Overview
overview
4Static
static
1extension-bridge.js
windows11-21h2-x64
3extension\...dge.js
windows11-21h2-x64
3extension\...7wt.js
windows11-21h2-x64
3extension\...1mf.js
windows11-21h2-x64
3extension\...j8n.js
windows11-21h2-x64
3extension\...p6q.js
windows11-21h2-x64
3extension\...z4v.js
windows11-21h2-x64
3extension\...b9s.js
windows11-21h2-x64
3extension\...m2k.js
windows11-21h2-x64
3extension\...gin.js
windows11-21h2-x64
3extension\...k2p.js
windows11-21h2-x64
3extension\popup.html
windows11-21h2-x64
4extension\popup.js
windows11-21h2-x64
3extension\...rk.svg
windows11-21h2-x64
4lib\bvn3x7wt.js
windows11-21h2-x64
3lib\cwq9r1mf.js
windows11-21h2-x64
3lib\dxk5tj8n.js
windows11-21h2-x64
3lib\fhm2lp6q.js
windows11-21h2-x64
3lib\gkr7nz4v.js
windows11-21h2-x64
3lib\hxp3yb9s.js
windows11-21h2-x64
3lib\jqt6wm2k.js
windows11-21h2-x64
3lib\rbx-api-origin.js
windows11-21h2-x64
3lib\zq8m4k2p.js
windows11-21h2-x64
3popup.html
windows11-21h2-x64
4popup.js
windows11-21h2-x64
3rbxlabs-mark.svg
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
141s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
26/04/2026, 03:07
Static task
static1
Behavioral task
behavioral1
Sample
extension-bridge.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension\extension-bridge.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
extension\lib\bvn3x7wt.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
extension\lib\cwq9r1mf.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
extension\lib\dxk5tj8n.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
extension\lib\fhm2lp6q.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
extension\lib\gkr7nz4v.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
extension\lib\hxp3yb9s.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
extension\lib\jqt6wm2k.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
extension\lib\rbx-api-origin.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
extension\lib\zq8m4k2p.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
extension\popup.html
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral13
Sample
extension\popup.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
extension\rbxlabs-mark.svg
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral15
Sample
lib\bvn3x7wt.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
lib\cwq9r1mf.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
lib\dxk5tj8n.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
lib\fhm2lp6q.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
lib\gkr7nz4v.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
lib\hxp3yb9s.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
lib\jqt6wm2k.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
lib\rbx-api-origin.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
lib\zq8m4k2p.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
popup.html
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral25
Sample
popup.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
rbxlabs-mark.svg
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
General
- Target popup.html
- Size 3KB
- Sample260426-dmembaev5r
- SHA256 efca67f48907b0c016516b9016db8cc1b4a651d99f9d7923329852601a14f4e0
- MD5 709f6d16b2ea8beca7c6c0dd3829002f
- SHA1 f1d5bd2ac08a09728664f58cf5812f24b6281581
- SHA512 1aea4f602f99bb95d4d61a8f4ea319f033838f0b7d7e43511d39cb9075a1edba05f21e79c2ef990d0babcdcb7d2720dd4394e72c9eae381c3f23b7aff5778049
- TLSH T17E61ED21A9F8D073A24651C9B9E4AA2F3AC6E707DA4A4218B6FD17D00FD7EC5EC1701D
- MD5 SHA1 SHA512 TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp chrome.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 5376 chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216464761832684" chrome.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 5960 chrome.exe 5960 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
pid Process 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe Token: SeShutdownPrivilege 4708 chrome.exe Token: SeCreatePagefilePrivilege 4708 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe 4708 chrome.exe - Suspicious use of WriteProcessMemory 17 IoCs
