df3080a4f755f6543ff1b92f2ebf62b48ee862f1c64759738b507dc8b340ca31

Analysis

user interaction
yes
max time kernel
960s
max time network
963s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
21/04/2026, 17:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
addicted1.mp3
Size 8.3MB
Sample260421-vtdr2adv5t
SHA256 df3080a4f755f6543ff1b92f2ebf62b48ee862f1c64759738b507dc8b340ca31
MD5 7abd03be3a7c3d13c9f1a4cbf42a6ded
SHA1 38b7d54f6e12d7325bc9879d23bda31e3475c467
SHA512 7f7c43747898d785fa25e4e9945d0e3d8c971b97ba7d815e1ad9e0ea9192c02d9dd5e35e180909f3182141a8a3c38b4ef35423552e77804bb90bf0094e508dd8
SSDEEP 196608:vz+95hnpFPvmYImlkgb12BY+VTwgaVBy8n2jj:vz+Lh/vvNlVkak6Yxj
TLSH
T1BD963305DB18649F84C823746F5A4F75D4A7EF98BA4532CEAE74BB831D7122B3BC2124
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	api.gofile.io
40	api.gofile.io

Drops desktop.ini file(s) 7 IoCs

description	ioc	Process
File opened for modification	C:\Users\Public\desktop.ini	wmplayer.exe
File opened for modification	C:\Users\Public\Music\desktop.ini	wmplayer.exe
File opened for modification	C:\Users\Admin\Videos\desktop.ini	wmplayer.exe
File opened for modification	C:\Users\Public\Videos\desktop.ini	wmplayer.exe
File opened for modification	C:\Users\Admin\Pictures\desktop.ini	wmplayer.exe
File opened for modification	C:\Users\Public\Pictures\desktop.ini	wmplayer.exe
File opened for modification	C:\Users\Admin\Music\desktop.ini	wmplayer.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\K:	unregmp2.exe
File opened (read-only)	\??\V:	unregmp2.exe
File opened (read-only)	\??\E:	wmplayer.exe
File opened (read-only)	\??\H:	wmplayer.exe
File opened (read-only)	\??\I:	wmplayer.exe
File opened (read-only)	\??\O:	wmplayer.exe
File opened (read-only)	\??\W:	wmplayer.exe
File opened (read-only)	\??\X:	wmplayer.exe
File opened (read-only)	\??\J:	unregmp2.exe
File opened (read-only)	\??\O:	unregmp2.exe
File opened (read-only)	\??\U:	unregmp2.exe
File opened (read-only)	\??\X:	unregmp2.exe
File opened (read-only)	\??\V:	wmplayer.exe
File opened (read-only)	\??\G:	wmplayer.exe
File opened (read-only)	\??\B:	unregmp2.exe
File opened (read-only)	\??\E:	unregmp2.exe
File opened (read-only)	\??\R:	unregmp2.exe
File opened (read-only)	\??\Y:	unregmp2.exe
File opened (read-only)	\??\H:	unregmp2.exe
File opened (read-only)	\??\I:	unregmp2.exe
File opened (read-only)	\??\N:	unregmp2.exe
File opened (read-only)	\??\P:	unregmp2.exe
File opened (read-only)	\??\B:	wmplayer.exe
File opened (read-only)	\??\M:	wmplayer.exe
File opened (read-only)	\??\N:	wmplayer.exe
File opened (read-only)	\??\P:	wmplayer.exe
File opened (read-only)	\??\A:	unregmp2.exe
File opened (read-only)	\??\K:	wmplayer.exe
File opened (read-only)	\??\Q:	wmplayer.exe
File opened (read-only)	\??\G:	unregmp2.exe
File opened (read-only)	\??\L:	unregmp2.exe
File opened (read-only)	\??\S:	unregmp2.exe
File opened (read-only)	\??\A:	wmplayer.exe
File opened (read-only)	\??\J:	wmplayer.exe
File opened (read-only)	\??\L:	wmplayer.exe
File opened (read-only)	\??\M:	unregmp2.exe
File opened (read-only)	\??\Q:	unregmp2.exe
File opened (read-only)	\??\W:	unregmp2.exe
File opened (read-only)	\??\Z:	unregmp2.exe
File opened (read-only)	\??\R:	wmplayer.exe
File opened (read-only)	\??\T:	wmplayer.exe
File opened (read-only)	\??\Y:	wmplayer.exe
File opened (read-only)	\??\Z:	wmplayer.exe
File opened (read-only)	\??\T:	unregmp2.exe
File opened (read-only)	\??\S:	wmplayer.exe
File opened (read-only)	\??\U:	wmplayer.exe

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll	svchost.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll	svchost.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3408	1592	WerFault.exe	79

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	wmplayer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	unregmp2.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1728	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134212655164818614"	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2122505878-652277452-2375749442-1000\{E5FE7808-5394-487D-8F41-981175F52442}	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2122505878-652277452-2375749442-1000\{1CB4D42F-AEDA-44BB-8769-C87B0AEBB2B7}	wmplayer.exe

NTFS ADS 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\ski2.mp3:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Webstore Downloads\cniepokodkjamnddaopncfammpdmkanj_51958.crx:Zone.Identifier	chrome.exe
File created	C:\Users\Admin\AppData\Local\Temp\scoped_dir236_700273812\cniepokodkjamnddaopncfammpdmkanj_51958.crx\:Zone.Identifier:$DATA	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
1280	chrome.exe
1280	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1592	wmplayer.exe
Token: SeCreatePagefilePrivilege	1592	wmplayer.exe
Token: SeShutdownPrivilege	4980	unregmp2.exe
Token: SeCreatePagefilePrivilege	4980	unregmp2.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe
Token: SeShutdownPrivilege	236	chrome.exe
Token: SeCreatePagefilePrivilege	236	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1592	wmplayer.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe
236	chrome.exe

Suspicious use of WriteProcessMemory 62 IoCs

description	pid	Process	procid_target
PID 1592 wrote to memory of 2716	1592	wmplayer.exe	80
PID 2716 wrote to memory of 4980	2716	unregmp2.exe	81
PID 236 wrote to memory of 2616	236	chrome.exe	87
PID 236 wrote to memory of 1728	236	chrome.exe	88
PID 236 wrote to memory of 5044	236	chrome.exe	89
PID 236 wrote to memory of 5044	236	chrome.exe	89
PID 236 wrote to memory of 1176	236	chrome.exe	90
PID 236 wrote to memory of 1176	236	chrome.exe	90
PID 236 wrote to memory of 3568	236	chrome.exe	92
PID 236 wrote to memory of 4412	236	chrome.exe	93
PID 236 wrote to memory of 3568	236	chrome.exe	92
PID 236 wrote to memory of 4412	236	chrome.exe	93
PID 236 wrote to memory of 2888	236	chrome.exe	94
PID 236 wrote to memory of 2888	236	chrome.exe	94
PID 236 wrote to memory of 3704	236	chrome.exe	96
PID 236 wrote to memory of 3704	236	chrome.exe	96
PID 236 wrote to memory of 4916	236	chrome.exe	97
PID 236 wrote to memory of 3212	236	chrome.exe	99
PID 236 wrote to memory of 3212	236	chrome.exe	99
PID 236 wrote to memory of 2340	236	chrome.exe	100
PID 236 wrote to memory of 2340	236	chrome.exe	100
PID 236 wrote to memory of 1724	236	chrome.exe	101
PID 236 wrote to memory of 1724	236	chrome.exe	101
PID 236 wrote to memory of 4920	236	chrome.exe	102
PID 236 wrote to memory of 4680	236	chrome.exe	103
PID 236 wrote to memory of 4892	236	chrome.exe	104
PID 236 wrote to memory of 4424	236	chrome.exe	105
PID 236 wrote to memory of 1280	236	chrome.exe	106
PID 236 wrote to memory of 992	236	chrome.exe	107
PID 236 wrote to memory of 992	236	chrome.exe	107
PID 236 wrote to memory of 4528	236	chrome.exe	108
PID 236 wrote to memory of 4528	236	chrome.exe	108
PID 236 wrote to memory of 3352	236	chrome.exe	109
PID 236 wrote to memory of 3352	236	chrome.exe	109
PID 236 wrote to memory of 2104	236	chrome.exe	110
PID 236 wrote to memory of 2104	236	chrome.exe	110
PID 236 wrote to memory of 720	236	chrome.exe	111
PID 236 wrote to memory of 720	236	chrome.exe	111
PID 236 wrote to memory of 1724	236	chrome.exe	112
PID 236 wrote to memory of 1724	236	chrome.exe	112
PID 236 wrote to memory of 2376	236	chrome.exe	113
PID 236 wrote to memory of 2376	236	chrome.exe	113
PID 236 wrote to memory of 3160	236	chrome.exe	114
PID 236 wrote to memory of 3160	236	chrome.exe	114
PID 236 wrote to memory of 4028	236	chrome.exe	115
PID 236 wrote to memory of 4632	236	chrome.exe	116
PID 236 wrote to memory of 4632	236	chrome.exe	116
PID 236 wrote to memory of 3352	236	chrome.exe	117
PID 236 wrote to memory of 3352	236	chrome.exe	117
PID 236 wrote to memory of 4084	236	chrome.exe	118
PID 236 wrote to memory of 4084	236	chrome.exe	118
PID 236 wrote to memory of 1032	236	chrome.exe	119
PID 236 wrote to memory of 1032	236	chrome.exe	119
PID 236 wrote to memory of 1684	236	chrome.exe	120
PID 236 wrote to memory of 3020	236	chrome.exe	121
PID 236 wrote to memory of 3020	236	chrome.exe	121
PID 236 wrote to memory of 4380	236	chrome.exe	124
PID 236 wrote to memory of 4380	236	chrome.exe	124
PID 236 wrote to memory of 2608	236	chrome.exe	134
PID 236 wrote to memory of 2608	236	chrome.exe	134
PID 236 wrote to memory of 5828	236	chrome.exe	135
PID 236 wrote to memory of 5828	236	chrome.exe	135

