50fb82c91d081dd54ddad8e248c85b3aa5c44180fb75c285f43c58f6351b7564

Analysis

user interaction
yes
max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 21:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Varios archivos/Release/NVDisplay.Container.exe
Size 3.6MB
Sample260827-1pre8azyev
SHA256 50fb82c91d081dd54ddad8e248c85b3aa5c44180fb75c285f43c58f6351b7564
MD5 b61836f155fc1b85662a477b27a9c125
SHA1 a7095069ac0605095540b0a3024c45cca18c81bb
SHA512 830037f753f999cb13d52bcd6588f67700c4a7a1313c569a0f78450be1c27dde155ff38bdf5f194730507f0ea1b6dbbfaddd379d2a69386f13f7acc4fb4371ae
SSDEEP 49152:LYsYB4vrOQTAje1TpQgfpsoPRQ3qKVh/qNwffAj3g/bTqSk6TnXZfQ/:UFSrXTnTSJ/lgQ/6Sg
TLSH
T1FB06CF0BE3A345E8D6629178C523A353E3B2B418173187DF2BE14976EF866F05EB9701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2880	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323411065612244"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	2488	NVDisplay.Container.exe
Token: SeSecurityPrivilege	2488	NVDisplay.Container.exe
Token: SeTakeOwnershipPrivilege	2488	NVDisplay.Container.exe
Token: SeLoadDriverPrivilege	2488	NVDisplay.Container.exe
Token: SeSystemProfilePrivilege	2488	NVDisplay.Container.exe
Token: SeSystemtimePrivilege	2488	NVDisplay.Container.exe
Token: SeProfSingleProcessPrivilege	2488	NVDisplay.Container.exe
Token: SeIncBasePriorityPrivilege	2488	NVDisplay.Container.exe
Token: SeCreatePagefilePrivilege	2488	NVDisplay.Container.exe
Token: SeBackupPrivilege	2488	NVDisplay.Container.exe
Token: SeRestorePrivilege	2488	NVDisplay.Container.exe
Token: SeShutdownPrivilege	2488	NVDisplay.Container.exe
Token: SeDebugPrivilege	2488	NVDisplay.Container.exe
Token: SeSystemEnvironmentPrivilege	2488	NVDisplay.Container.exe
Token: SeChangeNotifyPrivilege	2488	NVDisplay.Container.exe
Token: SeRemoteShutdownPrivilege	2488	NVDisplay.Container.exe
Token: SeUndockPrivilege	2488	NVDisplay.Container.exe
Token: SeManageVolumePrivilege	2488	NVDisplay.Container.exe
Token: SeImpersonatePrivilege	2488	NVDisplay.Container.exe
Token: SeCreateGlobalPrivilege	2488	NVDisplay.Container.exe
Token: 33	2488	NVDisplay.Container.exe
Token: 34	2488	NVDisplay.Container.exe
Token: 35	2488	NVDisplay.Container.exe
Token: 36	2488	NVDisplay.Container.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe
Token: SeShutdownPrivilege	1860	chrome.exe
Token: SeCreatePagefilePrivilege	1860	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe
1860	chrome.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 1860 wrote to memory of 3020	1860	chrome.exe	99
PID 1860 wrote to memory of 2880	1860	chrome.exe	101
PID 1860 wrote to memory of 5040	1860	chrome.exe	102
PID 1860 wrote to memory of 5040	1860	chrome.exe	102
PID 1860 wrote to memory of 3880	1860	chrome.exe	103
PID 1860 wrote to memory of 3880	1860	chrome.exe	103
PID 1860 wrote to memory of 3988	1860	chrome.exe	104
PID 1860 wrote to memory of 1084	1860	chrome.exe	105
PID 1860 wrote to memory of 3988	1860	chrome.exe	104
PID 1860 wrote to memory of 1084	1860	chrome.exe	105
PID 1860 wrote to memory of 2396	1860	chrome.exe	106
PID 1860 wrote to memory of 2396	1860	chrome.exe	106
PID 1860 wrote to memory of 4996	1860	chrome.exe	107
PID 1860 wrote to memory of 4996	1860	chrome.exe	107
PID 1860 wrote to memory of 1288	1860	chrome.exe	108
PID 1860 wrote to memory of 3500	1860	chrome.exe	110
PID 1860 wrote to memory of 3500	1860	chrome.exe	110
PID 1860 wrote to memory of 2552	1860	chrome.exe	111
PID 1860 wrote to memory of 1476	1860	chrome.exe	112
PID 1860 wrote to memory of 2160	1860	chrome.exe	113

C:\Users\Admin\AppData\Local\Temp\Varios archivos\Release\NVDisplay.Container.exe
"C:\Users\Admin\AppData\Local\Temp\Varios archivos\Release\NVDisplay.Container.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2488

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:344

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb27fac728,0x7ffb27fac734,0x7ffb27fac740
  2⤵
  PID:3020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,3060606115121446295,3844274357529835049,524288 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,2146588020795852961,15198535529267340301,262144 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,11612955455383288791,11532832014980159336,524288 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,2282855079589013202,18322476690656407601,2097152 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,8403061980843346024,15542479603991054593,2097152 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:1084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,7568344989113699910,4100021874898180324,2097152 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4468 /prefetch:2
  2⤵
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,7969547330231950487,8282809266500481161,2097152 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,6818112213019026255,393408997001374563,524288 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:1288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5812,i,13224958043434879119,8708806927432003214,2097152 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3536,i,3002713650005583726,6409024578134007869,524288 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3472 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3324,i,13865774963616303180,13514117296859132773,524288 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3508,i,6768735953577254235,10421013561062286640,524288 --field-trial-handle=2068,i,1344676243066517965,15218074796727933538,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3532 /prefetch:8
  2⤵
  PID:2160

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1768

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1eebaa54ebf6eac33e1c0f0da802a9b53d0ceccd90639beda76f9e78f21b4a19
MD5 331b642e56e39ab6c5b84708aa1899ed
SHA1 7c411af18a65b0e839e1f3342d8b6408c79c784d
SHA512 a96d0ef60b7e75aeda53570c4bf01bc741d8de23cdd66070d3631ff6eac3fd296f8bf2b1c1f319b1c39b7d915f306891a109e062dc0c47468c023a96d70802fe
TLSH
T1EDE02B65C865EC6718F90759E0111742E754136B2A41994F7A3C850C8FB5A364589C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 320KB
SHA256 4a2449802aaf50999f43cb76b7e52f94b4ad9ed629f0cf0f1c8d7756e8f1d235
MD5 aaf3d5e782d4fd86316609597ff7f014
SHA1 2e82b15ea1a7dcfdbb5035ed8ce44304c2d7230a
SHA512 ed3c22757414ed48c89e6460d1b0215b5ab9498c3245d9a2c181885be68a5da172c6857055ac19e3b0e774a59ba561690e381acf0c5801e2065a42e0684c269f
SSDEEP 6144:0AeLqKHr7KNb8ya/yx0vbqXXZleSH/+NL5T05Gsk+feSQ/Gvcq:0fLTHr88X/Jv2XXKfNLO53VMGvcq
TLSH
T1C3642325B563B6702B1CBDC6EB4D44585888CE9239E00BB655B3E49CCE316EBC132DBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 7edc24784c2f909bcc15ef5959ab26d5cbf183bd37284ca43d1950b1c6b387ce
MD5 8f2eb03d626ec459ea979609e8ea1313
SHA1 c286c82404128a47f0fef9212bdd6d5673fe763d
SHA512 161447482cad9ae7a62aa45cd8bf45d4473d919e9467ad2fac4724166c335def347ae0060fabb8a20bd134870213fc047566a25e56863ee5a451c25bbbbd27d7
TLSH
T15FC092109A84016EFB52CAB80491608032B628E8145BB61D51A01EABD463AB1D7051C0
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ede60f3f0ce7fce29cac4e09e4cac90a32649227d5aed02b971713b6253a4cf6
MD5 8bcea8f23e5b8d3c4a962d162974c8a9
SHA1 e0474f7c72f8df3c8a7545bb6136ddde1c16506d
SHA512 7486b39a4cf2f817ac6e3b452eee0821650cb07e4170ad4d90ba51270605db57d57e4d02427cee510fde27e0b29d08d2b24f8ed2824e2908903739e0b61f32e8
TLSH
T1F1718BF7C7D8C52D891156F497156E1FCE290A24431C3C66C8D4AF5B53E2572D21178E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8c4d9471bdf1ef68630f3800435dd9f40619a00f2d042e566a2b54beff13e568
MD5 71248f766fee6abce71d1f3067e84818
SHA1 530c9af5f8953bb5ecf8f30de7c5a1b285f8cb90
SHA512 be3dab09f2b86a49e4d72c88275c323a1abeb06132358ba31831ababa5c2784aa57d2f515cb1cdc069f2f3950633da4d3c8d704cb45cfaecb0b56c550c783bb8
SSDEEP 192:PRIZcU+ZeuD4v70hAPRp2dj9+Hsb+WNn6740hkYR1bffwkwuhVyIsnAUgtaJ:PRIZ/+Zlkg8X68wo40WYR1bfYq8
TLSH
T13F42D82DAB14697B5CDFC22AFD517B53E7F6202125951E84E6FCCA2C05E75CC222B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 4da26610a9d8cb280be989f3c7e6d76e5de981d24b3d487831794b5729cf1a6e
MD5 8adc5e2ee7758d535d99a665e8c871d1
SHA1 66d6985f94af1186c566e55c64ad1a3ab8c62a1e
SHA512 972acc4ffc34e23fd3ce0dcffb9df17e120bd6b627ee4625925269b9e747752b2ddbf53a10cef243204bb6e5896386b74e8bd05cbbf5f2ee0e4540714e5e1aea
TLSH
T192B0124180426102D00702F8115254C87134AF10970B170193F47932CC251B0C815092
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c0d5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59c0d5.TMP
Size 96B
SHA256 584ebfc3c04b992c7735465e8e77e524a11185dd586fa2058d88b8e37b71f134
MD5 16e1b82b6fe1d8370a391fc0620ae433
SHA1 d4e53938d81332e0ab5ffc6a8b592e15a8f76f90
SHA512 3fcc835e9e1a8eb9a1e1933bbedb1faa8ccba277450590c7404f41ab024c6b0fa3bae7c6d35f75b19fe1eef46ab341d2e679257e1adabd251188b4dabd65611e
TLSH
T1CCB022A0C033A382C00203B03AA08AC8B030EF32C383020EC3E02E2ECC202A08020820
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 e1da4c069d6834dd81bf1c4545b24b695bbea1b8848ff8294ae75bb504e7558d
MD5 b9f3a57e6fd6007f53996ad2c0c44423
SHA1 7ba170b703f84abb7619480f4afedf02755cfdd4
SHA512 75bfe889f9429291027226f2741d492de8f5d0db06df01d1aa17c7c7956da65b633cda7d5b121c8484a7205cd3a0b9514a2620646668a08bf5e9a794204e1018
SSDEEP 6144:ExXDKwxJRI8Uv/WkF1CPOaHbqZ/ZLW3ExB:Ez1dI9mkF1Da7qZ/piQB
TLSH
T187341273AF078F731FD6CE6079432F4B2EAA45A6D9349605E9AD3F4BA0C7D2055028B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 46eebf13bdf99d36b885e35ff408454147605d5884d8c773099a4964d0298bda
MD5 7e810b15e092ff15899f7f67c7a6ee51
SHA1 d7f980f54099e4eaf9441cbfebbb4fb8047f01a6
SHA512 40f7bb7515298a85dc5b7b3b60d03bb92379e6fea5d3c4167aabae6bc2424e6f2c21fc599d6fc992b5b788adac04691b35dee3ee363e7e207f1a8149bea27381
SSDEEP 1536:bPLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:Rqfd7NtZL8cHQRZEQ6Sps3
TLSH
T163C30237EBC21F379D92CF64B9130FD6A7B644A99030D301AAAD37EB7C93591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 2c3c21ff5852ea697538bb4965620ef72d1334c1f9493010cd73f3b57bb0c31f
MD5 1c04e541cd9d6d78bd07967e61effc2f
SHA1 a044d21bf6649c68d8b640786c9595775530bb41
SHA512 2fd2e582b9385b0b3fa8ac32f94701dc20a2400581fff88c00dfb5a5f311747f33033e0e3e6e3cfaad8e5e71fd1d70a5f76f1b47dcf8203808cc95de01173893
SSDEEP 6144:1XDKwxJRI8Uv/WkF1CPOaHbqZ/ZLW3ExB:1z1dI9mkF1Da7qZ/piQB
TLSH
T1223412A39F078F775FD6CB2079931E4B7ABA45B5D4748206E9AD3F8BA0C3D2056024B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 424d86503d0d07e677991250d99ab66c525f194213abbcf3a1e05bbd38c018c4
MD5 4b2e9d7e521b7affb5845bbebf29786c
SHA1 55be2fbb2051cc27a27c8198fe1d28b7384268ed
SHA512 4a11ac580a4dd094e1a8a366479286cbae305c020755ab3e90c824e6e33d7298ddea62155de13685db0f33e2054045fe4f7e9281d28d229450dadfa3026bf0f4
SSDEEP 6144:AXDKwxJRI8Uv/WkF1CPOaHbqZ/ZLW3ExB:Az1dI9mkF1Da7qZ/piQB
TLSH
T10A3412A39F078F775FD6CB2079931E4B7ABA45B5D4748206E9AD3F8BA0C3D2056024B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download