a23feb2e63a675c3f7ca99e7d167dfaae911443f7c2f5f548fa80695587f97ce

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-fr
resource tags

arch:x64arch:x86image:win10v2004-20260513-frlocale:fr-fros:windows10-2004-x64systemwindows
submitted
16/08/2026, 18:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
shiftx emu.exe
Size 13.5MB
Sample260816-wrd6fstfqa
SHA256 a23feb2e63a675c3f7ca99e7d167dfaae911443f7c2f5f548fa80695587f97ce
MD5 2e87b10287cacf62dacd85ab4f441fc5
SHA1 a22aaebb0f72ba1734b174b41e11760d535fe970
SHA512 fc5f4b67e300873074c6c7972fe21cb1ce607d1a750408647949bc0a3f0f8ab8bbff3ea36e6191414841aa284ed757824e3ec94fc64364411af86a7239736701
SSDEEP 393216:KWUEKtquY8TLJ1gqas6ck1CPwDvt3uFKCyMJcsi5aYs:KWUJrVV
TLSH
T136E6CF6AA7BC0149E4AAD1BCC2979327D771B81527B053CF5A5046F81F23BE52B7E380
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3468	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313773877043494"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
3128	chrome.exe
3128	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe
Token: SeShutdownPrivilege	2336	chrome.exe
Token: SeCreatePagefilePrivilege	2336	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe
2336	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 2336 wrote to memory of 3788	2336	chrome.exe	89
PID 2336 wrote to memory of 3468	2336	chrome.exe	91
PID 2336 wrote to memory of 1908	2336	chrome.exe	92
PID 2336 wrote to memory of 1908	2336	chrome.exe	92
PID 2336 wrote to memory of 5052	2336	chrome.exe	93
PID 2336 wrote to memory of 5052	2336	chrome.exe	93
PID 2336 wrote to memory of 696	2336	chrome.exe	94
PID 2336 wrote to memory of 696	2336	chrome.exe	94
PID 2336 wrote to memory of 4536	2336	chrome.exe	95
PID 2336 wrote to memory of 4536	2336	chrome.exe	95
PID 2336 wrote to memory of 3724	2336	chrome.exe	96
PID 2336 wrote to memory of 3724	2336	chrome.exe	96
PID 2336 wrote to memory of 4176	2336	chrome.exe	97
PID 2336 wrote to memory of 4176	2336	chrome.exe	97
PID 2336 wrote to memory of 5108	2336	chrome.exe	98
PID 2336 wrote to memory of 4188	2336	chrome.exe	107
PID 2336 wrote to memory of 4188	2336	chrome.exe	107
PID 2336 wrote to memory of 3292	2336	chrome.exe	109
PID 2336 wrote to memory of 2864	2336	chrome.exe	110
PID 2336 wrote to memory of 2600	2336	chrome.exe	111
PID 2336 wrote to memory of 3128	2336	chrome.exe	113

C:\Users\Admin\AppData\Local\Temp\shiftx emu.exe
"C:\Users\Admin\AppData\Local\Temp\shiftx emu.exe"
1⤵
PID:5080

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc939cc728,0x7ffc939cc734,0x7ffc939cc740
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1816,i,14914853529880469964,15429973904802693475,524288 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2052 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,15922229554805444820,13855023621850479604,262144 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,5366748788591494664,9384584557754451374,524288 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,13858544569152941002,10818653439167981812,2097152 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3488,i,8393739655053494215,17741175080938210710,2097152 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4476,i,7265336195158606178,1536163587592546713,2097152 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:3724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,11762953709927624324,6921324291196219612,2097152 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5492,i,632654991010783716,385881683972713572,524288 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5804,i,1170082427005507892,13740466044513029797,2097152 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3264,i,15350229455745257496,8513035868288298105,524288 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:8
  2⤵
  PID:3292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,8062851988379435477,9491232347880158931,524288 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:2864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3600,i,979024412393354498,4830678685931180132,524288 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4880,i,904587340375827627,424140212495499294,262144 --field-trial-handle=2024,i,797319820903014423,10465811373246824837,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3128