description pid Process procid_target PID 4708 wrote to memory of 1820 4708 chrome.exe 78 PID 4708 wrote to memory of 5136 4708 chrome.exe 79 PID 4708 wrote to memory of 5136 4708 chrome.exe 79 PID 4708 wrote to memory of 5376 4708 chrome.exe 80 PID 4708 wrote to memory of 5768 4708 chrome.exe 82 PID 4708 wrote to memory of 5768 4708 chrome.exe 82 PID 4708 wrote to memory of 2568 4708 chrome.exe 84 PID 4708 wrote to memory of 2568 4708 chrome.exe 84 PID 4708 wrote to memory of 3416 4708 chrome.exe 83 PID 4708 wrote to memory of 3416 4708 chrome.exe 83 PID 4708 wrote to memory of 3644 4708 chrome.exe 85 PID 4708 wrote to memory of 3644 4708 chrome.exe 85 PID 4708 wrote to memory of 1796 4708 chrome.exe 87 PID 4708 wrote to memory of 3100 4708 chrome.exe 89 PID 4708 wrote to memory of 5756 4708 chrome.exe 90 PID 4708 wrote to memory of 4728 4708 chrome.exe 91 PID 4708 wrote to memory of 5960 4708 chrome.exe 92
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\popup.html1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4708 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd43f4c728,0x7ffd43f4c734,0x7ffd43f4c7402⤵PID:1820
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1580,i,6267866268882399044,15117146031558967810,262144 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1836 /prefetch:22⤵PID:5136
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1444,i,3546800294457613659,2846712712740457022,524288 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2224 /prefetch:112⤵
- System Time Discovery
PID:5376
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,12544404651087742889,12412965263309417229,524288 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2352 /prefetch:132⤵PID:5768
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3116,i,11931927498293185209,8352271660728034401,2097152 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3168 /prefetch:12⤵PID:3416
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3108,i,11608187290249633427,12731315843804124352,2097152 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3188 /prefetch:12⤵PID:2568
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4184,i,11239518616277607028,3530391213825311967,2097152 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4212 /prefetch:92⤵PID:3644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5264,i,9049908256402140125,11767894497054439234,524288 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5244 /prefetch:142⤵PID:1796
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,720174584246512469,5674912639558683943,524288 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5360 /prefetch:142⤵PID:3100
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5248,i,1395906788328259982,15198624120110204852,524288 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5628 /prefetch:142⤵PID:5756
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5252,i,10840035068579076144,12813717836942884640,524288 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5480 /prefetch:142⤵PID:4728
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4156,i,7563144568504444578,6645731062850792662,262144 --field-trial-handle=1888,i,7866030084294453543,12627372169462787762,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5284 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:5960
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:1540
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:2028
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 9df6e3fed235b21e65ba5f33af82c24284e6ef25949d622d7f74898dbe300e30
- MD5 020c5f4c12b7d5ddde8989d1695925f1
- SHA1 c2d25f33dbe11337e7e5f1048f5179d58f8bf516
- SHA512 65e9270803923562e4f7261581809a32e32fec95887452c6bab1b2511d5054faf1e1b2cade8a9587a87236d800f8c437e05e49693b349949f20889b4376cbf47
- TLSH T17BE02BAAC926EC371CFE471860944742E75513972740495B7A3D830D8FB0B3F0385C1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 62e65a5a50887b1df73ab64e730fd6b203ac297d75e2b0c67ff2494ec76758a1
- MD5 bc9027c78e10878f9c3b50d384e3b372
- SHA1 6c3a48496b325c76dab4af28e12a427cf9e2a113
- SHA512 dd47c3cc80750f5db676654466505ec025605f23b50771aaec5520e65930197215c59066861660ca5fd5a00ebb438b637a228e7cd000de2f6a0bc8170dec45b9
- TLSH T1B841CEF793B4997E851196E4EA146E2FCE7D0924131C7CA289D4AE1B43F2973D20039F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 122df12d0ec71f059ab7cc30c68b2279e387f12ed8903636d3cce7f9a1fd6c07
- MD5 b5abcd1806539ad53d42313e703a2acc
- SHA1 1db7fd0f745a092733cefa1faa32372f5c4ae226
