hxxps://ovoscac[.]carrd[.]co/&data=05%7C02%7Csergio[.]miguel[.]soares@novobanco[.]pt%7Cc9f4f3547cf1423bd29908df042f16e0%7C10338048193a4298abea3596ae88b05e%7C0%7C0%7C639234272432052117%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=jTZI4JS3rjiMu9RTeFHsEDUZzy+zs0EqdYi6qEx23JU=&reserved=0

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 13:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ovoscac.carrd.co/&data=05%7C02%[email protected]%7Cc9f4f3547cf1423bd29908df042f16e0%7C10338048193a4298abea3596ae88b05e%7C0%7C0%7C639234272432052117%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=jTZI4JS3rjiMu9RTeFHsEDUZzy+zs0EqdYi6qEx23JU=&reserved=0
Sample260827-qbcpsshf36

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1228	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323095048675269"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
4476	chrome.exe
4476	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe
Token: SeShutdownPrivilege	3728	chrome.exe
Token: SeCreatePagefilePrivilege	3728	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe
3728	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 3728 wrote to memory of 2372	3728	chrome.exe	84
PID 3728 wrote to memory of 1228	3728	chrome.exe	85
PID 3728 wrote to memory of 444	3728	chrome.exe	86
PID 3728 wrote to memory of 444	3728	chrome.exe	86
PID 3728 wrote to memory of 4012	3728	chrome.exe	87
PID 3728 wrote to memory of 4012	3728	chrome.exe	87
PID 3728 wrote to memory of 4316	3728	chrome.exe	89
PID 3728 wrote to memory of 4220	3728	chrome.exe	90
PID 3728 wrote to memory of 4316	3728	chrome.exe	89
PID 3728 wrote to memory of 4220	3728	chrome.exe	90
PID 3728 wrote to memory of 1288	3728	chrome.exe	91
PID 3728 wrote to memory of 1288	3728	chrome.exe	91
PID 3728 wrote to memory of 3168	3728	chrome.exe	98
PID 3728 wrote to memory of 2308	3728	chrome.exe	107
PID 3728 wrote to memory of 2168	3728	chrome.exe	108
PID 3728 wrote to memory of 4856	3728	chrome.exe	109
PID 3728 wrote to memory of 4476	3728	chrome.exe	122

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ovoscac.carrd.co/&data=05%7C02%[email protected]%7Cc9f4f3547cf1423bd29908df042f16e0%7C10338048193a4298abea3596ae88b05e%7C0%7C0%7C639234272432052117%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=jTZI4JS3rjiMu9RTeFHsEDUZzy+zs0EqdYi6qEx23JU=&reserved=0
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff00d1c728,0x7fff00d1c734,0x7fff00d1c740
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1572,i,13796838762343858361,15838675207994147485,524288 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2076 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,13799900453484080465,18435790377818170414,262144 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,9978639691480595627,16028683577357699959,524288 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,14414896703821844710,13222843126533348238,2097152 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,1112172201650871160,18113332347474229852,2097152 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4408,i,13919160416578290733,12285721467659540498,2097152 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4472 /prefetch:2
  2⤵
  PID:1288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5140,i,5318888466915704468,9118067043977009023,524288 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5620,i,10347840854258198682,13747995993087971970,524288 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5608 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,675761418833028298,3766077196221808240,524288 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5676 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,3557266684072632539,9838500722128725452,524288 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5676,i,14456137481981285862,9706912803871142008,262144 --field-trial-handle=2000,i,1660129048366742565,4204095396909599344,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4476

