Overview
overview
4Static
static
1extension-bridge.js
windows11-21h2-x64
3extension\...dge.js
windows11-21h2-x64
3extension\...7wt.js
windows11-21h2-x64
3extension\...1mf.js
windows11-21h2-x64
3extension\...j8n.js
windows11-21h2-x64
3extension\...p6q.js
windows11-21h2-x64
3extension\...z4v.js
windows11-21h2-x64
3extension\...b9s.js
windows11-21h2-x64
3extension\...m2k.js
windows11-21h2-x64
3extension\...gin.js
windows11-21h2-x64
3extension\...k2p.js
windows11-21h2-x64
3extension\popup.html
windows11-21h2-x64
4extension\popup.js
windows11-21h2-x64
3extension\...rk.svg
windows11-21h2-x64
4lib\bvn3x7wt.js
windows11-21h2-x64
3lib\cwq9r1mf.js
windows11-21h2-x64
3lib\dxk5tj8n.js
windows11-21h2-x64
3lib\fhm2lp6q.js
windows11-21h2-x64
3lib\gkr7nz4v.js
windows11-21h2-x64
3lib\hxp3yb9s.js
windows11-21h2-x64
3lib\jqt6wm2k.js
windows11-21h2-x64
3lib\rbx-api-origin.js
windows11-21h2-x64
3lib\zq8m4k2p.js
windows11-21h2-x64
3popup.html
windows11-21h2-x64
4popup.js
windows11-21h2-x64
3rbxlabs-mark.svg
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
146s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
26/04/2026, 03:07
Static task
static1
Behavioral task
behavioral1
Sample
extension-bridge.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension\extension-bridge.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
extension\lib\bvn3x7wt.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
extension\lib\cwq9r1mf.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
extension\lib\dxk5tj8n.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
extension\lib\fhm2lp6q.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
extension\lib\gkr7nz4v.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
extension\lib\hxp3yb9s.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
extension\lib\jqt6wm2k.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
extension\lib\rbx-api-origin.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
extension\lib\zq8m4k2p.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
extension\popup.html
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral13
Sample
extension\popup.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
extension\rbxlabs-mark.svg
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral15
Sample
lib\bvn3x7wt.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
lib\cwq9r1mf.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
lib\dxk5tj8n.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
lib\fhm2lp6q.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
lib\gkr7nz4v.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
lib\hxp3yb9s.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
lib\jqt6wm2k.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
lib\rbx-api-origin.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
lib\zq8m4k2p.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
popup.html
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral25
Sample
popup.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
rbxlabs-mark.svg
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
General
- Target extension\rbxlabs-mark.svg
- Size 1KB
- Sample260426-dmembaev5r
- SHA256 e9a08ecb4b1981797a7c54baac1309f5418a0b1cf9c831de31ff5a0d0966e8cd
- MD5 3ca083821122cea20d0f7f98dd3ccda6
- SHA1 a628561bad6e400e7d047ed493b2b67727722a0b
- SHA512 c64dd71461fab65c81a18f73f8ff830dd64e524bd9e1a0f9991760549794afe7dad7fbe10aef267341c69cb8a2143df7cf2d3abfd316174e541223e7c3766458
- TLSH T1BE115935D298942BCA2C930DC704E4643213B1C29F591200F5887F6E5F2B4D75E7B7AC
- MD5 SHA1 SHA512 TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp chrome.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3136 chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216464805154190" chrome.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2504 chrome.exe 2504 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
pid Process 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe Token: SeShutdownPrivilege 2340 chrome.exe Token: SeCreatePagefilePrivilege 2340 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe 2340 chrome.exe - Suspicious use of WriteProcessMemory 17 IoCs