- SHA512 4b57c5a217b60bb24cb62efca6f2f32ee68703c9a7fb5d2debe85f19c7d26e6d0d8b1dbc65f945a48816dd748ccf7c6a202b641136a71cbebf92f57cc416b2f3
- SSDEEP 192:zRQ4yrOwWdczyav7+FpAPRp2Lb9hHsb+WNnPoPf19b2Kckw/VyIsnAUge:zRQ4Xw+B26FUXEbwAPN9b2Kc5e
- TLSH T1C942D76EF914653B9CEBD229FD21BB53E3F5102165902E88EAFC8A1C15EB5CD212340B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 e4f3dec82451c7b3eefca276967409fde05d057cae06462c526dfc1dcb2e8f00
- MD5 a6707bde24ca22de38e5a354ee2dcb06
- SHA1 83e73388bc282ef7f6df90cecf8304868813f704
- SHA512 9476e8ae17788ac5b15e2ada35d65a9be864e2b60d90c18e6a7508c413905f4b10285c5ea00880d10e8932bbb9fe5b5c783d15440652f2cad8408fe8024858b3
- SSDEEP 192:zRQ4prOwWdczyav7+FpQPRpeLb9hHsb+WNnPoPvLT19b2KckwXVyIsnAUgE:zRQ4Yw+B26F8XMbwAPvl9b2KcRE
- TLSH T12452C76EF910693B9CEBD229F961BB53E3F5102165901E88EAFC8A1C15E76CD212341B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
- MD5 80e775e497e26256725722f158c1a7e7
- SHA1 24ed3e37ba5a437a46beacb73c33c43eae3aec98
- SHA512 09ac01744410777e518bc948ab2c8649e18de947108d5d4afd77f70e32dbc68ce133ca9306edde725939c3c02ac6e14f160c2e4f358579e678e152b19c349bfd
- SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrL7pLuLcifyTXOD0b+ErU3wRHGU/QT:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1L7pY
- TLSH T1E77219676C4C9E3B0FA4CACCDC16BE4FADB5024B65D9886843FA582903D5ACF11061FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 4f21f697a45a07e6c2a0edaba40cc6704cac9e0b3df99810bda68ea6cf9b3e82
- MD5 3e38380ade0796950683c8ca588ffa5c
- SHA1 0bc48244b21b1dc94bc65e23b22704b11113c842
- SHA512 bd6482d2d781c65bdd8f4ce515cfbafb5b0078261c2bec7942582f8958692d7798d53b289de7c5d2e25526ea3a1b92f2d16e409ce3a557ff5d57dd494fc68e24
- TLSH T194B012508401AE12C00316F51A8A04883164AF108715270153F07AB1E82629042141D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5864d0.TMP
- Size 96B
- SHA256 a1676d331eb988317922bfebf179d03a914970b1fae697698dbd8345acab4b33
- MD5 3420d38c89a7b05012dfbd5c01248616
- SHA1 6ac8cf668a89fca35f0a065c892f147aaa96ee00
- SHA512 51a29a36f0b3a1986e6c817ec782a9450abf7cbebaff485b23ca0f3fa8d625928c31dfa1f7c7b0e19e3cd5d06eabda7802a84d340c16457c7a310a23795dfd71
- TLSH T19BB002A5C102E722C14613B1399595D971B1DF26C603125EA6E02E66DC267606566960
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 276c1c1f2159ca0f485b514c75e8223cd82903ea2d7e47da23c991dec3410615
- MD5 1b2fdb5a446ba4f958889cfc0cd2dabd
- SHA1 d5ad4184ba67d9a1b8706da71c4d21a87ceddd22
- SHA512 f48fa26abde72606a04bda2beee1c94ee03d0275a11b6ab677cc28e725ba23091b3cae129cd6cff38d4984343c5397533e637d1ba47c410c7205a52cba6888bf
- SSDEEP 1536:mGSpP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:eR++J3qUQm08KMWF0bFTcVHr6zD
- TLSH T1B69312B9991E7C35536BC6E6A0079CAD8CE3DCCE1514157C31C75F0E14EE392A30B8A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 7168713ea37ce13fd5ced3eafbc31bdc16da0ac1379cb32c00a4a35c7fb4a63b
- MD5 7776cae20e4145d0f990068f1c226040
- SHA1 3a977ce2c4fba7c126d6c01246e7ac98d8b23d2c
- SHA512 10cc8db387ea64fb2a5398f4feb47a4c81880b1d4714891bcbd32adb381a88da37d34bb68dcac7904d77826d0087fbbce2d4e19df5fb56553c08aa9ffbec48b6
- SSDEEP 1536:mG8kjP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:ok7++J3qUQm08KMWF0bFTcVHr6zD
- TLSH T1D19302B9991E7D7513ABD6D6A0079CAC88E3DCCE1618257C30C79F0E14BA392D31B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 9fcffcd12a645250b99b6d3a1800961b4609d693a72a9f14198fe253594c605e
- MD5 e0c6dd15496297b776767aa75e98df71
- SHA1 9781434b3103066491777878f763794929f3a889
- SHA512 e1f2d51745b5835420ecfde273e1fe68b1d5ad49fa92406cbe2336c68564f2a359dc6601af0ce5a7762df3db6ed7392cffd517f306c49a922106f387c8e32902
- SSDEEP 1536:TGSpP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:vR++J3qUQm08KMWF0bFTcVHr6zD
- TLSH T19D9312B9992E7C35636BC6E6A0079CAD8CE3DCCE1614157C31C75F0E14EE392A30B8A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 90KB
- SHA256 659e5a460f684558686a3073708d1f593217ea7f07db9c3a11a371f48e01248d
- MD5 cb835231da6f113777975131fabba22b
- SHA1 ff9d76ed4047388880c2fb1ba8b4b17f1208852c
- SHA512 8c2ce4dc628696efca5c5918766b3c80b3a060e0968e0ca24db1fb0b9aaaa68a782229b7e0502144dc71bd1921b3f9fa247b99786b67f36cdead3b35d800479e
- SSDEEP 1536:eGSM4P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:Ve++J3qUQm08KMWF0bFTcVHr6zD
- TLSH T1699302B9991E7D75636AC6D6A0079CAC8CE3DCCE1514117C30C7AB1E24BE393A31B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH