Overview
overview
10Static
static
10XWorm-5.6-main.zip
windows7-x64
6XWorm-5.6-main.zip
windows10-2004-x64
1XWorm-5.6-...io.dll
windows7-x64
1XWorm-5.6-...io.dll
windows10-2004-x64
1XWorm-5.6-...on.dll
windows7-x64
1XWorm-5.6-...on.dll
windows10-2004-x64
1XWorm-5.6-...ws.dll
windows7-x64
1XWorm-5.6-...ws.dll
windows10-2004-x64
1XWorm-5.6-...at.dll
windows7-x64
1XWorm-5.6-...at.dll
windows10-2004-x64
3XWorm-5.6-...um.dll
windows7-x64
1XWorm-5.6-...um.dll
windows10-2004-x64
1XWorm-5.6-...rd.dll
windows7-x64
1XWorm-5.6-...rd.dll
windows10-2004-x64
1XWorm-5.6-...ss.dll
windows7-x64
1XWorm-5.6-...ss.dll
windows10-2004-x64
1XWorm-5.6-...er.dll
windows7-x64
1XWorm-5.6-...er.dll
windows10-2004-x64
1XWorm-5.6-...er.dll
windows7-x64
1XWorm-5.6-...er.dll
windows10-2004-x64
1XWorm-5.6-...er.dll
windows7-x64
1XWorm-5.6-...er.dll
windows10-2004-x64
1XWorm-5.6-...DP.dll
windows7-x64
1XWorm-5.6-...DP.dll
windows10-2004-x64
1XWorm-5.6-...NC.dll
windows7-x64
1XWorm-5.6-...NC.dll
windows10-2004-x64
1XWorm-5.6-...ry.dll
windows7-x64
1XWorm-5.6-...ry.dll
windows10-2004-x64
1XWorm-5.6-...ps.dll
windows7-x64
1XWorm-5.6-...ps.dll
windows10-2004-x64
1XWorm-5.6-...ns.dll
windows7-x64
1XWorm-5.6-...ns.dll
windows10-2004-x64
1Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/10/2024, 21:31
Behavioral task
behavioral1
Sample
XWorm-5.6-main.zip
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
XWorm-5.6-main.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
XWorm-5.6-main/NAudio.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
XWorm-5.6-main/NAudio.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
XWorm-5.6-main/Newtonsoft.Json.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
XWorm-5.6-main/Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
XWorm-5.6-main/Plugins/ActiveWindows.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
XWorm-5.6-main/Plugins/ActiveWindows.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
XWorm-5.6-main/Plugins/Chat.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral10
Sample
XWorm-5.6-main/Plugins/Chat.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
XWorm-5.6-main/Plugins/Chromium.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
XWorm-5.6-main/Plugins/Chromium.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
XWorm-5.6-main/Plugins/Clipboard.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral14
Sample
XWorm-5.6-main/Plugins/Clipboard.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
XWorm-5.6-main/Plugins/Cmstp-Bypass.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral16
Sample
XWorm-5.6-main/Plugins/Cmstp-Bypass.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
XWorm-5.6-main/Plugins/FileManager.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
XWorm-5.6-main/Plugins/FileManager.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
XWorm-5.6-main/Plugins/FilesSearcher.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
XWorm-5.6-main/Plugins/FilesSearcher.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
XWorm-5.6-main/Plugins/HBrowser.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
XWorm-5.6-main/Plugins/HBrowser.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
XWorm-5.6-main/Plugins/HRDP.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral24
Sample
XWorm-5.6-main/Plugins/HRDP.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
XWorm-5.6-main/Plugins/HVNC.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
XWorm-5.6-main/Plugins/HVNC.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
XWorm-5.6-main/Plugins/HVNCMemory.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral28
Sample
XWorm-5.6-main/Plugins/HVNCMemory.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
XWorm-5.6-main/Plugins/HiddenApps.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral30
Sample
XWorm-5.6-main/Plugins/HiddenApps.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
XWorm-5.6-main/Plugins/Informations.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
XWorm-5.6-main/Plugins/Informations.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
General
- Target XWorm-5.6-main/Plugins/Chat.dll
- Size 18KB
- Sample241007-1dbkmavaql
- SHA256 aab20f465955d77d6ec3b5c1c5f64402a925fb565dda5c8e38c296cb7406e492
- MD5 59f75c7ffaccf9878a9d39e224a65adf
- SHA1 46b0f61a07e85e3b54b728d9d7142ddc73c9d74b
- SHA512 80056163b96ce7a8877874eaae559f75217c0a04b3e3d4c1283fe23badfc95fe4d587fd27127db4be459b8a3adf41900135ea12b0eeb4187adbcf796d9505cb8
- SSDEEP 384:4MOna4ifKQtuUvl0BY0iYUsBG/crwTKvh6GIKoIafWUWmfN:vKQtuq2Y0lUUG0r0pIafWXe
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2112 chrome.exe 2112 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
pid Process 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe - Suspicious use of AdjustPrivilegeToken 24 IoCs
description pid Process Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe Token: SeShutdownPrivilege 2112 chrome.exe Token: SeCreatePagefilePrivilege 2112 chrome.exe - Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe - Suspicious use of SendNotifyMessage 24 IoCs
pid Process 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe 2112 chrome.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2112 wrote to memory of 944 2112 chrome.exe 87 PID 2112 wrote to memory of 944 2112 chrome.exe 87 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 1988 2112 chrome.exe 88 PID 2112 wrote to memory of 4352 2112 chrome.exe 89 PID 2112 wrote to memory of 4352 2112 chrome.exe 89 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90 PID 2112 wrote to memory of 4128 2112 chrome.exe 90
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\XWorm-5.6-main\Plugins\Chat.dll,#11⤵PID:2700
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2112 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff86669cc40,0x7ff86669cc4c,0x7ff86669cc582⤵PID:944
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1932,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1924 /prefetch:22⤵PID:1988
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2216,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2264 /prefetch:32⤵PID:4352
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2292,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2532 /prefetch:82⤵PID:4128
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3164,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3188 /prefetch:12⤵PID:4872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3428,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3316 /prefetch:12⤵PID:332
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4624,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3732 /prefetch:12⤵PID:1728
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4776,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4752 /prefetch:82⤵PID:956
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4868,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4880 /prefetch:82⤵PID:724
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4920,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4912 /prefetch:82⤵PID:972
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5064,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5056 /prefetch:82⤵PID:320
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5360,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5272 /prefetch:12⤵PID:1644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4824,i,5400229364521111591,18074482359622503910,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5376 /prefetch:12⤵PID:4968
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵PID:2072
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:1864
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
- Size 524B
- SHA256 edb0699001fbb1b18e70071e5ab5a5d06d10943eda1d4fa288f6ec81c629985e
- MD5 a0612200bdf008b4db028cc20143c854
- SHA1 0a46972d34bf3c70338527897db942df75a54629
- SHA512 795402c6d560dd4437fc0e72529bd302e3639de8cd25b38674ae5256c22b148d3d6603755129c71781511693ffaf2bb328d069eb1a86fc693f80b9fbe66d66b1
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 8KB
- SHA256 4e61fd8b391213e9a058cf1db57042acf5242cc433b781f5714d431c2627738b
- MD5 5a9e5a9582ac8fcb26c6e0f703cd6b25
- SHA1 133aac53c87aa870eb9d79f7dcd33d1eb44de878
- SHA512 da08747999d66eac1210902603ee4f114ce39c6644e6d3f4c0404aa7f8a36b21fa1ed7125a27ce23da66a6668de1771c5c6e333f1ce857156c424f5181b4880e
- SSDEEP 192:CUcBz08MEqDkERMeVPHV+FPSk+LPo6yIsnVdg4:CUmz09d/G6k64
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 228KB
- SHA256 eff3f5148eda448e33c7e6e8bff6c9e68dfba3aa4d5f5b0c6c4aa36b2030064f
- MD5 3c4b29e953ee7de10f2e61d2ffa763e1
- SHA1 f79a981b1bc663c2f4424bd320d63d238d4d378b
- SHA512 d0f6f15caf34e98b70a73c20cd7a176c37b83dae011c2b16cac417b78fb7364e780c4bb00a3783ea8ff4a8eb8642e70e21d2718e3ca71b02237e6826ce1c7eff
- SSDEEP 6144:oA3jHyIM2ujQlrLO7UfmgtHnNUZt46Jlxse6HWNj6YHgta9e+:ryIMQlnPtHNY46Jwen6qgtaz
- MD5 SHA1 SHA512 SSDEEP