socelars | e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/05/2026, 01:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Size 1.5MB
Sample260504-bg171saz21
SHA256 e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0
MD5 cf9ee841dd4a302868e451c868fd353f
SHA1 28a7693b0d614953d3d9e2e8f9b6e7957132acd7
SHA512 cd054decf88772451165f7bbb3b1e87860fdd9fca96556d77ff964d9bff95aee040da06021d5885aa1cd4033bcb55403f139801ede0b81d08056771b410bbcc9
SSDEEP 49152:4Jtpx1iErFrLK3F7QojUnHo4Sa0ra0b2dPs5O9Gqczr:4hrFzo4nHo4SVr
TLSH
T10E75AE21F7818076E8E301B685FE46BF8D68B631031854D7E3C4189E9E659E27A3F727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery socelars spyware stealer

Malware Config

Extracted

Family

socelars

http://www.iyiqian.com/
http://www.xxhufdc.top/
http://www.uefhkice.xyz/
http://www.fcektsy.top/

Signatures

Family: Socelars
Socelars is an infostealer targeting browser cookies and credit card credentials.
stealer socelars

Socelars payload 2 IoCs

resource	yara_rule
behavioral1/memory/4620-1-0x00000000002E0000-0x0000000000471000-memory.dmp	family_socelars
behavioral1/memory/4620-1238-0x00000000002E0000-0x0000000000471000-memory.dmp	family_socelars

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
14	iplogger.org
15	iplogger.org

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe

Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1068	chrome.exe

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
4888	taskkill.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3256	chrome.exe
3256	chrome.exe
964	chrome.exe
964	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3256	chrome.exe
3256	chrome.exe
3256	chrome.exe
3256	chrome.exe
3256	chrome.exe
3256	chrome.exe
3256	chrome.exe
3256	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeCreateTokenPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeAssignPrimaryTokenPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeLockMemoryPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeIncreaseQuotaPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeMachineAccountPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeTcbPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSecurityPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeTakeOwnershipPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeLoadDriverPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSystemProfilePrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSystemtimePrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeProfSingleProcessPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeIncBasePriorityPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeCreatePagefilePrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeCreatePermanentPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeBackupPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeRestorePrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeShutdownPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeDebugPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeAuditPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSystemEnvironmentPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeChangeNotifyPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeRemoteShutdownPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeUndockPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSyncAgentPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeEnableDelegationPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeManageVolumePrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeImpersonatePrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeCreateGlobalPrivilege	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 31	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 32	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 33	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 34	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 35	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeDebugPrivilege	4888	taskkill.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe
Token: SeCreatePagefilePrivilege	3256	chrome.exe
Token: SeShutdownPrivilege	3256	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3256	chrome.exe
3256	chrome.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4620 wrote to memory of 4876	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe	85
PID 4876 wrote to memory of 4888	4876	cmd.exe	87
PID 4620 wrote to memory of 932	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe	89
PID 4620 wrote to memory of 3256	4620	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe	91
PID 3256 wrote to memory of 5624	3256	chrome.exe	92
PID 3256 wrote to memory of 1068	3256	chrome.exe	93
PID 3256 wrote to memory of 784	3256	chrome.exe	94
PID 3256 wrote to memory of 784	3256	chrome.exe	94
PID 3256 wrote to memory of 4900	3256	chrome.exe	95
PID 3256 wrote to memory of 4900	3256	chrome.exe	95
PID 3256 wrote to memory of 2268	3256	chrome.exe	96
PID 3256 wrote to memory of 2268	3256	chrome.exe	96
PID 3256 wrote to memory of 2064	3256	chrome.exe	97
PID 3256 wrote to memory of 2064	3256	chrome.exe	97
PID 3256 wrote to memory of 3756	3256	chrome.exe	98
PID 3256 wrote to memory of 3756	3256	chrome.exe	98
PID 3256 wrote to memory of 632	3256	chrome.exe	99
PID 3256 wrote to memory of 632	3256	chrome.exe	99
PID 3256 wrote to memory of 1372	3256	chrome.exe	100
PID 3256 wrote to memory of 1372	3256	chrome.exe	100
PID 3256 wrote to memory of 4696	3256	chrome.exe	101
PID 3256 wrote to memory of 4696	3256	chrome.exe	101
PID 3256 wrote to memory of 5788	3256	chrome.exe	102
PID 3256 wrote to memory of 5788	3256	chrome.exe	102
PID 3256 wrote to memory of 4420	3256	chrome.exe	103
PID 3256 wrote to memory of 4420	3256	chrome.exe	103
PID 3256 wrote to memory of 3964	3256	chrome.exe	112
PID 3256 wrote to memory of 4912	3256	chrome.exe	113
PID 3256 wrote to memory of 4744	3256	chrome.exe	114
PID 3256 wrote to memory of 964	3256	chrome.exe	115

