socelars | 9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/04/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Size 2.2MB
Sample260430-vb6ebsfy6v
SHA256 9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a
MD5 bb5b57a4988cad63af9e448df97bb6ef
SHA1 dfdd50489cbc8015dc27d562ade2d7ecccfb4814
SHA512 5e4ac3dee090a0b90fe2b2ed2affbb8ff56b55e5571071f31b38ab4f7edd32b8aece767caa56f843c2173c357cf01d78a7f545320add113b847b8a88ee3dd825
SSDEEP 49152:zFA1pvTMbOwa0TmUqMYEOFQOSIsQRYl5P0k+43auAml0ZN4VoDSLFphcTvSDXka:xLOwoMLOFQOSjz
TLSH
T1EBB57C62A6D444F7E897037951F61B3F8D90BB30072954E392C4A88F8E9DDE3263D762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery socelars spyware stealer

Malware Config

Extracted

Family

socelars

http://www.iyiqian.com/
http://www.xxhufdc.top/
http://www.uefhkice.xyz/
http://www.fcektsy.top/

Signatures

Family: Socelars
Socelars is an infostealer targeting browser cookies and credit card credentials.
stealer socelars

Socelars payload 5 IoCs

resource	yara_rule
behavioral2/memory/4560-2-0x0000000000F10000-0x0000000001162000-memory.dmp	family_socelars
behavioral2/memory/4560-3-0x0000000000F10000-0x0000000001162000-memory.dmp	family_socelars
behavioral2/memory/4560-1-0x0000000000F10000-0x0000000001162000-memory.dmp	family_socelars
behavioral2/memory/4560-1231-0x0000000000F10000-0x0000000001162000-memory.dmp	family_socelars
behavioral2/memory/4560-1239-0x0000000000F10000-0x0000000001162000-memory.dmp	family_socelars

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	iplogger.org
6	iplogger.org

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe

Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1076	chrome.exe

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
3712	taskkill.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5048	chrome.exe
5048	chrome.exe
1628	chrome.exe
1628	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
5048	chrome.exe
5048	chrome.exe
5048	chrome.exe
5048	chrome.exe
5048	chrome.exe
5048	chrome.exe
5048	chrome.exe
5048	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeCreateTokenPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeAssignPrimaryTokenPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeLockMemoryPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeIncreaseQuotaPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeMachineAccountPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeTcbPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeSecurityPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeTakeOwnershipPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeLoadDriverPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeSystemProfilePrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeSystemtimePrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeProfSingleProcessPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeIncBasePriorityPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeCreatePagefilePrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeCreatePermanentPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeBackupPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeRestorePrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeShutdownPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeDebugPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeAuditPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeSystemEnvironmentPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeChangeNotifyPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeRemoteShutdownPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeUndockPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeSyncAgentPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeEnableDelegationPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeManageVolumePrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeImpersonatePrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeCreateGlobalPrivilege	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: 31	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: 32	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: 33	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: 34	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: 35	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
Token: SeDebugPrivilege	3712	taskkill.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe
Token: SeCreatePagefilePrivilege	5048	chrome.exe
Token: SeShutdownPrivilege	5048	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5048	chrome.exe
5048	chrome.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4560 wrote to memory of 3164	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe	80
PID 3164 wrote to memory of 3712	3164	cmd.exe	82
PID 4560 wrote to memory of 4352	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe	84
PID 4560 wrote to memory of 5048	4560	9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe	86
PID 5048 wrote to memory of 1520	5048	chrome.exe	87
PID 5048 wrote to memory of 4112	5048	chrome.exe	88
PID 5048 wrote to memory of 1076	5048	chrome.exe	89
PID 5048 wrote to memory of 4112	5048	chrome.exe	88
PID 5048 wrote to memory of 3132	5048	chrome.exe	90
PID 5048 wrote to memory of 3132	5048	chrome.exe	90
PID 5048 wrote to memory of 3400	5048	chrome.exe	91
PID 5048 wrote to memory of 2268	5048	chrome.exe	92
PID 5048 wrote to memory of 3400	5048	chrome.exe	91
PID 5048 wrote to memory of 2268	5048	chrome.exe	92
PID 5048 wrote to memory of 3004	5048	chrome.exe	93
PID 5048 wrote to memory of 3004	5048	chrome.exe	93
PID 5048 wrote to memory of 3576	5048	chrome.exe	94
PID 5048 wrote to memory of 3576	5048	chrome.exe	94
PID 5048 wrote to memory of 1304	5048	chrome.exe	95
PID 5048 wrote to memory of 1304	5048	chrome.exe	95
PID 5048 wrote to memory of 3604	5048	chrome.exe	96
PID 5048 wrote to memory of 3604	5048	chrome.exe	96
PID 5048 wrote to memory of 3372	5048	chrome.exe	97
PID 5048 wrote to memory of 3372	5048	chrome.exe	97
PID 5048 wrote to memory of 444	5048	chrome.exe	98
PID 5048 wrote to memory of 444	5048	chrome.exe	98
PID 5048 wrote to memory of 2784	5048	chrome.exe	99
PID 5048 wrote to memory of 4004	5048	chrome.exe	100
PID 5048 wrote to memory of 992	5048	chrome.exe	101
PID 5048 wrote to memory of 1628	5048	chrome.exe	102

C:\Users\Admin\AppData\Local\Temp\9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe
"C:\Users\Admin\AppData\Local\Temp\9c0996d406b75b03f6bceda8285c8da696565c8b52d210345e5f4a4b0afcc55a.exe"
1⤵
- Drops Chrome extension
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4560
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im chrome.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3164
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im chrome.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:3712
- C:\Windows\SysWOW64\xcopy.exe
  xcopy "C:\Users\Admin\AppData\Local\Google\Chrome\User Data" "C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\" /s /e /y
  2⤵
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  PID:4352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --window-position=-50000,-50000 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" https://www.facebook.com/ https://www.facebook.com/pages/ https://secure.facebook.com/ads/manager/account_settings/account_billing/
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5048
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ffbc9d4c728,0x7ffbc9d4c734,0x7ffbc9d4c740
    3⤵
    PID:1520
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,10032508916208383813,17445968710751986500,262144 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1964 /prefetch:2
    3⤵
    PID:4112
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=2112,i,7431385846551901901,13305083687146151227,524288 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2136 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1076
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,16663079746770176946,13688708052247457995,524288 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2552 /prefetch:13
    3⤵
    PID:3132
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,11207092574967802207,4416591453191760669,2097152 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3260 /prefetch:1
    3⤵
    PID:3400
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,8825569446958467085,286337676526668734,2097152 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3296 /prefetch:1
    3⤵
    PID:2268
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3756,i,9145101676676955519,11388153396652661239,2097152 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3764 /prefetch:1
    3⤵
    PID:3004
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3784,i,14902837861282658351,11939472420357317671,2097152 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3912 /prefetch:1
    3⤵
    PID:3576
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4568,i,5811280461728711332,14334431001526144474,2097152 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4396 /prefetch:9
    3⤵
    PID:1304
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4924,i,12376158111453730998,5198460919994960522,2097152 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4840 /prefetch:1
    3⤵
    PID:3604
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5088,i,15098114544523120244,11408796248555132975,2097152 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3268 /prefetch:1
    3⤵
    PID:3372
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5220,i,6766157951910499041,45772663772600965,2097152 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5236 /prefetch:1
    3⤵
    PID:444
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,3258615487523464316,4868548091622054371,524288 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5640 /prefetch:14
    3⤵
    PID:2784
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,4886448285556464854,16453565174286734819,524288 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5624 /prefetch:14
    3⤵
    PID:4004
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,6924357978996664139,4678048447968639543,524288 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5708 /prefetch:14
    3⤵
    PID:992
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4684,i,6298246843391745862,17246869053326624383,262144 --field-trial-handle=1968,i,6824955666199542854,1038036982831333727,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4636 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

background.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\background.html
Size 786B
SHA256 a1064146f622fe68b94cd65a0e8f273b583449fbacfd6fd75fec1eaaf2ec8d6e
MD5 9ffe618d587a0685d80e9f8bb7d89d39
SHA1 8e9cae42c911027aafae56f9b1a16eb8dd7a739c
SHA512 a4e1f53d1e3bf0ff6893f188a510c6b3da37b99b52ddd560d4c90226cb14de6c9e311ee0a93192b1a26db2d76382eb2350dc30ab9db7cbd9ca0a80a507ea1a12
TLSH
T1AF01900E1D04A56AF4154DCC70B1FA2C188EDF03F106CC6441F4D9A6ED9A7CD8C626F5
MD5 SHA1 SHA512 TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\icon.png
Size 6KB
SHA256 9434dd7008059a60d6d5ced8c8a63ab5cae407e7152da98ca4dda408510f08f5
MD5 c8d8c174df68910527edabe6b5278f06
SHA1 8ac53b3605fea693b59027b9b471202d150f266f
SHA512 d439e5124399d1901934319535b7156c0ca8d76b5aa4ddf1dd0b598d43582f6d23c16f96be74d3cd5fe764396da55ca51811d08695f356f12f7a8a71bcc7e45c
SSDEEP 192:arFa6ynwcj6POoDbxN9EUQYZRia+ce/lkygkkl0:apa6mhjshD9QYZR3qkr/S
TLSH
T1A0E19E1CEDD537BCA35E1601214F81B164E7B85383341A5C11B898FA94C6A9ED39F2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aes.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\aes.js
Size 13KB
SHA256 fc7e184beeda61bf6427938a84560f52348976bb55e807b224eb53930e97ef6a
MD5 4ff108e4584780dce15d610c142c3e62
SHA1 77e4519962e2f6a9fc93342137dbb31c33b76b04
SHA512 d6eee0fc02205a3422c16ad120cad8d871563d8fcd4bde924654eac5a37026726328f9a47240cf89ed6c9e93ba5f89c833e84e65eee7db2b4d7d1b4240deaef2
SSDEEP 192:9pQGDuD690MPdz8Ui015ll1I57I2Tru6h0hNmHV+m9eIfyAqYfinNVYEUUFJZmUY:9OiT0wz8Uiw/1S7DegkcHpeIuScZbAX
TLSH
T1B95296C936EDB94263A63068587F7017B86B28B5945C4824F298D4DDF9A899DC03AE3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\background.js
Size 15KB
SHA256 c535bd10ca16da8a2d7f714e446b426a56bf17be6f376bc05817712a415f4277
MD5 d105dde5205a092cd17203882853656e
SHA1 0407661eb7421131155c2e4c611f5f1db6778eef
SHA512 4242b29f64254b9476c249501906ff1e7919ad84c39280c544940f4a8c5742ad3db105966ed8f33557ca8c4ddac9436c92b653a27d4f122f359bf618d8564672
SSDEEP 384:OSqK+K3tmygSoFlp9kROMSC/SaHjj2lq40fzBlobew:OomygSoFlp9EOMSCqaHj6f0tubew
TLSH
T1B2629D886295B88719BE8B3359A34F45B07FB762EA8336BB4319BA8404F1C07CD557F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\content.js
Size 14KB
SHA256 41e129bb90c2ac61da7dac92a908559448c6448ba698a450b6e7add9493739c6
MD5 dd274022b4205b0da19d427b9ac176bf
SHA1 91ee7c40b55a1525438c2b1abe166d3cb862e5cb
SHA512 8ee074da689a7d90eca3c8242f7d16b0390b8c9b133d7bbdef77f8bf7f9a912e2d60b4a16f1c934f1bd38b380d6536c23b3a2f9939e31a8ef9f9c539573387b4
SSDEEP 384:rlBc5VG/MavcrTkzqaKNVyQiYCIizzSEWfw0:rrc5VG/MavcrTkzlKNVyuw0
TLSH
T17D52D2DE53D8E97B2ECD1E83BD508ED650B2A236D7C932C7872CB94C51E90ABC5084B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jquery-3.3.1.min.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\jquery-3.3.1.min.js
Size 84KB
SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
MD5 a09e13ee94d51c524b7e2a728c7d4039
SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
TLSH
T1748319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mode-ecb.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\mode-ecb.js
Size 604B
SHA256 03164b1ac43853fecdbf988ce900016fb174cf65b03e41c0a9a7bf3a95e8c26a
MD5 23231681d1c6f85fa32e725d6d63b19b
SHA1 f69315530b49ac743b0e012652a3a5efaed94f17
SHA512 36860113871707a08401f29ab2828545932e57a4ae99e727d8ca2a9f85518d3db3a4e5e4d46ac2b6ba09494fa9727c033d77c36c4bdc376ae048541222724bc2
TLSH
T10EF04C877CF9AEC1D5A2B1AD8B7FC51D787400130556DB407B0C5160EFD84300B45AAC
MD5 SHA1 SHA512 TLSH

Submit Download

pad-nopadding.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\pad-nopadding.js
Size 268B
SHA256 282308ebc3702c44129438f8299839ca4d392a0a09fdf0737f08ef1e4aff937d
MD5 0f26002ee3b4b4440e5949a969ea7503
SHA1 31fc518828fe4894e8077ec5686dce7b1ed281d7
SHA512 4290a1aee5601fcbf1eb2beec9b4924c30cd218e94ae099b87ba72c9a4fa077e39d218fc723b8465d259028a6961cc07c0cd6896aa2f67e83f833ca023a80b11
TLSH
T1B0D02B5E3DFBAF42D49972E5C73DC14C71244103066A5EC2AF0C02728F61C395799AAC
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json
Size 1KB
SHA256 20d39e65b119ed47afd5942d2a67e5057e34e2aef144569796a19825fea4348e
MD5 f0b8f439874eade31b42dad090126c3e
SHA1 9011bca518eeeba3ef292c257ff4b65cba20f8ce
SHA512 833e3e30f091b4e50364b10fc75258e8c647ddd3f32d473d1991beda0095827d02f010bf783c22d8f8a3fa1433b6b22400ad93dc34b0eb59a78e1e18e7d9b05f
TLSH
T137318537E580883B26F5EB01BEB83282FB62835B55404D4FB07EA05C0F75E2A018435C
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 20KB
SHA256 8234996446fa03ed4e9d4246df29136b0272c549768b08545d6a3ae458868fba
MD5 4e28dbbe5fcf5e9bd20e543eec660b09
SHA1 1e0397b100d488e3113687e30204d4738574b2dc
SHA512 d1cb0424c0acda55b3cddad2663eaf6e517f1e80034b18ac5c32bb492c009a0e5385117f0b32c1606655bde1b438e57914852e77a246563c24dc037303f020c1
SSDEEP 384:UujAr7KxkXqKf/pUZNCgVLH2Hfgsl+17pLuLcPfccm8KCBATnXODAH+ErU3xWHGS:UeAr7KxkXqKf/pUZNCgVLH2Hfgsg17pu
TLSH
T1DC922A27784CD97B0F94DAC8DC167A4FADF6024765D9889983FA9C2D03D0BCB11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\CrashpadMetrics-active.pma
Size 1024KB
SHA256 67ee11b51cd6f637795e31ab501f135ed595c8459bce885735f08b0418513a17
MD5 34c29bdb9e41b1f47f2d2786762c12ec
SHA1 4075131b18c3487e3e848361e112009c897629c7
SHA512 ca3a978798e77b2ced27b379f38e935ef18beaa7ea23e34270a9af20b37e1b1c5edf9478606311cf1acabd83992766cb3da8444de9394c674d5955bdbc53c0d0
SSDEEP 12:bHCskaXhVMMBKEKSCemJKlkQfIYVhYJ0X:bi0ROMMBS+MkEPYW
TLSH
T151259286B34455BBC54189B188AA17606274F9E89F82179A3B18E60F1E661DC0F51964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad\settings.dat
Size 40B
SHA256 d4b20187d1a27791dd95f08abe7840e0cdd1ce61f275bd653b136d14b779d85d
MD5 a9c52baf89a3b7bd355ceacb31f4c1fa
SHA1 772d3bd6852fdecd31426b10b2a48b0bb4513a74
SHA512 4b5eb51f8e5d34c50df3f8fbaaf6247de584377339da9ed1a759628bc0c6a5ffa3098bfa7fbf0ca780c77f39d44b791375aefc45ca92b2ec120b8b98c74f7f5c
MD5 SHA1 SHA512

Submit Download

9212c4e6-2dc2-4e57-a76e-3b2a6cb28626.tmp

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\9212c4e6-2dc2-4e57-a76e-3b2a6cb28626.tmp
Size 20KB
SHA256 ec496cb2cbd6f0c2560618ba47556005c6cbe41730e032ae4b7488bbf986c383
MD5 09659b09646edf81769c7e23724522f5
SHA1 67e943a104602f3e9a43ff58a08e288bd91fa8ce
SHA512 b15ceda39e906029d347304db6102b119da42aaeaf040c20f9bb7ef69230d2f59f8df1ddc4464b0642de5ff8c16f2c8dd89d6d2715d10bdc5753eb747d5710ef
SSDEEP 384:UujAr7KxkXqKf/pUZNCgVLH2Hfgsl+m7pLuLcifcFIM8KCBAVnXODAH+ErU3xWHd:UeAr7KxkXqKf/pUZNCgVLH2Hfgsgm7pT
TLSH
T12D920A27784CD97B0F94DAC8DC167A4FADF6024B61D9989983FA9C1D03D0BCB11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Account Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 046f25579477bf2de03dcf2f0d1852782bf59f3d4e9cd55e2c7900bc86a7c935
MD5 2fc17a5d2b4276f459c205880acd87c5
SHA1 37529a5d418c12fe209550aa2b45221efa1e3a10
SHA512 1ed28789035677c02f3eb2fd8387f92933f1b7ceb3af8c96a387caaaa4fe22cb36a51fde1173e2ce0113fb174e6ec9bf474a38877dfb32b8cb9e19caed8b6b57
SSDEEP 6:/FCwaoa3eMN810Y3pCOW+FPtfaNNAY/EXiIlJI/kllWDh2D9lqDe9n/ll:dByN810WRWKlMA9F/A2DZl
TLSH
T1A6138CAC91E92D3BD282803C594A3FBC1BF09504BF5656E38630B5B160C4322300A25C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 04b57071ead3aa7e2440fccbe41e49554cf4a87a97cf785d6e81c3dd06153016
MD5 43d2c9086ea6ad52831f7be4c7960cff
SHA1 cd12b66d2ff482f1505cf8efbc34889d8ee3e1ae
SHA512 01ca747b7f6791be27500bc634cb075ab5267aa0a2b2cf5ef34042a759a1743f7400f88fa851e27a0a83fb76369cf0c43aed0d70cb90bc565b08a8266e53fae0
SSDEEP 48:eZfl2PYL+MCXgloGMiXW7JaB8W0ARGxoyCqS8aBCyw:eZN2gL+/gloGDWFaBF0sPDqSCyw
TLSH
T1D144A8E72D54D9C7EB28CEB11C505238CD32962B1C95AD37F52504B31A899F33228656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 53ac11b56fd0e8fecb82a53722c105a4da24ac9e3e69aa5367a2d858eb08e3f0
MD5 7db20c5884471c08fe742935bb22f20d
SHA1 ad7172feae27ccd43c4cb5250420cdd6f1f3b4b4
SHA512 8229d925969d175cc2915ee893dd617de2b48c4d508d61b9bc53f518e83f3e83172b134584596b1eaec7428027693066902ee68a46af105bddf25bcef3245edf
SSDEEP 24:WTqkGCDOj2NIRqBXQ8XloJc0C/PuhPgg1eA3uRxbagzu3XO7mlOji2n:NkGaGZRqRdoJVCehPgBADHHGmlYVn
TLSH
T15A25E656DC4BEE41D4FC1638AF10DA42BAA44CBB71DA60D628B805DA2694672988D0A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 8de13c54841372202a9fdde95a1aee6051bb77e979c69f2de4594649f00f8adf
MD5 e1785d80c967e8cd34a1471a50ec7a66
SHA1 65df7ca770a3e0d8852e784c290803a9e9f6afeb
SHA512 360d8f458455fbf7f9c0b5738389c959dec87fbe5d3fbb97d5e8d0a847bf30413f5e86fe7f79d0e96dd74ceb37cec85d730a2544df0f62fe32f2690886dce798
SSDEEP 768:DVTUfDPLSgcRUv+6Z4vfDPLSgcRUv+2X/K44U4O4O4c4sUfDPLSgcRUv+LX/K48k:KZHOfL5mJ
TLSH
T185163BE32E706583E6C1EA70EACCDD39BCF422419897E9D19166427A76E1FC527800DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000002
Size 69KB
SHA256 aa9ebea13743f59a883deb50b1aa3cee79445c26865d8691c2f4af9f67d20f3e
MD5 d06a9d66f08f8137312a84a034486ff3
SHA1 69507564f5063ec0cd1e3dddf0ff829a01a9f1d1
SHA512 3d2438726dfa758301fc3d76fcd9210ced1cdd206eff02ca7c93275154352f94095f93d43943de4194d865495ba7c2f242439ce17fb1199193f37d65f953fc40
SSDEEP 1536:Yor+MYgZu+Kwdf5oVgUThTCqkTpjL8gtxRFL8vh9QXXijpXmG:Yok2KwPoVlToqWpZhQvbQXsx
TLSH
T17F6302775A9C7C3D3E6E60EFB5FCEF2B41658FC4A216D64A414022EED4068CC6141F92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000003
Size 38KB
SHA256 1d39335bcc92df6017b3a1b2c0ee549a3cbde2d3ced0b09519a043d38a8bec30
MD5 356eb2db86a3c20d9f12ab52423b7030
SHA1 2faedf35f5b49a4d4a15316641990498c2358c6b
SHA512 caa693ae790cb8298723e113709d3f8bbd7ede64ccfaf25c445f9092040dfb61e14796ba5c983a801b05502763a33c030c1a6494d0e79fe351708879f68e1fb2
SSDEEP 768:gEpDNzk8U9Yip1z6CK+fMSqYc4l5q+GrMV1H/1d37gkVKIY1JCEeDP3396d5dIyZ:TpDOzB1z6CDfMLYugV1x5RY1JCEeD/S/
TLSH
T1DB03F1877A25AB2E99FC4EEA1C9FA04F5821C5DEC3EDA5CB0C07F54241A123654DAA03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000004
Size 35KB
SHA256 5e58ccbbaee684d3144c2c051bf0e3e454652cbfffe5dc00f8bae3d016113504
MD5 dd0c126703e5424754ba276b7de42e04
SHA1 8419c79cde865ebc542848458f15c7cb0bb8d8c6
SHA512 2b334d0a74e86d8125ac8eb8dac4c99934ecac698ec2511d89f245b11f66553c1a6bfc20a9e28512902fe7d30e7d63ca40e8b051c34104d1b8200ca5cb9a9fa2
SSDEEP 768:UwrJSbAil/JDsVdg7rHl1HZuCAvLR80Wqq46WdfRJSG/RX:UwrJSbAEhIVC77duCGxP6IfRJx/RX
TLSH
T149F2F2C9B6D98502B34F96B9D86B80802E2DB6CDB1E2E3AE780C0F70057D6BD15B1355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000007
Size 72KB
SHA256 ba8e89e7619694896c2fd75f3515a1ad632a1c3eb94e666b4199d6e8b775a3e1
MD5 d2c6f794f8d4eff3e300369fbee677b9
SHA1 9f675422bff46f380fd98587a4d443e9e4db7f3d
SHA512 5761fb7bfecd6712e278cef98ea1a85f797f0eb8bcafcb1e95d3d4dcb6250e3acbc8304f610e5aa4fc4b9c1a3b33f512066326ce5a4df22d174e4f3ef85be4c7
SSDEEP 1536:nMpbth1navs1KnhFTReGyBePegKHNVrXMWdmU2z1ZTSOY6z:nUth1avs1Kn5evBeP/KHXMWdfyjI6z
TLSH
T10C7302F54B843D05D60D9EB933A70FEE569E3DA59CF0EEEBCC6A0CB49D2AB044610845
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000008
Size 119KB
SHA256 2f1d17c01e1fb214a5f8fc396a05114e87c3ea6620a65eb025d8f9c28c84cbd3
MD5 99504d77a90fd7f83f1b48cbabb5ed77
SHA1 d2d5c307adea9ed0b44444bc9c1f909124125668
SHA512 068cef04f38730571c54c93134926da41c9e4d4aeb0bacb0c4237e19a94af58bc4f237227198f9ded5111f4b83b9025583ed51abc302f9bbffc390dc1dcfa1a5
SSDEEP 3072:tPwr337OOpCCOpb0TwE3ohTHh2+O4cbr5dP6FGOtPuo9iL:9wr3rOO0Rpf/hLPO5viFTziL
TLSH
T17BC3129F6E8CF700A66A4DCA8CCBC7663B20961C29C9B7513B573013CD8ADBE58D9714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000009
Size 222KB
SHA256 3a2fb2d2c982f876fc417cc2d830a7ed58ed7065d25f250ac17fedc7031cc8ef
MD5 3e9b76c91fc57407a809c583d73a9a1e
SHA1 ca38a969ce261a63aa3d8f749e7022f2c8b92b65
SHA512 0bc45c6ae2ef71c87b9283ea7f81f536a2f3187e50db7ed523761a961bf7f1c1579600e07c1b9bfb99afed6a41175bf804c6af2e45a7d9e686edee876d715a39
SSDEEP 6144:K55tIR59u/+F6q39wAQPG7zR62toeIP9iKUw:K55cK+F7NlQPGJ64ili9w
TLSH
T1F224121B65D1E200D87D8DB8EF9C3D2469B2945DD229B72BE74A5FB850870E03ECE1E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000b
Size 234KB
SHA256 dedef4a1af44d6bdff647cdf6dc609d9f06989daf3547d1bf323af8994bfe510
MD5 312bf1da6ea96002f9e898265df20309
SHA1 4f0a1c48f3613b397b38898611b1e1aeb9796008
SHA512 505905ef56d3f9a6ccabd710e443015adbfe04c702c6df16f04bca1d90d7e119542c326389ca00987d24df5d1044e015f90a11154c43c096747785797f3f7699
SSDEEP 6144:B2YXx2rEKdgBj/ahFn46dW0X3YLPQ6us4wKKgdqB:gYOh2BbaXZ4rQ6B4wtgQ
TLSH
T11C342323C6098DD1CE41AD009D9EAE51F9726F6FDE44C302BDA5F428229FF8C58066A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000c
Size 49KB
SHA256 41c94d59596efc9b60b0ebf65239fa7742fe99b4336d39a50f9fbde0254e1e72
MD5 da64c41f8f486e9448bc8b90ee89d3a0
SHA1 a37226db52b4d7226e73b16ea44edb63616302b4
SHA512 ce648bcc5d5419dc3a964b2fc3a121d11a8342b794987ce4b2d626e4f06c0b4febae57117bbe0b4989a3af3ecf2b9415ca491a43785534c6331e7b84133a3f36
SSDEEP 768:K/Wfw3gBI3uONwUWFtrks1CnZTCrncHU6X1GBRSUmJ8a3Q1/3jE0YbgjkiqaBjv6:ez3vbF/l8zS/JVQ/34nbniqmKKy
TLSH
T1A2330239C64E021715B8AFC69F54E6F474A272D2D0AE35428C1DA299CD0D5CDF239B3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000e
Size 87KB
SHA256 c02632e9c8e8235d25911bbb991124b716dbec6a6994e4e91aee5c017c37e507
MD5 28324e54b78046654af04b41b805bbe0
SHA1 b904bd56c1ec8301f266ade6d4029f775908dc05
SHA512 7de6d0f47efbb74a42d80e4e4ab077308f6f05bbda7c70b3d6c805fafb4c1b730ea975236600d3f37385e285f9df953edd3a8541a91ecdb2daf0a2ea6139e1bf
SSDEEP 1536:ifSFfq4JLHv1H+HUHh5haJTRneAoUOYGxdybyDVzg2CeUZi6C39i5Tp:K6Bv99a5RneLUOnIm1go3k5Tp
TLSH
T19F93025175C25C01B71F7BBA1AC1C61D69DA75B8A9BA130E8E093FE25ABD013B20137F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000011
Size 50KB
SHA256 1d07d2892ce3729d266996e699d97f60d328db27fb8db164b79dc242e7eb8578
MD5 0f490a704c9a72ac7585996cca44839d
SHA1 0b574501b9476ea2427c760ed555143948bf925f
SHA512 42aaa13578660abeb03e0b825b10b058483ebdaf6a3bbf9d635a33e262f507400f01adf226e7d9c33e13e1d99c7f293c2e6af6f799a1313d7c8962b8582e4363
SSDEEP 768:c0t9jX/gQfQsqM5hDMjgRMh1SS3ON5oFDC3T48RIcZth71yd1oKodzyns348b/0a:VXoyQsqMnDMeEtO9gcl1ydXonb/0dKN
TLSH
T12B33F18A5C046A35D1F9DA1A9D4B0303C75479AF6ED2861CE0A38A3A085D1367F7F9F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000013
Size 25KB
SHA256 531e91672daf6063fd6be177ffbc47be83f7091cb8824537bef79bac20102f0e
MD5 9d23ecbf96471315bdda15e799bf1a60
SHA1 783505e687b300d1f9f51691c0cbd9f9ef475527
SHA512 9ea87e5eaad047ccee4eb90e603e0e0944fcbe56c09c33d91fe7ae58e226e668a6484ddbbad3632f10ed972efae93114cc25f08ed9eec6d10a57c9a16cf12ca3
SSDEEP 768:M0sY2oZb5o/PDS54I5BQOweAsU2lSrvBqwH4Hdcvqs:9lzFGG2Ijfj8TP3v
TLSH
T1EEB2E1833AD334B171B5E0A9609D4B1294382AAFF34E851AD9027FAB6496F111535CEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000014
Size 25KB
SHA256 5e4611fdb5c7906e74b744366efc4778029bd654117c564a285dba17d1183e12
MD5 960038e61249b8206edf905c44f06e1f
SHA1 4eade31097df53ddce9bca4f9d3c0829da38f827
SHA512 0d0c83d8ceebda95004bcc078334576462d9ae8f4536f7c882a13fd1770ca8fb6776149c3984bd177c07acf239bc0d5507e2a9a3617c63d972d0f75eab40ac21
SSDEEP 768:U6v1HTpbmOblQZkN4yU5+vwiZdwQUKBw9xGU+X:UAzpbjblQe+2vwkwQTsGvX
TLSH
T101C2E1C07FEA088D4A711A697AAAC9437189676EC8C43D4EF7C20167611F2DCF6C1D64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000015
Size 39KB
SHA256 10502836eab0055fd85f524dcdcac18d339736eed9e63d54dba5eebed120f240
MD5 a66c17e7abca7b23237b620b38f9c157
SHA1 66c6db056c622165734c76120d4c2961d35b1688
SHA512 a3f55b0fde8b5fb80dee4f05c96efaa3ce4628564fba165c7cff1dcc8e916ebed176e3f9f42a7f7cb5060780028fe6c7210c1f63a6178b7c174d17ec126a47ca
SSDEEP 768:ciVI7XMoMiNQgmb5xqzbWWxVNl5dXAU3nDu9hSO3UFneF+4wg:cgKM3olmdxq3WWxVrXTXDu9hl+neF+Lg
TLSH
T1DE03013EC774BB2B841B2CBA41D2DDA438F85CF214E61D055FE2A976516A72EE1E0C41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000016
Size 19KB
SHA256 d60d307db85847b82b11288fe460505dc4068f49faf14688b67374d39e0a6f7b
MD5 96bbe1fa7c6e027e618cae0f28c99bac
SHA1 30233d6bcbdd33cd6c52f815efe7fb1d39625ee6
SHA512 b53593fa3343dd6965e9b62ecb8cedcecdd278ac72e6ac9615b44b5d26cb989a2d06389083db0bd66cedff3303f362fbb879ba7b38eead6d45960b891af7db97
SSDEEP 384:x3rcp/4YBntISYT1NRTahSuoW9gkT0ID47crELVwSz4Kc2L3yaFA1qU424C:R6DRmr+hgJbI94p7y7qh24C
TLSH
T1FA92E1C7E7DCF15D896E95AF266F82D1AB38753BC219211C64F490DC604EC116774B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000017
Size 26KB
SHA256 5a2f5fca6d2dd9ffe38d898ecefbc81a039a32fbf2e4df17906e81aaa5da0dc4
MD5 5c5232017f280f53e32d1993a74a4fcf
SHA1 4f8b6f022510c04baea4046522ea1418ca324e26
SHA512 f8a67d0a9bc484d4de6c50925cfea4f7a487a4c19ad5af0b30b7abc6add4c324e7edb52f13d3e63f885ba96bddaca0a2e2a3e2574af476ba1ace4b6599f81736
SSDEEP 384:pmOkcpPTYbV/Q4ldbpE7w5ZkUQn9Qk7MycJ/Xam1K/e2Am5UBBCzHhLOkCJJkfAM:dFbYB/ldbG0mdn9KZ8W2UMBClJJkflz
TLSH
T14EC2E087201C968AFB9399407DB88671138E27D921DA5FCF8DAD413152D1BE0AEF7047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00001a
Size 56KB
SHA256 6e74f658a81d7f132e91eefa7129719466fcade8cbc99732162bb315621adb8e
MD5 6bd8b4dc30801946c44b3da3e332dbcf
SHA1 78ca22a0d9fcbbfc501b94af34a3db6b88312aa9
SHA512 bffc779b2e42955b94bbcfb09c910156e5df595c7c9872b2f3d19fe13f6bf471356d30f01f84776d8aa5b8688e00dae1dd0404dbdf9b9bfb7408db4d25bf57f8
SSDEEP 768:cNoRj5KR4fg56UvxMuaQNFPI77Odu5UjupSLL6gzBE+TT8NQ0HyhKrbhbqZo5Xv+:cuKog8UvTa6FA79poFzBJ4KCPrb5fdu
TLSH
T17B4302EC7650C5742F9D9CA9A6F65755CD9F03D303F72B924828AF027D8F4FA82819A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00001b
Size 76KB
SHA256 bbdb4de36778b9dfaf0d76f72ff5eee62586cd6f885d5f60b21436c64f9897d6
MD5 27133cd77bad23037dd37ea625f629be
SHA1 7d684f9aae9346022129138bad558be1ae13c93a
SHA512 3b42a4bc7f4bfc67133b6771b0bf30bbba215124e508b728ca9f42050887bdb7f98dd8c55c82193ff50ce5847a9e4ccecbbf3d77c50fef5aae177ae0f22a5e6a
SSDEEP 1536:zK5VCBgVlaRCfvydYadgqwEcJweg7MixcejkC+mQBYaNlrW:8hVO35dOEcJaMiFjkCEHrW
TLSH
T1B77301BB417F83CB014E9A5D1F46D099034539BAE6E961F120927AE437EC3B902635FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\index
Size 512KB
SHA256 a08a02b3770652381f6de8bad07d92bdeacbe44e1d2f26c9cdcf8ec89035afa9
MD5 9d9cb351d0d6446b7ec272e97088176f
SHA1 d7d400934d2b335ce910f67add6b4fc622c2109b
SHA512 124ebd288fb2a2424f4a28fb403b5e425614c96ce050b490de6ae9268069bd891ca14353e206327a3a7395455e5bb334aa2465a460e53074e8754571bbc77837
SSDEEP 3:Ls0lDl/lllnlElll8plcaXvl7/mltAsl/5llll/WNtl5Ntly/lull//bl//ltlXY:LsctlnlM/83QqslTllleNJBltp
TLSH
T1A5B4921AA3901D06C2E005FDC4038B202374D400CA8B874357014031A0C43940E0E291
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 864B
SHA256 df373b3d7fcfb55e2de270bbb89944bb7446b3b2f5a5a30f046dbb3c0ba17ae8
MD5 842f12e4450808d00b904d04329a2835
SHA1 0d497dae280184b89d87f00a1f72a01109428838
SHA512 019c962108cba76075273129e014b059165419616621ae8fcae415b0de4434bdf8aee1eee26014afbfdd587aca254ae0719b44c384362a7966c9bb36c2072df7
TLSH
T18011781151F1A063EBC41D7422DE8DF0B270694F427A5A630E849E75ECD33AD475EB00
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b67a.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index~RFe58b67a.TMP
Size 72B
SHA256 c9082c8004a63a80a6e7908d8ee516aad7112846c2e19b52cb32fbc530077e8a
MD5 297ab4155024c413508b646a4f39af16
SHA1 61aa2ec29b35899c5e3b9ae16a783ae529f67966
SHA512 1172ca83ce48bf04fe29c62f4dfa57e880c21cd4d36ca04609e6aca74da69d84e9747c8bfc54cc17c4ceb761a12119cca8b5df12b235f5c174110327af75ecd4
TLSH
T19FA0025013E01181D6E146F4D4A262C572249969851A1A1295E184A8CD7C3755511D53
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\index
Size 256KB
SHA256 aeaecd784cadd9a32ec8d756bbc4a6da9103b1cd4bdf0a202de9051a5d54fc14
MD5 5bdfcf51b20bd18ea84fc5a8d3864176
SHA1 a9ee3c68e1ab9071206464b51bf08b5c81b36474
SHA512 7f57a665ca3fcfca400fd662996a630a4aa0a5035866579fd2606192ae3b5bb6e507dba486b58e51da4bdbdfab078a419f84b756f2e2a6851b3ffd4f477af91d
SSDEEP 3:LsOllllklkXlL:LsUlPL
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\000003.log
Size 114B
SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
MD5 891a884b9fa2bff4519f5f56d2a25d62
SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Favicons
Size 20KB
SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
MD5 198e1617955c70ad9263e5ae041f3c36
SHA1 623233da85a56e3b75fbd55f5159d83f764db270
SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
TLSH
T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\History
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Login Data For Account
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Cookies
Size 20KB
SHA256 559e2752c4cdccbf0d58aa12b9d78cb14de1aad8cbd7c299587a1029dd3dd39b
MD5 33655040dd3915c7914f7838d4bbe425
SHA1 9f9b0efbb01ad8cd3460fd702c00986f1fe26f55
SHA512 e8b8c48487356caf6a4d01c569862e2e0db3b7f27fd4aa11de477205fcb5d29c7208497dab9953a0c9b44cce8231fc3b3b5534263ad75b92c3182e09e9720799
SSDEEP 24:TLyW91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBJd5+OT5GJdWEOsrQlNcJVUej:TeW9aw/aHLopFMavU1iBJH+u5DEJQox
TLSH
T15192DD8F1F307620C5B48B33E9D2099B2EBC111C9367A9C9ED5414B39DC259BF50A4FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 3KB
SHA256 0244a77a9cd3803983a9b3cee32e8f6c30e9018727872499362dea1b9d5495d9
MD5 daf427fee26e1415b914e8f64999e2da
SHA1 f99fdeddd02ef863f20c663abb296d4b2c991975
SHA512 c0ffee2a309d29020d3566f9f7a4dc8ec841f219efc288153a24e0601ab8f5b3c7eff2103753b634286ab56ae4601943d7c24c16ac7482cb63e43c4bfd0dd24a
TLSH
T13671AAF783E49A3D9D2192F0AB156E2FCE690924535C3CAAC8D55F5B93E2871E100B4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 2KB
SHA256 fbfff5da5660a1c7e5fe48f8f9d479021eb4de61f3e1add2e87b4181e6097361
MD5 2ec0f65ea65745d0db052e52d3376b7f
SHA1 b3d80a448f245ff2d5591bdc06846601fc676009
SHA512 18829dd677b738d2d30c1406638cd20f98f69d561598530fd50bf955b74a9dfce567c9ef5b535e0dbd96d8bc5a3f6d1f9de265599c42f96031d100d06c1e8191
TLSH
T18951E2B7C3E8893D891052F4A7146F2ADD6A0A54632D3C5AD8E89E0F57F6CB6D30054F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Reporting and NEL
Size 36KB
SHA256 5688ad4c033cf9572cd01d2a2a2133faaaede93c8ac9b398ef836e718feaec3c
MD5 5aaac2b5d6acd680929f222fdd1a4309
SHA1 a49357b63a4e7f965d3df7e2ba786517ffa398c5
SHA512 20e0c498b75dd98939da161f42670dd58f8d6bab9527c1b92993af4e874b6fb3a329669a6e73215cc921ee42c2e37dde3460093f94b758cf87519d06ac639b62
SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBLRo:+IEumQv8m1ccnvS6jID
TLSH
T138F2EEFF1B05B601C0D491B4E5810ECFFD2D112D4BAABED09A9809F35BD66F39528259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\TransportSecurity
Size 523B
SHA256 4bc1d73f007e50d3f687e48b1bdab2e8e11cb4f156f535b4343a834d7e236344
MD5 08280d03453ed2773c0d4e9e815e83bf
SHA1 c7c8af2c4a054c2c5d6506bf76c2d5967fe1649e
SHA512 de5c2d8a24f2b7a6f8dcb8862ffac2996677855646a31a54199701a48c8d0fa9d512cf1135010bcffd1f5d3dbd42b3893f5f77bdaf3ff7d33404fe736dd58db0
TLSH
T1FAF095E793BF752F40BC44AB2D00B8055D777432119154F0CF96819DA0D95E71B02547
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Trust Tokens
Size 36KB
SHA256 f6dc3ce8ce21647c61b493cd86c6c3fb5992d5ee4507bae9da8e33fdec247804
MD5 2098aa1459265f01606da9581b7b810b
SHA1 4d9839da23cda7ca4a315b87253f7dff444b6178
SHA512 ddb46a6c9bc1ac4e52483dafb92bdd67f0456473a4b2a5ee7cfbf471615eacddcc6c0ac47b3088ba592af39822e9cbd9769430658d2b1e1e0cb9cfe5bd88714f
SSDEEP 24:TLKEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TWEeWOT/nDtX5nDOvyKDhU1cSB
TLSH
T18AF29A4BE93C6FA3CCC56FB08B07D5B41F722BCAE68276C4247120A01DA964495E7447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 13KB
SHA256 09bf58cd0e6b5c2b2299060d974bc0c3e52319739316e579d282f8d670239d14
MD5 23b066161219c80018f21d47c3423218
SHA1 e09ab71a7727c33761db0d9b5ca8d1f0a2f7fd47
SHA512 e56b7bb44373014f5d7dbfff760ffb918fb5dd39f39ed810eb227babbb75517415b2507213d9ce90169fb906850056c010629056e6b8a83d79354d8f42911b99
SSDEEP 192:GRp4E4JdUS4Pv7sppPRpxMHC9AHsb+WNnJwS/VY7neqEp2adKVyIsnAUge:GRCEwdEHgDXl2wyMYjEp2a4e
TLSH
T1D552E72EB914693B5CDBC21AF925BB57E3F2103161941E84E6FC8A2C26E79CD3227007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 13KB
SHA256 f2732bc69ad1825aa8c987940ea93104cc523affd68bfe852679503347fe1910
MD5 1f0f5b3625d691baf8213e13f4b3bc3e
SHA1 cb316f6e305b58804ab58e7c6ea175c0d26907b0
SHA512 de24c9867745bffed7260decb5ba88dea2f92d6930ec4b7978dda953d78199ec528c49346e4d475c11e03a9dd029f38ec4d2af9e6db9db30036eb821c4d20e1c
SSDEEP 192:GRXHn3qJ46v7spAPRp229AHsb+WNnv32KmvbBfGLyEPyIsnAUge:GRXH33WgUX92wP2KmvtfGpe
TLSH
T11752C41DB968797B5CDAC219F925B793E7F61031A0C02E84E6FC8A1C14CBACE7227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 12KB
SHA256 84ef0a7de8b8897252f9023981c25991f91cb54b8a2b6d7ff80d903f1012fad6
MD5 fa6099f469352fc54682191bdd28294a
SHA1 7c5c660f2bed36dada6e3793a2a00ef6a964750e
SHA512 75f8f5ade864020e701b5c9c00ef1bf077e688090c9d07ef8893f923743859f75e1358287a675afb885b4957ccb101d502d7e2f25c32200bae111b0e018f2552
SSDEEP 192:GRp4EYJdUS4Pv7spAPRp2AHC9AHsb+WNnJwS/VY/neqEp2ad4VyIsnAUge:GRCEQdEHgUX42wyMYPEp2aye
TLSH
T18142C62EBD14697B5CDAC21AF925B757E7F2102171941E84EAFC8A2C25E79CD3227007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ServerCertificate

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\ServerCertificate
Size 20KB
SHA256 55c38a40a44105325365ebfb7615e7d38e55d7d02853c1002fa2a9ae98974140
MD5 c36580cb88a6268715ad1c3213ee3e62
SHA1 0e829bd8521137f80ac1b6fc9439c2622e3c89f8
SHA512 268e6d3593d346f2e9289d3b1505282d8bb684f4a829fecf1d807a04645a93d94f4267a50bf99df54047612023388a4afdb809781ca362581ee1e8a7826a56b4
SSDEEP 12:TLiNXB+TR0wfQQ+aoMllfIHFxOUwa5qgufTsZ75fOS:TLiZkZC6UwccI5fB
TLSH
T1D492468F9F843935E8A947B9458706E00F7AD73E8382AD6352E848503F90D8081BD45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\000003.log
Size 3KB
SHA256 21ff4f29b1809d11f3f06afd2ca111ffab95061b04e599b9c562785accf7a61d
MD5 9767a08a19e9620d93f74112104a7cfe
SHA1 c6582c43e5b13f385155a591a9191f2fc0fda6a7
SHA512 1d8e82507df67b84aff1f3c1f8a99f7e24b9aa7a6b077abe7b1811280118fbc0f20513c253e6a7f265cff988e1f87ce81e17aee8d69947db4fbb5f4a00e05807
TLSH
T1E6719B6EA50A085EE4AC493BCD79571B6F6DCF1C2BFE3727A9DE860409B495701082E3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\LOG
Size 333B
SHA256 299f0e32e5d03fcceb373fab9889749351fdb0c47aac2bfa96f67f5ff6ba09a1
MD5 8ee0f86b727b55d45747c616da44f29f
SHA1 b2629824f9687afbd5236d440c5b9646abcc911e
SHA512 68af744dfdb7ef014e81bd1c2561b43c7512b1b618ff9e0195c115fc2c93be3e04be8dd9a3b4d3d8d5de5435412430caf6f36d312a2beef80f14bd123a951607
TLSH
T103E026A026CAC1FF5055824302B9B34DC6F4B406D3DD39037F8AC84452C6A08B3A17A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\LOG.old
Size 293B
SHA256 5fcd95736f17165fd724269ad22dc059fc4ae37cc37db9fbee6360258ead1eb7
MD5 940b0acdc4927f635a72cbdb9274814c
SHA1 86c0a852c25d2dfaa0b05618264a34ad9df52240
SHA512 6127f2fa7ed27f1e97c8dfe49558f4ea61a1529c5f784b9e90aade122e6a3f5bfb12e7a30d9af5aa7386d2c6c9d5f7c64e281a7469f93311b48ea6a506ac275a
TLSH
T132E0C25196C2C5BE10A980E30A71B30E8EECB04ADADC39060F62EA4810CA84CF4A12D0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5877cf2f03ef54c04e0a3c1812d11b1a055397f28c1e12517f9a8d3c153c211b
MD5 93f0e6b224cf1c71ce1b8c536460b43e
SHA1 cf5e1980517d22f93ea291291fa3018bd597da63
SHA512 99473cb4f53583c63e289850373965bb58be4fe742312f41b63dc66ddb6e919f9a48088eb13a24d31427df90daa2903ae46add4696a1f541a597ffcbf723598f
TLSH
T1F9B0121080015541C09302F21183048875185F148709130193F06DB1D8275A140582F0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ae8b.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ae8b.TMP
Size 96B
SHA256 79a0e5dd1a7dcaca35c7ca7fa449ebcd13e3d79e08f3e877d2bdb3135bfe36b1
MD5 e63ed1d6ae7f37861b8b215f4980f9d2
SHA1 58c2c9899fe45511737008a5d649462dc3749a55
SHA512 b5871b058f7f7be0fc3a2faacc3cc7aaba846fb7ac88d2319bf6a45de71105fd81c3e1092facf59c00b6bdea14da9939f9daa39d3af6922300578de341c741da
TLSH
T1C0B02208C002330AC0C203B020E080C83020EF22C2030382A2E00F2AEC302330023020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 479fcd0227bcde10821863c3d67945fa57d0bd6d305f711b0b3710bc227972b0
MD5 4a13db95de05429b7474b40ac0eeb28a
SHA1 9883189828457cfb67e3fcc721ee70f9bcd4609c
SHA512 6de53ab05ceb922d6dd0d2e3d9220010f541187815957f605721c7957bc37554c8a0f50c7253d008fcb22af6f8643ee3c549aa5c7637bdc6e30a4050260a4e1e
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG
Size 345B
SHA256 5900d375025ec0ec620ecd34ec2290620edd1c779bb17af1136dca65f469b70e
MD5 6bbf3938f393d5d03677934a90404d37
SHA1 3ff6d64ad90d3230f7fce54727af81a6e85923e2
SHA512 f1840e1f5be8b5041d5a8c4fe36f0ddb135d4c595adcd6da40f91adb4943899055f0bc0a60f8d867c5e55e3aa1c270b5b73e018c9a54b36250979e2e51a8bea4
TLSH
T16CE0D8B026CA867F504580975260F74DE6F17505D7ED24115F1CB489D286508F391781
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG.old
Size 307B
SHA256 9d3228b5dce17d0e42fbb971eae256462983a6cbca2aa541606e81ee701298e8
MD5 bb5e5ddad1faee6f513f86aa6f0d681e
SHA1 f58f0892f2288cc65b2b310311ef34704c43ef3b
SHA512 ad0f83f315e08df62e1f867a1b3c7aa294866665ef8a0618022db9f6ed033633fc96903b0bbe100c526b54c4ee3245f9c272bf8f2fddcd6c91f0e23dcf003965
TLSH
T188E086256ADAC66F115990EB72B1F30E8DEA6005D7E915161F15F944228E84CA492780
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\index
Size 256KB
SHA256 1d5111f81dc2922e148b790b7c8281c9f31d1e9b20ab7596c26239231190a6fb
MD5 1009338c03560655bc22b554e23eda93
SHA1 e85c828589a53c428cc80c1aa5cbb8b09d5e765a
SHA512 0d96c43508ecf64035aef332c80ed396c7596e5d0147dfc6c8472cc9ac2b179b8ac252236ca5124d700214e380364d0696e8852580ed70178e0099b377945714
SSDEEP 3:LstlNllkll/lg:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\db
Size 44KB
SHA256 b08af7745c49533422c5afb2e683b61ab1b025a2ef13f892321a2cd1383fba79
MD5 ad4b0d21f32cbccefd98c28e33a59a6e
SHA1 1850a90ed7ec61efca181fcc35927a2888549e6e
SHA512 0bc8a37f441ce5cbb0fe4ea3f766f741cc6424ac4274ffa42fcf507c8fc7154115375bc669449da02d8b57a19227483814357367cc8611cbecdf247d7b65706b
SSDEEP 24:TL6BgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg8TPq81fBG:T1OIy4m1b3fbUdeqSB
TLSH
T16B13BB0F1E187551D1BD0236E9E64E6B2E7E204C9B8369D125F01AF24DE211C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\000003.log
Size 2KB
SHA256 a70423c48119f29be0127edf68dbffe2a325b9955a3462f5d6224af84ac397ab
MD5 903e512bbf5604c333ba41266a37f2b2
SHA1 03e0040d85a348e1e8e5c1d0c2369ff26a2cdb8e
SHA512 7b6bb3a5296220d5dba5703c14b057335669de57967ab8ea9ce4116c7522f1097f8c990bd1bb4926350f2ac4203b71c2606c45d8709d32ee76a561ee05a874d4
TLSH
T1FE51D1F37D015435FD6398FA11EA385CCE6B930E18A8D3E5D3C65D31204395AB41F2A2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 a7c56aebdedede90de529ad8afc4e7f61497f7566528aa968607ac763699ef7a
MD5 adbdec1b0960abc6bf255fb3d7d245ca
SHA1 1c616ffe82d6ab786e1292067266397643211083
SHA512 ef6d67ea8755efff6ed835b041283712e51da035b87c3cace691cf778acf5c578ac3979803affdfccfff697f84dad89f72783458bd8483f59f7bd2135e48a751
TLSH
T1AFE086B066CAC67F5594C89343B1B75FC6F0790697DA35469B0C5484A5C2504A7B4BD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG.old
Size 281B
SHA256 ff5d220b4cf94300d003b729a7d970461030169567bf7e5a3624a23368ce4019
MD5 0d5a563ab539651bae532fe0ebd33af0
SHA1 304289978ddc1580f0e9eff094f35226b6758d86
SHA512 18c3ed025bed3173292a5b6ed2b0e6f2edb640f95cc1290f61877b5cbda292ccc99c4086a136f9a3aca16d00231a27cfe1c8c702b5d03c9a017f7d31612aebed
TLSH
T16DD02BB596E1C6BF4458C0E646F2B74F8DF8A804D7DA3A0A4F06B88831CA44CE4B03C1
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Web Data
Size 138KB
SHA256 a58c4279f5c1f3166e39b966446f0336ecf1de7e0ba1a711429b5fe8415111f6
MD5 cc9ce531c902cbcaf88e32742ae4a3fa
SHA1 07227dedeb8fc07315b7b61aae8f38069a00a891
SHA512 b6c930358b9942a3d3ff0aa63b5f1cff3cf17c94b53a74e5eefb5fe5b26d07fb85b2a840c062adddffd4b13d6a16639b7f9b2a35ac710840c4b6ba01bfac819d
SSDEEP 384:zeuvBnhJsueMEGvIW1DcP2OzDfjVumJnSjG:FnbZeMrv/hGtz7ZnSy
TLSH
T17CD3854B3A747002EDE59A7258E050BB4E3CB16D8F15A5D5387620688EF2863B23D4FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trusted_vault.pb

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\trusted_vault.pb
Size 84B
SHA256 b87bf305aafae1f1ec7dd947176c9529b2a9cbd4a3bf296fce25fc009e725366
MD5 85d7a7c1e12b26cd994cd41e587629d6
SHA1 bf53173aa4b19a217eb542951dbafe3ec3506810
SHA512 b3562e0466d9e218e96be44a01feac567e2843f61d1fe5201a5c7d6eef0e714cb5d7d8aa380dbe4f341aca2c46e615f3bfd29621a4898cb8e027cf1155b8df83
TLSH
T115A0128266008642461DB130C80B4C4018311C5A0B34400111F36EA362D5900C541440
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 946a80c5bf51fb52107ae3cad10aa2c1e615d07d5dad1b192da261ce978b1a36
MD5 e607658097f4da1e82a02a814ed214c0
SHA1 a2bc18d836a70165f0bbe54840d795d56fbd1d6f
SHA512 cf8a0003d688ab76ad19757638351133702ad7c525c6921b8d66271c2e90a898f1c09dc2501ee066bcf3fe9916f39c57ff47b38dd1358f0aef3bd13fcf80e760
SSDEEP 1536:ALJP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNEZ:ox++J3qUQm08KMWF0bFTcVHr6ztZ
TLSH
T1AD9302B9991E7D79636ED396A0179CAC8CD3DC8E151051BC30C76F0E14BA393A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 89b352cccc6c3417404656c608476291e86f1c9147f7bd2f9db6b457cfac2746
MD5 30d5c3e89c1f3ffa9859d3fd9710472c
SHA1 b4164fe2bba8b93451ae2f16da188007780fcb45
SHA512 cbaf205b245a679a2d3d9b3ef05160c12b17ff7f911a67d2fb9ca0814a64784e21f92dfb8eaa85eeaba35489de08786d21d27d790eaa5e2b04e4f676f97ce530
SSDEEP 1536:IL5P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNGZ:wB++J3qUQm08KMWF0bFTcVHr6z7Z
TLSH
T1A79312B9991E7D3963ABD3D6A0079CAC8CD3DCCE1614557C30C75F0E14BA392A34B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 c69afbf5216d265efa7fd8ebfc18b8253f6e930e4a99fbe373b944516eb7c99e
MD5 a79549df6641e215e6b9649bd7c31619
SHA1 6e1cc6d9cd4e13e2fe39253d4a08e51f5fe6b2ac
SHA512 bff8d17e74196f4b936fd8737d3e02593ffcb8b90456be15dccaa026813d2bdfa755bbb5a370903b63a3c669f8b3c78a08280d1969f5c224df95f80a21f78837
SSDEEP 1536:4LHP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNxZ:gv++J3qUQm08KMWF0bFTcVHr6zgZ
TLSH
T1E09312B9991E7D79636ED396A0079CAC8CD3DCCE1510557C30C76F0E14BA393A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 c7e7dd367bf27e5f3a0b9cd6c425672a79481a11d327c1f5e75cf009dd18b83e
MD5 4d866d60745362b0b6c38a49d42317df
SHA1 cd1cb202a12697672703fa9ace63bb468bdbb22b
SHA512 371aea982d536c0092140fe7bf82ff6c79bc08156116df3980396b2700734504b0b5faca988bfb6c4d1d3c8c5e1490595ba7f1e1beba8937c8e011fd86ba3788
SSDEEP 1536:ILtP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNGZ:wl++J3qUQm08KMWF0bFTcVHr6z7Z
TLSH
T1FC9302B9991E7D3963AFD3A6A0079CAC8CD39CCE1514557C30C75F0E14BA392A34B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 a09dbd7f76e1f8a736db788812705f2b1689d86ccf551496191044042a402255
MD5 cebe7fab2373ba8fe3814a5fbbf3508a
SHA1 ff6206fb4171fb22dacd1c3ca2b1ca70d295f805
SHA512 a79f960d82856bfcbef59237ff5f7b19f0e33a864bf4445d6e9794109c469dcfc8f194c31f934adf513b516d178a8a7fd943158f6c30d6ca11576c0251bd1edb
SSDEEP 1536:5LtP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNGZ:Bl++J3qUQm08KMWF0bFTcVHr6z7Z
TLSH
T1FC9312B9991E7D3963AFD3A6A0079CAC8CD39CCE1514557C30C76F0E14BA393A34B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\ShaderCache\index
Size 256KB
SHA256 3dd828a39f0567bb048c0257e380179da1b8768253e456241b4ff01e67599c1c
MD5 b12087a0a0b03f6905f6aa13ba2480d0
SHA1 e79522116e1c95e9c07053d0644154ae3a53523f
SHA512 68641aafff6d4062c5a65b559f1b5cdc8bd2104ba247c76c7fe69027f99c8e2b101b36da556f2a17cfe91c3fb62ad44c84a7ed995255fa179b53edbced462734
SSDEEP 3:LszllklkXlBwi+:LsJlPGi
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Variations
Size 86B
SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
MD5 f732dbed9289177d15e236d0f8f2ddd3
SHA1 53f822af51b014bc3d4b575865d9c3ef0e4debde
SHA512 b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4
TLSH
T168A012078473800AE4184092C45C024114A480460119D0015070931314950CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\segmentation_platform\ukm_db
Size 48KB
SHA256 7434597d22726641acf6c1817319992b54ec582f0a7474d28dab085fe2f3747e
MD5 a9ae40fb5b25887e90a305a17a7d352f
SHA1 81c9a3d4ea776de2605c894f759d773e2eee77ed
SHA512 dab18020ef0e0506b4f0f2fffe09c502aec24955ae1c5a3072f21dfa1df1f98be0a25bbe1953fa2c0ac3f6cab3b111ceb0f5e81b6cd9a7bf217713e45acd3389
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0JQ:TkkhCU2QB2zbBxx
TLSH
T18D23490E5A6821E9D4D9193EFED34C517DBE0F588A2B78D205E00C768CE21EE553E4BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4560-3-0x0000000000F10000-0x0000000001162000-memory.dmp

Download

memory/4560-0-0x0000000001082000-0x0000000001083000-memory.dmp

Download

memory/4560-1239-0x0000000000F10000-0x0000000001162000-memory.dmp

Download

memory/4560-2-0x0000000000F10000-0x0000000001162000-memory.dmp

Download

memory/4560-1-0x0000000000F10000-0x0000000001162000-memory.dmp

Download

memory/4560-1238-0x0000000002E40000-0x0000000002F3E000-memory.dmp

Download

memory/4560-1231-0x0000000000F10000-0x0000000001162000-memory.dmp

Download