Overview
overview
4Static
static
1extension-bridge.js
windows11-21h2-x64
3extension\...dge.js
windows11-21h2-x64
3extension\...7wt.js
windows11-21h2-x64
3extension\...1mf.js
windows11-21h2-x64
3extension\...j8n.js
windows11-21h2-x64
3extension\...p6q.js
windows11-21h2-x64
3extension\...z4v.js
windows11-21h2-x64
3extension\...b9s.js
windows11-21h2-x64
3extension\...m2k.js
windows11-21h2-x64
3extension\...gin.js
windows11-21h2-x64
3extension\...k2p.js
windows11-21h2-x64
3extension\popup.html
windows11-21h2-x64
4extension\popup.js
windows11-21h2-x64
3extension\...rk.svg
windows11-21h2-x64
4lib\bvn3x7wt.js
windows11-21h2-x64
3lib\cwq9r1mf.js
windows11-21h2-x64
3lib\dxk5tj8n.js
windows11-21h2-x64
3lib\fhm2lp6q.js
windows11-21h2-x64
3lib\gkr7nz4v.js
windows11-21h2-x64
3lib\hxp3yb9s.js
windows11-21h2-x64
3lib\jqt6wm2k.js
windows11-21h2-x64
3lib\rbx-api-origin.js
windows11-21h2-x64
3lib\zq8m4k2p.js
windows11-21h2-x64
3popup.html
windows11-21h2-x64
4popup.js
windows11-21h2-x64
3rbxlabs-mark.svg
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
144s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
26/04/2026, 03:07
Static task
static1
Behavioral task
behavioral1
Sample
extension-bridge.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension\extension-bridge.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
extension\lib\bvn3x7wt.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
extension\lib\cwq9r1mf.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
extension\lib\dxk5tj8n.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
extension\lib\fhm2lp6q.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
extension\lib\gkr7nz4v.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
extension\lib\hxp3yb9s.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
extension\lib\jqt6wm2k.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
extension\lib\rbx-api-origin.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
extension\lib\zq8m4k2p.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
extension\popup.html
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral13
Sample
extension\popup.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
extension\rbxlabs-mark.svg
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral15
Sample
lib\bvn3x7wt.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
lib\cwq9r1mf.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
lib\dxk5tj8n.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
lib\fhm2lp6q.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
lib\gkr7nz4v.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
lib\hxp3yb9s.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
lib\jqt6wm2k.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
lib\rbx-api-origin.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
lib\zq8m4k2p.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
popup.html
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral25
Sample
popup.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
rbxlabs-mark.svg
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
General
- Target extension\popup.html
- Size 3KB
- Sample260426-dmembaev5r
- SHA256 efca67f48907b0c016516b9016db8cc1b4a651d99f9d7923329852601a14f4e0
- MD5 709f6d16b2ea8beca7c6c0dd3829002f
- SHA1 f1d5bd2ac08a09728664f58cf5812f24b6281581
- SHA512 1aea4f602f99bb95d4d61a8f4ea319f033838f0b7d7e43511d39cb9075a1edba05f21e79c2ef990d0babcdcb7d2720dd4394e72c9eae381c3f23b7aff5778049
- TLSH T17E61ED21A9F8D073A24651C9B9E4AA2F3AC6E707DA4A4218B6FD17D00FD7EC5EC1701D
- MD5 SHA1 SHA512 TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp chrome.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 1200 chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216464775512505" chrome.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 2792 chrome.exe 2792 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
pid Process 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe Token: SeShutdownPrivilege 4544 chrome.exe Token: SeCreatePagefilePrivilege 4544 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe 4544 chrome.exe - Suspicious use of WriteProcessMemory 17 IoCs
description pid Process procid_target PID 4544 wrote to memory of 2964 4544 chrome.exe 79 PID 4544 wrote to memory of 2004 4544 chrome.exe 80 PID 4544 wrote to memory of 1200 4544 chrome.exe 81 PID 4544 wrote to memory of 2004 4544 chrome.exe 80 PID 4544 wrote to memory of 3136 4544 chrome.exe 83 PID 4544 wrote to memory of 3136 4544 chrome.exe 83 PID 4544 wrote to memory of 2388 4544 chrome.exe 85 PID 4544 wrote to memory of 2388 4544 chrome.exe 85 PID 4544 wrote to memory of 2136 4544 chrome.exe 86 PID 4544 wrote to memory of 2136 4544 chrome.exe 86 PID 4544 wrote to memory of 4780 4544 chrome.exe 87 PID 4544 wrote to memory of 4780 4544 chrome.exe 87 PID 4544 wrote to memory of 864 4544 chrome.exe 88 PID 4544 wrote to memory of 2052 4544 chrome.exe 90 PID 4544 wrote to memory of 2120 4544 chrome.exe 91 PID 4544 wrote to memory of 72 4544 chrome.exe 92 PID 4544 wrote to memory of 2792 4544 chrome.exe 93
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\extension\popup.html1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4544 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffeff6cc728,0x7ffeff6cc734,0x7ffeff6cc7402⤵PID:2964
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1572,i,16926480568432049913,7728773079916534379,262144 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1964 /prefetch:22⤵PID:2004
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2124,i,3854037276512882216,11894127799686539322,524288 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2128 /prefetch:112⤵
- System Time Discovery
PID:1200
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2364,i,1295555063257494642,2913394246554972408,524288 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2392 /prefetch:132⤵PID:3136
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,2947716020638823369,12178868452905406610,2097152 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3288 /prefetch:12⤵PID:2388
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3252,i,18122615638830431122,17304917201800585655,2097152 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3308 /prefetch:12⤵PID:2136
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4316,i,9105584236654369679,10590652010572072807,2097152 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4340 /prefetch:92⤵PID:4780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5252,i,14218389125483844950,8869348003722795017,524288 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5256 /prefetch:142⤵PID:864
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,4582807265497521524,18362526328571216010,524288 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5528 /prefetch:142⤵PID:2052
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5276,i,7484641016025671470,6596775113541887445,524288 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5244 /prefetch:142⤵PID:2120
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5492,i,4856830023154929102,11123697650100166117,524288 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5496 /prefetch:142⤵PID:72
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5512,i,12810311556899530148,11403069643903773696,262144 --field-trial-handle=1968,i,13307348433378124193,14187121123248187047,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5364 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:2792
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:5072
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3696
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 795aca2728725c5bd2d2b9a5bc84b936310ac76d4bce0e267320b1e803afa80f
- MD5 1bc6ec9933ade879d83a576737ec4e69
- SHA1 062c0e35bf5e71a8a9d333d8ba610b49cee6fbdf
- SHA512 23237fc2b7b31430577643db63136cb92f0aaffea2d9ef9775f91e1c78fbc9c43a4602277c1c82bd33df2a0e1b25ef05b46cbc3f49c16556dccb7a8da97184e0
- TLSH T113E09BDDE921AC2748FD176961544B46F76113572740594F3F3C810C4FB453B458A96C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 4a34d98f7bcaf5f9bc4ee00e94e187a0013d71bd57891f1cba0e485d0baebe52
- MD5 b77e1de765984546db74227855967634
- SHA1 221a6279f26fe593b848496fe7978b73fdc4409a
- SHA512 869989761323c6679ffc13660483685a82eb31b516a1defe7b9937f3e9bda93cd4ebd3c93fb82c4d1b2e2581e95bcbdfeb4b35142646caf4083056c263b49b04
- TLSH T1C541BEF793F4997E851196E4EA156E2FCE7D0624031C7CA289D4AE1B53F2972D20138F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 1daac9e15883ede4c17618327ae78449af80d0880e6b25eded4dbf7a744df956
- MD5 4f0f609a0518e8aaaae8a08c526196fb
- SHA1 b700384115ac0bfdf2ba60dd6e2ed2034a2083ee
- SHA512 d5aee9d921998f4346043981b9499fa45a0ba4eaeb725fd58d6cdc56cd92880fdbde0da972f5942da24dc7d835d2b7d9dfc72a5b2c2ef2dca196d7ea61c80ec5
- SSDEEP 192:2RPzyHcZqNBMN7v7ApAPRp2eJ9qHsb+WNnu4PkreW2po97Mga2eVyIsnAUge:2RPzUUqYNDsUXB4w5Pm2poFaFe
- TLSH T19242F82EB924793B5CCBD629F965B793E7F5102121942E88EBFC8A2C11D79CD3217027
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 02fa3748cc960b0ed806669146286ae61d8f8c37c72e1c20fff625c9b568d7c5
- MD5 e1d791f76039330e35fa0e1827d639ea
- SHA1 a37e7b6749565fdef84e626eb8e8ab5cfd1eaf09
- SHA512 4cd2d4ec371de591ed8fc49a3c9c69bf2d80c0d8879044f55af268ee4a35e216538e529304db502c0dc2822c3e20cfadd9949c623d30489800bbc0cdffa3ddcc
- SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifklXODqt+ErU3sjHG9TDWxSal2:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pU
- TLSH T1B672E8676C0C9D7B0F94C58CD8267E4FADB9024B65ED886483FA582A03D5BDF110A1F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 bf5138a36edfa7c3d4b3ea61d4bcea2f8181704ea68fba5bd25ff6fb86032068
- MD5 983356f825a928a72ec38b6d4b48bfed
- SHA1 e2599ad36c519404bf0cd7263e9d7bd546b5715a
- SHA512 18e473d04a03d37bd9cc130741ffa9f9364238ba033b734ef3d41c025233269732db69b0cfea2622f1b70dd605368e39db61c1edae4696b0c69e2db9218aba82
- TLSH T1A7B0125484029601C45322F93186048C71A89F109705130293E0697198267D04118151
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe582fc5.TMP
- Size 96B
- SHA256 976f6d9832b05a8fb7cbede0efd248dc6b769ceb986145e600a59f2a1af2e01c
- MD5 29d5d70814eb9d09de9893e762c66f5e
- SHA1 cfb1e292b288405c6bfffb01d14dc40dfd594b1b
- SHA512 9dd7fec61a329a33f167e04121c3fdd44b6f393bb8e4456e491a7e23114476c43eb1decc8c63e4fd70c495008daf03a42080f9df08df9aed1e5c020edee76ea6
- TLSH T125B0220AC0023302C00203B22CA3A8E83030CF28C2030303C2F00FA2EC2A230C038AE0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 ddf785be3d917e182fd2279c449361f831b199b9fcdc0a646879cd0a18a08d40
- MD5 798e4fb18897f1f0fd875b8daea09ab1
- SHA1 39e824503b248955ac9f6d7c12e6f3e8d8c4d203
- SHA512 de01664944934e720938f70db5070d14f9be9073d3a7927b086c4f62b7ced42a7fb0e665b9566566ec61703421ba1124ebff9a8064beaf1d2d43c3b56ff71fbf
- SSDEEP 1536:K7MnBzP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:rt++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1E89302B9981E7D7913ABD2D6D0079CAC4CE38CDE1518657C30C76F0E14AA393A34B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 9edef6fbfae2ae2da189253dee7a27d78202998c6e5b32fb618971fea0963f35
- MD5 f6b67fdf16fc2728f2c7626dbc48b5b9
- SHA1 69ce98763901f91fa6c5c70d08b58f69481f5b76
- SHA512 2fa99f2e450023e0156ee2370e2597adfa37a5e78db6009ac072e5cd177190e80deb907cb1ceabd27c5b67382d8710454c0fb339e514f94cd64bfcbc23b3f4dc
- SSDEEP 1536:K7rFP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:u++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1AE9302B9991E7D3513ABD2E6E0079CAC4CE398DE1214557C31C76F0E14BA393A34B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 90KB
- SHA256 8c97c5e5d7c9ab5ea5af73b633b367d8a2d4b02383e76d914c4de78f9f3487d9
- MD5 c45a9995210fb92e67d7a0dc7809e538
- SHA1 569f929cf7fb337d4a6b3a553b744f8528c8039a
- SHA512 35adb107eeb0db001325aacb53eb79dc1ff5b63c9b1a584723badfc6f88b6988df2f14c94bde48cb2ee88344d29b26a11b763214a5032810af75e0d446554a39
- SSDEEP 1536:hZ6P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:o++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1969312BA591E7D39636AC396D0079CAC8CE3DCDE1514557C30C7AB1E18BA393A30B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 75fcae7f2947bf81bc7e4678a98d22e796bf6b37371b1770276a6324783b2bba
- MD5 ee55d59fdebf4704d475bc2524edd7d8
- SHA1 5a37b6b991370c621b97cd7323753abc1fd164cc
- SHA512 987b4155a1f4546e53b4f1facefde06c6b3aa2bcc844bf041e7a19826ffc678daf8dd975d5be130c54c07d037adab14e3a6c0e7192e3e5699f90dc26f526d637
- SSDEEP 1536:N7rFP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:j++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1249302B9991E7D3513ABD2E6E0079CAC4CE398DE1214557C31C76F0E14AA393A34B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH