hxxps://click[.]nedine[.]com/CL0/https[:]%2F%2Fwww[.]letsalsa[.]com%2Fwp-includes%2FB/1/011101a08ca27e81-d4930d58-3fa5-4d0a-8e8d-6929bb9c22f8-000000/H8W4aJjEQv8jGkv4flWLcC0UI_DkRvkq655fMVvwVhw=258

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
10/09/2026, 21:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://click.nedine.com/CL0/https:%2F%2Fwww.letsalsa.com%2Fwp-includes%2FB/1/011101a08ca27e81-d4930d58-3fa5-4d0a-8e8d-6929bb9c22f8-000000/H8W4aJjEQv8jGkv4flWLcC0UI_DkRvkq655fMVvwVhw=258
Sample260910-1e5j4aywcx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4892	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335496966050907"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4832	chrome.exe
4832	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe
Token: SeShutdownPrivilege	4344	chrome.exe
Token: SeCreatePagefilePrivilege	4344	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe
4344	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4344 wrote to memory of 3420	4344	chrome.exe	80
PID 4344 wrote to memory of 4164	4344	chrome.exe	81
PID 4344 wrote to memory of 4164	4344	chrome.exe	81
PID 4344 wrote to memory of 4892	4344	chrome.exe	82
PID 4344 wrote to memory of 2532	4344	chrome.exe	83
PID 4344 wrote to memory of 2532	4344	chrome.exe	83
PID 4344 wrote to memory of 436	4344	chrome.exe	85
PID 4344 wrote to memory of 436	4344	chrome.exe	85
PID 4344 wrote to memory of 3180	4344	chrome.exe	86
PID 4344 wrote to memory of 3180	4344	chrome.exe	86
PID 4344 wrote to memory of 444	4344	chrome.exe	87
PID 4344 wrote to memory of 444	4344	chrome.exe	87
PID 4344 wrote to memory of 744	4344	chrome.exe	89
PID 4344 wrote to memory of 744	4344	chrome.exe	89
PID 4344 wrote to memory of 5940	4344	chrome.exe	90
PID 4344 wrote to memory of 1720	4344	chrome.exe	92
PID 4344 wrote to memory of 2512	4344	chrome.exe	93
PID 4344 wrote to memory of 3496	4344	chrome.exe	94
PID 4344 wrote to memory of 4832	4344	chrome.exe	95

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://click.nedine.com/CL0/https:%2F%2Fwww.letsalsa.com%2Fwp-includes%2FB/1/011101a08ca27e81-d4930d58-3fa5-4d0a-8e8d-6929bb9c22f8-000000/H8W4aJjEQv8jGkv4flWLcC0UI_DkRvkq655fMVvwVhw=258
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8a98fc728,0x7ff8a98fc734,0x7ff8a98fc740
  2⤵
  PID:3420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,5724070729816017412,12964381940961183824,262144 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,5224076925408993573,17355488952181631867,524288 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2268 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2332,i,4974369880942181032,16772707724474640334,524288 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2524 /prefetch:13
  2⤵
  PID:2532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,2997508857491942928,2899987545767778755,2097152 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,10788728667077112326,9278194188544990428,2097152 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4312,i,12988673256197139503,16219191063724187753,2097152 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4328 /prefetch:9
  2⤵
  PID:444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,15219306138378549478,128034214641152763,2097152 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5308,i,14995297192450309075,3681963352152653582,524288 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:5940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,13898601860990389362,2326285965092987656,524288 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,16917138160724541639,3454087152837264225,524288 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5604 /prefetch:14
  2⤵
  PID:2512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,1580055558659874869,4304609006152917602,524288 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5592 /prefetch:14
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=976,i,3351320865118079585,2167573216477868290,262144 --field-trial-handle=1900,i,17628719984921533607,9275804940773217838,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5640 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4832