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3800

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9e9f73c3ed741be4b617e0dac8662d9cb6ee01bb0d43b53f88df4a7d453bac5b
MD5 74b820bc6fccd7ef8b31afdc601d4d15
SHA1 9552e00f0d31854a233809bdf7678e61bb109ad5
SHA512 6cd4ec3b95b1ecf0758a3e59a32a1921ca7ea3212996680d4b9b9806429cb6de614f96b0938236c44e75ad466faf414b3eec3ea54ea0775d8d6163f0d23ff99d
TLSH
T1BFE02BAACC61AC3739FD171C50D54749EB5513572A81491F7A3CD30C4FB062A4596C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 fddf6d8632cabbbf32d85ac7df50adb49f4464ba3727ccf7376b0c1f2e347c65
MD5 cdbb76f404dcd45e96eedc9646f8eee4
SHA1 f4221c3cccd7a112210d11ed875c8b2942fda17e
SHA512 a32d96b740f6bea23a28f74958b30515020a0ba887124b2dbee0fc091fab8710fd7220f3a704c0d9a735c3a08585c601edad5c29dd9ac893ee00bf0a4171edf5
TLSH
T10CC0220230F32028C3CC2230302200A03AA008BA8A8300B28AE0CCCE88223A2A308808
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f82e238530979abddb5bd314db61c2e4c526a15c36dd13afd7760cc6f4531db6
MD5 48f97430f00106a522406f11e49eff11
SHA1 261d187c2905db24ae9d8503df2f30b473a8a98f
SHA512 ffc168473d7058448c5616d7b1d5d7183d0a68a317a344d5b7612c213cc43473acd5b07ef8c78cd46d70a85c97a2cc4eaca3191bd125dba493b4ed754f2bd107
TLSH
T1ED71BDF3C3E8C66D891156F49B156F1FCE690A28532C3C66C8D8AE5B93E2872D21174F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 aa3dd7384e683fda56189470843b05369003e77b997a4b0c98037cb9bdf67036
MD5 86299fd94555d1addbf07a4e2cef1f6d
SHA1 4d13a6cecb29173dd1858fba87cfcef58488774d
SHA512 8ee5693fad5172b275dacf7ec8925ecb3b377a1879f5e1ca03ae6ba2f8ebfacf43f42ec69b8dac4141f37b3601f08f173f6d63a4e4fad2c810f4890610c88789
SSDEEP 192:ARqqL62CXqBkox9v7hpAPRp2W95Hsb+WNnlV0UxqU2nnaQhCVyIsnAUgtaJ:ARqEYo39UXtrwL0MqU2naaC8
TLSH
T1E842D82EB910743B6CDAD219FD263747D7FA143125E42E84EAFC852C15EB6CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2215e1883bcd2e50d6f45991eac599d8efe33314cd074e6629141edcc57260bf
MD5 84e2e762890ef98ed4c8b2201b6b6c53
SHA1 5001c2bf9ae2527bef0f982740bc90b4e53ad103
SHA512 d83cd1b3eccfbe36565d78f44bbabb317551e9c6b85923a28686b481ec198f95a4595960596c26e573818ff778c247755a9aafe3eefc512ebcb79e2be6fdbb72
SSDEEP 192:ARqqL62CXqBkSsv7hpaPRp8Hcx95Hsb+WNnlV4WAeqxqU2nnaQcCVyIsnAUgraJ:ARqEYS49+XHrwLqeGqU2naBCe
TLSH
T1B352E92EB91075376DD7D219F9167B57D7F6203125E42E88EAFC892C05EB6CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 51576a4800e8874246e1482607a9a9fd458076b070c109638e981ae9a4f3e830
MD5 675a4cedf1a837b8c367780d44a9a6f0
SHA1 2dde02c3d865fe9e6544ceaa28ba52b6fc484791
SHA512 6abcf7248bdf00e1ee752c25b722685a7782d81da5d386175e579a65d32934bf5060257ee0e510d7a68f40e173b7ef5c982ddd12c2f2adb93e38f0d6ace77e6b
SSDEEP 192:ARqqL62CXqBkSx9v7hpAPRp2Hcx95Hsb+WNnlV4sh42fxqU2nnaQhCVyIsnAUgtK:ARqEYS39UXxrwLJ42pqU2naaC8
TLSH
T12052F92EB910753B6DDAD219FD267757D7F7102124E42E88EAFC892C05EB6CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 0be6c459f44cd38e7c0553ae0704b9ef444eae01e451da3a446aa00aaecc35d2
MD5 991489ee85e3bf2373a933968740dd23
SHA1 5147f6c6a1c62a38cbaba240719339474bbe145f
SHA512 6c8cd6575dae1a96d82ff2fc0511c0adfd9612cdac72cd8a29c5f2cb764a0e04fee00d12ad384745e7f1d9d06c37f454c6865d0469666016dea2eafefd189931
