socelars | 52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d

Analysis

max time kernel
150s
max time network
133s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Size 1.5MB
Sample260416-vxj38aa161
SHA256 52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d
MD5 5b070c8fd1764998c7a83955f5504f8f
SHA1 947372c6c9e8330469590adebdf6b1316f696f3c
SHA512 fc4ee388a1cd485c9b1030595f22d7fdfa1d5b583b53788d14d1655d145d7994a9fca13d6b10625091ec6322954784ba80f6132e13fe6d0aec4dbea3bf859106
SSDEEP 49152:GJtpx1iErFrLK3F7QojUnHo4Sa0ra0b2d:GhrFzo4nHo4SV
TLSH
T12A75AE15F7429076ECE304B285FE47BE8928BA22070494D7E3C4196D9E619F27E3B727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery socelars spyware stealer

Malware Config

Signatures

Family: Socelars
Socelars is an infostealer targeting browser cookies and credit card credentials.
stealer socelars
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	iplogger.org

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe

Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3192	chrome.exe

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
1032	taskkill.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2604	chrome.exe
2604	chrome.exe
784	chrome.exe
784	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe
2604	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeCreateTokenPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeAssignPrimaryTokenPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeLockMemoryPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeIncreaseQuotaPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeMachineAccountPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeTcbPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeSecurityPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeTakeOwnershipPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeLoadDriverPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeSystemProfilePrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeSystemtimePrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeProfSingleProcessPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeIncBasePriorityPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeCreatePagefilePrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeCreatePermanentPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeBackupPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeRestorePrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeShutdownPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeDebugPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeAuditPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeSystemEnvironmentPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeChangeNotifyPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeRemoteShutdownPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeUndockPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeSyncAgentPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeEnableDelegationPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeManageVolumePrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeImpersonatePrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeCreateGlobalPrivilege	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: 31	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: 32	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: 33	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: 34	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: 35	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
Token: SeDebugPrivilege	1032	taskkill.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe
Token: SeCreatePagefilePrivilege	2604	chrome.exe
Token: SeShutdownPrivilege	2604	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2604	chrome.exe
2604	chrome.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2084 wrote to memory of 3920	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe	80
PID 3920 wrote to memory of 1032	3920	cmd.exe	82
PID 2084 wrote to memory of 3364	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe	84
PID 2084 wrote to memory of 2604	2084	52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe	86
PID 2604 wrote to memory of 1304	2604	chrome.exe	87
PID 2604 wrote to memory of 3684	2604	chrome.exe	88
PID 2604 wrote to memory of 3684	2604	chrome.exe	88
PID 2604 wrote to memory of 3192	2604	chrome.exe	89
PID 2604 wrote to memory of 4316	2604	chrome.exe	90
PID 2604 wrote to memory of 4316	2604	chrome.exe	90
PID 2604 wrote to memory of 4924	2604	chrome.exe	91
PID 2604 wrote to memory of 4924	2604	chrome.exe	91
PID 2604 wrote to memory of 1816	2604	chrome.exe	92
PID 2604 wrote to memory of 1816	2604	chrome.exe	92
PID 2604 wrote to memory of 4108	2604	chrome.exe	93
PID 2604 wrote to memory of 4108	2604	chrome.exe	93
PID 2604 wrote to memory of 1492	2604	chrome.exe	94
PID 2604 wrote to memory of 1492	2604	chrome.exe	94
PID 2604 wrote to memory of 1208	2604	chrome.exe	95
PID 2604 wrote to memory of 1208	2604	chrome.exe	95
PID 2604 wrote to memory of 236	2604	chrome.exe	96
PID 2604 wrote to memory of 236	2604	chrome.exe	96
PID 2604 wrote to memory of 1500	2604	chrome.exe	97
PID 2604 wrote to memory of 1500	2604	chrome.exe	97
PID 2604 wrote to memory of 1308	2604	chrome.exe	98
PID 2604 wrote to memory of 1308	2604	chrome.exe	98
PID 2604 wrote to memory of 1764	2604	chrome.exe	99
PID 2604 wrote to memory of 1256	2604	chrome.exe	100
PID 2604 wrote to memory of 4404	2604	chrome.exe	101
PID 2604 wrote to memory of 784	2604	chrome.exe	102

C:\Users\Admin\AppData\Local\Temp\52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe
"C:\Users\Admin\AppData\Local\Temp\52a6ea5ec2271b232c86dc13e2b4cc6b117686b81ea3e4562961f5471f36797d.exe"
1⤵
- Drops Chrome extension
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2084
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im chrome.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3920
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im chrome.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1032
- C:\Windows\SysWOW64\xcopy.exe
  xcopy "C:\Users\Admin\AppData\Local\Google\Chrome\User Data" "C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\" /s /e /y
  2⤵
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  PID:3364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --window-position=-50000,-50000 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" https://www.facebook.com/ https://www.facebook.com/pages/ https://secure.facebook.com/ads/manager/account_settings/account_billing/
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2604
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x114,0x118,0x11c,0xf0,0x120,0x7ff9096cc728,0x7ff9096cc734,0x7ff9096cc740
    3⤵
    PID:1304
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,2567890058628821818,16315814621472491686,262144 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1952 /prefetch:2
    3⤵
    PID:3684
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=1472,i,10663944733321718094,11262916468624217012,524288 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1916 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3192
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,15813840222108398078,17559090941101586665,524288 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2588 /prefetch:13
    3⤵
    PID:4316
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,6186854491458830322,6411187399103238430,2097152 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3160 /prefetch:1
    3⤵
    PID:4924
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3156,i,1384990036133261147,12786247894101562255,2097152 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3224 /prefetch:1
    3⤵
    PID:1816
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3764,i,11705097316834919815,16012377627164586629,2097152 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3652 /prefetch:1
    3⤵
    PID:4108
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3796,i,7202189248793717925,16547741983025809094,2097152 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3808 /prefetch:1
    3⤵
    PID:1492
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4736,i,16686165924452578823,15421757919858408726,2097152 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4776 /prefetch:9
    3⤵
    PID:1208
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4948,i,15397695533916252139,18350573545758840746,2097152 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4960 /prefetch:1
    3⤵
    PID:236
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5132,i,13617902773316856759,5228656375965670065,2097152 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3016 /prefetch:1
    3⤵
    PID:1500
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5268,i,16479796964871784721,2533653104733711736,2097152 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4204 /prefetch:1
    3⤵
    PID:1308
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,11222892788264939518,16316967834270251772,524288 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5640 /prefetch:14
    3⤵
    PID:1764
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,10875867956910769849,10507505078339056286,524288 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5660 /prefetch:14
    3⤵
    PID:1256
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,6444108679028295494,16638806842480943317,524288 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5700 /prefetch:14
    3⤵
    PID:4404
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5868,i,2134199119730909183,1528739930129236594,262144 --field-trial-handle=1956,i,15486898003626586045,4298675587834558877,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5876 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

background.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\background.html
Size 786B
SHA256 a1064146f622fe68b94cd65a0e8f273b583449fbacfd6fd75fec1eaaf2ec8d6e
MD5 9ffe618d587a0685d80e9f8bb7d89d39
SHA1 8e9cae42c911027aafae56f9b1a16eb8dd7a739c
SHA512 a4e1f53d1e3bf0ff6893f188a510c6b3da37b99b52ddd560d4c90226cb14de6c9e311ee0a93192b1a26db2d76382eb2350dc30ab9db7cbd9ca0a80a507ea1a12
TLSH
T1AF01900E1D04A56AF4154DCC70B1FA2C188EDF03F106CC6441F4D9A6ED9A7CD8C626F5
MD5 SHA1 SHA512 TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\icon.png
Size 6KB
SHA256 9434dd7008059a60d6d5ced8c8a63ab5cae407e7152da98ca4dda408510f08f5
MD5 c8d8c174df68910527edabe6b5278f06
SHA1 8ac53b3605fea693b59027b9b471202d150f266f
SHA512 d439e5124399d1901934319535b7156c0ca8d76b5aa4ddf1dd0b598d43582f6d23c16f96be74d3cd5fe764396da55ca51811d08695f356f12f7a8a71bcc7e45c
SSDEEP 192:arFa6ynwcj6POoDbxN9EUQYZRia+ce/lkygkkl0:apa6mhjshD9QYZR3qkr/S
TLSH
T1A0E19E1CEDD537BCA35E1601214F81B164E7B85383341A5C11B898FA94C6A9ED39F2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aes.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\aes.js
Size 13KB
SHA256 fc7e184beeda61bf6427938a84560f52348976bb55e807b224eb53930e97ef6a
MD5 4ff108e4584780dce15d610c142c3e62
SHA1 77e4519962e2f6a9fc93342137dbb31c33b76b04
SHA512 d6eee0fc02205a3422c16ad120cad8d871563d8fcd4bde924654eac5a37026726328f9a47240cf89ed6c9e93ba5f89c833e84e65eee7db2b4d7d1b4240deaef2
SSDEEP 192:9pQGDuD690MPdz8Ui015ll1I57I2Tru6h0hNmHV+m9eIfyAqYfinNVYEUUFJZmUY:9OiT0wz8Uiw/1S7DegkcHpeIuScZbAX
TLSH
T1B95296C936EDB94263A63068587F7017B86B28B5945C4824F298D4DDF9A899DC03AE3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\background.js
Size 15KB
SHA256 3abe44b053f507b13ed2dbf4546fe69e1e3148549cb0f18d0ce5b59b775d9e02
MD5 88b3b3d88398cfffc2a07181728f9e58
SHA1 094dd3c849ba8ceccc5eb0836b65880058d66af4
SHA512 2a45995b099f92d10f7cd45392665d29ad8db45749433105bb8d788828f5ced5af6d2da5daadd0f17e3b2962616c2a77bc8acab41c73ec7996c62ce237412c53
SSDEEP 384:MSqK+K3tmygSoFlp9kROMSC/SaHjj2lq40fzBlobew:MomygSoFlp9EOMSCqaHj6f0tubew
TLSH
T18D629D886295B88719BE8B3359A34F45B07FB762EA8336BB4319BA8404F1C07CD557F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\content.js
Size 14KB
SHA256 41e129bb90c2ac61da7dac92a908559448c6448ba698a450b6e7add9493739c6
MD5 dd274022b4205b0da19d427b9ac176bf
SHA1 91ee7c40b55a1525438c2b1abe166d3cb862e5cb
SHA512 8ee074da689a7d90eca3c8242f7d16b0390b8c9b133d7bbdef77f8bf7f9a912e2d60b4a16f1c934f1bd38b380d6536c23b3a2f9939e31a8ef9f9c539573387b4
SSDEEP 384:rlBc5VG/MavcrTkzqaKNVyQiYCIizzSEWfw0:rrc5VG/MavcrTkzlKNVyuw0
TLSH
T17D52D2DE53D8E97B2ECD1E83BD508ED650B2A236D7C932C7872CB94C51E90ABC5084B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jquery-3.3.1.min.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\jquery-3.3.1.min.js
Size 84KB
SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
MD5 a09e13ee94d51c524b7e2a728c7d4039
SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
TLSH
T1748319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mode-ecb.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\mode-ecb.js
Size 604B
SHA256 03164b1ac43853fecdbf988ce900016fb174cf65b03e41c0a9a7bf3a95e8c26a
MD5 23231681d1c6f85fa32e725d6d63b19b
SHA1 f69315530b49ac743b0e012652a3a5efaed94f17
SHA512 36860113871707a08401f29ab2828545932e57a4ae99e727d8ca2a9f85518d3db3a4e5e4d46ac2b6ba09494fa9727c033d77c36c4bdc376ae048541222724bc2
TLSH
T10EF04C877CF9AEC1D5A2B1AD8B7FC51D787400130556DB407B0C5160EFD84300B45AAC
MD5 SHA1 SHA512 TLSH