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1436

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4181260ef1421e70bb7c9a25c8dc7570f040d3e2954532348618dc04ba43126d
MD5 47632636565bcb03f90f427379af67be
SHA1 1257ac7d3d9bb7908f83031f7f6a8ba8ca89a4fd
SHA512 71f3e32f4ebe80d7e5cebdd712d929c79e77e1bd4a75957be3dc07259c491125cf6569fe38a0f6ba05b96dcf48835a0b0497eb3149078b370c6e7982c201a387
TLSH
T1B3E02BA9CD21AC2709FD475860115A45F640131B3A814D0F3B3C852D8FF87774296C2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 fdf2d8b50ca66571e03df95aa94261b890e771493f652e6b58f0fdb5b47f6cc7
MD5 f741a3b5ecf1e2b6396982f11e457948
SHA1 6b5aa539510d1a3b4d68302ab10f18098424685f
SHA512 681936344a4a083ac60e6bfddb361fd35528d9f6cbd6e0132c9aba1a95d86381743b28d5c2517b555779648c5e5bd5d138afa3ab95e90e160f1dbbca1c267d01
TLSH
T1D9B0125235C00A13EB41D331F9681CE831110E1D1920D31383E0D08495B29ED0402080
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 e1471735abedb70232678775343c30b902bbabf7d14bca0a4aca4830dcf1f4b9
MD5 ac91d44955f9bb4d2bc5e2abe67ba087
SHA1 030d4f886451907055429c5d616ec90acbf3b338
SHA512 837fdcc444cbcbd737a7219ac8bc3b15dcd1e7e68cfd0f16b799ebbbf9f53b6ec6be818c23510e4b291608489d9be090419c259dbd944bc5a943924a271d9576
TLSH
T12771BEF7C3F4966D8D2196F4AB162F1FCE2A0914531D3C6AC8D4AE2B93E2871D10064F
MD5 SHA1 SHA512 TLSH

Submit Download

acd1ed7b-196c-4662-9e82-2ef4fa8a6e93.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\acd1ed7b-196c-4662-9e82-2ef4fa8a6e93.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cf481f20490f6021ffd85083fed7a801784c33e70330218328a766b85a1ee417
MD5 c83e15fd69cce20760dbab3ca2b89db7
SHA1 4ce141c36650772556f3a903f13728def6346009
SHA512 ef2238c11ec6dd62766d53101b0c215a25221f9a1c2d81a60810d9df85ba00aad54ccd9f25456e70fa76a9db9bc6fddcbe04dd549bd44eb340cd10bb0c111fa1
SSDEEP 192:nRIOIWg+cnqv7lpupAPRp2KB9fHsb+WNnk5Nfg2/8kZG2GDaYRVyIsnAUgE:nRIOQvmZgUXHRwmu2/VZG26aUE
TLSH
T1B742952EBA54793B5CCBD31AF922B653D3F5102525942E84E7FCCA2C29E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 79ea521d9f3df87d24eec0f3607ae01ff8cf6eaeb5c7802f7c4721f58b8ddead
MD5 5d35f09b8c86835fb4877dcd0cc40e4a
SHA1 71d399e3fd153dc456fddb8f9cf7b1d428dcd2c7
SHA512 68050d4d5a4a4f94c2a29dfff1edf5350066ef5a2e47ef11dcbd09970c2009d28d7804e59c25d64e43ef8e1367105d32e929bef6a7a0e31d18837b193891b321
SSDEEP 384:WQjb+7KxkXqKf/pUZNCgVLH2Hfgsl5g7pLuLcSjQRXODaB+ErU39rHGQ3uKHaaK7:WUb+7KxkXqKf/pUZNCgVLH2HfgsLg7pn
TLSH
T1BF72F967BC4C9A370F94C6CDD8267A4FADB5024B65DD886483FA982903D4BCF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 45ba53f52359bfc85163c952a5f2384a128ddda06886f3f184c6d30f74f2e71d
MD5 2ff7dc3c42f5719c8e427717aa916727
SHA1 8f82df334504ea4c9f58fdfb0557b8fd0eb44943
SHA512 53b556a2cfcdbdeae95ba2e070c13f2d5c2365d291dddb48451d7306f370266e69c54f6da31709973e2fae3f4dfc2e4d888bbf8714f6617546a5eda44acfcbdc
TLSH
T1F2B02200C3022302C20203F02283A8C8B030CF20C303022282E08E22CC303338038030
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d68586b079ef1d18d4687ee8f923d098b814ef080f8b7743dddfcb58c2bfe9a5
MD5 639c1eaf9cd9af7699ddfb5494640d6b
SHA1 77053d512be9e4a82a365e8fbafeb728cb825a45
SHA512 4e581270be3a06ab11014a9e507da306dc6a3fe96d093b2bcb24d46f096b29eff2431854c6fd452aa6f93ee3f5a99b825774efa36e14db2da73893441c5f447b
TLSH
T1F1B0122084819111C08602B421425C9C71947FA5960E1B0143E0A922D8275E2C5150E0
MD5 SHA1 SHA512 TLSH

