hxxp://delawarecityschools[.]net

Analysis

user interaction
yes
max time kernel
127s
max time network
130s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/09/2026, 16:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://delawarecityschools.net
Sample260916-thysdsbf37

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4756	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340482741647778"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2322150968-3922673059-3248713381-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
668	chrome.exe
668	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe
Token: SeShutdownPrivilege	448	chrome.exe
Token: SeCreatePagefilePrivilege	448	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe
448	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 448 wrote to memory of 3876	448	chrome.exe	81
PID 448 wrote to memory of 1688	448	chrome.exe	83
PID 448 wrote to memory of 4756	448	chrome.exe	84
PID 448 wrote to memory of 1688	448	chrome.exe	83
PID 448 wrote to memory of 1296	448	chrome.exe	86
PID 448 wrote to memory of 3840	448	chrome.exe	87
PID 448 wrote to memory of 4868	448	chrome.exe	85
PID 448 wrote to memory of 3840	448	chrome.exe	87
PID 448 wrote to memory of 1296	448	chrome.exe	86
PID 448 wrote to memory of 4868	448	chrome.exe	85
PID 448 wrote to memory of 1036	448	chrome.exe	90
PID 448 wrote to memory of 1684	448	chrome.exe	94
PID 448 wrote to memory of 3940	448	chrome.exe	95
PID 448 wrote to memory of 864	448	chrome.exe	96
PID 448 wrote to memory of 784	448	chrome.exe	97
PID 448 wrote to memory of 784	448	chrome.exe	97
PID 448 wrote to memory of 2728	448	chrome.exe	98
PID 448 wrote to memory of 2728	448	chrome.exe	98
PID 448 wrote to memory of 4980	448	chrome.exe	99
PID 448 wrote to memory of 4980	448	chrome.exe	99
PID 448 wrote to memory of 2372	448	chrome.exe	100
PID 448 wrote to memory of 2372	448	chrome.exe	100
PID 448 wrote to memory of 1184	448	chrome.exe	101
PID 448 wrote to memory of 1184	448	chrome.exe	101
PID 448 wrote to memory of 668	448	chrome.exe	102

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://delawarecityschools.net
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb1642c728,0x7ffb1642c734,0x7ffb1642c740
  2⤵
  PID:3876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1628,i,12772758056337236188,7384215261350434280,262144 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1848 /prefetch:2
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1944,i,4461050025813222320,11222968009584839653,524288 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2192 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2264,i,3303891248333923548,13840096837747613777,524288 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3148 /prefetch:13
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2860,i,11227846014298867267,18017280410951775713,2097152 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2868,i,1468616622870191316,526255865056752015,2097152 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5140,i,2771570459376728475,18068356398188339584,524288 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:1036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,11917852479165659300,12597986570398041999,524288 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:1684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,9155914104045531612,3350119165840879604,524288 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,14506351808332428915,14797938525640647949,524288 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5560 /prefetch:14
  2⤵
