hxxps://pixels[.]com/controlpanel/purchases?utm_source=newsletter&utm_medium=email&utm_campaign=buyer_activity&utm_content=buyer

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 14:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://pixels.com/controlpanel/purchases?utm_source=newsletter&utm_medium=email&utm_campaign=buyer_activity&utm_content=buyer
Sample261001-r4c2pswtbx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4324	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
1616	chrome.exe
1616	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe
Token: SeShutdownPrivilege	4620	chrome.exe
Token: SeCreatePagefilePrivilege	4620	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe
4620	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 4620 wrote to memory of 1588	4620	chrome.exe	85
PID 4620 wrote to memory of 1636	4620	chrome.exe	86
PID 4620 wrote to memory of 1636	4620	chrome.exe	86
PID 4620 wrote to memory of 4324	4620	chrome.exe	87
PID 4620 wrote to memory of 4552	4620	chrome.exe	88
PID 4620 wrote to memory of 4552	4620	chrome.exe	88
PID 4620 wrote to memory of 2936	4620	chrome.exe	90
PID 4620 wrote to memory of 3136	4620	chrome.exe	91
PID 4620 wrote to memory of 2936	4620	chrome.exe	90
PID 4620 wrote to memory of 3136	4620	chrome.exe	91
PID 4620 wrote to memory of 4344	4620	chrome.exe	92
PID 4620 wrote to memory of 4344	4620	chrome.exe	92
PID 4620 wrote to memory of 1080	4620	chrome.exe	95
PID 4620 wrote to memory of 1080	4620	chrome.exe	95
PID 4620 wrote to memory of 1348	4620	chrome.exe	102
PID 4620 wrote to memory of 4084	4620	chrome.exe	108
PID 4620 wrote to memory of 4976	4620	chrome.exe	109
PID 4620 wrote to memory of 3600	4620	chrome.exe	110
PID 4620 wrote to memory of 1748	4620	chrome.exe	122
PID 4620 wrote to memory of 1748	4620	chrome.exe	122
PID 4620 wrote to memory of 1616	4620	chrome.exe	124

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pixels.com/controlpanel/purchases?utm_source=newsletter&utm_medium=email&utm_campaign=buyer_activity&utm_content=buyer
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffad216c728,0x7ffad216c734,0x7ffad216c740
  2⤵
  PID:1588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,6764998606905279751,11302843292070088117,262144 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1984 /prefetch:2
  2⤵
  PID:1636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,1852536060459542892,8039594232488532625,524288 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2356,i,7456624168638534389,12791395214178635484,524288 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2532 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,1371212888486518339,11609998322727145858,2097152 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3228,i,15303303880138592476,1397641594146291268,2097152 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,16307532327559739304,16568180133218087223,2097152 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4420 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,6078680396040953554,16153938934581154886,2097152 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,1465650041431909264,6135719472366291966,524288 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5748,i,3689079605938565336,3507738541027772513,524288 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:4084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5824,i,7189311985129408875,17244110050666622862,524288 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,7718494716578452534,4917114214212585063,524288 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3288,i,16099389713197657976,8452771152221136445,2097152 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3416,i,17976128377657922321,16319324859661957976,262144 --field-trial-handle=1988,i,7342980031185522435,9481412654643243651,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3380 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1616

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1868

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3020

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 8c986280fe5598ea400e9d0cfa2e849b729a6a5ba9e5be9a2571f43b68f0c815
MD5 e4292c006b60fb7775b6e143f4c3393f
SHA1 6890e3d5adc4e6527952f5148267eaa698317093
SHA512 c2329d734476e76cbbee3debe5651a49e3664154a8f5971055e85856f76995ac32982d7324320bda9d15e437c29558cf4f32a1d7dbe9f23f1f288f4488aa500b
TLSH
T191F0F4E5D922EC7B18FC0B1D64A54B46E76023673B82485B3A3D821D4FB163B858685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 e87659b10e3b43cd155577fb20fb87fc753092aac1bad75e80088381a6456ac7
MD5 d05d5dbb828f9a95bb39aa679a6ed4ce
SHA1 a5179fdec137beb6935730b069c23f3d9a859404
SHA512 2e834c0bed59d40dc5ea920988c2621954db94225a0f8a6a8a854ede8dca4be47ad56ab02a1131820f75e7ef8b878bd96911d56eafc836f9c28832c3e9dc4890
TLSH
T174F05CD190B080A5DB832F35FCE52C51FC7109AC21C76E55CF5255303C7673AC116598
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 5c28f28be9137d6b96be57f262fca708a61d15ed4d3da5f230c0169ba94dd0ce
MD5 b77a84907e29025bbb25f1f8b044cb98
SHA1 8adfbd3488acc00281d7ea22481b9a341d8e79b9
SHA512 7b3714f92b4579321da4f832be6f2fd479b869cabce5847a1abb65e5c2687770bdf0cd32885c868fb9a175a3160d2a974a0f1cd688ade39b6e26abbc08333b46
TLSH
T1BDC08C9406FD54E6FBEB263ADCD624C032A02F288746AAE383C08190BC22EAAC101140
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 f21ed55a1bf679f55a9e8b984ae1e0b5d6bd11bdb1cb8a13b9e84af611a53e20
MD5 553675424e49b503af9799d2fc16e080
SHA1 70cb0cb6e03ac62c20409cad9f8a7d69eb5045d4
SHA512 3e0748bca2411d63de51de5d4d229293c6765bc0cfd8d7c37642b139fd56f20a98ab4afed98bf367442fe106a8be55645a5acc9ca5c19b2aa3a1664158867f23
SSDEEP 192:Duv3qBVa5I/FuE7kiGyvZSgYZu2lzgDn2VRLQGsmGEHIzQs:Duv3qBVa5I/FuE7kiGyvZSgYZu2lzgDR
TLSH
T1BC02BCE7D3E8C62D990167F4A614BD2FCE590A24432C3C66C8D8BF4BB3E6971D20164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0cef965f367a26a263e898bc8b6d94e552cbb3854d0e24dc7b36ebf9f2dda649
MD5 d58b9cdb17c0a6c381ca19b64287f505
SHA1 fb5a2f3858a5bc11f6df3f6518c63e1ef60cdb43
SHA512 bfa2f32f40610d0f7bbd422af68c3d7f2dd0a4ab7dd7ae2e39addcd731e4a705357fd1b985990c67cf0294e9009cdcc0186e0f3ec7623bc4c6c5e1551d0919de
SSDEEP 192:NRfYLcsGg4Wv7VNDpAPRp2VSW9QHsb+WNnBp08r2tZIkwBVyIsnAUge:NRfYosgiZxUXiJWwn/2YHe
TLSH
T19D42A52EED10A57F9CDBD22AF9667753D3F5202161942E88EAFD893C10E75CC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6ba771755729a5da1df5982d2a0896da7a3c27b29560abc92e34a1221fc689e0
MD5 34e8714bc30a33c944e95fc029d0a190
SHA1 279432657b392184edf2094290e5041f0826f978
SHA512 6d029fba7462d2663ff697a27ba3f5ba0caa468854bf7e96bd8ca7acdcb44da40ffddf989de1d91d0e36a38b457cf42f8b765a280b46087c6ec4555f1f63d3d2
SSDEEP 192:NRfYLcsGg43v7VNDpAPRp2VS69QHsb+WNnBp0EDeWZIkwIVyIsnAUgE:NRfYosgfZxUXiFWwnfedME
TLSH
T11F42A62EFD10A5BB9CD7D22AF9667753E3F5202161902E88EAFD893C10E75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f8d4abaa554545a7a4a64b0bcf526a7bf3e631319fd2e2603acc0d27827ebfae
MD5 0fd8be75133f69d0269ac3bc2d111a6c
SHA1 22a67f3214b0f32f27cc40155ad24582e3ef29ac
SHA512 3ff6590d406c86b45f0a2b1159c947f09888b57f09841f674bda70d754a894e931f89e24f8ecbba3bc661a2890c086fff89a6712efb83f3866f43598b8914b49
SSDEEP 192:NRfYLcsGg4yv7VNDpuPRpDVS69QHsb+WNnBp0aeY4ZIkwaVyIsnAUgE:NRfYosgeZxeXhFWwnIYf6E
TLSH
T18442A52EFD10A5BB9CD7D22AF9267B53D7F5202161902E88EAFD893C15E75CC2227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7ea0bc531edef6983563b6298ea62cd0a2c844415291051f013c8ab35913667b
MD5 6cf3f75371f38110f763c0f85cb57a11
SHA1 c83cef1a2b0c9f65eb28d8b25f7316b033b31a75
SHA512 f60b477bb047b616e6e660513d798c3d30e316c3d431b247f2858569d6d13c67c2fe0dcf7ff4e004f70397a9e03c5539e317eb4f9a226ad827baa3ad4ef6773d
SSDEEP 192:NRfYLcsGg48v7VNDpuPRpDVS69QHsb+WNnBp0EDemZIkwaVyIsnAUgE:NRfYosgoZxeXhFWwnfeN6E
TLSH
T15F42B62EFD10A5BB9CD7D22AF9667B53E7F5202161902E88EAFD893C14E75CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 14KB
SHA256 b494e61f07372ec9c7e51cecb31e35f7b1764c9454464712d269b67764c84218
MD5 779b83eba2269d00b677242dea1e1e0d
SHA1 4c0eeebf4312622db708a61e247a5a2a742d6b5e
SHA512 a0dafae9dea8b578fc1e281968512282b6ec5965118828fb163155216d9e94f3cdfc5a61b7a4f5636d6bb5bcc89c2c71d8f6810856f0ed434ef44469c50837c0
SSDEEP 384:LljHG7KxkXqKf/pUZNCgVLH2Hfgsl++7pLuLceShMXODHC+ErU3Htb5w9:L1HG7KxkXqKf/pUZNCgVLH2Hfgsc+7pY
TLSH
T1E562F867AC4C9E3B0FD4D649CC177A4FEDB4025621AE886482FB982503E4BCE110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c660ff227ade4b270f21d50d95b70d255adb92fdcce63d96557760fefc4733ce
MD5 b3a68bc93f9e23adaf1a837c76fcc408
SHA1 d8f2465783d72344a7f6c402899bbb857d57d442
SHA512 3332291c520550546f60fdd4b4d49f319f1d22af23ccb7e676d1a151749e7a022adc0810a768e8b40c502091b975c83e5ec1cddc935fc522baf16e6f2736c46a
TLSH
T1E2B01204C0415351C04202B032A014C83364AF10AA07234152F10D41DC35562D01F098
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ef5c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ef5c.TMP
Size 96B
SHA256 905214e91445a86ab3eace913c6e2fbad9bc2f64c9addab88b65ef14f28bb09c
MD5 ce81bd7b0628aff41683bd1212e6faca
SHA1 4ab04832c72a41637196f3cdafc26408a2cdcf06
SHA512 a18219bcf16d1a3a8e2fed570bacfb7acfd9bc0234fb5ac426c1b8c412939c66bb58856a4ee581b6b35bcc6aa83f8d9e949027ead562ced7257b6eac09c23b4f
TLSH
T198B02280C002320BC00303B020C8C0CC3020CF28C203022282F02E32EC383308038020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 dd2af71ae34706e9c01f44863efc260035cf79aea79815299b728641a91e14de
MD5 2f52bb8e34cd726701a5d30b6a948f8f
SHA1 583a67169dde16807061b3fe26ccbcd4ea87c9d2
SHA512 9e0c9ce950c2318165a2294b9b564c093cd5f7418ccabc2452552792ce4d60f778465a7ffbb0a5b9953e6b79cc9d0441a599beb0a9ff2247be3ed1383004c4d4
SSDEEP 3072:4+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:4+hFD+7t56OD9ZfSApprr
TLSH
T1ADD31272AA95D8BBC9FD6541F147A304CD76A8ED41DE2A0984465F8EE09FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 5f5faa78578806a3e08dcb4036a5e1317cdcada59ba818fa6ab449268ada4bd8
MD5 9ed7a1b88ed8cc7991c6a28896b82a95
SHA1 989dacadf12502155a6e83c91e9fae62936e5938
SHA512 8ad1fb54d65935e8157a8513a1d7c3ab14f1d0a2a99d3eecffc9331e4db761b7a11c59710559b2dc2fd4c86676c05bae3960e9fc9764902027eda74fc764a0d7
SSDEEP 3072:E+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:E+hFD+7t56OD9ZfSApprr
TLSH
T16AD31232AA95D9BBC9FC6541B157A300DE76A8ED41DE3A09444A5F8EE09FC4C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 b2ba1225ac5eb0d766065098cd8bea8c38ef49b9fd78b6f53d2778c5a97e44ca
MD5 78ea7749dcf5c88d01db6c2465638fd8
SHA1 3560b0d645b787157f66f1773e8105aff0e4db22
SHA512 5a967643d067bcf9f9e9a67f7ebc84c7df42673219536e9721f0bce57de32e848cade31862b01247fadf717f65871191498a4d546616962e3ad281516ba33550
SSDEEP 3072:b+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:b+hFD+7t56OD9ZfSApprr
TLSH
T171D30232AA95D8BB89FD6541F157A300CD76A8ED45DE3A0984465F8EE09FD4C03B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 2f5314b80efd4157ba86983e0114069d47542d06c221ff949485d5613e161a7e
MD5 3bb4d4ceb2d5b5f989aa95ac0d69699d
SHA1 7c55f11b6f88da1701680c77435f690b309a4771
SHA512 3cbbce195c4524e674d51937c1c4f7db15871a967333ba0401d9e20aa6e850d9a17a899168577d9727247964c6d5d1de344c0a0a7bfd7cd1c5bef4f8dcf641a1
SSDEEP 3072:w+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:w+hFD+7t56OD9ZfSApprr
TLSH
T115D30232AA95D8BB89FD6541F157A300CD76A8ED45DE3A0944465F8EE09FD4C03B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download