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3436

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 39ca5cc9e2e3bd5c7bf2ef7fc988f63b56abf28264c4783a8a1546fc414ca914
MD5 091ff6668f36f97a8cea4e289ef120fa
SHA1 b8a1de5bce12c5fd175a06b975f3d91bc21ff849
SHA512 3b7f07baba0b90a822f81d63bdd4486f32df568b9c264e20329da1420e16b109160fdd3af4d5befa22ec9b4cba79807d510565b026a2d6ee55163186f552fa20
TLSH
T105E02B65C861EC2714F90B19A0101786D75813DB2A40994F7A3DC11D8FB5A3B8985C2C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 49f3a6bba4b76a293f488844f746ba5b11f3baa9d84b1ed3235cecce3cff09aa
MD5 28c627c9ca3165589b75eba415b5beae
SHA1 6bb2df07acfa60a9447c4d6dba8d0a669b16a53d
SHA512 172b1bb98f759faae9ab07da4a81afe1e973023719f41df22fd7064ed1d0c4a8178aeaa018e73ef0a54f93a33a2c66a6040b1247e3a04c8a82871f0ff08f353c
TLSH
T1EB318BF783B4997E861192F4EB156F1FCE690524131C78A685D46E1B43F28B2D10078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f1837343e9c73be6c8210ea83b2a28cf58282bbcc96512ff8e6bb040277af7e6
MD5 0a98167a2249dde21d8c52bef10abcaf
SHA1 55675a465614be6f159540f5a0f33ad2c14e26b9
SHA512 24b63d86ad3ddf524f8767d4565ba3f403273384823ead57f06cbca487d6a876ada04be830cf051ceca2c8e7f9b05d6b8277f078411d4906f6634e712436c7d2
SSDEEP 192:IRHxc+HclHJlM5hYRJv70pAPRp2d6AlS9+Hsb+WNnvY4Y/2aEXakwwUY7Y+VyIsv:IRRT4HbMgJgUXtL8ww/27aQQ2E
TLSH
T17C42C82EAE10697B9DDFD226FD157753D7F6202224912E84E6FC8A2C15E75CC3227027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 08bb08b0c0031614be25d43ebee638edf00fa60476cee16869f0668bd04391d8
MD5 9c80648ab0ada6868024942fe1302a47
SHA1 fdbfaa5432373d20002e3609fb4fca2ee5b945c2
SHA512 0c3a87b9fef6fa304b90a1e253cd919d57a3b92028c3a04293a35b46b1a7014e364ed72e6e9883f1aa47fbf3cab5f807c40753b14ab26b175b65d364ad76ec00
SSDEEP 192:IRHxc+HclHJlM5hYRsv70p+PRpwd6AlS9+Hsb+WNnvY4Y/2qEXakwwUY76+VyIsv:IRRT4HbMg4giXzL8ww/2raQi2E
TLSH
T1EA52C72AAE10697B9DDFD226FD157B93D3F5202224912E84E7FC8A2C15E75CC3227027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 666e5ffd0a381bb50042b7943020a32895d682af28db4cf1eeffcfd6f2b7c455
MD5 e4513cd682a150655795f6e64d8f3483
SHA1 d5da165813c9665e9dbf4b3fd6f3a401bf46c16b
SHA512 9d24a1f47b3b159444cafe6c94f9fcc159818003c83b815c86004f4cbee7ae2014c93c37ef73dc548b386e0119d4794acd76b8c5ca0a7c8a2b78221e1fae1f6b
SSDEEP 192:IRHxc+HclHJlM5hYRev70pAPRp2d6AlS9+Hsb+WNnvY4Y/28EXakwwUY7o+VyIsR:IRRT4HbMgagUXtL8ww/21aQg2e
TLSH
T19842D82EAE10297B9DDFD226FD127793D7F6202224912E84E6FC8A2C15D75CC312702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b1c568c5ec504f08ea023b428ed347eaac6d225ac890982d78d2c357de8c193b
MD5 626ab08be073d3984ce07811937b2750
SHA1 265eae993d89399f35b51740b08951ec402ccbf4
SHA512 b8eec77efbc38f09a3b038dc715599339338ad133be3d265519bf8a8a8b7b132befb5a9066c9c5ce88cc2aaa0b332f6c1eb8865458d41007a2e6d33e39fe7cdd
TLSH
T1B4B0121088026501C0620BB417835498F1546F249A0B170183F4A922C82A1618119060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bcb4.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bcb4.TMP
Size 96B
SHA256 2b5dd830a8546a50ed99a91c73986cb89ccfdd6bf34677910514ffe5b6153330
MD5 09c17c1a0df4f273993a9813e87cab80
SHA1 431cc7c30ddea7ed1c904e3d858ceec3ec058a50
SHA512 36f2c2528519485308a842339905e8a1eff1130eeca48a6665a43c74876fdcc51c59ae48d9d5a695df5d2ccb7f9c58364b83a5a67456784e70d7b62af8fe6816
TLSH
T114B022C0C0022202C08223F232C0C8CC3028CF20CA03022382E00A32CCB03B00020030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 9ac4ddf84f72068d5bc8eb4ee4b68ead0d5fc5a6a9e06363d2934351da249c41
MD5 5e9c79d0a85f3ab72242a1a08a1dacb3
SHA1 49f6417731d8126b621ca907f38ca4dc520c7fb9
SHA512 fbc0ce92e43c9efa81e53f1184712645988293b590cd8c0bcbb9ddc6a7592e7d38f125ecbd880104ff4531382a3bc4465e7b02df4f26019b98ca2b29c4e5d5a6
SSDEEP 1536:sg8yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:VGqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1A5C30237ABC61F339E83CB74B9130FD797B644A99034D301AAAD37FB688359564424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8ada6ad5760b8d83052cec21699e605d15c468ab00814435b0fd76a71cecbd26
MD5 337c6859d612bb1db5160043706bfdc3
SHA1 7f12ab42b1fdb328302ab636b9e5c3e658446d41
SHA512 f3c4893b1a5190f6a00911971d81d52afb32121d9affd18abaf9a67831ef54636f1208f14ef201674debe241d7169065368d250165d2b8c153be390a906e7741
SSDEEP 1536:sDbyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:Slqfd7NtZL8cHQRZEQ6Sps3
TLSH
T118C30237ABC21E339ED2DB60B5130ED793F604AA9034D301EE6D37BB6883551A44249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 48b4e780899c30996122bad007d5d1dff3193b6941b799916f2e270920a0d001
MD5 091c235c9be8a7da4db8c49a6ca0e42c
SHA1 9938c9bd4216687b07ca8101240089af1012b60f
SHA512 313271cfcdd3a98ef2a6c13fb7d7221974b2d4d5c740703a07870848723e01f801b996b7a601d884a67cfe80f34c58e95ca59bf52a9d6a6c68260235e77669c2
SSDEEP 1536:Rg8yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:OGqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1C7C30237ABC61F339E83CB74B9130FD797B644A99034D301AAAD37FB688359164424AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 69b2d0c35998b0db820bf53918be4d54846da3cac4a7aa48652328e175b901f3
MD5 5f487868c229a85ec5e0a3a9720c49f5
SHA1 f4c5f0c2e28361e89be58bd93b65a5afe2655279
SHA512 747344bd456a3024334d062a2f4b892f87ff87893391caaeedb6b9362e5177403a3c465700d94529f915cd85a6f0642ed35caa2f0f1370fdebbd8e3b300ad772
SSDEEP 1536:bTLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:1qfd7NtZL8cHQRZEQ6Sps3
TLSH
T16AC30237ABC21F379E92CF64B9130FD657B644A99030D301AAAD37FB7C93591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download