Submit Download

pad-nopadding.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\pad-nopadding.js
Size 268B
SHA256 282308ebc3702c44129438f8299839ca4d392a0a09fdf0737f08ef1e4aff937d
MD5 0f26002ee3b4b4440e5949a969ea7503
SHA1 31fc518828fe4894e8077ec5686dce7b1ed281d7
SHA512 4290a1aee5601fcbf1eb2beec9b4924c30cd218e94ae099b87ba72c9a4fa077e39d218fc723b8465d259028a6961cc07c0cd6896aa2f67e83f833ca023a80b11
TLSH
T1B0D02B5E3DFBAF42D49972E5C73DC14C71244103066A5EC2AF0C02728F61C395799AAC
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json
Size 1KB
SHA256 20d39e65b119ed47afd5942d2a67e5057e34e2aef144569796a19825fea4348e
MD5 f0b8f439874eade31b42dad090126c3e
SHA1 9011bca518eeeba3ef292c257ff4b65cba20f8ce
SHA512 833e3e30f091b4e50364b10fc75258e8c647ddd3f32d473d1991beda0095827d02f010bf783c22d8f8a3fa1433b6b22400ad93dc34b0eb59a78e1e18e7d9b05f
TLSH
T137318537E580883B26F5EB01BEB83282FB62835B55404D4FB07EA05C0F75E2A018435C
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 20KB
SHA256 8234996446fa03ed4e9d4246df29136b0272c549768b08545d6a3ae458868fba
MD5 4e28dbbe5fcf5e9bd20e543eec660b09
SHA1 1e0397b100d488e3113687e30204d4738574b2dc
SHA512 d1cb0424c0acda55b3cddad2663eaf6e517f1e80034b18ac5c32bb492c009a0e5385117f0b32c1606655bde1b438e57914852e77a246563c24dc037303f020c1
SSDEEP 384:UujAr7KxkXqKf/pUZNCgVLH2Hfgsl+17pLuLcPfccm8KCBATnXODAH+ErU3xWHGS:UeAr7KxkXqKf/pUZNCgVLH2Hfgsg17pu
TLSH
T1DC922A27784CD97B0F94DAC8DC167A4FADF6024765D9889983FA9C2D03D0BCB11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\CrashpadMetrics-active.pma
Size 1024KB
SHA256 67ee11b51cd6f637795e31ab501f135ed595c8459bce885735f08b0418513a17
MD5 34c29bdb9e41b1f47f2d2786762c12ec
SHA1 4075131b18c3487e3e848361e112009c897629c7
SHA512 ca3a978798e77b2ced27b379f38e935ef18beaa7ea23e34270a9af20b37e1b1c5edf9478606311cf1acabd83992766cb3da8444de9394c674d5955bdbc53c0d0
SSDEEP 12:bHCskaXhVMMBKEKSCemJKlkQfIYVhYJ0X:bi0ROMMBS+MkEPYW
TLSH
T151259286B34455BBC54189B188AA17606274F9E89F82179A3B18E60F1E661DC0F51964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad\settings.dat
Size 40B
SHA256 d4b20187d1a27791dd95f08abe7840e0cdd1ce61f275bd653b136d14b779d85d
MD5 a9c52baf89a3b7bd355ceacb31f4c1fa
SHA1 772d3bd6852fdecd31426b10b2a48b0bb4513a74
SHA512 4b5eb51f8e5d34c50df3f8fbaaf6247de584377339da9ed1a759628bc0c6a5ffa3098bfa7fbf0ca780c77f39d44b791375aefc45ca92b2ec120b8b98c74f7f5c
MD5 SHA1 SHA512

