Overview
overview
4Static
static
1extension-bridge.js
windows11-21h2-x64
3extension\...dge.js
windows11-21h2-x64
3extension\...7wt.js
windows11-21h2-x64
3extension\...1mf.js
windows11-21h2-x64
3extension\...j8n.js
windows11-21h2-x64
3extension\...p6q.js
windows11-21h2-x64
3extension\...z4v.js
windows11-21h2-x64
3extension\...b9s.js
windows11-21h2-x64
3extension\...m2k.js
windows11-21h2-x64
3extension\...gin.js
windows11-21h2-x64
3extension\...k2p.js
windows11-21h2-x64
3extension\popup.html
windows11-21h2-x64
4extension\popup.js
windows11-21h2-x64
3extension\...rk.svg
windows11-21h2-x64
4lib\bvn3x7wt.js
windows11-21h2-x64
3lib\cwq9r1mf.js
windows11-21h2-x64
3lib\dxk5tj8n.js
windows11-21h2-x64
3lib\fhm2lp6q.js
windows11-21h2-x64
3lib\gkr7nz4v.js
windows11-21h2-x64
3lib\hxp3yb9s.js
windows11-21h2-x64
3lib\jqt6wm2k.js
windows11-21h2-x64
3lib\rbx-api-origin.js
windows11-21h2-x64
3lib\zq8m4k2p.js
windows11-21h2-x64
3popup.html
windows11-21h2-x64
4popup.js
windows11-21h2-x64
3rbxlabs-mark.svg
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
26/04/2026, 03:07
Static task
static1
Behavioral task
behavioral1
Sample
extension-bridge.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension\extension-bridge.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
extension\lib\bvn3x7wt.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
extension\lib\cwq9r1mf.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
extension\lib\dxk5tj8n.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
extension\lib\fhm2lp6q.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
extension\lib\gkr7nz4v.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
extension\lib\hxp3yb9s.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
extension\lib\jqt6wm2k.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
extension\lib\rbx-api-origin.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
extension\lib\zq8m4k2p.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
extension\popup.html
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral13
Sample
extension\popup.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
extension\rbxlabs-mark.svg
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral15
Sample
lib\bvn3x7wt.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
lib\cwq9r1mf.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
lib\dxk5tj8n.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
lib\fhm2lp6q.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
lib\gkr7nz4v.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
lib\hxp3yb9s.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
lib\jqt6wm2k.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
lib\rbx-api-origin.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
lib\zq8m4k2p.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
popup.html
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral25
Sample
popup.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
rbxlabs-mark.svg
Resource
win11-20260130-en
windows11-21h2-x64
12 signatures
150 seconds
General
- Target rbxlabs-mark.svg
- Size 1KB
- Sample260426-dmembaev5r
- SHA256 e9a08ecb4b1981797a7c54baac1309f5418a0b1cf9c831de31ff5a0d0966e8cd
- MD5 3ca083821122cea20d0f7f98dd3ccda6
- SHA1 a628561bad6e400e7d047ed493b2b67727722a0b
- SHA512 c64dd71461fab65c81a18f73f8ff830dd64e524bd9e1a0f9991760549794afe7dad7fbe10aef267341c69cb8a2143df7cf2d3abfd316174e541223e7c3766458
- TLSH T1BE115935D298942BCA2C930DC704E4643213B1C29F591200F5887F6E5F2B4D75E7B7AC
- MD5 SHA1 SHA512 TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp chrome.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2356 chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216464774361941" chrome.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 4028 chrome.exe 4028 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
pid Process 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe Token: SeShutdownPrivilege 3292 chrome.exe Token: SeCreatePagefilePrivilege 3292 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe - Suspicious use of SendNotifyMessage 16 IoCs
pid Process 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe 3292 chrome.exe - Suspicious use of WriteProcessMemory 17 IoCs
