hxxp://kexart[.]com

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 08:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://kexart.com
Sample260912-kenctascrc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2044	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337787428493524"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
1352	chrome.exe
1352	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe
Token: SeShutdownPrivilege	4572	chrome.exe
Token: SeCreatePagefilePrivilege	4572	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe
4572	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 4572 wrote to memory of 4280	4572	chrome.exe	83
PID 4572 wrote to memory of 4180	4572	chrome.exe	84
PID 4572 wrote to memory of 4180	4572	chrome.exe	84
PID 4572 wrote to memory of 2044	4572	chrome.exe	85
PID 4572 wrote to memory of 4364	4572	chrome.exe	86
PID 4572 wrote to memory of 4364	4572	chrome.exe	86
PID 4572 wrote to memory of 4196	4572	chrome.exe	87
PID 4572 wrote to memory of 3488	4572	chrome.exe	88
PID 4572 wrote to memory of 4196	4572	chrome.exe	87
PID 4572 wrote to memory of 3488	4572	chrome.exe	88
PID 4572 wrote to memory of 4508	4572	chrome.exe	90
PID 4572 wrote to memory of 4508	4572	chrome.exe	90
PID 4572 wrote to memory of 1392	4572	chrome.exe	91
PID 4572 wrote to memory of 1392	4572	chrome.exe	91
PID 4572 wrote to memory of 4932	4572	chrome.exe	92
PID 4572 wrote to memory of 4932	4572	chrome.exe	92
PID 4572 wrote to memory of 536	4572	chrome.exe	93
PID 4572 wrote to memory of 4212	4572	chrome.exe	97
PID 4572 wrote to memory of 3360	4572	chrome.exe	98
PID 4572 wrote to memory of 1056	4572	chrome.exe	99
PID 4572 wrote to memory of 1352	4572	chrome.exe	101

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://kexart.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff981d7c728,0x7ff981d7c734,0x7ff981d7c740
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1744,i,1820522674147278148,2054490751296321657,262144 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:4180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2256,i,3895513783977006737,17334804171368104131,524288 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,10478774612489872610,13477830660569187330,524288 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,4792879152537090463,16063202491645468389,2097152 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3144,i,10097134870165009983,17409588320803258203,2097152 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4436,i,11356885361781425616,12763783593626021766,2097152 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4408 /prefetch:2
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4704,i,3056882568633146981,4683633067651311826,2097152 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3276,i,5605359348149747455,16384241017215540156,524288 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4596 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5500,i,2309454747073982600,14544359625813617360,524288 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,14639832910316596714,11041447223344392967,524288 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,5303368521972063048,4872414461982525453,524288 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5792,i,12214538573343947630,7999330379197190046,524288 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4244,i,16318442934540525827,5907410451800010380,262144 --field-trial-handle=2000,i,4647361701535856994,15720036373602212982,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1352

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3640

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 fb0119b2112dc1959c8f778daec4389cb57021c4781b139c88fc6b35311e5022
MD5 e0e901a9695d3ddf57b2fa110f1caa13
SHA1 22b6325d5b56d6f952c93bd81a40aae0d9365c3b
SHA512 33a8bf7308de5d39e493592b938c59a810017071107d737c4f3cd2b2b7edf916d2aa6274e7f20d408e930f574c55fab923839f10811d3c3616e76c726a5aaa2b
TLSH
T107E02BA9C961EC3719FD171918524785EB5413173B90940F3B3DC2098FB167E468681C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 7379af0c64a11ebf57ddaf96034961c9eec683256604d56b455e65c8e7d420a2
MD5 7b00c718758dc102683730a96be5077e
SHA1 517217cbf735fe1b3b3c07a5d884d7ef8362d73b
SHA512 cb43eece4f04638090868d8c72015bb5b6a164da855c7e01044738abb0fc16fa80f79cfb40f7ff5f25e1a8ddc861a671a78265cd16b05ca52518e7335d2fb260
TLSH
T1BCE0C295C4E63381FB50C93600DE7F75085001310606324F038CF139D81F2AA068A5A7
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 0f507dcaee94355a9741367e0462067e2b5e459ab4a7da183da607e476e2d9f1
MD5 eb328bc140c2f91416a5ba719ecf35ab
SHA1 02a483f1c76aba1d5679a438f961f206dec7c369
SHA512 b708a9a5466aadefacf6b1b6432db5bab1483ce2c3a39ea4f2fcdc282d7696c58f0d3036b512eeb0a6c90375b0c51c05ae37838c88df556d2b4ef46877db9ed6
TLSH
T15D819BF7C3E9CA2DC91156F5AB256F1FCE290A14532C3D16C8D4AE1F93E28B1E21064E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 0431696dd238c68fe4f6ea5850ad7e343eaa5a7a5ffceb90343771775c36f5e8
MD5 89c957da33618fd7f183306a380d9f84
SHA1 b886bac5b1a8061288f660369313fb08ed9a5100
SHA512 06f8b08534a0223141a53e675e4e1ddc42c58c244974ecc0f8e4cdb9f8f671ae3440872de68f6fff5e4a28f0a6e66bba171fa8216e29d50ba9d541e4678e1fa2
SSDEEP 48:YALlgymPNHo6hBNHDsZRs8XLsIfoKsFfs/osDbsKsZ4sTgmzsnN3wsIN4zsJNgwV:DcNTzNE/9SmzbsTTIN3wNzND7QeN9
TLSH
T1D7A19BF7C3E9CA2DC91155F5AB246E1FCE290A24532C3D56C8D4AF1F93E28B1E21064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 82fe170a57ed9eaa4557417e6b1c16cfa53ab8f0b61e6c1e98bc331f3cb0b860
MD5 e51d6f1dc04664f8bbdef6d8ffe0c2ff
SHA1 0dc16d778bdcc6882e697660a32ad408538f4f45
SHA512 bf256ee3dabc12c4d136f01a9a020e884260ea80e76c8d04b2142c2d3f8673325f3634e64aee89978fa83e06a46780559ed7fbf861de48fdd55be71e39528df5
SSDEEP 192:yRfEVZ6LHTwv7TpAPRp2Z/9WHsb+WNnaH47/2tTeAVyIsnAUge:yRfET6PsvUX8Uwys29e
TLSH
T1EF42832DEE14B53B5CDBD26AF9667B53E3F9102121942E84E6FC893C11E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 523761bc1813672aed3255e4becb28be826b1abc952b1618d2bcfadebfe5e21c
MD5 472d61bcf21443a047dac261aad552e8
SHA1 608e068876727f4f676b88d75ee81c5361cbab00
SHA512 c732c8cc57effcc49d70faf34528b26e9138b9a4c90bc7197c1b7efc3bd7d6aa9914d2b1dd802f59451918a42148b21a62cf31325f4ca0e95e28d8b96bbf35b5
SSDEEP 384:TNj/O7KxkXqKf/pUZNCgVLH2Hfgsl5S7pLuLceSZkXOD/q+ErU3v7HGISxpQ8:TN/O7KxkXqKf/pUZNCgVLH2HfgsvS7pC
TLSH
T11472F867BC489A3B0F94C6CCD8167B4FEDB9024B65E9886446FB983503D4ADF11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 338b05b8dd2ba5886853b7b8ac52500e2476e35f0da7dda3929a5fd4a2d7bfab
MD5 700e0eba2f08494a483a907199988e0b
SHA1 fc3e7c4e91873ea84834eeb86956db33e45ec6ae
SHA512 16f6640b06ce7aab694f31855b93aa84b85b097d6b504186db8a78b242998429016ebc285449b215614102bee28979049e88c4e7e9158352124550a0687e5c12
TLSH
T175B01244C0C1D701C00302F4215024987A74DF12A705230642FC1D41D835563802F054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592c17.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592c17.TMP
Size 96B
SHA256 95e1097573de6c2e43f3bb33e05d06a46228778e9df1aa3193c9c78c793a575f
MD5 216ac9351a7f2c2a631d97e615d228c9
SHA1 cf2b78d3b4138b662f66a5ecb515341feb8435bc
SHA512 61ccbbd2190bea9ee53160d0270dc94c7d52f546941fb83bceade7c64f813b233a8622e94a3f60e37d6851d8c66ffde4ae67b40209e4ad8c642402d3fc8c874c
TLSH
T197B02280C0033203C08203B02CA0C0F83020CF30C203322AC3F20BEAEC2B2200022AF0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 3a9d2aeb99fae13e97525789b2a9eb3f6e368b42bb7b89f17d13c86b4a22f16a
MD5 5fb3965988ed4b85e0486ac996bb3818
SHA1 79b00a0822aa26a6e6324dd4482728b72a88f924
SHA512 edc045ec17d7785f643ddfa89d5a5e5201b9ef73571e59ec0a7a2a0798e1f4ba419ba9dcd86c623c402a7dd5d1038a2548f30d5a88444bc0d8d4d3a340ac3a92
SSDEEP 3072:b+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gU:b+hFD+7t56OD9ZfSApprU
TLSH
T11ED31232A994D87BC9FD6541B147A300CE7668ED41DE6A09444A5FCEA09FC4D07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 c2b9482f4dfec4eaf54aea45c808d9f79d284e4be5f9e5e8cd979b1e68922741
MD5 8c80db15a9bac584cf4376659196cd3d
SHA1 3aef378001f44c16f1107d98a7d9b0ffb91e8926
SHA512 9a1d8278ac103edc116494cb52b090f872e0ef22148fbe0378c72d8851dcf344969842555b3c380a56d5c5a2464a96604437c163d2c3a1a744344e04aa5bdea9
SSDEEP 3072:hyY+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gU:8Y+hFD+7t56OD9ZfSApprU
TLSH
T199D31232AA95D877C9FD6541F147A304DD6668ED41EE2A0D84469F8EA09FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 6eb0fb186d843980643c15837eb349aa3cd82f00a8ba80a3c2a495a97ecc5c92
MD5 93f664824b5435c42d208e2167d0c037
SHA1 318858973150efe013bfb8db0ab56e41c89eed14
SHA512 3c1c683b2feede709456cf1551308d60e365aee35e8d7a56824de6a17aa8eabd7027ae7ffe0049f98a2717f8b0e19712ec55c3828848328cbdc7c6abf4778d49
SSDEEP 3072:5+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gU:5+hFD+7t56OD9ZfSApprU
TLSH
T1F6D31232AA90D87BC9FD6541B147A300DE766CED41EE2A09444A9F8EE09FC4D0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 4c8e652705a30dd2681399af2757c4c4ddca1e89a89b4fbd0a0bdef6a9855fd4
MD5 dc381c9e172e67507ff5ebf70a4e0a0d
SHA1 aef5fc9c533d0848116ee6baed873f32cc7409ce
SHA512 500645ec92b8d2b484904141364e8a083e4b1e6e30797e15c586ee21636458a938df01ed130fa743d581e8aa6d891183cfba5689abe823309c4ad07690b0f9b1
SSDEEP 3072:q+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gU:q+hFD+7t56OD9ZfSApprU
TLSH
T13CD31232A994D87BC9FD6541F147A300CE7668ED41EE6A09444A9FCEA09FC4D07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download