe	105
PID 4116 wrote to memory of 3184	4116	chrome.exe	106
PID 4116 wrote to memory of 5056	4116	chrome.exe	108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://falvoaz.vu/_wildcard_.falvoaz.vu/int/tuit
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe9b19c728,0x7ffe9b19c734,0x7ffe9b19c740
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,11921606640074729459,14472707750052802059,262144 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2056,i,2041349241647295080,6208385349841253262,524288 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,16776215654166141701,4950814837866256029,524288 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2356 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,12829792551269751239,15262638918532433546,2097152 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3156,i,13483832516247833812,8864190572745347538,2097152 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4368,i,7628470882480348925,7132079853470310613,2097152 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4676,i,14528483596525466353,13500845494119466687,2097152 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5308,i,13529320493603894862,14323562411001230456,524288 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:1972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5392,i,7203050232553579617,14725205828211366382,524288 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,12959495695368799920,1220710433981547459,524288 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5756,i,5547650893039897533,3638522095165056738,524288 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:3184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=728,i,14276894900862759367,8900667036997960429,262144 --field-trial-handle=2008,i,7772570654321642820,6068538607595007298,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5056

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2424

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1612

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a96b903b341e224f45e5420b66708157d91f5fe455f229b485e9f95365448297
MD5 72651b15054061d8f374075728c06919
SHA1 96753e351c6ff942709c4fb5da51a1e3769f836c
SHA512 bf1cd2d0056050dc9f590e101ef2c90b5c0c6d3764a08d9e941a1687a5b12987331d7d1fc241873a2d990ee3793e11a437e617f21b2e6e4fd40dfe33525cb101
TLSH
T1B5E0ABA9CA30AE6F08FC032824480606E34023472B40885F3E3C82098FB96370496C1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 82cd33c019a22c3bb0d1c5366c7d7ae78fa81488a5dd7a3beff2f8cfd9b5113e
MD5 1f2114bcb6e6cfe37a7ad7bc1a5cc585
SHA1 176a371e79f2b5dcdaabf47b081beb9ff8800668
SHA512 c73f2b8166a2f4a81a775284d9ccb1b8bfe9b16f80838b4c56817a211c69c28261ab475e4a7589645414bb839e0b54211641bf8bbcecd74947d8170b808785f8
TLSH
T15DB011A0A0C00082CB8203B8E0A2080220208FA02202CB2382B020AA8022BA28802002
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fc62af0f8ec66a2723a5c2bf98f678bae27fbf17b01c4d9b6f7e27d989e7a356
MD5 8823328dd4073685e414f38d078f31e7
SHA1 f6094988472aba4fc1aa5c393692dfb6786d36c5
SHA512 ad57bd486a60135fce9521c31acb016edd7465f8198267561588d6c4d816697311c245c88911284c51dc18346739b760b9d53be66d665d572aafc16ead0ce1df
TLSH
T1F451ABF783B4D93D8A1196F4AB156E1FCE690528131C3CA6C9D4AE1B53F28B2D24074F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1a9566961ca9f62a88a00e5fc6cbb71327383dcd89e3e0dad9c60ee1517e38db
MD5 e286c36c30d0e608ab6dfb59b6bae5d1
SHA1 18bb0b6a320d8d32767e4fca19231f3d38f958ff
SHA512 75731d778a3b25e8e485cd72d7728eedd3e2c1bb61f542fe05086b77cbf714d8aafd0503a17638429f9b9ee2f475b86e35ba569562c37c683e40935d621c7e15
SSDEEP 192:wRycZs1Q9Jzv72ympAPRp28oM395Hsb+WNlE4S+0kL2ogfao2UpZjsVyIsnAUge:wRycOaLQUXt7w5T2La7kZse
TLSH
T12E42B72EA914393B9DD7D329F9227763E7F5106634942E84EAFC8A2C14E75CC3227027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ae1c41f48f678cefb87b9138a6f50b7ce9351ed84d14bf1308986cfecd1e873e
MD5 fd8118f2832f66332bd8793d9c27bd3b