  PID:864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5616,i,10573272091893400910,5670704446972118486,2097152 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3620,i,2065604584044281656,6991781222550867257,2097152 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5668,i,4784670403296886139,8102575799321849008,2097152 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,3697481120323925612,10402611756968493744,524288 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2992 /prefetch:12
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5664,i,10890993083701418996,16428865609713953062,2097152 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3900 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5600,i,4726867321505493868,3191194408552327418,262144 --field-trial-handle=1852,i,860079294999731184,4438937395700525940,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5320 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:668

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4228

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1c22800e4e1e5367407b3c3cef3e0584b7475494408d49926546454795568b91
MD5 3eebf0c2484c3055c657529d1008d552
SHA1 1a0c8030009e5d1d606edc642dcb61dd994f3d12
SHA512 da089e14d2c7b03e1144079482a8205d2f2607c1bab7075269356c16d9aa19ed0983eeecb19088a7c892e967f76af66102841f343af83a8dbb2d13eea47b043f
TLSH
T1E9E02B9AD964EC3B0DFD476950554782F65413073780564F3A3DC21A8FB02375195C9C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 1024KB
SHA256 0104431e548a91f8cf36feea23aecb7c842fa1b262c82e5a4dee631069f19875
MD5 f2e0a018f2d7b54936a463b088d55203
SHA1 49e6e54cf9f574924e6acfa38df106349c5dcb2f
SHA512 ec2c65193a1bc5c78a21bc3e1879c71bfd7496c28b79203da379207a81961e11e9c1900bc4a280e7c5f08f39f86282432e62a012c09401eab86df87236b7fe6d
SSDEEP 24576:1XfKOnNpp4fFAiE7535ws3KLtjzRWv4dFCxrJvxEB:1XfKOnNpCfFAiSFYjNWv4sBxEB
TLSH
T183253359B994ED1CD2CAA87C9953CBB8013073D9C4F1980B7E1058E326FBE40DAF6B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 345KB
SHA256 af74444f93c1a87703c134e8e3a1762932e8c9ed17b5781360a51435080b8704
MD5 a3b1bd33206689c75f9acfb640a6ef7f
SHA1 88d1a94a23fc0b9702d6857e71038d5c01a0bc27
SHA512 7d2ab5783a9640015ad2215944cf3bff51babf2ca59fa0ee7e2e587c1ef56901b6ddb399c2a435757aa66bd2d5c7933326c606df7942d354ba6493c51c49acfa
SSDEEP 6144:dt6B0ZtO9WZMN5KSdoaPiC1ghYvx4BmlxTbD5FuTbb1cc:dt6B0ZtCWA5KYP8qvx4klZqTec
TLSH
T1927423E3AC113A4A630789E74DC8A1AB7453C5C32A56FF4237467887A6D8D8E365CF13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Size 1024KB
SHA256 766444e2a09b6f7be3f4f31156babd88ded95185653605152308fdaa3d267a4c
MD5 44cadcd88ee0f08d686c30d45929699c
SHA1 02c8d710dff5a9a4674224cac91e88efba81ca1e
SHA512 5a83357faa86f860e970fd656816232ef0d4fb082a7c2643646a1355d593d2abaceadfc6393bc79eec5c8e48bb2966d87f6228072e35253b1b947e960b9439b1
SSDEEP 24576:/Eh4MzitHkSSts8stH+LTiOeGrrWc6ahSvGnRk:/ktziFoK8s+iOeGrrWdOnq
TLSH
T1CD25337A787512AEF1CF21FEAF49C01301CA34455C716FBAED294BCF42A92193AD1362
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 defd38f9b9802db0033d586b6f5385315138bdf0c71f2f607c744eebf8510b05
MD5 b02422845dce66a9500824b68ef5155d
SHA1 849d9c9045cf45887c0d8a380bcc7405af18de7e
SHA512 b87b8d64cfcc23a1322de849a04766f824f2abc8ab0b06c04529c1005a95c446cabc4fe792a53c5e1724e710b35e21f86a9ec3badd36c0ab7ce37598f27710de
TLSH
T19BF0A9891CD0C121DF957D7528D72D022DAE641C8A726F33F4B2ACC1B86B2E14703C3A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 18bf0ad35f62c9a3409199882a868cda6dc8cd01e15aa64e031e3d442cf1a768
MD5 c53d665ed6ac911b3232ba93c96722f5
SHA1 de2c6cc503f20eff23cf984337a9c745b58343a9
SHA512 1a0a982b02f65304f5e3699b5d53dee2957e4c2fa30fabe01271eb797de14383d7d89afffd9f2087dd7e1734fc78d3603ff9e1e9f53b356786d82a0fbada8314
TLSH
T1B0818BF7C7E4863E890196F8A7512F1BCE690954532C3C16CDD4AE1F93E2AB2E25064F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 4b31f52654354b5db239da8f13244923e964630639d3bdfb5d126e9e9e6c9c40
MD5 b4fb8c698a671071f9c8ff106f80992e
SHA1 c04779ff0c6518bb9ff3c2564845f0c82fa60746
SHA512 214f36c7b1646f182ec4ed430cbf151e3c76caab7082d518b5de214965fb6caeb2209c26bc122cad603712080f162276b8dd5852a9640aca925c3c0ff7873c50
SSDEEP 192:SRNx7ZuCv74pAPRp2793Hsfb+WNnMSPaQekVyIsnAUge:SRNxtuOUUXMx63P7e
TLSH
T18132942EAD10753B9CDBD26AFA65BB97E3F5102120942E84E6FC893C15E75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 20c81d1523ecc352885613808d20438fbb7985381d535885dd4804b5689c66e6
MD5 322ecc849617bb765ca080358bce6835
SHA1 ea4bff73e5948873d136d8f9689243430f97a177
SHA512 6da0b89cd64873ba4fb690a6b373be1edc91d7be2e4a1cbbf0c90df2d21bae9b5626278b8a84529723fc5bb35dea94c0b735230d4228d25f79aee1b390540a55
SSDEEP 192:SRNx7ZuCv74pCPRpceb2h93Hsb+WNnMSsEYZ2IQe8VyIsnAUgE:SRNxtuOUuXIxw3y2vE
TLSH
T1B842942EBD10793B9CDBD66AF965BF97E3F5102220902E84E6FC8A2D15E75CC2213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 4293a59890851f6e157ab8ae5d1bcfa32e9c8e86e8820ca8d97edd39c0eec14e
MD5 b095f945ef2cce789e3b6347a243c8c7
SHA1 4a4e9f541ff9bc315232762b75c0554dd9ab5597
SHA512 e652c40c29006b441d70aa4fe7cbf2019aef78d8b1d5ca8939ccdca76e9a3ae2e108e46ac265424f91fc8f6b7b0f472a69308ef864ae9988ab754c2ba60e17ec
SSDEEP 384:k6jA/7KxkXqKf/pUZNCgVLH2HfgsleLXODAj+ErU3luHGCUbvTiY:kqA/7KxkXqKf/pUZNCgVLH2HfgsoTOsw
TLSH
T1E0520967688C9A3F4FC8D94CDC26BF4FACF601566168482453FA9C1903E5BDB014A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ff4b546efd9017929fbffb5448d6924c7880b274\652cf1b2-831e-4aed-9ba8-8273cf3d5729\index-dir\the-real-index
Size 72B
SHA256 89062c24119fcdc43aea7b6e6ba5c547d2373048e357d279e8ed75c4bfe784b9
MD5 657c025e12371dcbbe1efcced509f22a
SHA1 4db3d53fab381ecc88fa61d01751420f681c68d1
SHA512 17da291d15479ded4ac1c67a9c246afcba20819148047e18d83f2f186c9949bdbff350c940572586e73a0c36eb1ef75e379a0044bbae67434d7edbb353067f34
TLSH
T16CA002BC62858801D0446FF0214217C823A5E9140515832F41D214E4FEA1A418E01911
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a16d5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ff4b546efd9017929fbffb5448d6924c7880b274\652cf1b2-831e-4aed-9ba8-8273cf3d5729\index-dir\the-real-index~RFe5a16d5.TMP
Size 48B
SHA256 58d38d3536f5374bbe0f310f22bf195475535ead8ca61c3cc6d2630316e483e3
MD5 21cfff3ad88c85793eb167ed71a5d2ce
SHA1 86d22dfc991bf8d9cbbce99bc39be6b87c7882fd
SHA512 af3f51c5bab9e297fa050c8c54c889b03b83e69e69bca058b816bad886346eedcb40e4c9fa7b88cb458ee83d888e2215489179237fdca447713c1f889758b5fe
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ff4b546efd9017929fbffb5448d6924c7880b274\92bfe129-793b-4dea-acb0-59fc52793049\index-dir\the-real-index
Size 72B
SHA256 37795496b304c9f053e903ca20c19f3a65a240af31969a2eebe7465e6dcfbaf2
MD5 2aaa6a9b00bde87fb11919eb211928e3
SHA1 11c35e6bd45ff4c0e63fb32ca63c04dbe4ae2d92
SHA512 d58ed7e697c4a4419a78463657e4a0fd72e830acc58baa43b66f7b69a7582a5b9a6413ad7e659daabf78c5d2208044ba7d5e93153834c53266f5a953882e6767
TLSH
T105A002710A70360BE041637F50D545602771585E2627121540DF484EF8A23E09123408
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1c72.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ff4b546efd9017929fbffb5448d6924c7880b274\92bfe129-793b-4dea-acb0-59fc52793049\index-dir\the-real-index~RFe5a1c72.TMP
Size 48B
SHA256 bcea8cf520d3e6f508054f975f768ad85f09bae2d46b78f772395da1fad2a9da
MD5 a43a1861cdc8bcbecc2f553768e0e932
SHA1 f7fb14ee4f7d468398cacfb5fc93d797a31608ab
SHA512 d9c370e7d90f26c7d855061bc37b5a961e19caf15650ea3eb543edaab7381203538996db4a9bc5d9e217f84ee9206eb8f65e02efd2e712a9399b3717d8e29eea
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ff4b546efd9017929fbffb5448d6924c7880b274\index.txt
Size 386B
SHA256 7aec24f62402ba28ea3af8b5469b4aa7e537f0d6792223fabcbe6d76c468c2ec
MD5 4b3974319eca70d4d65f3c8655609ff6
SHA1 545e54ca6c311db887799557e6afee1883381d9b
SHA512 d6aac79ca2d2ab710417d9adb4379b21eeb5991a8f48d83501cce7dea33e66962a50a91daaeefd525e0e5d4ffc4b95b27a8b96b2e98f2d8551685160c978c531
TLSH
T1F0E02BD36BFB2C20B725056A017C5A9C88BD38DE5C90D848D0523303C075D11F690F16
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ff4b546efd9017929fbffb5448d6924c7880b274\index.txt
Size 381B
SHA256 2e62c940fc54c277cb2b11aca8486bd235ad9b3eac6a5492feb68999435f169b
MD5 50799d885919eca4c7761ed9084def8e
SHA1 c05d850d1f4ed2eb1a06c0ec05dcd217c388e477
SHA512 0b2a3474265ff69ed00de553a262e236c619d4507e337665e51c5d44078a056834fe6d62f7fc9c9895edf49fda88a2fec470e283552020cbe67b59f72d9645d7
TLSH
T102E061E32BFB2C20B7344569016C5FAC88BD30DE5C90DD48D1521303C165D10F590F16
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59ce43.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ff4b546efd9017929fbffb5448d6924c7880b274\index.txt~RFe59ce43.TMP
Size 286B
SHA256 ad306dc7d943fbbca2d1361b0a68173043aa0f41be3f9d2fc5285eed9af48ff6
MD5 8bf66e27915d032121d43e8efa40df2c
SHA1 ee09f82687c3f4ec6fbd885d0f578d11f197d0c1
SHA512 c58a919392c908d8a326d17ab2b0905f42921044e3305e959123624d8597f34ec2a1336607d15ac1d5b437e1cdd6737e7c2b56fa3d22cfa47cc56fa836d4e163
TLSH
T156D0C2A727FB2D10A72115AA052DEA8C88AA3C8A6980ED85D0023303D038C21F5A0E16
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 73b97296ea53ceef2964f12399259e84dbf412995bd488bac7fa17e18650b574
MD5 61b590c1e2c14eacf66bd0f7dcc785f0
SHA1 6e9f3b8a4061083226ccd4c5ff149418066abce8
SHA512 544123021e94608a2d3f8607142a248038548bb3866d546c18a23e9b247509cb1d62255c0b47c86864bf013510939a9c73bd5c8384cc1295f28f1b478d20f165
TLSH
T149B01200804E6627C84081B0110870CA32204E75C6004B0382D065EAD8C33E043641A1
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 ab0dc9012f514967330d20922e0f7d72025958b65937b54eda78acac55984610
MD5 c87fdcbadef2cc99bc1e60292f1d02ee
SHA1 cbd4609b0fd27043721f57244ff082abecd0d61a
SHA512 73977c38f534d83719e3737a04305b186c3de8b9b1f8389b2976675e1fb858e69fc630165307e3b365045a18f799e8f3ce4e6bd35ce7617ad2b9808ce41fb847
SSDEEP 3072:IcKif3RLelUpM3AjGFIuj3Oj+AeiMHXHkm+q4E2ksAzexY:IjzAMQjmvaFezXEmLOMzexY
TLSH
T1B9D312B4647EDCAEE334E61EF9995B473DE121E724D853AD3881A6CE44A37EC02C1590
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 cc197ba44d26a6dfd1f01f86b4a156b6d9b82cd2a2a98f9b3c10970e633c41a4
MD5 99ef6a536a1e7d4e75fdf789dc4e02cf
SHA1 3f452b9d30e33330ddd79876e6b9e0adce4bf5d6
SHA512 3f681cb928570c5f287406d6fc1c26aa685f624505729d0d163714f2e3a8b5d17cdb1668639d1af9d07940bc6b5565e661a5df9802830c18b420f8bd756391a8
SSDEEP 3072:BcKif3RLelUpM3AjGFIuj3Oj+AeiMHXHkm+q4E2ksAzexY:BjzAMQjmvaFezXEmLOMzexY
TLSH
T12DD312B4647EDCAEE330E61EF9995B473DE125E724D453AD3881A6CE44E37EC02C1590
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 164KB
SHA256 3496991457163a008b522b62ab0210b1822046b20813ee4bffffdc15a77b3d0e
MD5 eddee5554ee29404caa7a308eaf9e303
SHA1 3433522514a58fb89b9e3e7a0e4e7ad6f84a026b
SHA512 c78d88511fd7cb9ec5e23e3c82d1798e4e2e998c7f20dc8999150ed03d1817493ee345a457ec8a46cede308cabb272d3211f4915f0335a105768f2b6cc8354db
SSDEEP 3072:EPjuADC2OgaKif3RLelUpM3AjGFIuj3Oj+AeiMHXHkm+q4E2ksAzexY:EPC0HOgRzAMQjmvaFezXEmLOMzexY
TLSH
T199F313B4A47EB81FD330EA19F5949E0B3CA275E718D813E9388265CE8466FFD00C55A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 03b7a60585adcaad92f2ade48ae4a74cf198948f138ac3af4d7f6122e55d33ef
MD5 0e1031b6b3bcbdbf393702b6bc3f18e6
SHA1 2d39eec8a043453ea61493886b759888c5f35ae6
SHA512 9f51eff12c521aafc0e6e28e1cd5d406aac41757dcf39d1a90af38c0a1ff4d1fce88b5703e11a008f067956ab55973d67045627e1fd01af085329a43afcc9288
SSDEEP 3072:HkKif3RLelUpM3AjGFIuj3Oj+AeiMHXHkm+q4E2ksAzexY:7zAMQjmvaFezXEmLOMzexY
TLSH
T141D312B465BEDCAEE334E51EF9D95B463DA125E724D453EE3880A6CE88B37E801C0590
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download