Submit Download

aa16782c-41d6-421e-a1b9-2f19d3ae6b03.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\aa16782c-41d6-421e-a1b9-2f19d3ae6b03.tmp
Size 12KB
SHA256 4dbd9dbeeb821e116a23d53f7decc58a7093414e078a7db5a207516c6acd6dc8
MD5 9a88397aeb62b0a5b7307acd5936a0ce
SHA1 5267ebe4f4caaeadf5ce964eca75c67d22c645e9
SHA512 fe6c1e75a9453943b78b835f85940ce32a24014656945993a20e718afb57121f2e1aba88a98d7f098a19f042e2d5e81760b0eba34f1319bdd2c3eeacc376da0f
SSDEEP 192:nRIOIWg+cnnv7lpupAPRp2KJ49fHsb+WNnk5Nfg2PkZG2GDaYRVyIsnAUge:nRIOQvvZgUXQRwmu2cZG26aUe
TLSH
T18142B62EBA50753B5CCBD31EF922B653D3F5102525942E84E7FC8A2C29D76CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 403dc5a987bce69831e9e81b75ed260cb37193415eb914d3f21e949d133a2672
MD5 318dce9b5bfc212bb392b5f7417ace9a
SHA1 010a65abd598655460b0eb7eb6b7c90a67c0f33f
SHA512 060ba1a196eb2dc03abfb03c58c0357dc50737893dfea550b74ba9eee9515186658d6923f667383915e55eb7d518a2113a379edc17872662d64864220e284cfc
SSDEEP 1536:h/CueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:1NDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1A5C31212CEAACEABE4A45C79E0C513F3AEBE5F9527F1B9424166A4423DCE7042395730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 92118ea4df195361708bb4db8a497fb13850d27a80299cb03c5040af50eec574
MD5 bf91d119a97c5e6a5901bff469d95f09
SHA1 f7a725d3e3326a0efc66752fbd882378f57f4d37
SHA512 3f7c1530550eb3496e15f4ab9c80bf1cc585e70dc628f196bdc61b2d71debc8d142d49175407303cf0b5ce2f0ff021bcf1a3fd1959d69c710d0c6899d8def217
SSDEEP 1536:q/CueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:QNDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T100C31212CEAACEABE4E45C79D0C513F3AEBE5FA527F1B9424166A4423DCE7042395730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c928014c99aae14cda3c0c12c25a4c6693af38cdc79d8b8e25cf5f16817b6c08
MD5 4a816d278196ca9a1e507041e9e373aa
SHA1 882e9aaa64d9f1f02cacb0e014d9ee792a2edcbc
SHA512 8f06505d9b7d854b7d9199864659aae1c454c27018e228764528fbd77c6e9bdcdf576288d2d6273b79dd2511916a53afe5d8bbe736b0ec0fa30f4e0c46fa171e
SSDEEP 1536:hXwueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:BbDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T17CC31212CAAACE9BE4E46C79D0C517F3AEAD4F9537F1B9028166A8423DCE7442391770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 66d8d1c983307babacef564d916ec01ab40fb3c33fd4e69afef7d8335b245dd4
MD5 bf5474216a525a3c314bb0fac364ad32
SHA1 e1341df3106c32c6f8893affe50f5fdb6d7e27c5
SHA512 f3f38adcd3660be634a6e8116c7ac6ab124f55ae3abcd0d277fe319d945370c26b50b0be4f8d6524820d2a56307843c3aad55ca8ea3ed4d2b7db0529e3dc12b3
SSDEEP 1536:nFueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6mq:0DFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1C7B30212CAAACE9BE4A45C79A4C413F3BEBE5F9523F1BA424166E4423DCE7042395770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download