SHA1 f22f3778967a842e4e2936a84b1234719a0d47db
SHA512 72de0692878fdec5e129122e0817c96a0c375a957fb249bb8012489485de5f1f6643d67739a49cd08493b6976a020fee2f4865f4a51fdbf3568cd0ad1b575f21
SSDEEP 192:wRycNs1Q9JSv72ympYPRpC8oM395Hsb+WNlE4S+0kLXNy/2lgfao2UpZjmVyIsnv:wRycya+QUXJ7w5TXS2Ga7kZSE
TLSH
T1D452C81EE914397B9CD7D329F9117B67E7F4106625942E84EAFC8A2C14E75CC3227027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 394126ac5e753d2901b36fcc390027965c282e43310f994f45ac13d0dd35b87c
MD5 ff3dbec5eec287153835b7bbf65872ab
SHA1 6cddef0d89f46390c54bd2cddddcc96e14532b1b
SHA512 44ab746d8227814d4cf24545824a34ad76f25045cb3d17c1ee468459fcd0b3b4c037d33fb56f908227c35eb3068aec3d2719873192da5c0a98c2230171db2969
SSDEEP 192:wRycZs1Q9JPv72ympAPRp28oM395Hsb+WNlE4S+0kL2ogfao2UpZjQVyIsnAUgE:wRycOaHQUXt7w5T2La7kZ4E
TLSH
T15E52C72EA914393B9DD7D329F9227763E7F5106634942E84EAFC8A2C15E75CC2227027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 04ff69156d0f0be2e35dcb0c9102621ac09fef8f4ca641643f80c922f1ab265e
MD5 f65a38fccf7218ed3bac6e857500e1fb
SHA1 ae7d1ebc888e33f95f5134fadea85f3f75afd1b5
SHA512 470326453fa403404840835cc14a37825cb6e6ed1b0f6c6b80cb6b73c439986abfc211174e159a321e21f1acf9160d0279eaf00a9da9f0cdaa4f8f8f3b0441ad
TLSH
T1F3B0126084015702C44A06F411932488B1685F18960B1B0143F0AF33CC251A2801C050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584e69.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584e69.TMP
Size 96B
SHA256 ff4bf03e64a4a4b5272113ce813db07f37aee83fdeb5fafb0a468df279b5a8cb
MD5 f7e129d1a26a658b331360a61951bdcb
SHA1 2e0ffe25e1d123f497464459ebf47044d05eae7b
SHA512 c13507ed4f1a990054b34e8a26ee3c59896c005c786ecdd2d661f327ddd2043495207338f8572de00972d495b26cf294308ea39cf69708835c67a6dcb09d266e
TLSH
T1FAB00259C1866612C05207B0259599E871A4DF25C603133296F45F67DC376B1DD7A260
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3ad184aed7928307192223aa8fcec72e106f10e251a86453970ed4711acf2894
MD5 c9a84d0cf2ed6612ca0910adfa266142
SHA1 abd4f457a999f9fb4284c4602b3eefc418b0488a
SHA512 a20b79dbc6a7b52b086e740672328b24e97f3c3f07d294c709e2e3f0be49765b0e2138b5b1cd6e155dbdb7b11e8aee4aedaa9c189497c6f854427d2dbcd0194c
SSDEEP 1536:0nyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Eqfd7NtZL8cHQRZEQ6Spsk
TLSH
T1F1C30237DFC61E339DC2DB60B9130ED793F644A99034D305EE6D6BAB6C83495A44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 21a2380580c4e76b37346afe9c3c76b05e8d9c9ec06ab2e1c2d039ee803ac5c5
MD5 ddf41462d20f90eb3c507054d902a297
SHA1 964f5f896bb3cc442679114e20e746205f30e74c
SHA512 04980cc7afb4d8f1638559bac7fe3f342499c6a4d388521ed4b2834059450a7ea240fa58646ff4286206cdf71cfde93bae7a7ef90b1a81e5a073552510a81428
SSDEEP 1536:3Tx1yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:t7qfd7NtZL8cHQRZEQ6Spsk
TLSH
T10EC30237ABC61F339ED2DB70B9130EDB97B544A99034D301AE6D27FB6C83895648249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b4e57a8cd371b25811b4514e36349053b37112cc015153d5e7ded426fdb62c5a
MD5 cfcc96b67cd5041d57b4f245247fecc8
SHA1 d2b50de73d3c3bbd9e994745e24878b2edb65852
SHA512 430a52c8aff9f85c65054779bb5a38fb05eaa7c3c7f629685b79a8fe678730fcab41bbf4de881b0327d438404270224c63da55bbf7ca152ba723c6ebf39da622
SSDEEP 1536:TSQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:jqfd7NtZL8cHQRZEQ6Spsk
TLSH
T1E6C30237DBC21F339E96CB60B9530FD697B644A99034D301EA6D77BF6C83891684289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 63503d60f14520323253f1bfd13982d7e48bc52bf32803d04e7f6aa1dcd4b770
MD5 6b6520b0d410d328524413db0f473641
SHA1 f7ccdaa786b3229152061561190ba19862d278bb
SHA512 766ba2a7b9bf5d7c7ef8b927fb49acddf4b1ef88fec16d57eba7ff5932217249124c3b1be39396c985714738012766bdcc4056a1ad84e31b468a00d1605301d7
SSDEEP 1536:0Tx1yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:u7qfd7NtZL8cHQRZEQ6Spsk
TLSH
T1A0C30237ABC61F339ED2DB70B9130EDB97B544A99034D301AE6D27FB6883895648249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download