Submit Download

2be75da5-696c-4899-9a50-9ce782bab3e1.tmp

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\2be75da5-696c-4899-9a50-9ce782bab3e1.tmp
Size 20KB
SHA256 0efe638e0e1f5e2cf46b6a329f680451e102c3bc6d541da69adecb7a43535a6d
MD5 63c6eb864db5616b27e9c81f5d0669e3
SHA1 3a9ca601ea9f5e0e212e57895eb6e1d92ff1abfb
SHA512 adf970bb62b175999578255e4841461916be7eadf4a839fbe3fd0c9db3ccf872bf3eefb209eaeda7f4f7c0b1819fddab418f008896fbf4994cf4c64c0011a8c7
SSDEEP 384:UujAr7KxkXqKf/pUZNCgVLH2Hfgsl+m7pLuLcifclIM8KCBAVnXODAH+ErU3xWH4:UeAr7KxkXqKf/pUZNCgVLH2Hfgsgm7pq
TLSH
T11A921A27784C997B0F94DACCDC167A4FADF6024765D9889883F69C1D03D1BCB11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Account Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 a5280a88a5455f86922fe377fdba250cd196c1fdcdf904e32ec13816f893f1c0
MD5 53dcb21953d051d5925514b5cf68b33d
SHA1 023c06bd110c17f317d90892f14664f1035b3c5c
SHA512 00c6ba5f6edeaa2812f098d06ddad0aaafb2f4ec7dbeb814369c86f1507ac7f39fccf42f310863b43d572e971add278c81605e3d73d48a417b8eed8ad9467b11
SSDEEP 6:/FMeEJuhEMN5cM7ScDJ3CSJIrpZEXvJQbkll2+iaaDaGJ3/lSytEh428l:dMXsN5csJSSxR7/2+iaahdSmk4J
TLSH
T1501348AD67BD2D07C780D87D620E2FB05374D4C4991782C7797474556009F9D344D355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 c8038a21e00941350e9502194ae7ecc04fe5bba73bdc7200e5256f0557994618
MD5 5b560b52f474ad799d71d13cdb5bcd0d
SHA1 ea579a67eba18ab993fd85cd16988389a1b6e97c
SHA512 e5b4e2c09efdc5ec04bb4a34de5646d3b563553d609bc27b5e1d8ca0e38f09ec1b5df1ff637e73ed613125a41e6bc74a0cdb49238db5b07c8e66a278f2d8bd85
SSDEEP 96:AN2mL+/glo0DWFaBF0sPDqSCywNRjWWbVOLHKWol:qUC/TN3ONRfbScl
TLSH
T19C44C6F71919EDC7EB28CEB11C509238CE315A2A1D95FD37F52844B216465F33228667
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 4adf99f5bfe937a2495a1525080eaa67b1a133cbc186056c0433d155bd84a921
MD5 adc7c55ea735a12291b55c5317a3a2bd
SHA1 5b616fb148ff96cacea8f40186b593ba5322e4ad
SHA512 d78ed5a71a5b4c9fff9fa9ba1502677eaf163a0e5615f4ce7b2b24341023234f4e8b24dcf157cee43aacf0fb3590ca76adb16e78ab2c6f7a3ce672fb0236d093
SSDEEP 96:nGaFWJo9ADGmlYVnBvlSooAxQzaX98z7jJtMu:Gvq9HmlMBvlSOxQ+N8XjzMu
TLSH
T174257D165C0BC9CAD1F84272AF88E5F8F2F88FABE1CB13E118A0C2C10541956C6A7D6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 ce48f21fb8743cd70ada164d796c4d92ce06664034bf2591b03b09cc2de71581
MD5 5e9858d1aa9d0f7b9a9c1162a6d91bff
SHA1 1d339ee2ddacd91474c760c5365a00fe1218fd8e
SHA512 fe8123e84f85bf29eb8f6b57e2cbdb07c79f4347508817d981bc1c60da0f0f9e183e53f8fa93269c5b480b39b612d6da36d7a05953d3071c6542693c0b8970cc
SSDEEP 768:8VTUfDPLSgcRUv+6Z4IfDPLSgcRUv+gX/K4T+4x4QU4O4O4c4lUfDPLSgcRUv+Nt:RZa3sifL5R1
TLSH
T1C8164CE31E706583E6C5EB70EACDDC29BCF422419897E9D2A11642BA75E1FC527800DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000002
Size 69KB
SHA256 aa9ebea13743f59a883deb50b1aa3cee79445c26865d8691c2f4af9f67d20f3e
MD5 d06a9d66f08f8137312a84a034486ff3
SHA1 69507564f5063ec0cd1e3dddf0ff829a01a9f1d1
SHA512 3d2438726dfa758301fc3d76fcd9210ced1cdd206eff02ca7c93275154352f94095f93d43943de4194d865495ba7c2f242439ce17fb1199193f37d65f953fc40
SSDEEP 1536:Yor+MYgZu+Kwdf5oVgUThTCqkTpjL8gtxRFL8vh9QXXijpXmG:Yok2KwPoVlToqWpZhQvbQXsx
TLSH
T17F6302775A9C7C3D3E6E60EFB5FCEF2B41658FC4A216D64A414022EED4068CC6141F92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000003
Size 38KB
SHA256 1d39335bcc92df6017b3a1b2c0ee549a3cbde2d3ced0b09519a043d38a8bec30
MD5 356eb2db86a3c20d9f12ab52423b7030
SHA1 2faedf35f5b49a4d4a15316641990498c2358c6b
SHA512 caa693ae790cb8298723e113709d3f8bbd7ede64ccfaf25c445f9092040dfb61e14796ba5c983a801b05502763a33c030c1a6494d0e79fe351708879f68e1fb2
SSDEEP 768:gEpDNzk8U9Yip1z6CK+fMSqYc4l5q+GrMV1H/1d37gkVKIY1JCEeDP3396d5dIyZ:TpDOzB1z6CDfMLYugV1x5RY1JCEeD/S/
TLSH
T1DB03F1877A25AB2E99FC4EEA1C9FA04F5821C5DEC3EDA5CB0C07F54241A123654DAA03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000004
Size 35KB
SHA256 07b05a840e87153ecd12a39c3e6dc59ab6d9df5c879454c8a5a2d4eaa239bbbb
MD5 033b8fd6489c6842345c29872318344f
SHA1 13c4dcef7b0b9e78c2ef8f3b6f1fce8de383fea0
SHA512 8e57a5c2f6d5449067c291175c2819328b806b2031e3329b251aa90825d22ce68a345bcd37d9ac495994815f445a77d20b8caa4100af2534f1ecd9b475edffc0
SSDEEP 384:a+yErQ/TJpJvqOsovr2vokccHaLIiq5EEK619Bg6MTjEdW9XRp4naJiP1h3MooUr:oE8tsU6rjZK6d+jEI9XRpMYa/XXKNpK
TLSH
T15FF2F2CF3FB4509B86478835C96E136BC18746CE50EBE1CE3E91976E5E2065F0A81771
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000a
Size 49KB
SHA256 119c7e96573ec0bd2efe12e2edba6b5cd5e6e2f72fa9a958d5a9b60894e8b2a6
MD5 388d1030029b6ab893f081bf9c47da11
SHA1 68d85ed88ceb561f6dba29b257f646b628488468
SHA512 bd8beb3f1f08ce259521a3634d226cda95cb4dabea674d35b900512c978f2e54ed1fb5a231c77582a1e1c55c61f6af360588469e666ae4c3f9491846a09a79b5
SSDEEP 768:hZUOUTHRf1QP09QLa1HOi/gtZr+CQ6fPidgdaMdc7HwnLcy/r69aM5uw9qhu4G:oZbx1QPq/cp+qfPauayPLxg7Ks
TLSH
T1A03302901734BC2A2C8B02C299DDEF214675012AB9D75E1EBFFDA4F581C68A564C163B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000b
Size 221KB
SHA256 5f1efdb34d8c30cdd18d0cbeaefa82306461d4cfa6b67d732c9784555b22b103
MD5 2ebced107c133e918f7f5ca900069d05
SHA1 d5e99d8841d8769c6ea4663d8c8fd3f26021e3ea
SHA512 f8c18c4c8ada361f7e6143480eb57a72f3a55bfcda7acc588ec50bedd7125e195adc972adf0a2834ca1a5217efa06613bcda05cd483f8e26161308777cce23ab
SSDEEP 6144:PbIPQSdSkByqKf5RPf5yCfsOWLun1htV66m:fS8kBeBRPf0Lu/rJm
TLSH
T1F52422B1A1BE6686DDB40C88644484EDFD8E199D8203F3E3787C953434E97B24ED477A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000f
Size 50KB
SHA256 d79259ae4f662274621f97c534ba5997f11697074bece919681a7418cf6cc30e
MD5 47b39a9baf8bdfa215d4ea09a2aced43
SHA1 202193b677fe826293743ef01397bb3ca4fa3c10
SHA512 c256e4d51dbe1fd0aa5070ed2e3e27fa0e1af2e5fc127b7bc22d599c44d693513a85186c901ae676f00505c776912a4cf3021058d3fc4a5c45c9753e2a897559
SSDEEP 1536:+9QvnGf9YDD0EN9t9RN+wwhhVfCKKQxXGQfRb:NPy9YDDff9RN+wwhhAKP/Rb
TLSH
T1DA330214460933CFD2646E3D34B5A981CE9A9E7AE0E9F56837E09F2A607093761DF60C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000010
Size 86KB
SHA256 a6f7baa13a5eea1a2b416cf9ff4a9597ae1baa1dc3bafcd73e0e4cec159811f5
MD5 de366f0b77d34e295478cd856e6dae2a
SHA1 b284267b3e014f09bac955ca564db8add26500ed
SHA512 5dd715cd7bae8834f177a6922b572d9370ba1d9b73e84739781464cd55eab12698d0fcb26256147abd6d4a6f659d157ef34625b4c395aadec80d349816834979
SSDEEP 1536:D6Jb1A7jABOr+DXtu7oQT0SEUqJ2CmZ84QE0wVJth6F/cAiFkIrRpFhh4:DMkpr+rUdT07BU4uFhs/tDgC
TLSH
T15583120726A9174645FF3E2F9C09978BA386AC66C5C11DACF2214ECB38F7754253E8B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000011
Size 25KB
SHA256 531e91672daf6063fd6be177ffbc47be83f7091cb8824537bef79bac20102f0e
MD5 9d23ecbf96471315bdda15e799bf1a60
SHA1 783505e687b300d1f9f51691c0cbd9f9ef475527
SHA512 9ea87e5eaad047ccee4eb90e603e0e0944fcbe56c09c33d91fe7ae58e226e668a6484ddbbad3632f10ed972efae93114cc25f08ed9eec6d10a57c9a16cf12ca3
SSDEEP 768:M0sY2oZb5o/PDS54I5BQOweAsU2lSrvBqwH4Hdcvqs:9lzFGG2Ijfj8TP3v
TLSH
T1EEB2E1833AD334B171B5E0A9609D4B1294382AAFF34E851AD9027FAB6496F111535CEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000013
Size 25KB
SHA256 5e4611fdb5c7906e74b744366efc4778029bd654117c564a285dba17d1183e12
MD5 960038e61249b8206edf905c44f06e1f
SHA1 4eade31097df53ddce9bca4f9d3c0829da38f827
SHA512 0d0c83d8ceebda95004bcc078334576462d9ae8f4536f7c882a13fd1770ca8fb6776149c3984bd177c07acf239bc0d5507e2a9a3617c63d972d0f75eab40ac21
SSDEEP 768:U6v1HTpbmOblQZkN4yU5+vwiZdwQUKBw9xGU+X:UAzpbjblQe+2vwkwQTsGvX
TLSH
T101C2E1C07FEA088D4A711A697AAAC9437189676EC8C43D4EF7C20167611F2DCF6C1D64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000016
Size 178KB
SHA256 0dce730051c3b1526526743fc0079505bdf5454b79f6ec1c1fb2a7cb26350694
MD5 c0254118e3ebe12378022bfef999912f
SHA1 8ac9051c56091acd2b31036d8cd37bcf2f36aad7
SHA512 2014dd6332c3b1e6e4691533e88e66651d227cc8091274beb7aead5766bee626d7332b90328b46c7a19a5874ce9d2db52436799af9ab1448e9aab7ae4139d636
SSDEEP 3072:f6pPcK94Pdr1Il6r0/2TDx3rIYZ5gX5GaShNqIXIzmp3YuYb8:fdK6Pxx0/2TDx3sYTgpGX5IzmpIud
TLSH
T1A20412816BD0A4C5342CF6C5CAAA33FC845955E4B2DE4C4DBA3ABBC90670DA7950EE43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000019
Size 19KB
SHA256 d60d307db85847b82b11288fe460505dc4068f49faf14688b67374d39e0a6f7b
MD5 96bbe1fa7c6e027e618cae0f28c99bac
SHA1 30233d6bcbdd33cd6c52f815efe7fb1d39625ee6
SHA512 b53593fa3343dd6965e9b62ecb8cedcecdd278ac72e6ac9615b44b5d26cb989a2d06389083db0bd66cedff3303f362fbb879ba7b38eead6d45960b891af7db97
SSDEEP 384:x3rcp/4YBntISYT1NRTahSuoW9gkT0ID47crELVwSz4Kc2L3yaFA1qU424C:R6DRmr+hgJbI94p7y7qh24C
TLSH
T1FA92E1C7E7DCF15D896E95AF266F82D1AB38753BC219211C64F490DC604EC116774B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\index
Size 512KB
SHA256 7b9fd9c7c0e5ce1c389239b09ebf20aaf3da2ed784cb139f12a0cafcf71dae6b
MD5 98cfe00118d44e46dd7a82b8b3d16c39
SHA1 4dcdc3f1dbaab97c7d6cc64db070bd8b6897d72d
SHA512 0bf37ba4df9ce4ce279502df9682187297c5ac8ff8cff7cf5092e3e1e678a976b253efcf590b1fa05fb0d0846a6e7b35464f37e682cc735d4dd69d55a1811a51
SSDEEP 3:Ls2l7l/lllnlElll8plMUmlllPllXp9l/S18tAsl/5llll/wE/2Ntl5Ntl+ll//V:LsmlnlM/8IlRI8qslTlllYE+NJEltV
TLSH
T1C1B4926D9BA05D12C7C005FEC4434B302378C400DACFC7439705D030A0C13905D4F201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 0ddf9fbdf8386407c6ef4bc379ea22a566b0d2976996712371a6d1a4fddd81f8
MD5 07fab2f4741d4e2dbcb3719c08cc278b
SHA1 2b5b16edba576ec45036ce41fe47f326fbcc6646
SHA512 984551cb503f2beaff2eff99ca7c133fae6365df87bf78228b7d6e173e13369e3ac59339b91d4507f43f25e676dc8520433a1fcfaf9a893d90237a6031309fbf
TLSH
T1A1A0029013F80A51CA928971B8219984D604AA750411531391D5448988BE2F5D105843
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 864B
SHA256 fbef419f2c7bf4534bc3ec3aa939fb625dd12d2acde23778aeb502cb5dd59b55
MD5 a290f3134c21c735a18755796d0fd539
SHA1 590ed3e2177d06f2f728fa40315ea85cf1003e0a
SHA512 6e0376b2652a091e941424f64ed53b0d41c9f8796c045bf66a2597d1fb0581e9ce195d00c9c03211b0e97945d57af74d37f12c0402691c9b89f212a3b25cb205
TLSH
T19E11490D80B0C241F7018A7815E2F62835BC5C88166FAE170ED5BD79A82FBBC15CEA46
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d9f0.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index~RFe58d9f0.TMP
Size 72B
SHA256 d497bf45245fe4264c8e93d4c2189fcf9a96360e6a8d3b310ec1bc60e19eee01
MD5 5d160b96bbaeeac9ca141c658c8af84b
SHA1 ea4351532b61fdc3dd8f8d22a8f4f9c5e6b9d559
SHA512 ae3d8bd97aa662e630bf331613b50f77cb26020175c5eecde04a833894766e25027617f791f3878f5cf7430b935373d71ed76aa3a4dfa03f4b65a81e90670410
TLSH
T13CA0025013A25245C69042F094A642847335BEA519231A22D1D174A98CA87755651847
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 82792b3ab2a8331db806989cc4b110cb38b89dd7e1ce90ca55f79a1641e7a2b1