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLKLc4jsNXOD+F+ErU3q2HoZ45hh93HU:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pT
TLSH
T11B7209677C4C9E3B0F98C6CCEC277B4FADB6024B65E9886442FA581503D5ACE010A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cc78d4deb2ebc2233d93831f901fbe855c8e41dbc6928aa8024b4b1d02b96f72
MD5 f88fde9154a73b9c2b8a35bd0fe94cc9
SHA1 9388e455e2affed0ce171f73ddb24546ac6f8372
SHA512 31ba75bbc9b5ca5663ef287bc5f79750965f3c3d39b385fb9325f414fdb3a2e0f8356cdc0cd08ad85c61ff812d88bdea5592849f74fd8181ba09be3aef5d48b5
TLSH
T1CFB01241C4015301C41206F41242148CB154AF14FA0B2B0143E47A32C829150C264051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59579c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59579c.TMP
Size 96B
SHA256 4f4407de63ed4a12c94178bd6878c75dec7eef8f6798eb04d8ad871727fb5cee
MD5 9d065e96f30563f9351fdabd08942f90
SHA1 b0bcf160de79c2cf867d8804476635d4b2c0fc09
SHA512 f87f0a6511f17bfb9038c20ad2c8be2fb1911d0e0a1a882db4836159238b99e7e3b9e669ff26b2760c159f09b96b15af776c3563106f9f9c9ecbfc23de0b2c20
TLSH
T15AB0220AC0022222C00283B0288080C832B0EF2EC303B20EB2E00A2ECC222200023220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 af7bfdf3b54745f5ec3a5d5ea44946348a2e5d169f8344ebf7c0d0259be8e4ae
MD5 6608a6931e2c6d1a2c01c399f37f5b0d
SHA1 480fd681f10a8d914fd15d581e2c34e49db53876
SHA512 784b3cd1661ab058f753cb14aaa125b95cf589bc04659cae804c3628a760928500363841fc1b2c35328d3b6a26b0b1500485f8b72d274d7f0cdf92e60cb7e211
SSDEEP 6144:a25N3BoXwUQlC0XQcLsUzI+/0qZ/ZLW3Exh:55JrUKXcGb8qZ/piQh
TLSH
T14C342373EFD62F370CE6CA687D0207D5C7FA0095986CA3029AE623FB34D75859582C69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2c00239f45830f11171df74d9edd95865636d791e521ead41017c142f744813e
MD5 77af1b7bc7c77f8d8392ca3b1ea85176
SHA1 3bf1a27ded38066f488a9756467f1ba9bb25c32d
SHA512 0353cf5eaa098030b89841634f5856e690385e5e649f209cbe77ba7a39cbe8ad08520f5531182f336e8cabd22232f935c6db549147f209a44a4d99b8c073bf2f
SSDEEP 1536:6cyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Hqfd7NtZL8cHQRZEQ6Sps9
TLSH
T131C30237EBC21F339D82CB647A534FD697B644A99030D301AABD3BFB6C9345164424AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 9c305e4f7c240fb68e1a09f80684810c548ae814866ff07fb2f030afd659fa7a
MD5 7ee5e542ee3e452a6499edd2b8a8d95a
SHA1 0c55fcb6cf664b9844242ba3b999a9bb4469dbe1
SHA512 e50f339d2c1338985a02c178ef9800d993175935a9a3b39d55075b3c67771eb510ca6797012df22a1b5bc9febaaaf62af4eb21245a334a8743a3b1a3d82df3e5
SSDEEP 6144:h25N3BoXwUQlC0XQcLsUzI+/0qZ/ZLW3Exh:E5JrUKXcGb8qZ/piQh
TLSH
T1A1342373EFD62F370CE6CA687D0207D587FA0096986CA30286E623FB75D35858182C69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 f7deb6414a5d80bc32e080e4bfc6610ca07420e37e7a72cd6251df7920879c4e
MD5 16ee770530dacab6c09ce76cece1951f
SHA1 5fe3b8891bbff1ae3a2178d1cf949d55f6f9cf04
SHA512 96a3dd1287260f53f21f5bd9af9d10dde1034a094cdf197830abd90b27d9d7c3a05ddcacfe41238374679edbc107064e6484ca34276faec0ee32138c2311d90e
SSDEEP 6144:U25N3BoXwUQlC0XQcLsUzI+/0qZ/ZLW3Exh:P5JrUKXcGb8qZ/piQh
TLSH
T151342373EFD61F370CE6CB687D0207D587FA0096986CA30286E623FB74D35458182C69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download