Analysis
- user interaction
yes - max time kernel
150s - max time network
152s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/09/2026, 14:06
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://trustbystrike.com/
Resource
win11-20260911-en
11 signatures
150 seconds
General
- Target https://trustbystrike.com/
- Sample260922-refrasga78
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4136 chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345595923560073" chrome.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe - Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 4560 chrome.exe 4560 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
pid Process 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe Token: SeShutdownPrivilege 2172 chrome.exe Token: SeCreatePagefilePrivilege 2172 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe 2172 chrome.exe - Suspicious use of WriteProcessMemory 22 IoCs
description pid Process procid_target PID 2172 wrote to memory of 4100 2172 chrome.exe 80 PID 2172 wrote to memory of 3812 2172 chrome.exe 81 PID 2172 wrote to memory of 3812 2172 chrome.exe 81 PID 2172 wrote to memory of 4136 2172 chrome.exe 82 PID 2172 wrote to memory of 5144 2172 chrome.exe 85 PID 2172 wrote to memory of 5144 2172 chrome.exe 85 PID 2172 wrote to memory of 4872 2172 chrome.exe 84 PID 2172 wrote to memory of 4872 2172 chrome.exe 84 PID 2172 wrote to memory of 4604 2172 chrome.exe 86 PID 2172 wrote to memory of 4604 2172 chrome.exe 86 PID 2172 wrote to memory of 3328 2172 chrome.exe 87 PID 2172 wrote to memory of 3328 2172 chrome.exe 87 PID 2172 wrote to memory of 996 2172 chrome.exe 89 PID 2172 wrote to memory of 996 2172 chrome.exe 89 PID 2172 wrote to memory of 4392 2172 chrome.exe 90 PID 2172 wrote to memory of 4392 2172 chrome.exe 90 PID 2172 wrote to memory of 3060 2172 chrome.exe 91 PID 2172 wrote to memory of 5272 2172 chrome.exe 93 PID 2172 wrote to memory of 5296 2172 chrome.exe 94 PID 2172 wrote to memory of 5300 2172 chrome.exe 95 PID 2172 wrote to memory of 5780 2172 chrome.exe 96 PID 2172 wrote to memory of 4560 2172 chrome.exe 97
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://trustbystrike.com/1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2172 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffebba4c728,0x7ffebba4c734,0x7ffebba4c7402⤵PID:4100
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1596,i,670231205291684938,11592764561737042588,262144 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1952 /prefetch:22⤵PID:3812
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2232,i,16116420192993686004,11938015552340539442,524288 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1448 /prefetch:112⤵
- System Time Discovery
PID:4136
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,7515520175949254707,10772078082093488688,524288 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2868 /prefetch:132⤵PID:4872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,15747412349934542184,5119139540409804632,2097152 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3160 /prefetch:12⤵PID:5144
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3128,i,1217482220223049689,8528323321630360022,2097152 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3200 /prefetch:12⤵PID:4604
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4104,i,8477709238554530643,13253155349770136980,2097152 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4108 /prefetch:92⤵PID:3328
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4588,i,12168905837622875660,1585428118212152512,2097152 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4760 /prefetch:12⤵PID:996
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4780,i,12811124804878674171,14024852808579131215,2097152 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4896 /prefetch:12⤵PID:4392
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5760,i,11830985746311578746,5232152866341835688,524288 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5776 /prefetch:142⤵PID:3060
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6020,i,3420282734045830152,166032755281736787,524288 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6116 /prefetch:142⤵PID:5272
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,12188017343413938559,6827903810508791206,524288 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6064 /prefetch:142⤵PID:5296
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6036,i,16706644160221931226,2909950546166322946,524288 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6096 /prefetch:142⤵PID:5300
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,12619753459237649677,14132893031561430615,524288 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5868 /prefetch:142⤵
- Modifies registry class
PID:5780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6068,i,7909071995188692123,8162486131950787242,262144 --field-trial-handle=1960,i,1039914052355458440,13622798982436592125,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4736 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:4560
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:4088
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3420
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 649B
- SHA256 3040c6624b8780c33fc1c6bcbc1ef63471d7dd3db1effd5e3a5f530214d219aa
- MD5 d4dcc8f576fe0e340d34657490a61b1e
- SHA1 31db0921bbb150cbc84155bf63e9188d4845c240
- SHA512 5e2051dbf60fb47a73ea2a0f476d1d64c56d65ce14d189a010973d425094acc1eade55cc4308be5f56c1c3fda7954bdd369d63dec2390a5f0efa379b59a44d46
- TLSH T1DEF02DF9D821BC2B18FD0F1920954B46E754136B3B40455F3B3D910D8FB5A3B4696C1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 2ddfa938a919b32ef98009e68e04596631dda9bd448ed0daec3709c5ddc48afe
- MD5 1e45c2217ab7438cc40be2a7ea80290b
- SHA1 eeee8885a85382844bd80c288ab5154856a708e2
- SHA512 8e8120a0cbdabcc158c4e1d24b5e1ec0394b1f05e4eb431f025f4a2bff805cfc9e50f99e60daa9ba849222ad49337a04fd60d88e3ab54de848634d7e5ce77849
- TLSH T16251BCF7C3D8867D880156F8AB256E1BCE6D0A28531D3C56C8D8AF1F53E28B1D24068E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 bbfd3ae90d8588de9f01da7e16cb61fde7a0654b8d6564c0ab7b3fd9411a9ae0
- MD5 e379cd4d21d72795b60a8ec0a242cbcb
- SHA1 95a5eeef03b5498e7af000685167a87f2469cc86
- SHA512 a8d35979162f07ad37d3e3845e2abd57b0893775fdfe9b591011ba40e5d976c86003b597811b698ef0978f29361f36a2c1ce22b1223f6bf4d795df76523c60ff
- SSDEEP 192:xR601jAXQ77R+Vv7fpAPRp2Yv9UHsb+WNn7rMGZI2fV2fe3PVyIsnAUge:xR601cXrljUXdWwPs292ye
- TLSH T18D42B62EED50753F5CDBD22AF9227B67E6F5102160A42E84EAFC893C14DB5CC2227817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 8f4554596f76c0e74b646fd21d5849da50da2fdc56203c6164fe5e5919b9ad79
- MD5 14a42fc24e38d3cbdc7698bac55b2ac5
- SHA1 a5b13678eb5f31be85bf156f815f7a205a63bddc
- SHA512 1e31a3fee3646a0723f403fa5bbf7e8221afbd63d6f33e2b6567a4656fac6540ce3776d2ac344a618ca45012fc80ad1b4437b62e1e786bc674fcb70b0785b74d
- SSDEEP 192:xR601jAXQ77Rbvv7fpAPRp2YH9UHsb+WNn7rMGZI2UV2fe3cVyIsnAUgE:xR601cXunjUXtWwPs282vE
- TLSH T1DC42A72EED50793F5CDBD22AF9227B67E6F5102260A42E84E6FC893C15DB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 6184d25cdeaf97f694e342e55ad9c5c8742b9f3c2a3735ade68bd0d38941d53d
- MD5 0c7f6b8715c3669c41ae140dae2e2a03
- SHA1 25b2e3a40b02a9897a8e43f28ab8a0d01ea3eb48
- SHA512 b14a9ceee88c07a06d212dab399ae3f68e32cc87a738f2b8d5f6c07ace7a36c47536dacbaca72068afb025eaaed4f840cd4e8e6b51a726dc3853929c7a0a7076
- SSDEEP 192:xR601jAXQ77RZEv7fpAPRp2YT9UHsb+WNn7rMGZI2UV2fe3cVyIsnAUgE:xR601cXogjUXNWwPs282vE
- TLSH T1FF42A72DED50793F5CDBD22AF9227B67E6F5102260A42E84E6FC893C15DB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 da02e213d799af30c207927f3ca45d972a125df02f91ade2b61a22c6401f4814
- MD5 1d9eae0cfa3d74069b77cf6c05a7809c
- SHA1 c8dbc232183d2b4f6ea3452325a1114546e68051
- SHA512 11752ca8c583da66272c2b946221eb0c0221bd80bed4b0c830764cc4f9239665dd9b34ed13e10f3250146c5d435eadb966b6b8a49e68a31e9fdaf75f74399bc3
- SSDEEP 192:xR601jAXQ77RUEv7fpOPRpNYd9UHsb+WNn7rMGZI2WV2fe3wVyIsnAUgE:xR601cXtgjmXWWwPs222ZE
- TLSH T16F52B72EED50793B5CDBD22AF9227F63E6F5102160A42E84E6FC893C15EB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 b118b54b7edc9610eb18112dc0ad416a26c8fa4fd436f78b74bded48eb0ad7f8
- MD5 aa296ef998e371ba842d25d0a0307624
- SHA1 91683349d8ef2a4ceb75e1180e8db4807abaa5c8
- SHA512 9eab15d26c1f18c5a271e032bae6702155edb3cd66b9eea7b3052f989074ae04f2234a6895e6e99371779169a4ec46cf4ca0ec6186ce55c4633ddf9b1b0f78bc
- SSDEEP 192:xR601jAXQ77RAEv7fpAPRp2Ye9UHsb+WNn7rMGZI2UV2fe3cVyIsnAUgE:xR601cXBgjUXgWwPs282vE
- TLSH T19B42A72EED50793F5CDBD22AF9227B67E6F5102260A42E84E6FC893C15DB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 3040f6c0f8518a7ef0906dc1579ff67cb987276cebc23da5398134bc5554b9ea
- MD5 35a986da919fb1a9e95ee1a9e7009cca
- SHA1 b6810ff9543d5e3041b097ff068362e87a5d25f1
- SHA512 cafd3969834d020f43ce4237a09dc66608b1a2b6ef54b8b21f7d7734ad902ec85186ed6721a725679b51bed13cb91c434ff5ecb1351d1f1644fdc2136d52ad69
- SSDEEP 192:xR601jAXQ77R6Ev7fpOPRpNY79UHsb+WNn7rMGZI2WV2fe3wVyIsnAUgE:xR601cXvgjmXYWwPs222ZE
- TLSH T17F52B82EED50793B5CDBD22AF9227F63E6F5102160A42E84E6FC893C15EB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 9aee6cfd3b7c29994df9a71456fdc39532d6c49b086a1c9aa4e2d7bfd24321f8
- MD5 e0d2664430615c44b2830cbdf15b4cae
- SHA1 0f2e3ae133194c0de16df7b8d51f7f7755e99b12
- SHA512 ec5acd86165f3e07f741a26b5967098be9d2fe8e58e12911b94e7e72a67070e5669e385a51cd1c547369c87e57e0ad613c116a2297930b4a5a5488590c5e7b49
- SSDEEP 192:xR601jAXQ77RC5v7fpAPRp2Yv9UHsb+WNn7rMGZI2fV2fe3PVyIsnAUge:xR601cXHZjUXdWwPs292ye
- TLSH T10B42B62EED50753F5CDBD22AF9227B67E6F5102160A42E84E6FC893C15DB5CC2227817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 f4537ec55cff7f9b21d38303fb175809a217f279dbccada4585891e136e41bd5
- MD5 bcd4fd5402a7ca0c8e8e98d86d063494
- SHA1 e9dfb45eed08c5d6eeb6e4445cd11ee3955c7aa3
- SHA512 a943e1e8221f20555f84b52fd999090cd39f5a5841b70c14f6c27bf2fa68bd29c869c3a6eb32855f4059b80b46602329abe29feab1eb2872c6e24b03b02296af
- SSDEEP 192:xR601jAXQ77R7Ev7fpOPRpNYX9UHsb+WNn7rMGZI2WV2fe3wVyIsnAUgE:xR601cX4gjmXkWwPs222ZE
- TLSH T1A352B72EED50793B5CDBD22AF9227F67E6F5102160A42E84E6FC893C15EB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 06e858265e84f700db61a22dcfcccbdc17b8a900ae8fcde6a1912956cf96f4e3
- MD5 5e44e384a8cc38476f230cbce11c5fc3
- SHA1 6e53671ca4b3433c0ae6d85965104d8d26eab8d0
- SHA512 aad0392851b5838f589e2ba791c1391a19f3bc78e7cecc7cc985399acbbef78c08e559a9fa04d4a38d7ba8250a9d96626484f9fb0b7e1f965ad0a3a9b12aca3b
- SSDEEP 192:xR601jAXQ77RmEv7fpOPRpNYE9UHsb+WNn7rMGZI2WV2fe3wVyIsnAUgE:xR601cXjgjmXvWwPs222ZE
- TLSH T15552B72EED50793B5CDBD62AF9227F63E6F5102160A42E84E6FC893C15EB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 3d23589aca10eadda4b8e3044d6e07243e852367f5f7e9581ae5e010047389c5
- MD5 33d4540c261642396c9d1b2354e67fbc
- SHA1 628259c879260b59d9f24a7705a590448c312640
- SHA512 6abe04c34bfdc167c4e9fd2c9cecf1d5dfdab567f473540d8f99bf08677dd51fad5e0731b6b3f09b602ca1a7a306158721a74832d1292beea014f55b4c6a5bad
- SSDEEP 192:xR601jAXQ77R/Ev7fpOPRpNYF9UHsb+WNn7rMGZI2WV2fe3wVyIsnAUgE:xR601cXqgjmXGWwPs222ZE
- TLSH T12E52B82EED50793B5CDBD22AF9227F63E6F5102160A42E84E6FC893C15DB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 67a0efd5402347c736a16f0623f4b8897347b00d7936a82676b2f4097a6360cc
- MD5 5f84d679bdc38935d5df8dcf3b00cc8b
- SHA1 0dd34741ca863e1d83f91cec185cc0c4d1ce9200
- SHA512 589067c2c293c5959e0e0ff25b8293994b31070fdd6ea49e3384a09cb0067f2d115b30d3e06dff870fee88f03571c5a6da76c48ca11850f43a85fdc658b4759d
- SSDEEP 192:xR601jAXQ77R9Ev7fpOPRpNY19UHsb+WNn7rMGZI2WV2fe3wVyIsnAUgE:xR601cXEgjmX2WwPs222ZE
- TLSH T1A752B72EED50793B5CDBD62AF9227F63E6F5102160A42E84E6FC893C15EB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 4eb79a4384e240095fab1034c22281568e60a33fa8f661de0df1cc0bb5a4b06b
- MD5 48cc421a8935d55334fb9121f50440ba
- SHA1 d37f37cba2291a8f6880d1cbe2ef5a1866800954
- SHA512 206ca87bef439b4067f95e339cdd6224e835afea8980f5d4967f59c1cd2671b7c72dcc88779ec1159f27c603f0f815d5dfc9939ad25a51289607fd614fd3d5c4
- SSDEEP 192:xR601jAXQ77RgEv7fpOPRpNYA9UHsb+WNn7rMGZI2WV2fe3wVyIsnAUgE:xR601cXzgjmXPWwPs222ZE
- TLSH T15752B72EED50793B5CDBD22AF9227F67E6F5102160A42E84E6FC893C15EB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 7b165e0a4a951f9809ec40cedee7790751e7fa20bd4f8dc5c0787e7ad2d0f262
- MD5 f3467a990c59943b3b58f4e236e0d5d9
- SHA1 6022d7b4ecbc9b0de2df6a45e8b5696adf10fef6
- SHA512 5c963e67b4d246756a591fd8eb10719ad0feda639fa93207e29f6b957042f66804f2191d7d7c5ba75725e64d2a6148aaaf025e66245c347987f88a9adb5a67d4
- SSDEEP 192:xR601jAXQ77RiEv7fpOPRpNYF9UHsb+WNn7rMGZI2WV2fe3wVyIsnAUgE:xR601cX9gjmXeWwPs222ZE
- TLSH T18752B71EED50793B5CDBD22AF9227F63E6F5102160A42E84E6FC893C15DB5CC2217817
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 00b1f5e3f2ee15e41635cc5776beecab26489b83cc8da1b01e578cec0f125545
- MD5 4c845b2618eefdd47280df258df1e5fa
- SHA1 90d6142c1453e2f700bea476669cfb9e36befbb6
- SHA512 4f4b1bf9d6b776e477d3ad3578fd52d3bab53a83694fa9eecdba8eabeff22ee1e9679f0c42ddd6998d0b7c0b64c1dbe2a8235c40f3d2f87323a4df5053bd2ddf
- SSDEEP 384:wGjUD7KxkXqKf/pUZNCgVLH2HfgslMl7pLuLceSOPXODU/+ErU36GHGiGTE9t:wmUD7KxkXqKf/pUZNCgVLH2Hfgsml7pT
- TLSH T11872FA67AC4C9E3B0F94CACDDC167A4FACB5024B65E9886443FA5C2903D5ADF110A2F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 0285bcd14879d9b15d2a6eb5f647b03dc6da82ac0f27976fe8a512ad1cc48336
- MD5 6c2dd01ba17451a17017b0bedf6d691e
- SHA1 ba7f635afe3e8f22efc96582be1dedf7aaaa1117
- SHA512 1d4f3bf17662a37ca11eb5007297314e3524299e7f5866ae17afd7f39748dc827ec2420d05de1ac397006a0f56a2fd65a1f263df4612d2d75e7a659030084aab
- TLSH T157B0120D80853711C00903F0115090A476609F38D512238B52F15D118832160501712A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c4d2.TMP
- Size 96B
- SHA256 f02804ac16d9085a9574b609fab3647e93cd7a152819936a2dcd1dfb3c854130
- MD5 c57e2c630c9eeebe1532d85952f30af4
- SHA1 9da195db57312c9f51e8f4940fed5d23dc6db3c1
- SHA512 595623959d5f33435350a900d7b9d75585e2267bd0e90fd39e1eda185ae94147a3401a7bed0437c2f71b541c9135df2320ea428243777767d1778d0db9be2785
- TLSH T1BEB022E0C2023302C00203B03880ABCCB220EF28C203030283F02E22EC3032000320B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 131KB
- SHA256 e19a3cd5594debed2f8246e698552b1c661c5b421b75d88bcdcaa50d58cc5567
- MD5 e6e32186884e2868585634e327cea30f
- SHA1 1caac56520820c3398685af44b76759c83d47c55
- SHA512 1644a6d37fee9edf34e66124894f944bc3d8ed6e431863645f7acf3fe6359c0572a2ff8fb9c12344bc8ecb721674d74095eafcfa1985cfdb3346c56d73ccd44e
- SSDEEP 3072:5CVrH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjP:5CVpt4fLJ0L6nGJxi3bzqapJjP
- TLSH T15DD302F0D1A06C7ACFF7EE4145756E908EB1D5C749CDBE2409F98C5802CAA784A13EA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 131KB
- SHA256 f00be49bba9f4a1a1c7565de1c01de0df3ea0c708f356c24487e32850e6eca58
- MD5 f15e127332965da33249ea29b771a28d
- SHA1 cef63cc9583c6837e24419c35f018eaf34126843
- SHA512 db7d32fa6558dd2bbccabf1f12d6ecdde7d5bbba2260658f5b5af018192a763488dba803c4b80ef7bc447507c6eb76cf6c319d3f2de639c4596607285eb48f6c
- SSDEEP 3072:5lnTH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjP:5lnBt4fLJ0L6nGJxi3bzqapJjP
- TLSH T131D302F0D1A06C7ACBF7EE5145756E948EB1D5C289CDBE2409F98D1806CEA344E13EA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 131KB
- SHA256 3a56d1e599a3548f6218c29991ddcb882107a214b811de08f9f9ad250669dce7
- MD5 7676246f63f113e441e170948744feed
- SHA1 260928675b67385969b39553a3dd568704e1f21a
- SHA512 0473070da0f152dab65fde4118090f005a57ddc2e5caefa2aff6369df8d37129ee8e9717a2383871a1262683e14fca8a1826de5418f7274a9eec86f005610f0d
- SSDEEP 3072:ilnTH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjP:ilnBt4fLJ0L6nGJxi3bzqapJjP
- TLSH T108D302F0D1A06C7ACBF7EE5145756E948EB1D5C289CDBE2409F98D1806CEA344E13EA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 130KB
- SHA256 391370b8918135fe9488e06c6b5cfdc2c961962dae332ce9a30b04546c8c2298
- MD5 6fa0029694887bb1f7afad5c1609582e
- SHA1 b03eaadc5a8c9a93ef1bdc5f058d29ee76a5efa0
- SHA512 4aa525932086115ce289cb4f00db07492ae6a199cbba4b2085a812d16129734f697afcb2ce41996abbb2f595083860ee1e23a97394c9d7834ab2793386d4b5e7
- SSDEEP 3072:mzhH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjP:mznt4fLJ0L6nGJxi3bzqapJjP
- TLSH T177D302F1D1E0AC7ACBB7EE4155755E948E71E5C289CDBE2408ED8C1816CEA344E13EA3
- MD5 SHA1 SHA512 SSDEEP TLSH