MD5 5e564cd42b06403a66b69927e1ffddb9
SHA1 9252e3f63480ffd2454daea48bb98227627fe7c5
SHA512 4af42277546dfe2ca3466974497b11268859643584015c0409546e5f6e270592d3893429c78cec129cf31fe405c0a9876be5fe082159bd0f2dbb46f9a59a34ee
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\index
Size 256KB
SHA256 aeaecd784cadd9a32ec8d756bbc4a6da9103b1cd4bdf0a202de9051a5d54fc14
MD5 5bdfcf51b20bd18ea84fc5a8d3864176
SHA1 a9ee3c68e1ab9071206464b51bf08b5c81b36474
SHA512 7f57a665ca3fcfca400fd662996a630a4aa0a5035866579fd2606192ae3b5bb6e507dba486b58e51da4bdbdfab078a419f84b756f2e2a6851b3ffd4f477af91d
SSDEEP 3:LsOllllklkXlL:LsUlPL
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\000003.log
Size 114B
SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
MD5 891a884b9fa2bff4519f5f56d2a25d62
SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_metadata\computed_hashes.json
Size 5KB
SHA256 7470eb2b7d57e5ba2f6a2f86e2f94c5f509ff78d55a8b21361e4d6d115287b9f
MD5 e205387951d4b59daca72fd4371af7c1
SHA1 5f70a82c60144577a105cd6a144f2940b5cb1cd9
SHA512 600c8782592dfb7a32b4cd808abf4aadebebc6cc82f8c9aa4e584b5ec458094edfd49a636475cee7ddb80786cfc24ab1a84e0656f706112f353f89767a928151
SSDEEP 96:PbLBlwtH4ILhbGgZ1e5tc6vhEK9PLAe3U5buu62:TLBALhagTevc6vhE2LAj5buu62
TLSH
T1D7C130451DBA559B9F157B463D031812C80A6FC18D4C6EC7BE59E328F68891F02E3A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_metadata\verified_contents.json
Size 11KB
SHA256 27cb984ae94e6399b354a90afd1db4c76f99877c09721620401eec056c53cfb6
MD5 64010b5a93bb4d0d70405a54925f7501
SHA1 829dc158bfc24319e8ff034dbd277ea7bec6c64a
SHA512 cf5e6d67594ab33327da66319851c35c2dc40cb175aa8ee31fca183c235c094f728e73aabcaecf365b4c357f134d075a201febf598811bb5ac4626b711ff33c0
SSDEEP 192:RBG1a5Ma9+PqITEPc6R+ZdmOp+lbONd/jUmkD2mLLpPwcgT9QrWBlXnswXexRSJt:e5xn3Bol8U1EsOiSD
TLSH
T197327668CC4D708CBC56FB768B6A75769B48C9C9B14D2E1E13D34C603CB7A4948A30DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
Size 10KB
SHA256 965203d541e442c107dbc6d5b395168123d0397559774beae4e5b9abc44ef268
MD5 90f880064a42b29ccff51fe5425bf1a3
SHA1 6a3cae3996e9fff653a1ddf731ced32b2be2acbf
SHA512 d9cbfcd865356f19a57954f8fd952caf3d31b354112766c41892d1ef40bd2533682d4ec3f4da0e59a5397364f67a484b45091ba94e6c69ed18ab681403dfd3f3
SSDEEP 192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
TLSH
T13B327DA05F9EF1DB9F9873F82F132C12A8564B518A95E9647F90DBC5B38D20F520243E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\verified_contents.json
Size 7KB
SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
MD5 0834821960cb5c6e9d477aef649cb2e4
SHA1 7d25f027d7cee9e94e9cbdee1f9220c8d20a1588
SHA512 9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4
SSDEEP 192:RktDNJ2UzsL5KcASyoH+CouKP/iNGRo/oRHMIT:AZQflcsU
TLSH
T1EBF1A568CC5D758CFC56B77987AA36768B48C5C9E14D3E2E12C30CA178F6A4888B30DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Favicons
Size 20KB
SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
MD5 198e1617955c70ad9263e5ae041f3c36
SHA1 623233da85a56e3b75fbd55f5159d83f764db270
SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
TLSH
T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\History
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Login Data For Account
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 3KB
SHA256 d722e1ad2eb5c5aecbe811283b94b9c382eb9e2c235543c5bb7b5d1521b9617e
MD5 622247d2c17405360c196fde39bf5c18
SHA1 8131bbf9b047d99ea688a70462c537288af8b6de
SHA512 960c79091032f217cfac42dbe3e71d6e4373fd70bf111562888b63870c79f24e66f92c4e090ed9430f90b906a5b7214302906df6535c0aef27cbe7acb95e666e
TLSH
T18471ABF783E8862D992191F0EB152E2FCE6A0924535C3C6AC8D5AF5753E6871E200A5E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 13KB
SHA256 f2732bc69ad1825aa8c987940ea93104cc523affd68bfe852679503347fe1910
MD5 1f0f5b3625d691baf8213e13f4b3bc3e
SHA1 cb316f6e305b58804ab58e7c6ea175c0d26907b0
SHA512 de24c9867745bffed7260decb5ba88dea2f92d6930ec4b7978dda953d78199ec528c49346e4d475c11e03a9dd029f38ec4d2af9e6db9db30036eb821c4d20e1c
SSDEEP 192:GRXHn3qJ46v7spAPRp229AHsb+WNnv32KmvbBfGLyEPyIsnAUge:GRXH33WgUX92wP2KmvtfGpe
TLSH
T11752C41DB968797B5CDAC219F925B793E7F61031A0C02E84E6FC8A1C14CBACE7227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 12KB
SHA256 16ff9adb52669365eb1bef84abe6c4c55fa040d1af99cb7437d9f4473ff07d5b
MD5 2caa6d95b787b19ad17cf9525c019482
SHA1 47eefbd6a577651e538cbfc91a1d5ba470afc4f8
SHA512 c37118898bfffa5e56ecca5fadb6271ffca2169cd71ef2d7f866603e23b30cb97a03bd5a1f19adf1e81e9f0a4d10184ae1bd5e1c6f3cd5c235eeb6e965694569
SSDEEP 192:GR34YY7VkCV3HHu5Av7spAPRp2Axl9AHsb+WNnZaSwoYm/zO0kwHaBVyIsnAUge:GRIY2kCV3H2cgUXJ2wE6YAZnane
TLSH
T12C42D52AB924393B5CDAC22AFD257767E7F6103560842F88E6FC8A1C15D75CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 2ade7ad8f15eccb025798893f007bc3a04679504411bbad75e4d1f35cf47a65e
MD5 40c4021f7a23fc1b361904d0519eb714
SHA1 eb811f03ded3cf26dc320980307be2b2f9335df5
SHA512 6cfd57cdb92272641c9ad007872cf25c11579c5bfd44935b988559b5e0cca1f4eff976265ff2c2b002f5176af6c8c21961f58e8fb108fcedf4370f9d640186ff
SSDEEP 24:TLf91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fB:T79aw/aHLopFMavU1iB
TLSH
T1B392AD8E1F343620C0F44B33F9C249972E7C212C93637A89EE5410F3DD965ABF50A5A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ServerCertificate

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\ServerCertificate
Size 20KB
SHA256 55c38a40a44105325365ebfb7615e7d38e55d7d02853c1002fa2a9ae98974140
MD5 c36580cb88a6268715ad1c3213ee3e62
SHA1 0e829bd8521137f80ac1b6fc9439c2622e3c89f8
SHA512 268e6d3593d346f2e9289d3b1505282d8bb684f4a829fecf1d807a04645a93d94f4267a50bf99df54047612023388a4afdb809781ca362581ee1e8a7826a56b4
SSDEEP 12:TLiNXB+TR0wfQQ+aoMllfIHFxOUwa5qgufTsZ75fOS:TLiZkZC6UwccI5fB
TLSH
T1D492468F9F843935E8A947B9458706E00F7AD73E8382AD6352E848503F90D8081BD45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\000003.log
Size 3KB
SHA256 c76dc4accd09d61e734b161a786cd0d6b433c807659be152dbc48676abb230b8
MD5 285c9dfffbb848b7113f65f180927a76
SHA1 00d0dbdb73681120ac18c456ba1aaabe9c791f12
SHA512 8da5b33a950ce22481a35142bd2160c8f2ff40c083bf2ceeb4ca0c2475aed4f772086353388901497c5f66eb2bac0ca42851213c6b67d8fdc1547edeeed88261
TLSH
T1FD719C6EA909085EA46C4937CD79571B6F6DCF1C2BFE3727B9DE8A0409B495701082E3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\LOG
Size 333B
SHA256 c4e91c4e81692311d67632a9362acfaa12ac64675397f4085dc58c63fea312aa
MD5 e889b56632cc6d0ad07ff25749d85495
SHA1 9f2d250561bc6b40d8ddff902a38453cdd908916
SHA512 e12ef762e80d5ea3847c698e20d7b1ea7ed47397e549174677c0d5cfeeb05d5fa58364b9e000b7d80f0b3a1dee1ca173dc6ceebfab22f84b9ba61ac15a6c4267
TLSH
T14AE02C20A5EDCABEA06E82930AB0F30EC7E4B80BD2CC3C425F48CA4811C680CB0E1780
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\LOG.old
Size 293B
SHA256 5fcd95736f17165fd724269ad22dc059fc4ae37cc37db9fbee6360258ead1eb7
MD5 940b0acdc4927f635a72cbdb9274814c
SHA1 86c0a852c25d2dfaa0b05618264a34ad9df52240
SHA512 6127f2fa7ed27f1e97c8dfe49558f4ea61a1529c5f784b9e90aade122e6a3f5bfb12e7a30d9af5aa7386d2c6c9d5f7c64e281a7469f93311b48ea6a506ac275a
TLSH
T132E0C25196C2C5BE10A980E30A71B30E8EECB04ADADC39060F62EA4810CA84CF4A12D0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 f8e8ca6b99f870c2de0f5155737b669faa142cb7457e4849edd22ddb6701ed9e
MD5 532f97d62d26f926d61a7578e307d76b
SHA1 9f3d87062e6684ee339b5888a78300450abe7182
SHA512 f4b4921574ea05c05093699a92e3051ede85591cf7b4991bf591e765493fc62b9eddafeb462882c53bd87f60b14631d12dd8aaa6bf56fcfebcff9efe0119b39c
TLSH
T1D9B012508001D543C14302F719C204C83568EF20870E170163E0BA71A8266D14014160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d339.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d339.TMP
Size 96B
SHA256 2090dda92da16c5dc8918bdba6f9a8b7f0627aa78e84c4e9c8aa83aa6d6f5709
MD5 2b82b648c06892642a45ab301b672851
SHA1 6f10b737d5b0311d583e03edb2c9627b4d252974
SHA512 cb5b998a8712ae237fe610723b0ad3e3a9c1981e83c81344511f95e596bdf2cdfaf9e2f542e3fbe9ee50bb2a1a8789c51e8bdf543c7e0ca88b78c3857ca2350a
TLSH
T1D8B02200C022AA02C00203B0288080C83020CF3BEA0302AA82E03B3ECC22B200322820
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG
Size 345B
SHA256 a1744d0917ed794846f79665c54b6739b7c4d3aa8e0e4b5babdd74c20d985918
MD5 89be0bf418bcd14bd9ae6cd158827473
SHA1 87ea6d647628d3fbd1b167fb83c171feadb60eea
SHA512 17a4287ee6bdc28824abe3327cc2b77361aece4609184dec25de97fda57681247c559376f36a2300689153907ff5819813c1e36c4710b09e105c6c2cb3a9bc12
TLSH
T1D8E02030A5CDCB6F5099519766F0F34DC5E1B806DADD64715F04E54463C7D48B5D1B80
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG.old
Size 307B
SHA256 9d3228b5dce17d0e42fbb971eae256462983a6cbca2aa541606e81ee701298e8
MD5 bb5e5ddad1faee6f513f86aa6f0d681e
SHA1 f58f0892f2288cc65b2b310311ef34704c43ef3b
SHA512 ad0f83f315e08df62e1f867a1b3c7aa294866665ef8a0618022db9f6ed033633fc96903b0bbe100c526b54c4ee3245f9c272bf8f2fddcd6c91f0e23dcf003965
TLSH
T188E086256ADAC66F115990EB72B1F30E8DEA6005D7E915161F15F944228E84CA492780
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\index
Size 256KB
SHA256 1d5111f81dc2922e148b790b7c8281c9f31d1e9b20ab7596c26239231190a6fb
MD5 1009338c03560655bc22b554e23eda93
SHA1 e85c828589a53c428cc80c1aa5cbb8b09d5e765a
SHA512 0d96c43508ecf64035aef332c80ed396c7596e5d0147dfc6c8472cc9ac2b179b8ac252236ca5124d700214e380364d0696e8852580ed70178e0099b377945714
SSDEEP 3:LstlNllkll/lg:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\db
Size 44KB
SHA256 b08af7745c49533422c5afb2e683b61ab1b025a2ef13f892321a2cd1383fba79
MD5 ad4b0d21f32cbccefd98c28e33a59a6e
SHA1 1850a90ed7ec61efca181fcc35927a2888549e6e
SHA512 0bc8a37f441ce5cbb0fe4ea3f766f741cc6424ac4274ffa42fcf507c8fc7154115375bc669449da02d8b57a19227483814357367cc8611cbecdf247d7b65706b
SSDEEP 24:TL6BgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg8TPq81fBG:T1OIy4m1b3fbUdeqSB
TLSH
T16B13BB0F1E187551D1BD0236E9E64E6B2E7E204C9B8369D125F01AF24DE211C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\000003.log
Size 2KB
SHA256 a70423c48119f29be0127edf68dbffe2a325b9955a3462f5d6224af84ac397ab
MD5 903e512bbf5604c333ba41266a37f2b2
SHA1 03e0040d85a348e1e8e5c1d0c2369ff26a2cdb8e
SHA512 7b6bb3a5296220d5dba5703c14b057335669de57967ab8ea9ce4116c7522f1097f8c990bd1bb4926350f2ac4203b71c2606c45d8709d32ee76a561ee05a874d4
TLSH
T1FE51D1F37D015435FD6398FA11EA385CCE6B930E18A8D3E5D3C65D31204395AB41F2A2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG
Size 324B
SHA256 9d2a492a6bf4aa52a01e28fca3d341fdd2f0519f2e87270461e3c2d0b07dd470
MD5 39c82a9ef3f474f14893a14682bb857d
SHA1 f2af782ca00f7e76f07d23618ed44b1d2bf0d630
SHA512 1bc4bb5982b017bda0e091ade9e9f54dccc89b9024ec100a7885e10e4322192339757027b6ed8a9551c211c4e355f3eb4623cb578f683cab1d6d68dee5b44aa7
TLSH
T15AE02670A5CCCA7D404CC18742A0F71ECAF8BC0B93CA35C28B0890446982008B1F1BC0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG.old
Size 281B
SHA256 ff5d220b4cf94300d003b729a7d970461030169567bf7e5a3624a23368ce4019
MD5 0d5a563ab539651bae532fe0ebd33af0
SHA1 304289978ddc1580f0e9eff094f35226b6758d86
SHA512 18c3ed025bed3173292a5b6ed2b0e6f2edb640f95cc1290f61877b5cbda292ccc99c4086a136f9a3aca16d00231a27cfe1c8c702b5d03c9a017f7d31612aebed
TLSH
T16DD02BB596E1C6BF4458C0E646F2B74F8DF8A804D7DA3A0A4F06B88831CA44CE4B03C1
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Web Data
Size 138KB
SHA256 a58c4279f5c1f3166e39b966446f0336ecf1de7e0ba1a711429b5fe8415111f6
MD5 cc9ce531c902cbcaf88e32742ae4a3fa
SHA1 07227dedeb8fc07315b7b61aae8f38069a00a891
SHA512 b6c930358b9942a3d3ff0aa63b5f1cff3cf17c94b53a74e5eefb5fe5b26d07fb85b2a840c062adddffd4b13d6a16639b7f9b2a35ac710840c4b6ba01bfac819d
SSDEEP 384:zeuvBnhJsueMEGvIW1DcP2OzDfjVumJnSjG:FnbZeMrv/hGtz7ZnSy
TLSH
T17CD3854B3A747002EDE59A7258E050BB4E3CB16D8F15A5D5387620688EF2863B23D4FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trusted_vault.pb

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\trusted_vault.pb
Size 84B
SHA256 b87bf305aafae1f1ec7dd947176c9529b2a9cbd4a3bf296fce25fc009e725366
MD5 85d7a7c1e12b26cd994cd41e587629d6
SHA1 bf53173aa4b19a217eb542951dbafe3ec3506810
SHA512 b3562e0466d9e218e96be44a01feac567e2843f61d1fe5201a5c7d6eef0e714cb5d7d8aa380dbe4f341aca2c46e615f3bfd29621a4898cb8e027cf1155b8df83
TLSH
T115A0128266008642461DB130C80B4C4018311C5A0B34400111F36EA362D5900C541440
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 eb22822d0bec8d1edf3a45df3dd4e8d54f18cdf9f8d15f8d3d03c64bb429c3ac
MD5 77d69d94fe548022a382d5a77a7ce07d
SHA1 14c8438a2d01ecb83b63576e5a80ed88d767bbb4
SHA512 08658de51df6af453ab98bb229b8eae3a95424a9f2f8032b97a55b65b75422f213662bca03a3ec5af92f9d3610a32c84628c35681fbcc915066f723bc8ac4a4e
SSDEEP 1536:eLdP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNGZ:S1++J3qUQm08KMWF0bFTcVHr6z7Z
TLSH
T17D9302B9991E7C3963ABD3E6A0079CAD4CE39CCE1614557C30C75F0E14BA393A35B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 887994b9ff1ea331b40bad1fda0fcac99bcd20868a92d5ecf8a7978abc1f6af1
MD5 92c22893bd2cb0f603def540c9bfab5b
SHA1 569478abbd54a24273b34e0a92af5856b0ca9d03
SHA512 d716a73c16913eaf5f3c3e64c3aada879c37af8c835d56262dc8af6e681cbb06e8a9c00ee34b114e59b898f45a082fdaed6bdf1dc0d61b74f4ff7285efc74f01
SSDEEP 1536:4LCP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNxZ:go++J3qUQm08KMWF0bFTcVHr6zgZ
TLSH
T1019302B9991E7D79636ED396A0079CAC8CD3DCCE151051BC30C76F0E14BA3A3A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 8b08f7246354162ff543f87f3915ad7cb7f13dc586163ca2b41631bf0dc6a3db
MD5 264e24165a711f5a8df0c85804079d74
SHA1 dd9176291a74cffd0de5d0f137c934e46a0e2621
SHA512 beb958a9e08e8a0f5f96c793cc35e2782f298f5dc62070a4590e8a1b2ce074baf422feb547f2858566464571158305d6101d82d0886bc3d004a5fd4df07d0b9d
SSDEEP 1536:ALTP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNEZ:oL++J3qUQm08KMWF0bFTcVHr6ztZ
TLSH
T1799312B9991E7D79636ED3D6A0179CAC8CD3DC8E151051BC30C76F0E14BA3A3A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 27952e3d4e39cb7687d46b6663144c426feff0ee26d8c666705f6908fdbe8fc2
MD5 8e0194c0d3f6dd1ea971d3e3f74582b5
SHA1 6fb5dcaa21284fa900f5083347dd28238a50f10d
SHA512 0805e323cf2ccc851122d4533f379d4eae8c11a49aa4fd3ab32af3770cbb1c7021cecf1dce0bda6aa1ec5c16ca039d96482cf77f73dcb5261690864cea73a8ba
SSDEEP 1536:bLdP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNGZ:v1++J3qUQm08KMWF0bFTcVHr6z7Z
TLSH
T1F89302B9991E7C3963ABD3E6A0079CAD4CE39CCE1614557C30C35F0E14BA393A35B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 01b728f5a1428d2ca4badcb215e519b3ad9e51ce0d61d5c45d8f0dadc5f2b66a
MD5 4b78ffb786153aea7ca447c8ffbb4971
SHA1 dd61bf4987f2e72d0383a7756f0714f3bcb4cf94
SHA512 d9a901f9862b48cd84e2a8de2bcc006a9c77cc635112982607f182e6e5e7097f2cfc4c94bfd95b2904a303f7bf30df8f9a864d758cb9c444ca5f610a9a8277ab
SSDEEP 1536:bL4P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNGZ:ve++J3qUQm08KMWF0bFTcVHr6z7Z
TLSH
T1819302B9991E7D3963ABD3E6A0079CAD4CE3DCCE1614557C30C75F0E14BA392A34B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\ShaderCache\index
Size 256KB
SHA256 3dd828a39f0567bb048c0257e380179da1b8768253e456241b4ff01e67599c1c
MD5 b12087a0a0b03f6905f6aa13ba2480d0
SHA1 e79522116e1c95e9c07053d0644154ae3a53523f
SHA512 68641aafff6d4062c5a65b559f1b5cdc8bd2104ba247c76c7fe69027f99c8e2b101b36da556f2a17cfe91c3fb62ad44c84a7ed995255fa179b53edbced462734
SSDEEP 3:LszllklkXlBwi+:LsJlPGi
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\segmentation_platform\ukm_db
Size 48KB
SHA256 7434597d22726641acf6c1817319992b54ec582f0a7474d28dab085fe2f3747e
MD5 a9ae40fb5b25887e90a305a17a7d352f
SHA1 81c9a3d4ea776de2605c894f759d773e2eee77ed
SHA512 dab18020ef0e0506b4f0f2fffe09c502aec24955ae1c5a3072f21dfa1df1f98be0a25bbe1953fa2c0ac3f6cab3b111ceb0f5e81b6cd9a7bf217713e45acd3389
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0JQ:TkkhCU2QB2zbBxx
TLSH
T18D23490E5A6821E9D4D9193EFED34C517DBE0F588A2B78D205E00C768CE21EE553E4BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1032-0-0x0000000001530000-0x0000000001594000-memory.dmp

Download

memory/2084-1-0x0000000003620000-0x0000000003684000-memory.dmp

Download

memory/2084-1217-0x0000000003620000-0x0000000003684000-memory.dmp

Download