description pid Process procid_target PID 2340 wrote to memory of 2072 2340 chrome.exe 77 PID 2340 wrote to memory of 4184 2340 chrome.exe 78 PID 2340 wrote to memory of 4184 2340 chrome.exe 78 PID 2340 wrote to memory of 3136 2340 chrome.exe 79 PID 2340 wrote to memory of 2620 2340 chrome.exe 81 PID 2340 wrote to memory of 2620 2340 chrome.exe 81 PID 2340 wrote to memory of 4996 2340 chrome.exe 82 PID 2340 wrote to memory of 4996 2340 chrome.exe 82 PID 2340 wrote to memory of 1176 2340 chrome.exe 83 PID 2340 wrote to memory of 1176 2340 chrome.exe 83 PID 2340 wrote to memory of 4444 2340 chrome.exe 85 PID 2340 wrote to memory of 4444 2340 chrome.exe 85 PID 2340 wrote to memory of 3328 2340 chrome.exe 86 PID 2340 wrote to memory of 3648 2340 chrome.exe 88 PID 2340 wrote to memory of 3748 2340 chrome.exe 89 PID 2340 wrote to memory of 1596 2340 chrome.exe 90 PID 2340 wrote to memory of 2504 2340 chrome.exe 91
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\extension\rbxlabs-mark.svg1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2340 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffba665c728,0x7ffba665c734,0x7ffba665c7402⤵PID:2072
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1596,i,18239371087504852256,9002012649918491759,262144 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1976 /prefetch:22⤵PID:4184
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2252,i,15705027785797952830,3747507864194602761,524288 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2248 /prefetch:112⤵
- System Time Discovery
PID:3136
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,2623651172757223541,2620636330173474497,524288 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2732 /prefetch:132⤵PID:2620
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,6965721360412025396,8932331357413377153,2097152 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3288 /prefetch:12⤵PID:4996
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,3018487921772064256,17236619461910516230,2097152 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3308 /prefetch:12⤵PID:1176
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4220,i,9059231571089689437,6327394496976596003,2097152 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4228 /prefetch:92⤵PID:4444
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5392,i,14078046002592472739,7665294230584534006,524288 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4552 /prefetch:142⤵PID:3328
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5416,i,524571835852227154,3931850184408829399,524288 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4552 /prefetch:142⤵PID:3648
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5392,i,739693783944517120,13814321597125266812,524288 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5500 /prefetch:142⤵PID:3748
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,17032885188309181168,510289957458463874,524288 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5564 /prefetch:142⤵PID:1596
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5640,i,17114110365344788111,8949853978408622021,262144 --field-trial-handle=1824,i,11690671450571981204,6374266570813542763,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5700 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:2504
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2660
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:2028
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 7300ab47a7de85f4005c20a1718c7a82cff7a343ea2592f77a89b0a8b8d5b855
- MD5 659bbbf77560ccb6dbd17b1a148c87be
- SHA1 6aed89d8d21c25284fd896c59b03ce0c6d1b3903
- SHA512 8fd14f7273ae3d595d1557bb282aa46a0d4b2e727a5ceb47bffe0eb159629f1b2b442333280c6523415710a3beb0a0d2527974ac88d51f755200e1bba9bbe1eb
- TLSH T12EE09BDED932EC2709FD576960548B56F760135B2741494F3B3D811C4FB057B498586C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 2617ec2d3c3260ae4f97114b35aa4532a92fc3a8c09f0d06428d59731ebc3ea3
- MD5 4afb4e6854674ab957cfe4ad0605eab1
- SHA1 45f0bca39f03ec80d4d9aea6c589f7d33c9e581d
- SHA512 f3e9d44710e096ebd458ff7b7dde80cdab1d2f100458677d9396c621fa704dd527499a6b632c07a4efdd9dbd67263be113e4d6a28d17d3538574cc8e5e20b73b
- TLSH T19541BEF793B4997E861192E4EA156E2FCE7D0524031C7CA289D4AE1B43F2972D20138F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 b2d7741cce5b2715d3ecf65f7b61303b8bb6ada6a6a89c6b6a1cd102a7d91e3e
- MD5 a1efe02ae6803fd8d471799c0d70ab2e
- SHA1 2f2eaa705d0f3bc6225a7f96f72694af84c592ec
- SHA512 aa038fbd1e3fa81075443b227deecd92745dc13a25c48c39df4d29d32f7a70761b9ffa829e372089412e9001ec6c474377946bebae7c4e46a0ab19aa297dd01b
- SSDEEP 192:2RS5yBeLOv7ApAPRp2eT9qHsb+WNnKnPa22LeM3aF+VyIsnAUge:2RS5pqsUXr4wSPV2zaF2e
- TLSH T1B742EA2EAD18783B5CCBD229FA657743E7F5102161D42E88EBFC8A2C11E79CD2217427
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 02fa3748cc960b0ed806669146286ae61d8f8c37c72e1c20fff625c9b568d7c5
- MD5 e1d791f76039330e35fa0e1827d639ea
- SHA1 a37e7b6749565fdef84e626eb8e8ab5cfd1eaf09
- SHA512 4cd2d4ec371de591ed8fc49a3c9c69bf2d80c0d8879044f55af268ee4a35e216538e529304db502c0dc2822c3e20cfadd9949c623d30489800bbc0cdffa3ddcc
- SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifklXODqt+ErU3sjHG9TDWxSal2:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pU
- TLSH T1B672E8676C0C9D7B0F94C58CD8267E4FADB9024B65ED886483FA582A03D5BDF110A1F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 96B
- SHA256 27db70b2a9cab6a69ef6b3622b71056b0818e52057642aa50dc8f6e26e8de2c7
- MD5 91d7a5bba981be3cfb3c8518fabcd475
- SHA1 9734237348a5832c49a69de2bc0030a9194d646c
- SHA512 474b6b3b14a18783765eb3d876890f1acb01c968de22bd94c59d845ecbc380c7be600ac081eccdb736076aef85d5d841f6ed47e57b0335bcb48383ca1f676a5c
- TLSH T11CB02202CC03B302C00203B0A880F0CC38B0CF38CB03222A83E03A22CC22F208022820
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 4864f0ea10224f970b702914d58a25358edc5f7063ff7ab0a93d8d92ede0a1fd
- MD5 2b07b3fc9e9a47f3c48febf9e5cc25ad
- SHA1 c10a181352e37d201de029a0d01da39031dc0bfa
- SHA512 c3109d77e32cf12f006976ceefb3e106a43a92723df213330329a4f759b6d1332097df043a36c6a86a87fc4b90a2ee2dec8040415c05b847f919dcec5b335f84
- TLSH T1A6B0126080019612C01303F411A3958C31299F208709170153E0AEB198272D05138260
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 e0c63ee1c5a103c2851c588117e36e758ad1a72a18ccaafb395214cef081e43a
- MD5 98235d776e3399562367fa46d3a01183
- SHA1 45cddf824ac4136544bbbfa7f25e0b8ed40eb8c2
- SHA512 7f7360e9dc874316fd3272a37e4d28447efab5d242e6af437267cb273cdc28e7c7f5c8f7b6743e2200c1bdb07c6b9b4375dad8f5eaef7088e6e4d6c76e6cb6e8
- SSDEEP 1536:JGLyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:24++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1179302B9991E7D7913AAD6D6D0079C9C4CE38CCE1618657C30C7AF1E14AA393A30B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 31b4967cd183b5d08f79f0fbe69920d99c2e00fde0ca3ae3c129c3319d677e5e
- MD5 33ceda7b054d4e051ea2e219badfb32b
- SHA1 40eb7e20b3a52c30619d672ce001f85ee2a5ebd8
- SHA512 8789bc950d61c3132b4f31a8e66e8505a8dfa167bdc8bba9337c9776f658a308cbd8c05823ca99e2bfc2e475980b57a4eb29bad5c6108e211500e976425b7f50
- SSDEEP 1536:JG/ZP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:Y++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1AA9302BA981E7D3513ABD2E6A0079CAC4CE39CDE1214557C31C76F1E14AA393A34B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 b821089c150d728a2068723af1e7766b3394fb5ec292043ef905fb60d3501886
- MD5 b0acdc9d8899029f4614538f42cacbbe
- SHA1 4f4b7a076f99cdf6aa334055c7cc69f0994bcf77
- SHA512 dee144a580b5cadd650a0991a166c847fa2502dbc03595d3cb2b3834a9f851930c4482564ed87413d70fc4bb470b4b755c4de472db34fc101ea4d3482238c7f9
- SSDEEP 1536:MG/ZP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:b++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T15E9302BA981E7D3513ABD2A6A0079CAC4CE39CDE1214557C31C76F1E14AA393A34B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 90KB
- SHA256 895f6d1858cbc433c6b7aa4010e0bc3fb3aa86738fabe98b481d8c040e175fab
- MD5 82ef5b68014ed47b10d32cc619a92150
- SHA1 08c1bf7f8773789b3d1d70f9bedf9357a23b2792
- SHA512 1ff67231c54ee3366ce3f2ddfac3b2012d62e011ddf78cd08781180c893727dc18f69ce1158ad3cee1a5a73c4848caf0ad20d50f7ec1441159b835a5d62597bc
- SSDEEP 1536:hZIP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:G++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1209312BA591E7D39636AC2D6D0079CAC8CE3CCCE1514557C30C7AB1E18BA393A30B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH