socelars | e6c104ae73204e9133bd65be90bb55869801076971d0b99c64a0c261574fa2f1

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
03/02/2024, 02:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8b3419852524534817c7a38d8b64a599.exe
Size 1.4MB
Sample240203-dbc94sfce2
SHA256 e6c104ae73204e9133bd65be90bb55869801076971d0b99c64a0c261574fa2f1
MD5 8b3419852524534817c7a38d8b64a599
SHA1 eb9a60cc48452182c6da3fa9b995f4361af4737b
SHA512 c4ad198f3cbace842af1f9686f9761964b50f9a7be77b873c11c24d1b9bd57d4ca03a8a4519ce52b30e913475a0fc6d58dee7e54b1c3693dea69029cde0346ea
SSDEEP 24576:LjmZxpT2xecnFAaeHrTM+zNyReyAN4/FDsSl3qJbZ9GgtS/Zj8AXsH9PC6Nz:eZxp1cFA3rY+hykedwYqJygtS/R8AXc1
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

socelars spyware stealer

Malware Config

Signatures

Socelars
Socelars is an infostealer targeting browser cookies and credit card credentials.
stealer socelars
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json	8b3419852524534817c7a38d8b64a599.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
22	iplogger.org
23	iplogger.org

Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe

Kills process with taskkill 1 IoCs

evasion

pid	Process
4440	taskkill.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3700	chrome.exe
3700	chrome.exe
664	chrome.exe
664	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3700	chrome.exe
3700	chrome.exe
3700	chrome.exe
3700	chrome.exe
3700	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeCreateTokenPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeAssignPrimaryTokenPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeLockMemoryPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeIncreaseQuotaPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeMachineAccountPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeTcbPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeSecurityPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeTakeOwnershipPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeLoadDriverPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeSystemProfilePrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeSystemtimePrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeProfSingleProcessPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeIncBasePriorityPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeCreatePagefilePrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeCreatePermanentPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeBackupPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeRestorePrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeShutdownPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeDebugPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeAuditPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeSystemEnvironmentPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeChangeNotifyPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeRemoteShutdownPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeUndockPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeSyncAgentPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeEnableDelegationPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeManageVolumePrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeImpersonatePrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeCreateGlobalPrivilege	4300	8b3419852524534817c7a38d8b64a599.exe
Token: 31	4300	8b3419852524534817c7a38d8b64a599.exe
Token: 32	4300	8b3419852524534817c7a38d8b64a599.exe
Token: 33	4300	8b3419852524534817c7a38d8b64a599.exe
Token: 34	4300	8b3419852524534817c7a38d8b64a599.exe
Token: 35	4300	8b3419852524534817c7a38d8b64a599.exe
Token: SeDebugPrivilege	4440	taskkill.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe
Token: SeCreatePagefilePrivilege	3700	chrome.exe
Token: SeShutdownPrivilege	3700	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3700	chrome.exe
3700	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 5040	4300	8b3419852524534817c7a38d8b64a599.exe	89
PID 4300 wrote to memory of 5040	4300	8b3419852524534817c7a38d8b64a599.exe	89
PID 4300 wrote to memory of 5040	4300	8b3419852524534817c7a38d8b64a599.exe	89
PID 5040 wrote to memory of 4440	5040	cmd.exe	90
PID 5040 wrote to memory of 4440	5040	cmd.exe	90
PID 5040 wrote to memory of 4440	5040	cmd.exe	90
PID 4300 wrote to memory of 4716	4300	8b3419852524534817c7a38d8b64a599.exe	93
PID 4300 wrote to memory of 4716	4300	8b3419852524534817c7a38d8b64a599.exe	93
PID 4300 wrote to memory of 4716	4300	8b3419852524534817c7a38d8b64a599.exe	93
PID 4300 wrote to memory of 3700	4300	8b3419852524534817c7a38d8b64a599.exe	95
PID 4300 wrote to memory of 3700	4300	8b3419852524534817c7a38d8b64a599.exe	95
PID 3700 wrote to memory of 2660	3700	chrome.exe	94
PID 3700 wrote to memory of 2660	3700	chrome.exe	94
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 2488	3700	chrome.exe	98
PID 3700 wrote to memory of 3836	3700	chrome.exe	97
PID 3700 wrote to memory of 3836	3700	chrome.exe	97
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96
PID 3700 wrote to memory of 4304	3700	chrome.exe	96

C:\Users\Admin\AppData\Local\Temp\8b3419852524534817c7a38d8b64a599.exe
"C:\Users\Admin\AppData\Local\Temp\8b3419852524534817c7a38d8b64a599.exe"
1⤵
- Drops Chrome extension
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im chrome.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5040
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im chrome.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:4440
- C:\Windows\SysWOW64\xcopy.exe
  xcopy "C:\Users\Admin\AppData\Local\Google\Chrome\User Data" "C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\" /s /e /y
  2⤵
  - Enumerates system info in registry
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --window-position=-50000,-50000 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" https://www.facebook.com/ https://www.facebook.com/pages/ https://secure.facebook.com/ads/manager/account_settings/account_billing/
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3700
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --mojo-platform-channel-handle=2264 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:8
    3⤵
    PID:4304
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --mojo-platform-channel-handle=1888 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:8
    3⤵
    PID:3836
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1664 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:2
    3⤵
    PID:2488
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3516 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:1
    3⤵
    PID:1444
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3624 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:1
    3⤵
    PID:2280
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3004 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:1
    3⤵
    PID:4932
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2996 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:1
    3⤵
    PID:4392
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5444 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:1
    3⤵
    PID:4592
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=752 --field-trial-handle=1984,i,18289955696755879139,17752213143944618657,131072 /prefetch:2
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:664

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ff8287f9758,0x7ff8287f9768,0x7ff8287f9778
1⤵
PID:2660

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:452

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

background.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\background.html
Size 786B
SHA256 a1064146f622fe68b94cd65a0e8f273b583449fbacfd6fd75fec1eaaf2ec8d6e
MD5 9ffe618d587a0685d80e9f8bb7d89d39
SHA1 8e9cae42c911027aafae56f9b1a16eb8dd7a739c
SHA512 a4e1f53d1e3bf0ff6893f188a510c6b3da37b99b52ddd560d4c90226cb14de6c9e311ee0a93192b1a26db2d76382eb2350dc30ab9db7cbd9ca0a80a507ea1a12
MD5 SHA1 SHA512

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\icon.png
Size 6KB
SHA256 9434dd7008059a60d6d5ced8c8a63ab5cae407e7152da98ca4dda408510f08f5
MD5 c8d8c174df68910527edabe6b5278f06
SHA1 8ac53b3605fea693b59027b9b471202d150f266f
SHA512 d439e5124399d1901934319535b7156c0ca8d76b5aa4ddf1dd0b598d43582f6d23c16f96be74d3cd5fe764396da55ca51811d08695f356f12f7a8a71bcc7e45c
SSDEEP 192:arFa6ynwcj6POoDbxN9EUQYZRia+ce/lkygkkl0:apa6mhjshD9QYZR3qkr/S
MD5 SHA1 SHA512 SSDEEP

Submit Download

aes.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\aes.js
Size 13KB
SHA256 fc7e184beeda61bf6427938a84560f52348976bb55e807b224eb53930e97ef6a
MD5 4ff108e4584780dce15d610c142c3e62
SHA1 77e4519962e2f6a9fc93342137dbb31c33b76b04
SHA512 d6eee0fc02205a3422c16ad120cad8d871563d8fcd4bde924654eac5a37026726328f9a47240cf89ed6c9e93ba5f89c833e84e65eee7db2b4d7d1b4240deaef2
SSDEEP 192:9pQGDuD690MPdz8Ui015ll1I57I2Tru6h0hNmHV+m9eIfyAqYfinNVYEUUFJZmUY:9OiT0wz8Uiw/1S7DegkcHpeIuScZbAX
MD5 SHA1 SHA512 SSDEEP

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\background.js
Size 15KB
SHA256 92494e63c4f34d31622909a89a00e0d775c4c2a474dbb0d6b65d135700add2c5
MD5 7fbdc235ecf959c4311cee76f9e87d1c
SHA1 d80dacfced3931f718f0b9fb6d325f115010647a
SHA512 0b6a7d7911eff76191cd95aaee2d181c618084156ea61ac51161f9a8ef340742e0c0398c23b05d494ededf89a934ddd2a8b6011d7fe00ad9ef923448db292d57
SSDEEP 384:HSqK+K3tmygSoFlp9kROMSC/SaHjj2lq40fzBlobew:HomygSoFlp9EOMSCqaHj6f0tubew
MD5 SHA1 SHA512 SSDEEP

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\content.js
Size 14KB
SHA256 41e129bb90c2ac61da7dac92a908559448c6448ba698a450b6e7add9493739c6
MD5 dd274022b4205b0da19d427b9ac176bf
SHA1 91ee7c40b55a1525438c2b1abe166d3cb862e5cb
SHA512 8ee074da689a7d90eca3c8242f7d16b0390b8c9b133d7bbdef77f8bf7f9a912e2d60b4a16f1c934f1bd38b380d6536c23b3a2f9939e31a8ef9f9c539573387b4
SSDEEP 384:rlBc5VG/MavcrTkzqaKNVyQiYCIizzSEWfw0:rrc5VG/MavcrTkzlKNVyuw0
MD5 SHA1 SHA512 SSDEEP

Submit Download

jquery-3.3.1.min.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\jquery-3.3.1.min.js
Size 84KB
SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
MD5 a09e13ee94d51c524b7e2a728c7d4039
SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
MD5 SHA1 SHA512 SSDEEP

Submit Download

mode-ecb.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\mode-ecb.js
Size 604B
SHA256 03164b1ac43853fecdbf988ce900016fb174cf65b03e41c0a9a7bf3a95e8c26a
MD5 23231681d1c6f85fa32e725d6d63b19b
SHA1 f69315530b49ac743b0e012652a3a5efaed94f17
SHA512 36860113871707a08401f29ab2828545932e57a4ae99e727d8ca2a9f85518d3db3a4e5e4d46ac2b6ba09494fa9727c033d77c36c4bdc376ae048541222724bc2
MD5 SHA1 SHA512

Submit Download

pad-nopadding.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\pad-nopadding.js
Size 268B
SHA256 282308ebc3702c44129438f8299839ca4d392a0a09fdf0737f08ef1e4aff937d
MD5 0f26002ee3b4b4440e5949a969ea7503
SHA1 31fc518828fe4894e8077ec5686dce7b1ed281d7
SHA512 4290a1aee5601fcbf1eb2beec9b4924c30cd218e94ae099b87ba72c9a4fa077e39d218fc723b8465d259028a6961cc07c0cd6896aa2f67e83f833ca023a80b11
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json
Size 1KB
SHA256 20d39e65b119ed47afd5942d2a67e5057e34e2aef144569796a19825fea4348e
MD5 f0b8f439874eade31b42dad090126c3e
SHA1 9011bca518eeeba3ef292c257ff4b65cba20f8ce
SHA512 833e3e30f091b4e50364b10fc75258e8c647ddd3f32d473d1991beda0095827d02f010bf783c22d8f8a3fa1433b6b22400ad93dc34b0eb59a78e1e18e7d9b05f
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 18KB
SHA256 88a6e0de63bf1cfe16ef915cbf30caca08212b4445b7e2bc6d3c9247803237b5
MD5 760b77f0db8aaade56bab54c0a6e21ac
SHA1 08b3c6c375a739dfa5c883d6cc6d44e3d3b68dc6
SHA512 87f1e063d917010aa0901c814f3439b53eb0737cc1a51e092cb70f9df5b19d544757f0b08ae81287a5a6401dbdd05caf98130cb0b9516459b47e7b216d12b60c
SSDEEP 384:CHLPLeUcm8KCBAgXk1kXqKf/pUZNCgVLH2HfknrUNHGyXhY1a:WLPLtcmrKk1kXqKf/pUZNCgVLH2Hfsr6
MD5 SHA1 SHA512 SSDEEP

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\CrashpadMetrics-active.pma
Size 986KB
SHA256 fd5fb880f14c62a576b9ec977e89232dbe7d80a19f8f169f33c9e7a541bd6b04
MD5 0a9ed54b046eb7babcd353b9322d21a6
SHA1 e9bf1cb3b366a8f055656992016a2dd757e26941
SHA512 afc6b057fc2983a53e2df0a5f7fa1942bad341b2562cd6e6092663619466ebd46a6a81126275b0c79342e4786b4a9a4d96b9a9d211294eb369ce92b294a36958
SSDEEP 12:bHi0pXhVMMBKEKSCemJKlkQITagigpCbEyIXuYJ0IppPK6BsyW1inPiz:bTpROMMBS+Mkv/igpFzeYWIX1BtXP
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad\settings.dat
Size 40B
SHA256 0e33c15bae9de0161695319643a4e46b888255d6b11af246e2050f7863708e3c
MD5 a43c5442720748bc3520106b9b6d4737
SHA1 3ae6a4bbe5cc3acc29b02debfe78a366e7d046ab
SHA512 9167b7a8ad92b7b82119edc9591c28d53b18256cf2259b6bbccc7c5c1833d20be514393845c6acce3dddc44d71a2c258ae27da3ea0ced8cded56e689f0b4479b
MD5 SHA1 SHA512

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Affiliation Database
Size 32KB
SHA256 e0c9f1494a417f356b611ec769b975a4552c4065b0bc2181954fcbb4b3dfa487
MD5 69e3a8ecda716584cbd765e6a3ab429e
SHA1 f0897f3fa98f6e4863b84f007092ab843a645803
SHA512 bb78069c17196da2ce8546046d2c9d9f3796f39b9868b749ecada89445da7a03c9b54a00fcf34a23eb0514c871e026ac368795d2891bbf37e1dc5046c29beaaa
SSDEEP 24:TLYNvN2HLvKroyr0n4Bmhl0QoV06UwccNp15fBGQ:T3LS00FV7U1cvB
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 c4d809af6a64a207783c0677f1a1c0280744dfb36ebcb5da7c7205562cea109a
MD5 cc8cd38c120b9809265ba044fa692eea
SHA1 c186393b09522a18cdf95daa30771b884a61e2f6
SHA512 a844dacac70171c5e36f43eac80b268d2d769bfc5fc9aa7d1c1976328031d10d63e5339d0477bfcb5a765026be6f08c785a6813fbc703ba8837b13759f062155
SSDEEP 6:/FoVR/lF1mE12TAz1k5uHXaFUQK7tEc72eMhhJtUT/hU:d4Rdt1Ta5uKidJEcCNhhK
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 de5dbd9f256d591ffcb22d44c755049ce3398401a7f54f66612f86b03eeec761
MD5 8f28ab6f9bd284918c76c788da797d91
SHA1 cc63009942cbd04030e21b26574132ce02e16f06
SHA512 4569cb5e8728bdd47832f5cab06ae5e6e4bd0bbb6fb8c625b0bd1305ceaf3db430668e7c0249e5c34f9598c353ca120bad1fad29a48cc00826f6877ff2fe83d8
SSDEEP 48:mKtYKriMXXglMiXFRGxoyCqS8aBCy92fJAQNMrgCyCrTZ9aMaVW0X:zqJ0glD3PDqSCyyJAQNMrD7rTHaA0
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_3
Size 776KB
SHA256 69a9899940762f105c5cfd81977bde51335b950d940b5dc5a007b731f2ea7887
MD5 6e725164104e2aadd6788a7956aa8384
SHA1 4b8e00695336eb6c72c38ff959d1f211c77fabd8
SHA512 5278d4a2d72934310d9ca475fee7f903ad70ad3c58ce23893207b90c88ed3b5f3e68a37c2f2d7ca28e7901dc9f7e8f6172c8daccac80242cd4e2606f475c6d4d
SSDEEP 768:DLSgcRUvnjMAML/I2/8lzFXJz9izS5HLSgcRUvnj8AyL/I2/xLSgcRUvnjdAML/x:uAZk8BF99kS5qAPkNAZk
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000002
Size 58KB
SHA256 a3c50c9abd1d24931b2dcbdb32f41b0ff264dc82c49c02c3f98210125339168d
MD5 a969393fefe1d93cead0366f847eaeca
SHA1 830470c3d088d29f4ea40c272a92e78f0a6ccfbc
SHA512 93bda4d878ff195b5111ea22627627fb9757d4b9111c2c98f309a636108a53174bf17a93ce151e24e1531a45e3e24ea1682b1ecc7cf1472e1b3ff9c5f00cedf6
SSDEEP 1536:M8qUnDZ3UNd+KFE45NUDcYL3m39Gi4vDAsOC3DMcuJ:MUnBUxFE45inro971C3DMcuJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000003
Size 40KB
SHA256 3c63e6c7fa25849799d08bf54988bfb3b77b1d1eebb1e55a94b64995850cba2f
MD5 929729aa7cff46b3dad2f748a57af24c
SHA1 81aa5db7dd63c79e23ccd23bf2520ab994295f2e
SHA512 a10eaa6f2708b683bd43295b9c3da5840c0eb6d8a6b9e1922a534270fecbc0dcdb4cdcc28768df292a06f6210885b510254bdca17e5b3c507b0337fe7dc3d743
SSDEEP 768:UvDMBxqko6puI/shk2TE8ItX/SI+GeQ+6c2EI3GxYUYGnG49M:UvDMBfDvEhnT4ao+2EI3GxGwtM
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000004
Size 52KB
SHA256 8e2031c0a7aac0643d891332a02890f7d5dd92d7cab9284e8014069554d704bd
MD5 62ad8492c06a3551562c5fec9966702b
SHA1 238c7da841ca002d90e9696c3f84069d96d619a0
SHA512 2eeb441fff9a95cc25d0ccbbdacfc2a7870dfb0e545b8513e89b7b6709fa03a0cf0950bb07b27a1041ff5bbcd691883a88c0abea75692648c1e416993eced91d
SSDEEP 768:W5BUmfs0VRjU4C4r6wTEXmAZQOyu55kxn6/EGbUUdvIKdJyDbZL2OPzfDkVIGu+b:WVsURjBFrbWVSOrw6/bUayDFLSZR
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000005
Size 36KB
SHA256 e278c70194f8f9dcb292e2ebf538705b434b7b3d64c0a79cb69f29a1de416039
MD5 28160dd29e677d2d26911d5cb722897c
SHA1 623d6b23a88a0e2784f668fd073146d02569bf01
SHA512 0186ede5c016e76ab49bd5220ee6392bb221f890530083fd614d2c2327ed3ce983236d886469063d32097d58d224045f9d2edcf915a012ee3e20387102000d71
SSDEEP 768:yBsKuvMPWB/NUjAFYWKV3RzymYaWgXeuDzdska1qTUVRSt:isKUMPWBV2AFGtYaDeypODQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\index
Size 512KB
SHA256 18226b5ed2a631bde380922f8a9122c7f3be20ca8b6878a591a58bde396c8ac0
MD5 8b4b270fe7eb94b7d3b8e85735e4034d
SHA1 c226ba3d3029ebefb6448086e0e54b6182c35fd2
SHA512 04675430dd4a9c44f88fc95d9a6587c423f593fc333dba39492dadab674d92a9ada70a755c612ee386ffd89047d366de7ac871f5e260742af6dce347a0657022
SSDEEP 3:LsLllKltlllnlvMuEl1Ollv//ylv16E/wly/lNlXlUlXlME/r/LNl/lGlXlzl:LsR4RlnlvMDkowEk0Ezzg
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 720B
SHA256 4f9c2245b3203ee3ed19bb9d9ed38ca15b19ab681fbf85ab6c28079b7fb5670f
MD5 9a087964ddb6934799c6edec016a23a1
SHA1 5be07f3c8d89bcd18748c57f358ba23ffcd35a23
SHA512 3fc70bb3f64a4c351d0e1efaa7f2a02668a3521d72b742129337b761171a8df067edb6a3a0b15a4c7bda787d1219a7a749c9774e24c04f64f001d67a824824db
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 a89724961d23fee70812dc5e0faa6155a41e3d177c432e3a16b3d204116b884e
MD5 52de3900cf9e65f5476d5f30aeebca43
SHA1 c2fa3b197c1b698c3c16218ed1a035530edb7f22
SHA512 ab10313bf40d6fa13e0bd6f8bb4d8c88e5b8c1ae29c90f912518163b6c04d618b49d93c9b4b22eb4b18570c2618c51dee60d8d86bd68248ae012601b2fbbf54e
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 7b5c5c5a67db1b5943dd1157e852eba36d0d9a700a4154c8a09b39b16bd2453a
MD5 b55e2c9dd80c252668a500d00d4ff454
SHA1 9afffc07873ee3ac404f60defe0eb72738307168
SHA512 bc157c4b28c948e5553a45656daf183757597e87d4533ac6e7a5a9556559ec32d55b3e8e9b8844674bffbc189e6f982001f7e144f5ccf90c8a59bcfde24d382c
MD5 SHA1 SHA512

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
MD5 SHA1 SHA512

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\_metadata\computed_hashes.json
Size 3KB
SHA256 c4d3d374611fdb6e970a2019cde28482f8b92230941cbca6ebf7699815c152a6
MD5 02c8ed2627b526edc7d74eda75b9a924
SHA1 2984ed94ccacb55d86da2e38dbc3b6b7b3ae9a25
SHA512 16197b17c6e244c11d1804abc5a739eca5ec05858c9784f919acd634d72b8da2d4ba12b2e68f04145c5fb6d39bdfc187b9a5bc49c60a11435163445a04ba3103
MD5 SHA1 SHA512

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\_metadata\verified_contents.json
Size 18KB
SHA256 5a2940c7c5adba1de5e245dbff296d8abc78b078db04988815570ce53e553b1d
MD5 2f0dde11ea5a53f11a1d604363dca243
SHA1 8eef7eb2f4aa207c06bcdd315342160ebacf64e8
SHA512 f20305a42c93bcde345ba623fef8777815c8289fe49b3ec5e0f6cf97ee0d5b824687674d05827d6c846ee899da0d742407670db22ff0d70ebee5a481ab4a0ff0
SSDEEP 384:cLjrY6QDAwrlbs3jiD1DisLDqwAqmq9oO/F5:2jrSHbMjidLDxA+o63
MD5 SHA1 SHA512 SSDEEP

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
MD5 SHA1 SHA512

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
Size 10KB
SHA256 965203d541e442c107dbc6d5b395168123d0397559774beae4e5b9abc44ef268
MD5 90f880064a42b29ccff51fe5425bf1a3
SHA1 6a3cae3996e9fff653a1ddf731ced32b2be2acbf
SHA512 d9cbfcd865356f19a57954f8fd952caf3d31b354112766c41892d1ef40bd2533682d4ec3f4da0e59a5397364f67a484b45091ba94e6c69ed18ab681403dfd3f3
SSDEEP 192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
MD5 SHA1 SHA512 SSDEEP

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\verified_contents.json
Size 7KB
SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
MD5 0834821960cb5c6e9d477aef649cb2e4
SHA1 7d25f027d7cee9e94e9cbdee1f9220c8d20a1588
SHA512 9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4
SSDEEP 192:RktDNJ2UzsL5KcASyoH+CouKP/iNGRo/oRHMIT:AZQflcsU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Favicons
Size 20KB
SHA256 6923fd51e36b8fe40d6d3dd132941c5a693b02f6ae4d4d22b32b5fedd0e7b512
MD5 3eea0768ded221c9a6a17752a09c969b
SHA1 d17d8086ed76ec503f06ddd0ac03d915aec5cdc7
SHA512 fb5c51adf5a5095a81532e3634f48f5aedb56b7724221f1bf1ccb626cab40f87a3b07a66158179e460f1d0e14eeb48f0283b5df6471dd7a6297af6e8f3efb1f9
SSDEEP 24:LLiixh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:DBmw6fU1zBmI
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\History
Size 148KB
SHA256 7cf3e9e8619904e72ea6608cc43e9b6c9f8aa2af02476f60c2b3daf33075981c
MD5 90a1d4b55edf36fa8b4cc6974ed7d4c4
SHA1 aba1b8d0e05421e7df5982899f626211c3c4b5c1
SHA512 ea0838be754e1258c230111900c5937d2b0788f90bbf7c5f82b2ceda7868e50afb86c301f313267eaa912778da45755560b5434885521bf915967a7863922ae2
SSDEEP 96:gRleseU+bF+UIYysX0xnqyZoTtczVHNrLBL7wC68:gKQ+bF+UI3ikqyZWOzVHRx7wl
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Login Data For Account
Size 46KB
SHA256 522cad95d3fa6ebb3274709b8d09bbb1ca37389d0a924cd29e934a75aa04c6c9
MD5 02d2c46697e3714e49f46b680b9a6b83
SHA1 84f98b56d49f01e9b6b76a4e21accf64fd319140
SHA512 60348a145bfc71b1e07cb35fa79ab5ff472a3d0a557741ea2d39b3772bc395b86e261bd616f65307ae0d997294e49b5548d32f11e86ef3e2704959ca63da8aac
SSDEEP 96:9SXNKLyeymwHCn8MouOFlRGiZqYtFTCG:9SfHG7qqifTCG
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 1KB
SHA256 029f2ad0d008602770caa390bebd6847e3395e09038af4b72afa63571dccefff
MD5 bd28fda286e0fa914d8a624bb101f260
SHA1 2ee85f34b802ae318d10677c827af00c8b0247ce
SHA512 0758812af05dcf9b0480e69a74d6315ca2eab2119fbcdf4454fffd7164e73cda5246c1762eaa4d24d2c5bf3e4f8619c59add107b27fce33d55e19b0ea77cbed9
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 1KB
SHA256 55780823419b975bd357eac3380e0a72a19d4f06e28513872976770809db1f7e
MD5 6dcc8879f6ed287ff98e4caee56a48cd
SHA1 89072d33b8d931ebc6786ba74a23d96076a7abde
SHA512 ae05e9db198530702c27d041160506375804c2334234a4aafe0e65236d4b414321daeba5ae6ace476005aff688759312006e1d9e8ec7f374b29b8e78cdc37b16
MD5 SHA1 SHA512

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Reporting and NEL
Size 36KB
SHA256 66b3f6086cdbe28f4c551c62abb201492715f60b5a7815f486f4ec87e1cbf3ee
MD5 5f3da953ae1c20aeacfffcdddb949932
SHA1 f17a8e9921cd32412a8390e5c186adf9810aa769
SHA512 c4c261eab5f3297d34b0bf7a6313cc5e0249db78130886babbdabecde5ae6c50432d5356bd49b19c498c90cfd78c0baa8abf3327e25d08db732faf6f9bd71d8d
SSDEEP 48:TnIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBLtW:LIEumQv8m1ccnvS6GrxT
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\TransportSecurity
Size 874B
SHA256 d76c9473d78910ae346adc7da94225466423daca393a1ec898ae9051c5bbfcdf
MD5 a089606e6922daec30c54711bd419f7e
SHA1 2f6550e644ec81bec384db0b1059fe51456914d8
SHA512 de272055864ac1b6a451fc3dd947a81d019c6bf4d91df8b4302b907670378dbd185f47a22fd344cbad4cb3d4035d24c002a5c7363bea7cc15bf1517a23edce38
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\TransportSecurity
Size 874B
SHA256 503c65aff8959d83b74b4162110cd1ef4a73a8629e7d75b358efa66d08b8d66e
MD5 fb59f36bb2393d9b213e624e6596fbe7
SHA1 df1ddc19a07b0a95802c6b7504d4c30fc694f645
SHA512 1e1ec026056c7412d7c8eb34d4157a0b69f32e5506ae35a5fa19cc850a123f35f09774e50bd43db5b2757856258475dbb3bad5cf160e6c729e499cd15e4c1405
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\TransportSecurity
Size 371B
SHA256 c58cef1d535786478a41b4c1db7b7c2af86514383423b2c4420ad74baf82c479
MD5 dea12c9072aabe11d108c528454b7508
SHA1 0065a7a219fa191b555733bac06b9445023af4bf
SHA512 7c5348142190c9df2feefa7b7fed79b5ecf7ab29466d1d8f0d901be479cdbbcf0d5692b02392d1a337509b9eb7fd354ecedc8373b7f3364473283225e9f3c482
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\TransportSecurity
Size 707B
SHA256 1c945535d3b4785d962cd4ea3faf7cf31bf08011a920e321f8edb9c3cd248312
MD5 79f0f53d2dd04ff05fe61ca42f777c07
SHA1 4e3683e948c810d1040fd094c1f43e1763b933b5
SHA512 91672aa62f79f697bdc123f3b9694f9b10e542e6d03213181f7d61cba33592994e057f2ce8230252216bcc7796f572c497c5e6b69e32f667ccd01373eced64d1
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\TransportSecurity
Size 874B
SHA256 e7902f7a89da7e7e270834920df9523137423cd41e31056ceffa955fccaa155e
MD5 a358fb70b09bebda0c8a08d92d91fdb8
SHA1 8a28b7f6c05f8c8e1a8a0f6f4f17cdb5c28e63e0
SHA512 a14504f43893babcf06a1c1d4cba8c0811f72ce7d5d1aa5fd58b7613ac29adef9faaf1959e3aa4b6578d8faef021d01263f5a07bfec89f94e64a94c807b19df2
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 6KB
SHA256 cebc103b1cd1b61c6c6694b3c6e31a85d57f3a4e8be30c60db1da6c693060e30
MD5 8041f6864aa6f6189ea0808a1dc33ac2
SHA1 18852e995e624dd89ba2acc586cef82dff695e3b
SHA512 9e66444d90d1c43b0c256992f2c127b33d47adfb1e30e66320d595728f26dadb5a0dbb04b32495028f246ddf481ba9ba4e03e085628408f0ad6c8ef3247aa1eb
SSDEEP 96:r/YLXJzFSKIaSh8iZRy7Di+6MsmdewIOHO1NhfVhYtjEsXt0/cg2Vup:rgLCXh8syy+FHIX2tjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 6KB
SHA256 13acf338b51154c26c9d0efb12ff7410508c70558a5870b2a4879f5a3c1ac5a2
MD5 d1ba026e65008834c66856ca8aeccd4a
SHA1 0108f35bd73cc3533afd30e7e8ca19e530d4e8b7
SHA512 88421d57fda7f478b1002b4ed6d7d3ef77776df4c95d73dd7e3c188bcd6719ee6eebecb09f068f64d416b08e8f51cf6e70d46f169620647204b61bf1fc935a7a
SSDEEP 96:r7TyXXzZcZKIOSh8iZRy7Di+6Msmdehk3O5OOO1JjVhYtjEsXt0/cg2Vup:rPyHVcZrh8syy+FOk3TzotjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 4d3f3194cb1133437aa69bb880c8cbb55ddf06ff61a88ca6c3f1bbfbfd35d988
MD5 c9ff7748d8fcef4cf84a5501e996a641
SHA1 02867e5010f62f97ebb0cfb32cb3ede9449fe0c9
SHA512 d36054499869a8f56ac8547ccd5455f1252c24e17d2b185955390b32da7e2a732ace4e0f30f9493fcc61425a2e31ed623465f998f41af69423ee0e3ed1483a73
SSDEEP 12:TLVsFVP89GkwtwhuFdbXGwvfhowcFOaOmzdOtssh+bgc4Jp+FxOUwa5q0S9zXhZn:TLcF1kwNbXYFpFNYcw+6UwcQVXH5fB
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG
Size 345B
SHA256 cbc2b09fbc4bca9b5f2b6ca0e1c6c821d3ebb4cc127bffe4bfdc05d7b0ac1acc
MD5 e915545da3450d0e4131c7d9789e4533
SHA1 a76c251d227f7a7d0cfe157e18c6141df147089b
SHA512 63b2e5a4a6c1bf6786425dc8fe7d3f547740147e5ee252770f37748bc1cdd8e37986df1c1b6b10c0e429d1a08ae52148ce150953a7aa39d588bf9efa2c73b8bd
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG.old
Size 305B
SHA256 be31de18057d3c1a6d4764761c785eda28b0b0b832a0c679c41c7e0ca9ab0e7c
MD5 46424f42def88c9f38093f4bad91c21b
SHA1 ade72e0bc5d245c5e1dc1e1b870b28d5ce3aa233
SHA512 6018c54d3bbe788298754a317a4c876e2b089196741cd0f43c72dca1cd1cf55725ff14c6e5715abfe77db670b3bc9add601772d951d8d4c94f245db6a32d0e25
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 be43752ee22d2986c0412244dfdcb1fd6cb1c902f4cfbd4f31ad03409906383f
MD5 be4392fc6e2e6d846903d69486937ec6
SHA1 e954f896a91d0b9bfc3af7fa100048f2cf3e8819
SHA512 1fdbec38676353487a1a9a3c5dfae375b5488012812656826a1d0d2d25b0a2285713e796d43f6ac355fd98ec6649d9ab15f87340e056ccf2c27766ef113e009f
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\index
Size 256KB
SHA256 af26d749ae03c65d411a42b59c28faea1ffb5fc4cd6c9df946e7b72940321ff0
MD5 d1f297604f69e1137deeb27d5780da26
SHA1 e8d0b6dc8d4954373e6395aa764391d758adfc87
SHA512 f7f7e3a1b0465474d6a343ffbb3c85bdb4e7dddb3d216d812fec1b214a3d6ba3d6e07cb0678ca8b00ee76035652d29169bd7e90df1b8c61ee60fe61701caeb59
SSDEEP 3:LstlNllkll/lFl/l:LsX3lEtFlt
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\000003.log
Size 6KB
SHA256 cf85ef0ed59a6753c51203d9d5f53200dc00beefd90c9714bdf400a1b7163e4a
MD5 fc7662ab09d153ea80edc6b3a166ec2b
SHA1 374f109b9c383688eec8b48d57db8b7c60a4c5f3
SHA512 38c78738cbcf0f0d4e6e81e2df673cb200e290a6b3c92a49f6a0be8482b01d45ee81315d6f17514a9c93b074d5d248a9408ed252feec8f03e5663c6201e42fd9
SSDEEP 192:H7bxDxnfwWZxvExNxvfwWQxzExV6xyxSxh6xRx1fwWQxoCExbxDK:H7bldfBW7VfYef60UH6r/fYqx5K
MD5 SHA1 SHA512 SSDEEP

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 1e7286399c60250350faefc428ab5561558aac64fdfedace9474d2340e1f80c5
MD5 dcf0cd06b6af015abd119f85daf20bb5
SHA1 e790541a53cfb49d1c7333e5fb1ed8a520a9f2f5
SHA512 e990fc8b4c33211e21aefd6d51445c233a637ecf2e979c3be4eebdc5ddc2f253e2ff26b451e3b6fb8a47b26b7b86e218081c11cfd7bab3f13d9525bc2f951fe0
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG.old
Size 281B
SHA256 a34e9b6000d4f1d537be94cb9f6a30a392f0be730d6c27ddb54394d520167ed4
MD5 8950d3e56113b614c8992cd2e43df8e7
SHA1 03930112f1d6c47c189ab6f5334a7a88953c4f58
SHA512 96a89f3a2fbf5b80eba402c712ddda415e955a350da758ba1758cc992007fb479a1b68e331001f9ad0a301e986326153ebd170f506e70ba4cfba56c6013b761c
MD5 SHA1 SHA512

Submit Download

Trusted Vault

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Trusted Vault
Size 33B
SHA256 426f753d0feebc569e442462a966df95dc1f8f8762d867f52d150ad6ff5b945f
MD5 50cc8efdd8d873bee6d81f1481f26f00
SHA1 c2430d8260bba19291a999af2dd265fa52426569
SHA512 e30b53c44366758d9dba23014e2f933cdd22d1af904d92bed1f9fdb425b589177c8c3427a03dadd33334f6edaa9ef8fb979e180334af83522bb647bf4b5258ed
MD5 SHA1 SHA512

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Visited Links
Size 128KB
SHA256 99bc735600211e8f05c191600a5a46618471c360659b66a690714e31d3d4baa4
MD5 1145123f9cdb68ffa6d6e8a81ae01ccd
SHA1 16df1370d3041826cff64c15100786b6d7ebcf39
SHA512 f44105c43f51f7936921f439b6391eaefa625d97fce27925c6cc8b0c34ba1af353a8612a9ec71d3b89a206fd943ec7add99abf094e6912c50615f4d2803fa735
SSDEEP 3:ImtVtsltl:IiVtslt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Web Data
Size 92KB
SHA256 89121f65705e315dd36be848aac783b0cfc307a6848392af9346f1f288e474e9
MD5 92be7d444b8f6922a7ab205f66109c15
SHA1 25ea6a81f508348a61b7f4f668186069b00ccb8d
SHA512 c8c10adcc6f1dbe3d5c9022d303f2c6cc68c458949a8997f3bfcf5ca9a3620d1e7400b46ec36727b9c6d760d108ea889aa97a0ae9d505768822b6a112793bbd1
SSDEEP 192:dtxbavrNdl9bH9CxbGsTjOnaVh6is6DJVum3:/Ravrbl9D9pnaVh6loJVum3
MD5 SHA1 SHA512 SSDEEP

Submit Download

ca10fe1a-4df5-4f68-9b88-7acd7fa5d563.tmp

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\ca10fe1a-4df5-4f68-9b88-7acd7fa5d563.tmp
Size 18KB
SHA256 039a734781e896620d719e6076a03493a03455a91049add3534ab613b8676fa4
MD5 ea147bcf5fed9d6a9b0d36eaab55c7f6
SHA1 ad8639615b88b08cc1672d5037503acd6a1ba2c4
SHA512 25fd9096684aa001214fb24f13482ec0cc95384d6ee872ad2b4aba248fa27058b0083dbfed658d0d3de75de142785b9ae4983e2c72805b4107be0112f55a870b
SSDEEP 384:CHLPLeUzu8KCBAzXk1kXqKf/pUZNCgVLH2HfknrUNHG8XhY1g:WLPLtzurbk1kXqKf/pUZNCgVLH2Hfsr6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Last Version
Size 14B
SHA256 4288925b0cf871c7458c22c46936efb0e903802feb991a0e1803be94ca6c251d
MD5 9eae63c7a967fc314dd311d9f46a45b7
SHA1 caba9c2c93acfe0b9ceb9ab19b992b0fc19c71cf
SHA512 bed924bff236bf5b6ce1df1db82e86c935e5830a20d9d24697efd82ca331e30604db8d04b0d692ec8541ec6deb2225bcc7d805b79f2db5726642198ecf6348b8
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 114KB
SHA256 64048395713495e43c77f12d0188072d0c5b9969054c5d64c6ee69e476a6fddf
MD5 417a6a32458a597ec6c3d912d8cc756f
SHA1 6bf663f6e4428752ce6c359e70032e85966bbb98
SHA512 88340bea89340d6ae382a6961aae45df7c3de01c07e98371c4930c9c789308e43025bf8f70ba9e5cea7d5931b9b3b4e244ea3f2dea5ccd7a484811be07d73f1c
SSDEEP 3072:l5BbH2rDu/htQDoxVulJSKNfyST9gf+wbE6DA3XqKeIP5bv1Q4SgU:BHbJtQDGVG1fyE4+VqiQfgU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 233KB
SHA256 42ff2cd3e353a7bb0187596793acc2c18cd43a493dba4f6614853477335a3006
MD5 b786ff34b1206516ee2b871adbbfe3da
SHA1 1fa7bbf677564591b65597c587bf12c76583c363
SHA512 566040cae3562adc08d368afa66963a7cfdc617970bd0d459590242deb0715ae9c3d21218f29f2f392fbebc489452cdf05e1f3ca39cd1d498b7b3c6707da3441
SSDEEP 6144:s7wnnGMbQguZrq7P6IqtHbJtQDGVG1fyE4+VqiQfgo:RnGRgkr4P6IqldtQD6G1fyE4CWgo
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\ShaderCache\index
Size 256KB
SHA256 4f26ea8836bb0730b1eecda381812257c28c59cba995cc0e42820c17e51a0c75
MD5 59bc30e415ecb4a8defbdc45f45f79d1
SHA1 9d002d6f92a7bedfa7ef1a57ce21642a97a38a1b
SHA512 cccff3bca44341d4844648cbb11dbf4472aad617a676ee90b33b0ec3adf1ea6250dadeb33b822019ccb75b1ceca75c3af6d4915f0c6cd76109601d2614b60e68
SSDEEP 3:LszllklkXllQdOu:LsJlPKdOu
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
MD5 SHA1 SHA512

Submit Download