C:\Program Files (x86)\Windows Media Player\wmplayer.exe
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\addicted1.mp3"
1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1592
- C:\Windows\SysWOW64\unregmp2.exe
  "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2716
- - C:\Windows\system32\unregmp2.exe
    "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
    3⤵
    - Enumerates connected drives
    - Suspicious use of AdjustPrivilegeToken
    PID:4980
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1592 -s 4292
  2⤵
  - Program crash
  PID:3408

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost
1⤵
- Drops file in Windows directory
PID:1104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1592 -ip 1592
1⤵
PID:1164

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffbf18ec728,0x7ffbf18ec734,0x7ffbf18ec740
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1456,i,13766329011883437097,10484483258002362734,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1972 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1576,i,9255585518266973589,11113829360550386069,262144 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,1044617743167725105,9000536641423981972,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2376 /prefetch:13
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3224,i,5375495514554099468,11933016717563598789,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,13861443422947167623,3298135083620948834,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4240,i,13680142197895597927,17069976999583280243,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4256 /prefetch:9
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4628,i,10641965835775064681,1259093044035131647,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,14836255173577720661,5525974530565213256,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5756,i,16490013736144114404,166191987737748135,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:3212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5852,i,4953524787678882786,8117173841164966612,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:2340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4644,i,13020053415872824720,16871957736439295654,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3544,i,2998950566043632103,2977909678246506626,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  - NTFS ADS
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4788,i,1681039847140538821,2703563418657622305,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4804 /prefetch:14
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3380,i,6032418184136084441,6646642981032560742,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4800,i,17081079726813949638,6335143431339719187,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4740 /prefetch:14
  2⤵
  PID:4424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4256,i,15373910403474452071,1928157460806290822,262144 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5832 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=876,i,7437237045833489644,178252990691785662,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=872 /prefetch:1
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5556,i,7719700434386741077,3401050935542019149,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5960,i,10936115559013997753,16225603473169902116,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3536,i,7215434635370418947,14125865857901768829,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4428,i,10312391610105781705,11550466125588002169,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4272,i,5486089989263402061,15615818715391173949,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6208 /prefetch:14
  2⤵
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4732,i,742736680416543490,18150834945751877689,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6248 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6040,i,13538038003754720325,7464467612675153298,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6256 /prefetch:14
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6224,i,7048381242002627008,3950899685972938480,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6308 /prefetch:14
  2⤵
  - NTFS ADS
  PID:4028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5940,i,3531907995364416832,12772493376016617798,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3344 /prefetch:14
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5960,i,5170604554596670007,2234754544550563719,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6368 /prefetch:14
  2⤵
  PID:3352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4320,i,9926000424302709638,13616146023601976895,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:4084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6544,i,17521471851293673787,13668709900668562391,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6560 /prefetch:9
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5808,i,16853865442549565299,4160980001632478575,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4492 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5700,i,3991802643453887790,6751437975022357354,524288 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6752 /prefetch:12
  2⤵
  PID:3020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6388,i,7928965590847965967,810538191102143454,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6156 /prefetch:9
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6460,i,14223507950302025948,17066047946736415001,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4692 /prefetch:9
  2⤵
  PID:2608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6184,i,804505057610157,9244990867324425747,2097152 --field-trial-handle=1984,i,13387566082024310253,16702864949943601453,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6972 /prefetch:1
  2⤵
  PID:5828

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3788

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3580

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4916

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004B4
1⤵
PID:1736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 b2eb120be90ce60710886259a6367e4016b5a32dd5628066159fd653e463c1b2
MD5 bb9703e50fd6dd6689c759f11927e3a1
SHA1 0af1abecf7e6ba2b6a51af1e45ef7803b6922cbb
SHA512 a8a7985dd70ab841bedece23507d51e549c6eaf61fd88299a364ceea12bd40300d0af9ecea4aaa96b283b251a71c477b02dcd9fd6d803b0eb6689bc0625493dd
TLSH
T17FE0ABAED8318C2745FC0B1960500342F39013AB2B50481F3A3C830C8FF2B2A45418AC
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 19KB
SHA256 353966f26acffade9f3b2e7aeebaf9d46f3526a655526d019eebaafb60f5e44f
MD5 226e68d7cf212030b7cb33ce1f37b570
SHA1 2c4830abcb2f594a36fdbfa94b171a2635071a13
SHA512 56e81a37ed7713ccf64e0b0f26b5bb55d8219dee7e010e196694bd30e8a07f10d4200a9c4f0f2ea963ae7c9e767cdb323c7d2043ebdd17da12ffbe69bf5bfd11
SSDEEP 384:JKP128cdAyW+JmPVOpH5H6BT8mpS44NvvbVul0q0qbL3bmfs:JKPw1dB+VA16BT8iwzVuKPqbzbmk
TLSH
T16292D022BC47322B799897F0707F67CB33DFD84556882AE6CD1F612934EA241D88536B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 24KB
SHA256 905da754c27b082668b740709b5124574ee5b8da05037d9b1960d15e92ef6d24
MD5 6ceed2cfd1ae3a22878d5d8f5774a563
SHA1 e113c1fc794a59b2acdd9424a5fe520824ace2f9
SHA512 14a3a10e2795a2a9b127ae7fef75999d5c095eb35490cbc64d244e1e4af5b888a79fb66861e53bad74970bfbcc1827a5f0b16f138a9fe81e8aa953e981f4bb96
SSDEEP 768:s4rVJK09o1rvmYD2cJh8CsWcxy2JEZY0s:RxJKXvScJhVs
TLSH
T182B2E1915380F63CD7ACE6D52839202066D1FB066DE66D3902A04F5A7E1F9AD0F1C7E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 104KB
SHA256 b774b54ad2904059a9972317f373476ebc0885a59a2a269e8c2ca6a72b8c98ef
MD5 a991f8176986faa79302df030e6558d2
SHA1 e49be055f681e2d28e46fa7b538f130517be1d62
SHA512 118003111116f036c8e07e4d0ee78a7bfb67fbc20994e09127ac72f69e9367787b6d23aaa1353f1ea91ebc15165d7278c44d3b2f2dca0d989126e0c615d8ecd9
SSDEEP 1536:/LPSSMABOl2Jyi3tuC89wvBuwa7Co+DPwU5JV98X6s86TvWALjqqvN:/LPSfA0i3tJHQwa7CxZJc95TvWg9vN
TLSH
T175A312811932C84383FC9D6F867D9A0CCAE440E14DB9D66961526238FB7FD31B6F81A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007f
Size 197KB
SHA256 049a17c52171ddb73bdd94b48fe0ca78f5ea67e302befb1e4364fc8474449337
MD5 e22fd9df38c163e57478f7b79cab08b2
SHA1 a6eb2a5f0a93c43f3144d23a4ccd974939a993b2
SHA512 8852c9220c84a1655bcd71253f828183d46c2df4c8f54bdae23c2bdbfa2ccb3ca68f67aac1465bb4196bd87faa0f0444a708b7af31e847334938fe5a31650403
SSDEEP 3072:YYxu2NyJju6g8/bJOOVIA/usqsdymsr8slWb1j6Dj5HfOsB6tT3xZw39A:1JafNBVHD8I1Kl/OsBQtc9A
TLSH
T19114F1D2226A1099F14773BE39CB5A40DAD16E85A51AF4E8D289FB2015FFE083F1473D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008f
Size 51KB
SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
MD5 588ee33c26fe83cb97ca65e3c66b2e87
SHA1 842429b803132c3e7827af42fe4dc7a66e736b37
SHA512 6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04
SSDEEP 768:VtCYamkOlFDUPktxoMggUfuuyDS2/wNsr9qdep/t0LDCzBr8VcdYM2YLx+jYRatF:/HamkonKVfM/ks9q0Nt9rnLZ4jYcx03+
TLSH
T1C83302F9E03A27AF3A55A372F131FB506455EA8C82FF4789E87DA3508EB60560F03084
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1f0c1c3ac0ec08df8c94eda02e752fa54232ea55685d0f25de4df286e6b0ddb4
MD5 aae4652e8a842662ef70db0e7d83332a
SHA1 7abee9a874207b9c245e1a5cab9b3768b17541b1
SHA512 482f07b3a4b25c089eff5e372c865f3c650b236f6fc0aed45e9dfda7fed204dc80ff1a46f4a9cd61501f057b936ff2f3e286f4ecf3e2371c0fd2a0365cfe04ce
TLSH
T1F581070AA4E6E344FF6915B252915DE668F70CB58A033B0FE1F4C16C76432EB103B368
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 720B
SHA256 0217dd551ee4339b8391704d57bd27c0ff1fb7125711929d7df5cdabb3c8ec61
MD5 44d9140a2a64171432d4d86fe7feb752
SHA1 acc8896deea2ff81f94d5447a7598b745a927d70
SHA512 b2cecae9e241669c6e9f7c3380128f56c312f9da37f2166551ca305bd87bb52931dea5659aa69b796b148fbbe9342ca76cc038ff6c474fe590c08eadb981296b
TLSH
T1C401552574F5D34AFF5C6BF893C5B6E070BB536003038E22A1F182BC981939718077A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7f6663a538d4f0c013e6c737aeba138148f169fb0b64a32e82a38c0187f8adb5
MD5 a6ca08abf83713f248f68a681fe1d922
SHA1 256f6f9e067e1b55f6f0719ca2b087c9bbc1f8d7
SHA512 b3912c1fd0ee9db2dfef92a5c3cb62708be3ea68b10582a76992673cdd4820878fd1bd096c5858b45ae3d1c62a64ad24931ccfcb4ce5110d409074a3bb2ec002
TLSH
T13B518E19A4E4E310FF8915B646A1ADE22AF70DB006037B0FE0F1C56CB5172D3143B368
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 229b2673fd5af90689b029bc1b8b56fca92753cc597d3bda16b5518f505d2029
MD5 2752cb8405336ef3f63965943a555f71
SHA1 941593059d44653e37552c3741272c6a0d4c6767
SHA512 76c79c557bfa9229b28461cfe71a3e0749742480c1ea392de02bda38d8829ba70ccf39278f1ff3f676e5befe19a52b224920fa7c2c4e3cb2b9918142d6f673ad
SSDEEP 96:YSOGcwzgcR/VSzVvCa1a6zoXPNqtheZcwM5H7w:y3aszVvA7XwHrw
TLSH
T11D912A4AA4E2D355FF6925B646A11CD2A8B70CB58A43BB0FE1F4C06C31436DB102B368
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 c21cde9b20e9353a2779a614f8d1b8486a35815c6cdf14ecdf483121680fd4ac
MD5 67373461af4cfb1876b1ae87a589eb02
SHA1 566dbd88302e8c0f83361a8d27bb71741eed2278
SHA512 f66bd1a2e94a3085095c3de78a2260a11d2ef934dedb28f1f0a46d894fa92a04f36c76fbfb69ba372e846c50dec67409bb43600f0a7e3dd3a7088b0cf356ea11
SSDEEP 96:VSO2cRzgcRCISzVvjB1aDoXP7feZ4yM517M:V1Hu7zVvWUXDjnM
TLSH
T137912B0A94E2E354FFA925B606912CE664F70CB59A437B1FE1F4C16C72432DB103B3A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir236_431003374\CRX_INSTALL\content.js
Size 18KB
SHA256 1973a37cb2cfe061e22025c83eff14b4823b97b4a23183bb2bbc122edd7347cd
MD5 2da477ab6f4cc00f249229d440e0049a
SHA1 10382cc07c6a66276ee8b69d9ffa4ce49863dc81
SHA512 ebcc977f1b03eff465e88c5d2873a9ad3bf535fa3c36ec9386c4edc37be05a14c741b93e7cbe2a303a5057d53d375ee65cf381afe62d08c308645b8bea0f6d30
SSDEEP 384:wXO1LVr+iMAicJ4Linro1sgxejU+8XAEgFsrKqi3TAV98q:wXO1LVLTi2nU1sYeGgFsrkjAVP
TLSH
T13882964A59265134467B73BBABA34208FA71603B2240C64D3D5CC684BFF5E6066E3FED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\_metadata\verified_contents.json
Size 2KB
SHA256 d5189b000541d03224b88e386c7defc41d5a90246852f949c7c08cff177a84ed
MD5 f1957e903da48b2d52286758e00e5e25
SHA1 e51cc8afb5a1ce4977474c54656bf76baa6cd754
SHA512 b87ea32d065ce657110c89271e4f388e92f8b616d34983a3ce5fa971743de6830c830e5a574eec8cbbf22f64d7940265621fd088a45a3cfce2b318daa88f6a9f
TLSH
T16F51F7A0CC14B90C791876781A4F3637E31CE2D4B0F73F2A57C35888A8E9A0791371EA
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.NodejsTools.WebRole.dll