description pid Process procid_target PID 3292 wrote to memory of 3052 3292 chrome.exe 79 PID 3292 wrote to memory of 2356 3292 chrome.exe 80 PID 3292 wrote to memory of 2132 3292 chrome.exe 81 PID 3292 wrote to memory of 2132 3292 chrome.exe 81 PID 3292 wrote to memory of 1712 3292 chrome.exe 83 PID 3292 wrote to memory of 2112 3292 chrome.exe 84 PID 3292 wrote to memory of 1712 3292 chrome.exe 83 PID 3292 wrote to memory of 2112 3292 chrome.exe 84 PID 3292 wrote to memory of 2272 3292 chrome.exe 85 PID 3292 wrote to memory of 2272 3292 chrome.exe 85 PID 3292 wrote to memory of 4760 3292 chrome.exe 86 PID 3292 wrote to memory of 4760 3292 chrome.exe 86 PID 3292 wrote to memory of 2560 3292 chrome.exe 88 PID 3292 wrote to memory of 4360 3292 chrome.exe 90 PID 3292 wrote to memory of 660 3292 chrome.exe 91 PID 3292 wrote to memory of 2516 3292 chrome.exe 92 PID 3292 wrote to memory of 4028 3292 chrome.exe 93
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\rbxlabs-mark.svg1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3292 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa765ec728,0x7ffa765ec734,0x7ffa765ec7402⤵PID:3052
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1452,i,17531426329078565533,367643134178471029,524288 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2004 /prefetch:112⤵
- System Time Discovery
PID:2356
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1580,i,12712527328135114883,2363336341710351993,262144 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1964 /prefetch:22⤵PID:2132
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,2150167888117202747,11359066558314977023,524288 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2388 /prefetch:132⤵PID:1712
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3056,i,11296625571867242142,6096257223030635423,2097152 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3064 /prefetch:12⤵PID:2112
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3060,i,10139023392966769682,14122916056432075397,2097152 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3100 /prefetch:12⤵PID:2272
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4232,i,1753085494799808915,17055310584797654252,2097152 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4244 /prefetch:92⤵PID:4760
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5236,i,3711735854001808128,1525011766829340043,524288 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5244 /prefetch:142⤵PID:2560
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,9365540287938870510,7145409601365176695,524288 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5628 /prefetch:142⤵PID:4360
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5276,i,867513390082043240,1843171578894969548,524288 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5632 /prefetch:142⤵PID:660
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,6313234406202831720,18192711295169659754,524288 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5648 /prefetch:142⤵PID:2516
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5452,i,18242119504209001421,8320461998849709830,262144 --field-trial-handle=1968,i,11930747100899636361,12042942179547324277,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5272 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:4028
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2520
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4580
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 ade87a91c330266ea7a347ad0d380bb558653917ea91e59e7481d8195234f5fc
- MD5 4986657647fee2e3467fb5087c18a683
- SHA1 c1d6173671eb6479cf3e6630ba2c759ee2f5243e
- SHA512 91a92407321dc3e64b2212b9900e4f626e416ddc5d867ad4c2b4f261c7ed293772db38b671e9d86c382218c1f6bc648713b3515a9314f8af0ac8bd5f56b1b1f9
- TLSH T12EE0E599E921AC2708FD176960540B86E72053572740484F3B3C820C4FB056B0689C6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 2695bcb6debfacc59bfacade919fb95565221ae7acd6d52733a39c39cd4d75cc
- MD5 bffb764d703ef37ce78dc1f6f8c9bde9
- SHA1 b8f4f1c863ebb424fb5b3a8ff74958401900f12a
- SHA512 7c72c1b89dc9f515972558feb8a228dd9c9adb9957af085c507ce0d207586c17a50cd47d92fe200c8876e105e1732a42657778072e141bad25bdde5e17d5778c
- TLSH T11A41BEF793B4997E851192E4EA146E2FCE7D0524031C7CA189D4AE5B43F2973D20178F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 c4897419a67700d5823a127e7fb39e68d41b51ac045296cf8d3ac7699fe00148
- MD5 d2fd37ad06c54ebfa38ed2ba0a9816e3
- SHA1 130382bad70a64cfb38ed93b40739121e28faa44
- SHA512 cf1ac184296860d2e661f87fba87c11ffd4c9a369e5f08b8ae44267af2ab4ecbe6e3c02c6b4badbbbd8fa2421801f4082ba9ffff8089904ae336dfd12c440015
- SSDEEP 192:2RHBXv/yWZSeKCv7ApAPRp2ev9qHsb+WNnBKPROe12/pjzarVyIsnAUge:2RHBXv/fsOsUXX4wgP32/pvate
- TLSH T10442D82EA914783B5CDBD229FA65B753E7F5102171D42E84EBFC8A2C15D79CC222B027
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 02fa3748cc960b0ed806669146286ae61d8f8c37c72e1c20fff625c9b568d7c5
- MD5 e1d791f76039330e35fa0e1827d639ea
- SHA1 a37e7b6749565fdef84e626eb8e8ab5cfd1eaf09
- SHA512 4cd2d4ec371de591ed8fc49a3c9c69bf2d80c0d8879044f55af268ee4a35e216538e529304db502c0dc2822c3e20cfadd9949c623d30489800bbc0cdffa3ddcc
- SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifklXODqt+ErU3sjHG9TDWxSal2:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pU
- TLSH T1B672E8676C0C9D7B0F94C58CD8267E4FADB9024B65ED886483FA582A03D5BDF110A1F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 d58292cef2d22bc66ac75297d25ceea98d8851ebf142a7cda946e3c7d06a60b8
- MD5 886d3c9c438ddee1670af258ff6c5b57
- SHA1 dc4d75e44d0c0624e875192c0ad9617cdc35794c
- SHA512 0861c773308d38e340b14b06d4e88f1c80523c4fa5632869cadc20a340b30c50bc2a311ae2ee945f9d3fcd7b1605c1e17a36e8094e50adc35a3a12c2b9f42661
- TLSH T1A7B0129084019601C48712B415C2149831245F24C705170157E06B72EC366A24015150
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585f32.TMP
- Size 120B
- SHA256 ba4495b498164b6cf6830e8dde5b753db2e342eb65a16f33820c585b05263867
- MD5 2c0cc0f9472c7dc9ed88f738427390b7
- SHA1 f96a5c111712a2cb06a7f6b1522fc9ecb0882d88
- SHA512 c571abacfcc2d6bd95fb73e33541fec766b39a2432f0f95065e177ce37143d4c9145afcf56d224bfead60d7a59420d63851ea2b20fadbe6e90d55e394b28b053
- TLSH T1BBB01212C0A2D331C00E037019C4848C7218FF14C901030771E41712EC363A12A15540
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 46d1256e2f9f688a46ac0ac1b0f4d63dbf31b17d88d5535f90fbe0c37e5895c7
- MD5 23c756d5fb7b522512cf3b8d1d9ae4d8
- SHA1 1ed1d204ad3ade7beda6ae0ff812272921fbfeec
- SHA512 459bff5799b413ef24d4130e6451375706274ef22fb796f4913d94ab0a86967b2a59419b2e697f0632b30196e39414efa722c146d352209ad9068035f0c522ba
- SSDEEP 1536:ZuLd9P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:aV++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1149302B99C1E7D3523ABD2E6E1079C9C4CE398DE1218557C31C76F0E14AA393A34B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 7d85367ee48dd457e1321d4ae3df99f9a2c779180e912ee0e3453c2837ca0baf
- MD5 d20164c9058d959397c39468a7cc3ca1
- SHA1 ee866d70187e35005aa3d450e0db2310958f2929
- SHA512 f92258ef1907147be45727d8b5888a89969946436f88ef42b2932f4abbd4f22c94a232ac890017330c977732891a2b032f8ee9a20605386a10a15668b21e06d5
- SSDEEP 1536:8uLd9P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:jV++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1D09302B99C1E7D3523ABD2A6A0079C9C4CE398DE1218557C31C76F0E14AA393A34B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 dea34489e45c2f94a95a5e5757db2d686faf99e000d4be56575ca5f80bb33a12
- MD5 1a9da97cc0f654acc738bc9b49604d2b
- SHA1 cfc38625bf86ac6730e5e8220b21dbd3b93f77d1
- SHA512 5e664dfa8458c81b4c51554fa367488621df3cc9b34b9f8ce93f544ba7d4f39af141e4ed09a9b4e78eb4e52284cf960f8430df6c4ba53c67cf0b78866df03881
- SSDEEP 1536:ZuWLP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:3j++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1E49302B9981E7D7913ABD6D6D0079C9C4CE38CCE1518657C30C7AF0E14BA392A30B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 90KB
- SHA256 efe78c3e3c6eba684c600b22a7398c9a407da1ffb14cc3f604327194852ffb6d
- MD5 6807fc8ff766e88f45e188c559e4b422
- SHA1 960ed654f722ee6b94acaf5a0fdfdffe1fe7d469
- SHA512 d7f5641179df80d8df57e6927ac6beed91c9346b342062a4cf8d49e6f691c42fc8b84af319afb2d00f1b0c43c9a48cf40857cb29b21d22e392af1f1474f747f3
- SSDEEP 1536:hZDP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:T++J3qUQm08KMWF0bFTcVHr6zT
- TLSH T1DF9312BA591E7D39636AC2D6D0079CAC8CE3CCCE1514557C30C7AB1E18BA393A30B8E5
- MD5 SHA1 SHA512 SSDEEP TLSH