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\bin\Microsoft.NodejsTools.WebRole.dll
Size 26KB
SHA256 38c988dc199b98411df41a2ba4d59affda0ec775241396258de38597ff0f366c
MD5 1b6b80f9c71d570f573e75ce406cb2c4
SHA1 335d2c4b464f860f9abf94fe1fbb0c51c46f548b
SHA512 edbab5fde2f5e5e9547c8386bc11a52aaf1740008f853894bc5f930523e871b951860717c95a5b6c976f65b4fc00de56ccf08b4841dffd4e699dcff36f951517
SSDEEP 384:deZpd55/dfcaAx76ZEFeW0P87yya5Wag3WGLHRN72/xR00R9zO23Rsq:ojn476GeLPmyyamhLwP049zOasq
TLSH
T150C23A5197B88207FDFB2DB099B5D6823E36E7479A20D95E158CF6490CA33C1CA2271E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.css

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\css\index.css
Size 419B
SHA256 fe0ba6e31b017083f71c5628906575bba29da4af3f17352b61a003510465e511
MD5 faeb536d59b051416b9833184705fad8
SHA1 9fcd67ab5f62717334094e3b5117dfe11007964f
SHA512 d7650aa81db5564299f7c61cfb67834eeedbb05f51e9e9982cafbdc98019ac79239270a452351403cf77efa18aad6205cb363592467503b21c282d5fcb017d0c
TLSH
T1E4E0E5C706E42565E84BC82028A02B12709DCD535B4FD87540A124ACEDC96E142F270C
MD5 SHA1 SHA512 TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\icons\icon.png
Size 15KB
SHA256 5fb139a4c1505c61114e213af2b8809c9ea1b377354769be7ccc63371d02819f
MD5 0156ed15035e1f37aa858ceb351181c1
SHA1 f0ee0b936e6c27089684dffc4657fcd5d1d8ce3e
SHA512 a6e6cab5c2ff333931b5de0b62ca5e8e7df3a756ae87f1353212de3bbe6f80843e6c995afdbc3f929c59bf8b153fc965c1a1e9c4ad7cda8b94d8848eb1060b3c
SSDEEP 384:C26y2j3FV5tRea1KAGprgq90ttDmDRiA/y/scvX1ZGcf42/nDcbgM8s:V2/V0ga8ZmDq/sslZR7Fs
TLSH
T1FA62C04395A9842AFA97D0FE043D18BAE61F9D706B4A2361EAC1CCAA955E6904341DC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

graphic.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\images\graphic.png
Size 235KB
SHA256 5d8d57783bc0d995628a03f3722fc6ce0c6dd7a9fed91206a56009aa205cd2b7
MD5 239d32a11a5c50cc866b987bf64579bb
SHA1 4945eb059f00c2c6df328cdfc28e0c2226d85f6e
SHA512 3ac869e2398bf4d21c62623478abca7dae6594516f98a50604d207597cc4579b4d1dae0adc5ca41b6a0543cb49bfc9f789e8e6c7cf25cbb27c04ae444dd7a987
SSDEEP 6144:bnILFdlxc/koYD5TYMlcfLU+snE1LjSMtm9sj:sbPa/W5EMeAU/SO
TLSH
T189341332FBA4F81C23B427C660E0EA7D49D8D862958A9C877D579069164FFDC14CF0AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\manifest.json
Size 1KB
SHA256 1f6dacc0344f425c930573d272a16445420e5832e48e4d2f444507e9a6fa5b01
MD5 0ab9eed3f17381da47245848ddbbf25e
SHA1 fdb6c7dcddc237146b3ea9f918f6250b0b7b4c00
SHA512 5f322ddffc482ed02dbb8eb77741714a195aa605e1c76b1ed255d1f0b08afd12e4884579385c22f2a72e670966318fdfb6a2cd4de280dd51f7cb2decd9cec543
TLSH
T1832132BB8750A47B12F45A28EC261206F741176E5681E88EB67CF0E6CF324671054A4E
MD5 SHA1 SHA512 TLSH

Submit Download

Extension.njsproj.CoreCompileInputs.cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\obj\Debug\Extension.njsproj.CoreCompileInputs.cache
Size 66B
SHA256 3de6ecfe498bb32aef475c8e9a26108d2137506443a1621b8ed096b74ddb1bb0
MD5 0ca7476bee31736abce7395d6460b6a9
SHA1 c8c3281c9b5792c5150bcc46287d3669d3b5d478
SHA512 93f075b3cd090e946633ab63e9611c2176b3ca72235bf253c53ae32318e2d5eaaf38c141778b128b9e3a72043a165ec3c8d24d58285d0b27a18e324e17bcd4d6
TLSH
T12FA022820020EE8A03C0C303AEC0CB2A30CC80F22C008AE003228388832023C200028B
MD5 SHA1 SHA512 TLSH

Submit Download

Extension.njsproj.FileListAbsolute.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\obj\Debug\Extension.njsproj.FileListAbsolute.txt
Size 259B
SHA256 1c329342336dcafe65f50fb673d3728047cc8098f27ef20a9923f279dadbe0d9
MD5 5b24522caad3cee0253c8cef3942661a
SHA1 11907347f5ce74c5a47a26acb8ce7d198dc093e0
SHA512 ae00a8a1a2cbdfbf52a7dbad1a0bef5c89d89fbd10c63407888bbe314f3e25a83abe68bf19182618b28b6e9f97e65dba017dc1080aff99905c5cd3a2731ba97c
TLSH
T18AD05E1B4C0DD4E69128B843FFE217FC57EA2902F5C47A8895455C01A732BDC05C34A2
MD5 SHA1 SHA512 TLSH

Submit Download

popup.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cniepokodkjamnddaopncfammpdmkanj\1.7_0\popup.js
Size 1KB
SHA256 a3e6a9e126d31ce8b0dee81cb7d2439975cfca69ab86e2fc7c8f8d05a92886f9
MD5 2f05e2c8fd711ac79da2a9aeaafcc99c
SHA1 3834453331fe3e8bea99ee1f4057a2586b873a1e
SHA512 f3854e1679c88c72f226d2f33d66d61034e0c62490586a6050af985e7dc8f373c050fa23a3f2c6c35ce54220d4aa24074cb4f4c3ad1e4fb44270efa328d81581
TLSH
T1EA31F5AF3522047047FF73BB6DA65298FA30401B65014589BC1C64A89F38D94D377FD9
MD5 SHA1 SHA512 TLSH

Submit Download

000004.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000004.log
Size 76KB
SHA256 da02270e2b19da351684021cef3317914451362f2744ff1473b22df25b63442c
MD5 55ce544c7f1640dcce6f1cf1a3ae069c
SHA1 4d169a10e9c5c5f7a953f84b171bb178694fc204
SHA512 03403cac4a2e9d7880cbeba616a60126abf4587827640982c27dd1a36c12bad544257aadd7d5552b9e6fbc9f34f9024daf1d9ef157bc3f46c9870d99b20ec53b
SSDEEP 1536:KKi9MzpKiVKpKNpKsK0BK4K2vKJKBrKnKLZKXKahKkKFNKMKMdKqK/hK5KuJKtKn:U9MzdfpXpp2wxAYjYF+8YRzLsdaArIbF
TLSH
T1FF738B8BB7A08A24C77940BBC0435FFD9B5A7D447CA78E2F5081B6F61D3519B1A22372
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000005.ldb
Size 1KB
SHA256 5dfd3db51eef99d54a3479cbb0cb5ab2f5899293884f9f56293ddb7d0a83b986
MD5 e9d1705395264eb2bd0a9adc58dea573
SHA1 7cd84dd12dee1c6f3f021143708c2964857fb88c
SHA512 503986495193ee727ef87cba52ebf8ca599b5bedd3f41fbe8b325d1ed5eac0914d35110c5f53fc8e2fc88e755401ad307353496e063f9d14d086b298c356033b
TLSH
T1CB113E21B78DC86AEE08433350F006DCE7E1E3017A50C24A3760E30A8A1B0428AF366A
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
Size 387B
SHA256 f76fc4f110c361f5b542510c3a8c4eb64d11abce9510836ae5835695e2dac7af
MD5 be6723aea871306cccbbfff3a12b8364
SHA1 246fd42b8d7c5f0f4b2f226d3e15fddbde27cff3
SHA512 c4d3d8ad2fdd21e215b6857ba72da01d1e22d82c428ddc454a38e719086b027b43c66a297f474391f249b0a372ade01c316160085ba8d8ed9007033ef213fce6
TLSH
T183E022B812CDC2FF61A4C017937C7B4FB6A2290CA7DCADC29F41F8A060C4408A5ACA60
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
Size 669B
SHA256 a2ae9187c20a7d267614ca8dce23c44b8e477edcf987b105ea52b6fd83f47a48
MD5 041bcc38240529a48ee6193724604921
SHA1 6192a8ecb8a68c312b4bf0f4373135ae5158f60b
SHA512 99cdd799c774659cdf207372d0ac216c8f91a7d1658b4b6ecc3cded5721aecc3e44d5f6ad8f06786eacf6026cbbc247b6db70749c3c8cad4a149f761daf86e53
TLSH
T146017BE98A8681BA3441C0A2866C7719C9EA581EA69C9BC6DF15F54D6AC1C0CF015961
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
Size 387B
SHA256 85e95b2e20189ea520e0212e5d3e546f9c99c006042cd34e8818c2d8c2169dba
MD5 224c22b7539c2264e52c37fea840ee95
SHA1 aa1fb6229ddd4ee30c8b9141faa19bc037bdc9a5
SHA512 814106468c41d785d54616c6c8d2a2add73283b625f45305403b90aafc9015957495f3706d3be23631423062354619f65698084c7c9f3be29530c73732e988a7
TLSH
T16DE092B856CDD2AFB494916B926DFB0D96A2690CE6DDADC34F02E86464C0408A1A4AA0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 100B
SHA256 628c6faa092aa92aa4ae78aae95e6fad7e3918602db3be816a6941062738a32a
MD5 7eca81eee58a4e74ba8d48ce67b183c0
SHA1 3c27280bfb3982aef8a6ca195968d6c461096978
SHA512 6a6121256ee578a194c06d9c45db33e18e823a3f6b188f64f897ce98d192b1fd34706836bae7302405f5652a5f2d59aa69804de13402a79422b27e01031209c8
TLSH
T1E6B0123042D10C55D27710FC997F428985551010B006DA172518452C04526004D0C246
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 3ffa1095b180950b55a512064519ed675b5525a7c8854df1dc4140fc063bd615
MD5 1c5b76d50c4270632226d2bc3733ce8c
SHA1 cc4a4338657d69146c77447bd6ce251d478d19d9
SHA512 d2c0427a93f8d63daefa16f47a52ca84121e5a5bdf7500384ee0edc7e347757cbd2b8933ff046894756e7b0f1fbf02b7ff0b78333fe12f9c80b2d77d58b305de
SSDEEP 192:D0ubautq3y+15DwzJUlT1tOxUyIgSPZWhfEdM76+kI21wHbdPNkuqtKLjVaFl+Up:D0ubautq3y+15DwzJUlT1tOxUyIgSPZp
TLSH
T1A132AAF783E9C52D891196F4AB15AF1FCE290524432C3CB6C8D4BE1B93E2572E21179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 5d4df93c83b2bbe7f5eb8394d0741699fcb8a37dccb52631c4dc75c6877455a0
MD5 67c324399fab4d272102157d92817aa4
SHA1 493fefecf7237debb2a78cd090bf40575b9dbcf5
SHA512 00731bb3976e75f6c08e2baa6cd070ee667b7846f6a8494338770732c136a1d3425c58f8281ec1ba7980a2020dfd28939c9f4fdfd687fd11901b09106b1a6497
TLSH
T1D7619DF3C3E8857D892196F4AB116F1FCE6A0914832C3D66C9D4AE0B53F2972D24038E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 90f7ca290ab481d5b560ab8cbf5ed2834ee550e092727427f79dc7c6ad5cb99a
MD5 4597ec1de51e7ce58f9c5d343ae63a66
SHA1 2a3a020667d68919acd3e4f1cfda3a8cffe4b3ed
SHA512 b017a64465eda33388b276003fd19fd26dc13f8406cf4956f9b5ebc446981b56805b338f5db09956f9e0c0669fb78b5494bfc8c229b24f616079216c35f84bd3
SSDEEP 384:D0ubautq3y+15DwzJUlT1txUKjBIgSPZPEdz+kI21wHbdPNkuqtKLhaFl+UEMR/G:cWb777F
TLSH
T1E07298F783B5C52D9A1296F4AB05AE1FCE690524431C38B6C9E0BE1793E3572E20179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 9622bf7c598fea1d2d8f76cb07be16991a86e61a6dc08a5f9eb6d06f88693b5f
MD5 b9127d6a3c233a67cbc4a5679bd7995b
SHA1 90c283fbd830ba5d7b2aecc42713b4cf1ae7214c
SHA512 89dfeac66adfb1f0b92b89f0e51e7849f0993a675f7b5ff5bb1239f7e1b62f398a26e8136d2d3eb1955b58dd1d40fa1cb30573e111c03a7d5ffc80590a86cbd4
SSDEEP 192:DpdbTGdFwqIaaciSPZ9HhfHdU7aAv6S9qH/q3biPx:DpdbTGdFwqIaaciSPZ9HhfHdU7aAv6Se
TLSH
T143F1ACF3C3E9C52D891156F4AB156F2FCE690A24431C3C66C9D4AE4B93E2972E20179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 2fd0c1dc856e2393ec503b5ed097d53e14729abef2f2c06068e2e49a4cb0c171
MD5 73ba6a85c15192e33245109ece6c5bae
SHA1 97f375079c8f37975e9f97dbb1a668b0039981a2
SHA512 d55d2bf80eb8fc446c2d0dba9762ec7ade7dd2ed3ce26ef4bb815c233c9b36319b784d659897186159861f07941a58bc7f1c8fe072bce93ad642ec5f80f56c9f
SSDEEP 384:D0ubTGdFwyimolL+8BvB00VT0IgSPZWhfEdM76SazDkIL1wDbCmzT8i54KUmhaFM:LBy/x
TLSH
T1F152CBF3C3D9852DC91156F4AB15AF1ECE290A18832C3C66C9D5AF4B93E2871E21179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 6a4ec27305f2aaa4affd22b59637d881a47576272c5577ee0b1b3b915a46e517
MD5 ddb798833534ec903aeb6bff3e5d29fd
SHA1 6847cf45a71f66adbfe5264e474bab05ced0cbf6
SHA512 18c9d588ecc3d044132b049ac5ccd7e6854ff2fdd14f59c56503b69ea39a55701da6d00e5d1aded27762a13c357ee5cedadfa1c9b39ed9e1a748d07e89eb3f98
SSDEEP 192:D0ubautq3y+15DwzJUlT1tOx0IgSPZWhfEdM76SaEkI21wHbdPNkuqtKLjVaFl+Q:D0ubautq3y+15DwzJUlT1tOx0IgSPZW4
TLSH
T12932A9F783E9C52D891196F4AB15AF1FCE290524432C38B6C8D4BE1B93E2572E21179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 2290ff75254fa8d8718592b9b4b100ab230df8f065811a828f78117919c271a1
MD5 2bc8f6dbafa2f8af9a2cfcec5ae52563
SHA1 1206b5235943f9acbc058f7ba0c126c004035dc8
SHA512 37a5cf29f1ab7cb3c39a7f53c7edc48b5f789f3ac6683726bf1065dff358e48b818a0209236ff573938c28c7300d26a500f86c993fb647a671733d6fa9c37e68
SSDEEP 192:D0ubautq3y+15DwzJUlT1tOxAIgSPZWhfEdM76SaEkI21wHbdPNkuqtKLjVaFl+R:D0ubautq3y+15DwzJUlT1tOxAIgSPZWp
TLSH
T13332BAF783E9C52D891196F4AB15AF1FCE290524432C3CB6C8D4BE1B93E2572E21179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 15c26d13cfa33127c3ea00466cdceef2a33d354a811fa0ea884b2f8dca8eda13
MD5 da6e20ca1514833384db9710c15b32d7
SHA1 239d4c8cfa84c01e2fb9c30a2bdf93678d7a13e1
SHA512 8f41645abc6af65814327adb9391c296b78e7f94ec86ff1433db301293f13e0827fc9b1472b34194562b2c82ddd32f81c5a30c144206cae1f87972f31e90ba17
SSDEEP 384:DpdbTGdFwyimolL+8BvB00tIgSPZWhfHdU7A6SazDcbIL1wDbCmzT8i54KUmhyia:PMy/G
TLSH
T17152ACF7C3D9C52DC81156F4AB15AF1ECE290918832C3C66C9D5AF4B93E2871E21179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 6992022589cdf7ae0af658287c6ecda1ea87370f484d9673114d1afed2d4dbb2
MD5 cdc703c67a8fa8d198f046f0c7e1b9b1
SHA1 500770b2115b662fcb0449ed11fca17bcecee858
SHA512 e360e7167aaa14be972817923f09f538248875bac0dd7adb9145f8df5af365a39f3ceefb2df329e7142f6481973926fe5a70ec740cb357bebb90f9c47596a1d2
TLSH
T1FC617CA7E7BFB857206C897B1D44B90E297AB83581D174F4CB67802CB4E15F30B164A6
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 dee024231e5d614ce5d164f9953406d66dba3cda3fcfc30beb27ac7471339af2
MD5 8d67f5cd380c67a63cc3509c93446fd0
SHA1 975035c544c520a8663268cb7f49b52f07413bef
SHA512 09227ad1ed5a7ea4fe7f20c87d24e7f8c45eabfc481eb01b75a426071e6ddadce10f5e23655a00e7a2f7c58797e9e2fe906732bb9aa91b8843c57dd7fa009012
SSDEEP 192:eoodicBXnAvAHA9Zv7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhrvVw3S:eoodimXnOX5ZLXa6wxUhb5waX5c/e
TLSH
T12772D72FA85069775CE7D22AF926F72AE7F52021A5901E84EBFC8F1C04D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 21361254fe343a00632babe03db97d58739a3b0d5ac08d796a68fda6f66ceca8
MD5 449b6118de7855d1b5ea286446ac0830
SHA1 96b12bf5ab98d38cfb8ec681403153df267585b8
SHA512 5dfef2e28e57ccbf9c22aaffd62e6684802f5581d778fbf5786c76879225802ba9e633847fbcb041c8f14473c415dfb007042dfcc3340439669df36f131e0625
SSDEEP 192:yRn7WrP0Arjv7HYhAPRp2I98Hsb+WNnNFdkKXkwZcWKVyIsnAUgtaJ:yRn7GbE8XT6w7djX5cR8
TLSH
T10E42E72EB914757B5CDBD22AFD26BB13E7F5102261951E84EBFC8A2C40E75CC2227427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 83e26327b1466e4624d3a27302ae4418ddc8d79ba16729335c852e0a348e890c
MD5 cc5a4297e91cf0421c346800ee3a48af
SHA1 9d6b14e6dd0262cae34c258ad034f543d719004f
SHA512 d7ea58b231528d6d1b27c641b1f79213d435cb4110ee60a58f3b485434d6b8602470caba22b2af47cbf93dc107529aa7525cd2f8ae20f6c32b01a26018bce1e8
SSDEEP 192:yRn7WrP0Ammv7HYhAPRp2el+98Hsb+WNnNFuUk2XKXkwZcWKVyIsnAUgtaJ:yRn7TSE8Xi6w7K26X5cR8
TLSH
T17E52D72EB914757B5CDBD22AFD26BB17E7F11022A5911E84EBFC8A2C40E75CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6775ad41dd46c739bd792b6840ccd497b3b8dafebc2c1187029f728591729260
MD5 9922e83aefbcc32f5dd5fbb5cbe91c8c
SHA1 e66dd0575fa82dd43458342c47fcb437ed6e1f86
SHA512 f51c4626c44c6b248bec5d0ed972f1d7def33671e499ba79b168251e7ab8b8f9b4fe4a3f54d9cc1e1792c4368eb9d90dbd983fe7bd72b771d5daece661ef08ea
SSDEEP 192:yRnnWrP0Am4v7HYhAPRp2el+98Hsb+WNnNFuUk2RKXkwZcW3VyIsnAUgraJ:yRnnTkE8Xi6w7K2QX5cKe
TLSH
T11C52C62EB914757B5CD7D22AFD26BB16E7F11022A5911E84EBFC8A1C10E75CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 2028a6a063fe0e16c2fb6d9c4fd08bed8ce164674fb6c9a575ec977f2e3e7470
MD5 4582b21182b6e4f3b8947d5f7aea5ef2
SHA1 5d5b7a33cb8fdecb81d2bba7020cf586d001f4ee
SHA512 f86fbc8f0b08ec11d2fd04ab04416f53c0957f410eba8e4d8b86643f58853bfdc6fedb77ab67c862c7e89b1562e1880995f0416bb7224d072cd44f4501ff2924
SSDEEP 192:eR7cBznWrP0A9gv7HYnTPRpfNbl0Ks98Hsb+WNA84701GeW/7D3T2jKXkwZcWjVK:eR7mznI8ELXO6wDhOn22X5cwe
TLSH
T15162C72EB910697B5CD7D22AFD26FB16E7F51021A5911E84ABFC8B1C10E76CC7217423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4ac6b9c57523f0bba5e0210deea8fb58d3c50d79d7eb33121f52e9a959d63a37
MD5 96b8a1decec995128fe9deb7fb2bc577
SHA1 08a67818c0f6bb1793d06a6f07bee81e343ef619
SHA512 0d375a36dbbbbf876e48a5e832583a8cc66078dc1c7705635300334b0f4fa42644ed4d9b60f36f72556356160f75802ff964421a2c80447407d6af87a74093c0
SSDEEP 192:yRnnWrP0AmUv7HYhTPRpfel+98Hsb+WNnNFuUk2cKXkwZcWjVyIsnAUgraJ:yRnnTQEpXl6w7K2LX5cwe
TLSH
T17C52D72EB914697B5CD7D62AFD26BB17E7F11022A5901E84EBFC8B1C10E75CD2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 8e5aeb4d2b00c9703750625fc461869359d905fccfe89cf345da481b1b6abd49
MD5 64db05d0b7da7cb32dd66e8e22619136
SHA1 f99bc69d4fec8d951dd5f6908247092fca41e1a0
SHA512 bc257b9003d764367620c57cba626ae5b9016d1f14b1184cf53cad1f7d1cab1a85f2a09e093f22ce8f13a832eece7ef71b2602f74b6dc264928f1962e00bc14f
SSDEEP 192:eoodicBXnAvAHA9lv7DsYnTPRpQ/4bl0+298Hsb+WNA8RKe+OD701GeWYhrKKw6S:eoodimXnOXVZLXQ6wxUhbfwtX5c/e
TLSH
T1EF72C72FA81069775CD7D22AF925FB2AE7F52021A5901E84EBFC8F1C14D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 06c2d7246bc22ef24bd04ec67f9f13f405cacd6b3a238fdafca9728f6999bd17
MD5 c2f64d0e68230e35907298d4e7780d8f
SHA1 8e95db680c19cf06b4f04c60717fb7ffb7cabf07
SHA512 ab21af715f0a6b474e2ef32828ebff7b763cdf337041548f7bd06154fbb7fca9f8e2cd8e345f034fe0bf9c7471ed47ac0766199b99895ef0d3d388a6a04ef1a4
SSDEEP 192:eoodicBXnAvAHA91v7DsYnTPRpQ/4bl0+M98Hsb+WNA8RKe+OD701GeWYhrKKw6S:eoodimXnOXFZLXO6wxUhbfwtX5c/e
TLSH
T12272C72FA81069775CD7D22AF925F72AE7F52021A5901E84EBFC8F1C14D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 6d7a8e1795c39287b7d1d648be135c9d0e2fcc79c45b01f53106b477319d2731
MD5 1fc3137a51206d641a27705fed943dc7
SHA1 a6f2023c5fe6b1fed6e7485be7d803202e0a4034
SHA512 8b8d51f986139d43022e03631ac90b7d5745e9fba1858185686976641782fced241e505754e0b8244810a7d2d8757265e183f9cd67c4708e03b2c3c6895d9ba1
SSDEEP 192:eoodicBXnAvAHAe2v7DsYnTPRpQ/4bl0+X98Hsb+WNA8RKe+OD701GeWYhrKKw6S:eoodimXnOQCZLXx6wxUhbfwtX5c/e
TLSH
T13972D72FA81069775CE7D22AF925F72AE7F52021A5901E84EBFC8F1C14D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a01e4aa6b0e0521a2c13921c082c1c061de8dcda1e1b195e925f39c0992594b2
MD5 283d7c816f9a6ba0e99d8926ca4ca740
SHA1 5e815abaa4319de60cf8ae6244174f4ebbb23dd3
SHA512 e47fcf0303cf5771ffb373be631696943123ca52ae2d0772f2781fe23b1c5f85067e7093d51e8896524147156625456646a01a2748fb50ac877968cb76f3863f
SSDEEP 192:eR7cBznWrP0A9IRv7HYnTPRpfNbl0Ks98Hsb+WNA84701GeW/7D3T2jKXkwZcWjM:eR7mznIAELXO6wDhOn22X5cwe
TLSH
T13862C72EB910697B5CD7D22AFD26FB26E7F51021A5901E84EBFC8B1C10E76CC6217423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 4b20e115ee62cc6181765358d9b6c44b18788ea94eafa017be9c5a8fc553e497
MD5 1a4316938a843b3533db11c9fca5e799
SHA1 cc7024e7da8f42e5c1ed0ac28040f5857129eaf3
SHA512 7e3680c255964cf9944d1e0711f48e8f413005ab82b9984ff61c7cec379d869b647c820491166711b56a26c8529a69125e707369409505c001336ed68aae76d9
SSDEEP 192:eRdicBXnKvAHA9+v7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhrlictKJ:eRdimXngX6ZLXa6wxUhbYccX5c/e
TLSH
T19A62C61FA92069775CD7D22EF925FB2AE7F12021A6901E84ABFC8F1C14D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 b840bc83425c4e7f90b404de763f1001820e507d92bb315a885c50abb7eec5f9
MD5 9c3946b5240031ac62e8fc3fc854c13b
SHA1 6b259403812ee01ec383c593f8093acfa42fa8bc
SHA512 55ddf0680abdc3789b30bc09ca5cfa7ed2c1b7cc9bed9829d086b678201c7bd7bbad54f33fa2f4b607f1660cf35579bd991cdd52ab40fcbc0825c9f4ac5ddc64
SSDEEP 192:eRdicBXnAvAHA9sv7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhr8lssKJ:eRdimXnOX4ZLXa6wxUhbMsbX5c/e
TLSH
T1F262D71FA96069775CDBD21EF925F72AE7F12021A6901E84ABFC8F1C04D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 88c13cdb0218f192ede752909ac152f08d906e99e137d267801b57aa6c795504
MD5 9aa9f8e2cdd088a26e6de2c66feebab3
SHA1 81ae95a0a312bcaadc595b83a28dd6f95e6a9a82
SHA512 061333d25bc7b035459e9d8fa5f1c79e11068b3e2e2f7db45fad488acc7acc1686199163d250bb5cf37fc65b436e58126168a76ad6fd132a8784d823663378e9
SSDEEP 192:eRdicBXnAvAHA9Av7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhrZpwJKJ:eRdimXnOXcZLXa6wxUhb3wYX5c/e
TLSH
T1E862D72FA92069775CD7D21AF926F72AE7F12021A5901E84ABFC8F1C04D76CD6217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 728e32ea572dba76423b1940622a9e0d7ae39f8afab0e50f16cb7f37df3db699
MD5 4ae25e3da4de44eed73e57fefe349c70
SHA1 6f37032cea453127b2ed77354f38c8f7aa63a55d
SHA512 5dadb3fcdafe3017c281c077f1b8141f3a4d1107691ff1921b2bcef724c22e4d8a4be8ff507ef4f4fe4e10ffaaf45556b44d21aadd54d9e99872270c2d3ad062
SSDEEP 192:eRdicBXnAvAHA9Lv7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhrfXwnKJ:eRdimXnOXzZLXa6wxUhbjwKX5c/e
TLSH
T11872D82FA82069775CE7D22AF926F72AE7F12021A5901E84EBFC8F1C04D76CD6117427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 f04c6eb0e1a875dea3ad2d9410e0f91cce7ac48ea4f5d4b7b7c147f7bb99ad30
MD5 adc66ad7e98b0f74ce821e2fb3cfac11
SHA1 2b4d108817988d175decc263ab875e5d3e5a06bc
SHA512 11cb672a8b646e5bcaea1916d6510d8509d6277fdcb8ea003fce6d184277257214740783ab294a4fc206fd774c678ae04248ab6af9b812c0f4ca49f10fcd4300
SSDEEP 192:eR7cBXnKvAHA9Dv7HYnTPRpf/4bl0+s98Hsb+WNA8RKe+OD701GeWYhr3T2oKXk7:eR7mXngX7ELXR6wxUhbP2nX5cwe
TLSH
T1CD62D72FB92069775CD7D21AF925F72AE7F12021A6901E84ABFC8F1C04D76CC6217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 ee802c3fd8ced7f2762d463334674dc689111795c6449845d99ddf5cc43a33f8
MD5 b1c43852a90ebd3d6bf8139d56b974c2
SHA1 4c3d3edaf7e0d0ef05b9a156a6102db98e57b9e6
SHA512 043a1ab35f18fa5d156c283a842735bcc199e8140ca1078fc8c909e7096adac4cf71429c611b4e2bedc13037b213c96f35dc6b78534a534e6300fa3cd587f30b
SSDEEP 192:eR7cBXnKvAHA9Uv7HYnTPRpf/4bl0+s98Hsb+WNA8RKe+OD701GeWYhrf8EzKXk8:eR7mXngXQELXR6wxUhbQEGX5c/e
TLSH
T15962C62FB96069775CD7D62AF925F72AE7F12021A5901E84ABFC8F1C00E76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 2c31ae7240e89adbb56737f1d47c3883a3dfc6c9738b97faa1a0703e400d38e9
MD5 5799072e2e336f933ee076a71b073364
SHA1 7a719a202f8193a69e23ea996d9394510cb48db1
SHA512 dee87685b2636e283ddc3f63667599cf5b215b4e28c78221b44f7066f7ff185de08e67a296aa5a450bb49b9b6fbc66c2ee7a5ff8ebf1c73358e412f9a933f2dc
SSDEEP 192:eRdicBXnKvAHA95v7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhr3kcfKJ:eRdimXngXZZLXa6wxUhbwcSX5c/e
TLSH
T1A662C72FA82069775CD7D22AF926F72AE7F52021A6901E84ABFC8F1C14D76CD2117427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 a6e0a59275e0c3b13e01be9d046b95002a35591e1ce618373bde4157f09b46be
MD5 3bde50310870ce894605916a97c3e7b6
SHA1 2c21e34ead268f04437c41a394de8527ad3f45e3
SHA512 b5ea9ba2ec5dfb01bc66e46886befcaa46c3e243c84ed51cca5778b2b8805ca7bb74991ffd95f51377c5b9fd46e9e05cc19f854c094ca2c645357f7b4a048f1d
SSDEEP 192:eRdicBXnKvAHA9nv7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhrFqstKJ:eRdimXngXvZLXa6wxUhboscX5c/e
TLSH
T19862D72FA82069775CD7D21AF925F72AE7F12021A6901E84ABFC8F1C14D76CD6217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 d662d7af3762666ee52e7ba5237c074492dd55682ac5461babf43b29a1cfe9ec
MD5 d125426f4501e285175f529265762de2
SHA1 4e0c9467553809ed5a774c0757ca03d8a6cd6122
SHA512 8fa326427ee95f709df524921aabcff42b4383260c42a2202a18a601bdb2c2f66f49e590c95e355a8cabe57a583fec8b2d5572bffb833b01fa38aef05621239c
SSDEEP 192:eRdicBXnKvAHA9Qv7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhraQO2KJ:eRdimXngXMZLXa6wxUhbZOJX5c/e
TLSH
T19462D71FA82069775CD7D22AF926F72AE7F52021A6901E84EBFC8F1C14D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 24c0f26d363ba1eeb5e130d92cf16ab0d6353cf419ac9db0cb8de3ec063081c2
MD5 dae57b8e2e7b1327358c5ffb845ed35d
SHA1 b2d191913380a60975f5e22dbe531b0e1f72fb3a
SHA512 935f661ea83ed0162b6b1a07b1ff7062b42fcbb7b8037cdf7da99f4a30b500a375f571ea0fffbe32abf1faaf3bf654f3d54dfd4b128c280bf05a1e9bd7128584
SSDEEP 192:eRdicBXnAvAHA9Wv7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhrMMwoKJ:eRdimXnOXiZLXa6wxUhbbwnX5c/e
TLSH
T10C62C72FA92069775CD7D22AF926F72AE7F52021A5901E84EBFC8F1C04D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 0ba4ac260f66db749ac30d2a6ca452cd6ea8df0a4581d5d5d2664543e2d773e6
MD5 32379188f14bc8a5a0d18479cb05b7f9
SHA1 c7bc15cc4af1ac4943ea365f5979327b71238c56
SHA512 74c6b53b1746c8f2ba4b3a1facb446ef79baae1df37579733b8633da016a0c7a7b8c94c35862e5017d88990b10b7d0355772ef22833a35f79cd91f479263aee8
SSDEEP 192:eRdicBXnAvAHA9Av7DsYnTPRpQ/4bl0+s98Hsb+WNA8RKe+OD701GeWYhr3kwvKJ:eRdimXnOXcZLXa6wxUhbQwiX5c/e
TLSH
T1AE62D71FA92069775CD7D21AF926F72AE7F12021A5901E84ABFC8F1C04D76CD6117427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 7b0a2b16f1b092d4d3582de386d79e4e05db5796d24ef3f93e7f5fe3656997d8
MD5 ffe505660d1df1faf307ef52449eb509
SHA1 4da966b4673f755f4ad6a3d6a2c3834444e99464
SHA512 85e33c878a9868fce3631474cf302a5bc106fe293447cd7ed443082ff3ec1f9d0f1bd310a75d88d54032f9965db109863356d2f252405c3d2ff22263df8736c8
SSDEEP 192:eoodicBXnAvAHAW2v7DsYnTPRpQ/4bl0+M98Hsb+WNA8RKe+OD701GeWYhrKKw6S:eoodimXnOQCZLXO6wxUhbfwtX5c/e
TLSH
T12372D72FA81069775CE7D22AF925F72AE7F52021A5901E84EBFC8F1C04D76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 2328ea9073549adab02fe99e0127dcb5999d2517b99cac1f85861fd5d1268867
MD5 40aba898dc4efcd9988ec53e06a8b15c
SHA1 af8b73cd37e29a8d0b68b474702174d179201fac
SHA512 1f184dc588afff9f591e8a55398deb52c19ccb2c739739b1384e2a6da49836e5a8171b750e21fad998d39b550d8f4906b846178327f24be8db946220ec5b5a8f
SSDEEP 384:hTjVw7KxkXqKf/pUZNCgVLH2HfgslXa7pLuLcif3yXODVw+ErU3L5HGcHRXD:hfVw7KxkXqKf/pUZNCgVLH2HfgsVa7pq
TLSH
T1D172FA676C4C9A770F94CACCDD27BF4FADB9024B65E9886443FA981903D5ACB010A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 19KB
SHA256 7c8ecb903a067ca049f25e26adf6e26609820371c5d880c8c19d7c0dea2ea858
MD5 a080d09e334a8a612392dc6450a714d2
SHA1 1b944bf55b0801e75d7d06d9e77712fdf20fd009
SHA512 dd1cd16ddbce0beaf94500aaf72ea72580e13a8bb299a679eb7f1af0ca373c590015344b71d4003405fe55e1b638f0a7952ceef2097352b39722acd4e90a7791
SSDEEP 384:hTj9FhUvY6w7KxkXqKf/pUZNCgVLH2HfgslXa7pLuLcif3yXODVw+ErU3L5HGcX+:hf9FG3w7KxkXqKf/pUZNCgVLH2HfgsV6
TLSH
T1B792FA776C4CD9770F84CACCDC2ABA4FADB5015B55D9C89483FA982A03D5ACB110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 19KB
SHA256 67b460c7c2e09e6318c056dec416d96716384ecd3ada1b1ceab39eed0485ce1d
MD5 51d5f6a1fa31806ccf6683ba904af2db
SHA1 46d73369f6166141b56083da223d54a284054825
SHA512 2269e193930852d69d20336a6545318e5178cc962c3f7c1c4c848974ce1009e3876dab5b717ebb29de97260348f1fee2ea0fb027b68a58e8e2dba2c91e07062e
SSDEEP 384:hTj3HFhUvY6w7KxkXqKf/pUZNCgVLH2HfgslGVa7pLuLcif3yXODVw+ErU3N45HM:hf3HFG3w7KxkXqKf/pUZNCgVLH2HfgsI
TLSH
T14B920C776C4CDA370F84CACCDC1ABA4FADB9015B65DAC49883F6982A03D5ACB11061F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 4c4732826619f5b3c1d624fcdb81042a87cf3dae15a3a6ebcb18a02b1b4c29f3
MD5 149b194479ed0d8033d6ebe31356591c
SHA1 2732f56f4668ff515c15783d838115f4510c8eda
SHA512 99b653247c207e6c2bfee2ef35491384d77fa2e36cf2255fcdfd7c7f15ecd373e289f83843def374098b4f5fb024e1b5513965339e913fc539dd81f8a1dd7d05
TLSH
T170B0126180019551C08B02F42186148C3524DF218709230353F479719C261E04117152
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 56848840fcc45bec387c24d687bc41508d5a41d96ed69561f99dd29aa89014f9
MD5 c2c1fa89ce9ccdf7a61cb0428bc30922
SHA1 4359572fe5f8f0a1cfa61f3b9258411802380c97
SHA512 acdd206ceeb50191a0196baec9b03ae79174e4adedb0cbeab89c1038442f1ff646f75e4cfa107505963e5e45f4d861d3490ba97bc29d0b0ea8c61565cd56ebbf
TLSH
T147C01253C105B001C05603F8218389D833259F3AE736034993F1A939FC371108527252
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597eea.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe597eea.TMP
Size 96B
SHA256 8009b8a596020d9d18dbc0df327af4930d01bf3118c67db4f431567df4f04dd8
MD5 4313c367ec54d200fc064a227c4de80e
SHA1 b7382f9c791639e5c56321128825b7ff8fe657a6
SHA512 17f30371872acf8d838d397fd74a7aa67ed877d932e2f029ef554a7f35ab5e30221fd479549f20c6524dcf26a938b80335e7e17e6a19137fd3d76193fbc30757
TLSH
T119B00297C542E226C04203B029BE95D87166DF2DD703221AF3F01A67DC25A604736561
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 284a35673a15bb2797585d23eabdbfa0f4c30eb8bdf52922d7176a9bb1b5ac6f
MD5 fea2749c90a5d4382088b3e8d89c550c
SHA1 6e313099fb53780ce76f725155977bc88e494112
SHA512 c3d5bf495b24de3d0551f72ba6a5394b9e3ef589270e3105109ad849a2d9de79cede6ee819091262f0c8ff3bcd488f94f0f839cdcd5da0a519053c0e3fffab7f
SSDEEP 1536:ZSRP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFN5:y++J3qUQm08KMWF0bFTcVHr6z+
TLSH
T15B9312B9991EBC3923ABD3A6A0179C9D8CD3DCDE1514117C31C75F1E14BB3A2A30B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 195KB
SHA256 95d16ec4860d2fb12b897c7cd229d61b488cb89387487375e6dd985fe105a68e
MD5 f6c62de0518cf91dfe43baae49ecfbad
SHA1 7699e79e848c39a111a7346e9d1f3ae68dd2f85d
SHA512 b0abd28568706e75ebd26a845f7443a992312c2f908aa79fa16189a330ccfe91f2236cb8bd72cc57ecc9f8511a5e57e738d65aaf4701ed4d45f8154ff3758b92
SSDEEP 3072:RoMltNFFLU4mnBJ8XSXKPNy9gbtZ99kjlK++J3qUQm08KMWF0bFTcVHr6zP:9F1U4mnBeCatZ7++JjcMW2VcVLQ
TLSH
T1511412BAD41B6F7A076FA1A850160DAC8CD0D98B1558B13832CA2F8C14FF2D5F64A8B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 484faa49928c46ec52f86ced54302f560c48cb0f2b750d0ca77e0e04fb021b94
MD5 9e7fef607f5b84f5e4d438ef509cd2c1
SHA1 87f6fb366d287d8e7bdd086ea14b5493f89df530
SHA512 4a8b3e31bf5690ea5689b886fd4129bc17530e0baacda4b97382c4d8fbd5dea88fd744feff4c1aaef5bb7f062e41ad799d968743965c48d812a155224011929a
SSDEEP 1536:wSYP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:0++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T1789312B9991E7D79236FC39AA0179CAC88D3DCDE151411BC30C76F1E14BB392A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 fd3fca0008eaa0cdaa87c369db031e88cd70c5f595588c247967b04895a78fbd
MD5 54e5f14f07159bfd2a9c362d6e1ae720
SHA1 7d0f5e9700ba2c98f96aab1000494850a38064f0
SHA512 efab09a1af3c5ddb5f29a5c3f70de40b06d803ea994e137242b6e70493dc1ad6617e998021109793a0b7ef1f6daaed8127c92c45564e268e864e67344095974d
SSDEEP 3072:uoMltNFFLU4mnBJ8XSXKPNy9gbtZ99kjlK++J3qUQm08KMWF0bFTcVHr6zP:cF1U4mnBeCatZ7++JjcMW2VcVLQ
TLSH
T11E14129AD41B7F7A039FA1A850274DAC88C1C98E1598723522CA2F9C14FF3E1F649CB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 195KB
SHA256 d38ecfeb1e08e1f223b0338230b43b91f22562151343c773f666b646c78285b7
MD5 dbe2bc815f4c007e9b488303771754c3
SHA1 3d4f61a89e58c9e6330e22a63aa8ccdb81a6983e
SHA512 4a5d130553eb48ce6a820d00fb56edefc9be4f566829f8cfb51c65ef15c87abb6a466d36cf24d245a1993502cdeed97bdc0df8c37c6f8227975a28a254da2ebe
SSDEEP 3072:OoMltNFFLU4mnBJ8XSXKPNy9gbtZ99kjlK++J3qUQm08KMWF0bFTcVHr6zP:8F1U4mnBeCatZ7++JjcMW2VcVLQ
TLSH
T18E1412BAD41B6F7A076FA1A850164DAC8CD0D98B1958B13832CA2F8C14FF2D5F6498B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 195KB
SHA256 ce6e2d12cca9f38b4e03b35c1814e9882fcbe2accfdde7ca9c524a476c421aee
MD5 c55d4b9069d6bc4eff22e8aa75859e1e
SHA1 206e2c0f6970ccf4df8a09eb5a6ff8905b80439e
SHA512 2d01a374a993a86e03ab69a1a634e2fce6287af826b71b77e362ad43c314eeba063fe7236d491edb91bf7236f5943326ffb0561c1b2086c62476b1b0e47c7c51
SSDEEP 3072:eoMltNFFLU4mnBJ8XSXKPNy9gbtZ99kjlK++J3qUQm08KMWF0bFTcVHr6zP:MF1U4mnBeCatZ7++JjcMW2VcVLQ
TLSH
T1221412BAD41B6F7A076FA1A850174DAC8CD0D98B195CB13832CA2F8C14FF2D5F64A875
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 195KB
SHA256 d03ba3f70739374b80ae6ec8263ba518b1f3894ea86f51806984ee5d91998550
MD5 90a97e281e29ee66847c01ba1273983c
SHA1 770b73536438a31fb7ee720fcf65c5cbb1d9c57c
SHA512 1f60f01fcaca16894343a147653f20e7beb08c41d7d08723397daff15fa868a1fdd013f1cdae2f185e1c8eec832a19923c7e8925ccac617786a6b2fddbcf235a
SSDEEP 3072:KoMltNFFLU4mnBJ8XSXKPNy9gbtZ99kjlK++J3qUQm08KMWF0bFTcVHr6zP:IF1U4mnBeCatZ7++JjcMW2VcVLQ
TLSH
T11C1412BAD41B6F7A076F91AC50170DAC8CD0D98B1958B13832CA2F8C14FF2D5F64A875
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cniepokodkjamnddaopncfammpdmkanj_51958.crx

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Webstore Downloads\cniepokodkjamnddaopncfammpdmkanj_51958.crx
Size 278KB
SHA256 c4042263ed8e576e5f9a4dc0ffa27e44fd2f73267a21c87ceb142e25f625d790
MD5 eeb48f1a1683cd6aaf6fa3f511791193
SHA1 0b6fffd94c6a2d73919519a9dfe65540bc559e09
SHA512 9e679505c996bffd2a5d1db08cabfed6aef71f35ea3ef9d2010653dd4b466b137270393fd732c6578c51854368edee9dfa9e2c46ba71cd7cd924e58c682412f0
SSDEEP 6144:n7JGpPfUVIL9dl9c3EoY75BEMlcdLUesZE1LjCMtB9s5G:7g1fjD3ofQ5iMCWOv7yG
TLSH
T11C542336FEE4E82CF65127F5A0E1FA76558CD076898BD8832E1A6079164FFC4118F0AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cniepokodkjamnddaopncfammpdmkanj_51958.crx:Zone.Identifier

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Webstore Downloads\cniepokodkjamnddaopncfammpdmkanj_51958.crx:Zone.Identifier
Size 342B
SHA256 bd8f1b9ac5c61a6a52d3f2e57d2211805a771d32fdc935ac2f1100d076068cff
MD5 2236d07daa3706e2c0cfa0a4fe47935d
SHA1 ab333c58fa126e1a0df7fe5bec5f04b7e91ee584
SHA512 cf9aa2112627b370fa8ce5176b99787684a678b1ecd61b08970215915c67b74e22e1ebaa4a590b0ca56f2a77683fbdb82efaeaebcba70e15b6a7277c398e82d7
TLSH
T17CE020DB142584576A9753E1356D74CC771A9140D1BA524DEC54411F3EE4D94C284564
MD5 SHA1 SHA512 TLSH

Submit Download

CurrentDatabase_400.wmdb

Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
Size 576KB
SHA256 f537048aeac8ace163dc41ae1da3b64cfad4365a6b58dce590605151e40cc812
MD5 86fd5be36b1574bdaefebe685ad5bdff
SHA1 dc3aee4a59c01e734bf6648bd49b176b593ac7d6
SHA512 887c3c6b93476f6c87e7f1989f90f423e98ea751657c0397c3d3173624ec790ac3f7c2249468f1a23048f47fb53f81b8bf092c2c08533b65199392a2987f6da3
SSDEEP 768:Sf0aleDxcg7KGVp3zT13VuI61HOdrrA9abhr1vfEwPRzitFrzcooJImdba5aSt3:S69tQeoVYoUxYCutFCiKt
TLSH
T1A8C40F37A570A098DF3C35B1E2AC6B4CBD72641A12E006421F74B57F7A237D8CA0B5E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CurrentDatabase_400.wmdb

Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
Size 1024KB
SHA256 7ffc2b0cabbea31548750f68f1875f1e3bb333081c86ece6ff2f680d2f41c9b1
MD5 532f019ed3900e2ed49911a4c3447aad
SHA1 f692d32196bb3d0157ddd352b19e71417163e3ed
SHA512 7679a0cd239775255637b54b351eccfa1432a1bc7b257d87e031fedf2bd03c0188fdfb81b23f46162ee950877232bc9974320ee0089f83a0c0e79f2e392ca758
SSDEEP 768:s0aleDxcg7KGVp3zT13VuI61HOdrrA9abhr8fEwPRzitFrzAqUmNKX08oJImdbav:CZP2tFP3vqY8vqEMvTaBacga
TLSH
T17A258437D190B0C5CE2C7171E9ED8F08BA63A10B11A052465FF8A57E7A633D99D0B1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LocalMLS_3.wmdb

Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb
Size 68KB
SHA256 3effa1440c9e066fdccb4f4210427699fb6f6b969804864f59382ae8d58a5129
MD5 15497e990f4352ad820ec27ddb0adb1f
SHA1 03f1b16bb25d209252c111792e291d1aefd7f93d
SHA512 d4b02548a36849f4077d4936917cc22c5c7fda30cbf7f8f00710c6bb6b4792dd7c89c784846f80a58e76434915e0f6b80135e4b5f81acbc8036a13d01d1162de
SSDEEP 96:pbUTql6ltmNXtTUMUstb7XtwUMbstnUMlstQOXtpL2tuLXtatlAtDtgihxt+utwh:iTMnCnin6w4i58gdkv5w2dkv5w
TLSH
T15C63281596E82659F3F75DB169F765163EB9B8A11F37D10D0220920E0CB4F38FA21732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WMSDKNS.XML

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML
Size 9KB
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b
SSDEEP 96:/YkZRAF6zyHUhm77yB1pZYCEnfHrHH7B6xTGH+YCLV3zwULJEYCJWyHBt3zwFRh+:/2FV0bBPCfUdY
TLSH
T10022A2A194818DD206290E275DB95C0DDA8CE9D3832C24997C9EEB7FDFB1C00355FB6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir236_700273812\CRX_INSTALL\background.js
Size 428B
SHA256 21d6234fa605c7b0f26c93886f197fb31e0fadf65f0afd3a424704ddf771dbbf
MD5 691663ddb7759d006300d749ad25cda1
SHA1 a1c9f3f40a1a3d863be637c6c38c77e72aa04914
SHA512 5d3227cbbd27686a6527f685b0a06e11e27d96ba5eb16c5f46fb09b0b8ff0ecb450f1ca6cc206d06e5abc51c12364d6a1da08dc816713ae9ad00f6addd8afff2
TLSH
T1EDE02BA8632D840F71BAA7B4214E940AFE0420730441C5597B1C7060DF71AD9015CFD3
MD5 SHA1 SHA512 TLSH

Submit Download

corrupted.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir236_700273812\CRX_INSTALL\corrupted.html
Size 1KB
SHA256 2ce159f24565b1eb5ca732d45d85b72a364c546482e89708c3353281169dd6fa
MD5 98bf061cd199938db215187fe4841b5e
SHA1 fb26d0425e23be79003ea52ef56f46dec4953b14
SHA512 c90772a2482f20afe91f0ef0591661c9a409148b8b2fff0fc591a6d8b0f613aa30624dd5b9df3b21902599fd9ba7f31814b20e2c923029b052545daaebcb1d0b
TLSH
T1F6414C14D9854947703B96AC6FA2C589EB2B00939300072C7EDCB3E24F796589A77BDE
MD5 SHA1 SHA512 TLSH

Submit Download

Extension.njsproj.AssemblyReference.cache

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir236_700273812\CRX_INSTALL\obj\Release\Extension.njsproj.AssemblyReference.cache
Size 711B
SHA256 4ce7cb61f411879ea9cedb95088d53cc54da678fbdbbee990a34aebf275767aa
MD5 cdf44be5240667c45f0f6bf05e79c6ba
SHA1 cdcba2002f6b0bcbc6ba90194600230862ca1934
SHA512 251a7d6158f13bddcba248602c112d3ff2bf017333b475d6a67912d88ab9e4bfcda78450642f9046820a806126299ce7638584094b26a42e4d0cad4c796fbf78
TLSH
T11601E9B88F35C02CC553FDB4183563B023E882827130AE07B1802524FD3259A8F69691
MD5 SHA1 SHA512 TLSH

Submit Download

wmsetup.log

Path C:\Users\Admin\AppData\Local\Temp\wmsetup.log
Size 1KB
SHA256 8876e002e1918705605fb746bb8dc9b6695b4ab00ed146889ced2aa37f603c56
MD5 0d13fe67f2117712a03b9c2dfb3cb3d4
SHA1 5b91c3e3476e72c400b9cb860a781ab00e9ccb0d
SHA512 2ac72fb372dbb445d71ef818c06626b2eb5b30cd2ca50e95b5eea3a2298bc0824d44e9862c7d2a660be9eb247cf0657ae9bb002148e9f06bb0aac0b79b1aca61
TLSH
T14121ADA70A0A95B0DDA007B769DCCA35737AE3CB53A4D026B34E981E480513DB33E15D
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ski2.mp3.crdownload

Path C:\Users\Admin\Downloads\ski2.mp3.crdownload
Size 11.6MB
SHA256 4e68844fed24948b2c61e848ff7181e5756c4964a20c491619d1acc816a30da2
MD5 489606c88ff4f3085da8eae30ac0ab5d
SHA1 833b76f0f6fc41fa92bcca32f34032e8ff5479e9
SHA512 f17f1fff8a527441ae664784b5ebe8da748a251b8cba3410e428c0ff0d179348ffdce43339812c0be8bf7118bfe2bfbe14f7c5e35c1405805e549a9d560c66f2
SSDEEP 196608:9ckO2BOB0Q+HLz2Wjj4ld1Yf5TlAPL/uL35ZKbfsJ8zvZwby:9c52IqQ+HT4ldkGL/uLJZfCNb
TLSH
T1E6C63317C746B60FE5A992205F6A86E0DCA38FB1391DB34DDC11FB909372637F668224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ski2.mp3:Zone.Identifier

Path C:\Users\Admin\Downloads\ski2.mp3:Zone.Identifier
Size 158B
SHA256 867c39d0402a3b4f5b2eb8f870dedacd2175e526f337911add653afa193e3e92
MD5 eabb3e4fefa8938ded01d652d3d135e2
SHA1 19c60b171bc03dd68318c70915ab6946ef0ce6b1
SHA512 c4ec8ce490c25dae6a03931ad7a24d0734b33a97c99575532f5306b30ea5a899860052abc1e2df94ccbe9f5bf75a988b8bf015b89acba4a8cdaee54045f838d8
TLSH
T146C08CEB8404C101025926C838FC8148B40FE8048CAE8DC8DC60808BA84A9B084E8BB7
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1592-75-0x0000000000EB0000-0x0000000000F8F000-memory.dmp

Download

memory/1592-53-0x0000000000EB0000-0x0000000000F8F000-memory.dmp

Download

memory/1592-52-0x0000000002F50000-0x00000000030BB000-memory.dmp

Download

memory/1592-51-0x0000000000EB0000-0x0000000000F8F000-memory.dmp

Download

memory/1592-54-0x0000000002F50000-0x00000000030BB000-memory.dmp

Download

memory/1592-37-0x0000000002F50000-0x00000000030BB000-memory.dmp

Download

memory/1592-36-0x0000000000EB0000-0x0000000000F8F000-memory.dmp

Download

memory/1592-56-0x0000000002F50000-0x00000000030BB000-memory.dmp

Download

memory/1592-34-0x0000000004F10000-0x0000000004F20000-memory.dmp

Download

memory/1592-33-0x0000000004F10000-0x0000000004F20000-memory.dmp

Download

memory/1592-30-0x0000000004F10000-0x0000000004F20000-memory.dmp

Download

memory/1592-31-0x0000000004F10000-0x0000000004F20000-memory.dmp

Download

memory/1592-32-0x0000000004F10000-0x0000000004F20000-memory.dmp

Download

memory/1592-29-0x0000000004F10000-0x0000000004F20000-memory.dmp

Download

memory/1592-58-0x0000000002F50000-0x00000000030BB000-memory.dmp

Download

memory/1592-61-0x0000000002F50000-0x00000000030BB000-memory.dmp

Download

memory/1592-63-0x0000000002F50000-0x00000000030BB000-memory.dmp

Download

memory/2716-2-0x0000000000A00000-0x0000000000ADF000-memory.dmp

Download