C:\Users\Admin\AppData\Local\Temp\e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
"C:\Users\Admin\AppData\Local\Temp\e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe"
1⤵
- Drops Chrome extension
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4620
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im chrome.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4876
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im chrome.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:4888
- C:\Windows\SysWOW64\xcopy.exe
  xcopy "C:\Users\Admin\AppData\Local\Google\Chrome\User Data" "C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\" /s /e /y
  2⤵
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --window-position=-50000,-50000 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" https://www.facebook.com/ https://www.facebook.com/pages/ https://secure.facebook.com/ads/manager/account_settings/account_billing/
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3256
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa917bc728,0x7ffa917bc734,0x7ffa917bc740
    3⤵
    PID:5624
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1580,i,3235528050784463155,5653779746226318451,524288 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2124 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1068
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1740,i,723934808791149928,12118778612478874948,262144 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2084 /prefetch:2
    3⤵
    PID:784
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,2067945911358727666,5110498160765532618,524288 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2476 /prefetch:8
    3⤵
    PID:4900
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,2083415635168713733,16748701053353441135,2097152 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3268 /prefetch:1
    3⤵
    PID:2268
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,3945645768755544350,11103503679343371114,2097152 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3296 /prefetch:1
    3⤵
    PID:2064
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3728,i,5004636461931803131,17019821909718832114,2097152 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3744 /prefetch:1
    3⤵
    PID:3756
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3868,i,2555487858389310413,2349837049791244342,2097152 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3888 /prefetch:1
    3⤵
    PID:632
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4864,i,4330730638281507362,15218078373405695207,2097152 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4880 /prefetch:2
    3⤵
    PID:1372
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5040,i,7474675692445265326,16886719876795586159,2097152 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4836 /prefetch:1
    3⤵
    PID:4696
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4788,i,14854056285919074950,10808715728544447373,2097152 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4812 /prefetch:1
    3⤵
    PID:5788
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5308,i,12665694397034025626,12449339945813858563,2097152 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4264 /prefetch:1
    3⤵
    PID:4420
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,13584895050170160449,3091600907748313804,524288 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5716 /prefetch:8
    3⤵
    PID:3964
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5704,i,10272092215297788295,14813292698734843984,524288 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5696 /prefetch:8
    3⤵
    PID:4912
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5700,i,3183906503778088703,15928536314140527351,524288 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5756 /prefetch:8
    3⤵
    PID:4744
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4976,i,5854472010305621247,8008834980107173402,262144 --field-trial-handle=2088,i,3847705753268899737,17052529432371044826,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4968 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

background.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\background.html
Size 786B
SHA256 a1064146f622fe68b94cd65a0e8f273b583449fbacfd6fd75fec1eaaf2ec8d6e
MD5 9ffe618d587a0685d80e9f8bb7d89d39
SHA1 8e9cae42c911027aafae56f9b1a16eb8dd7a739c
SHA512 a4e1f53d1e3bf0ff6893f188a510c6b3da37b99b52ddd560d4c90226cb14de6c9e311ee0a93192b1a26db2d76382eb2350dc30ab9db7cbd9ca0a80a507ea1a12
TLSH
T1AF01900E1D04A56AF4154DCC70B1FA2C188EDF03F106CC6441F4D9A6ED9A7CD8C626F5
MD5 SHA1 SHA512 TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\icon.png
Size 6KB
SHA256 9434dd7008059a60d6d5ced8c8a63ab5cae407e7152da98ca4dda408510f08f5
MD5 c8d8c174df68910527edabe6b5278f06
SHA1 8ac53b3605fea693b59027b9b471202d150f266f
SHA512 d439e5124399d1901934319535b7156c0ca8d76b5aa4ddf1dd0b598d43582f6d23c16f96be74d3cd5fe764396da55ca51811d08695f356f12f7a8a71bcc7e45c
SSDEEP 192:arFa6ynwcj6POoDbxN9EUQYZRia+ce/lkygkkl0:apa6mhjshD9QYZR3qkr/S
TLSH
T1A0E19E1CEDD537BCA35E1601214F81B164E7B85383341A5C11B898FA94C6A9ED39F2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aes.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\aes.js
Size 13KB
SHA256 fc7e184beeda61bf6427938a84560f52348976bb55e807b224eb53930e97ef6a
MD5 4ff108e4584780dce15d610c142c3e62
SHA1 77e4519962e2f6a9fc93342137dbb31c33b76b04
SHA512 d6eee0fc02205a3422c16ad120cad8d871563d8fcd4bde924654eac5a37026726328f9a47240cf89ed6c9e93ba5f89c833e84e65eee7db2b4d7d1b4240deaef2
SSDEEP 192:9pQGDuD690MPdz8Ui015ll1I57I2Tru6h0hNmHV+m9eIfyAqYfinNVYEUUFJZmUY:9OiT0wz8Uiw/1S7DegkcHpeIuScZbAX
TLSH
T1B95296C936EDB94263A63068587F7017B86B28B5945C4824F298D4DDF9A899DC03AE3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\content.js
Size 14KB
SHA256 41e129bb90c2ac61da7dac92a908559448c6448ba698a450b6e7add9493739c6
MD5 dd274022b4205b0da19d427b9ac176bf
SHA1 91ee7c40b55a1525438c2b1abe166d3cb862e5cb
SHA512 8ee074da689a7d90eca3c8242f7d16b0390b8c9b133d7bbdef77f8bf7f9a912e2d60b4a16f1c934f1bd38b380d6536c23b3a2f9939e31a8ef9f9c539573387b4
SSDEEP 384:rlBc5VG/MavcrTkzqaKNVyQiYCIizzSEWfw0:rrc5VG/MavcrTkzlKNVyuw0
TLSH
T17D52D2DE53D8E97B2ECD1E83BD508ED650B2A236D7C932C7872CB94C51E90ABC5084B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jquery-3.3.1.min.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\jquery-3.3.1.min.js
Size 84KB
SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
MD5 a09e13ee94d51c524b7e2a728c7d4039
SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
TLSH
T1748319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mode-ecb.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\mode-ecb.js
Size 604B
SHA256 03164b1ac43853fecdbf988ce900016fb174cf65b03e41c0a9a7bf3a95e8c26a
MD5 23231681d1c6f85fa32e725d6d63b19b
SHA1 f69315530b49ac743b0e012652a3a5efaed94f17
SHA512 36860113871707a08401f29ab2828545932e57a4ae99e727d8ca2a9f85518d3db3a4e5e4d46ac2b6ba09494fa9727c033d77c36c4bdc376ae048541222724bc2
TLSH
T10EF04C877CF9AEC1D5A2B1AD8B7FC51D787400130556DB407B0C5160EFD84300B45AAC
MD5 SHA1 SHA512 TLSH

Submit Download

pad-nopadding.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\pad-nopadding.js
Size 268B
SHA256 282308ebc3702c44129438f8299839ca4d392a0a09fdf0737f08ef1e4aff937d
MD5 0f26002ee3b4b4440e5949a969ea7503
SHA1 31fc518828fe4894e8077ec5686dce7b1ed281d7
SHA512 4290a1aee5601fcbf1eb2beec9b4924c30cd218e94ae099b87ba72c9a4fa077e39d218fc723b8465d259028a6961cc07c0cd6896aa2f67e83f833ca023a80b11
TLSH
T1B0D02B5E3DFBAF42D49972E5C73DC14C71244103066A5EC2AF0C02728F61C395799AAC
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json
Size 1KB
SHA256 20d39e65b119ed47afd5942d2a67e5057e34e2aef144569796a19825fea4348e
MD5 f0b8f439874eade31b42dad090126c3e
SHA1 9011bca518eeeba3ef292c257ff4b65cba20f8ce
SHA512 833e3e30f091b4e50364b10fc75258e8c647ddd3f32d473d1991beda0095827d02f010bf783c22d8f8a3fa1433b6b22400ad93dc34b0eb59a78e1e18e7d9b05f
TLSH
T137318537E580883B26F5EB01BEB83282FB62835B55404D4FB07EA05C0F75E2A018435C
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 20KB
SHA256 5036f2e5bcff22163fbf0d2c85841aece93e5a2a3521e52fd1bd53573f6cbbd2
MD5 5b1ac29f15c127a3bfef7d9521b46c05
SHA1 ea82bb368809003611f49ab1c762ee82e79dec05
SHA512 7e9ad0ccb626296d6cb954c65e52811126dc8bb3f80479b809f4afef2e8c6e4fb3489283a884e9d07a2761af96a8159f208e9f8ec6baf96e656a2ff3cee1265e
SSDEEP 384:rVjn27KxkXqKf/pUZNCgVLH2HfgsljH7pLuLcPfccm8KCBAk8XODnS+ErU3iIHG5:rFn27KxkXqKf/pUZNCgVLH2HfgslH7p+
TLSH
T140920A77684CD9770F94D6C9DC2A7A4FDCF6024A65D9886883FB9C2903D5ACB02091F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\CrashpadMetrics-active.pma
Size 1024KB
SHA256 67ee11b51cd6f637795e31ab501f135ed595c8459bce885735f08b0418513a17
MD5 34c29bdb9e41b1f47f2d2786762c12ec
SHA1 4075131b18c3487e3e848361e112009c897629c7
SHA512 ca3a978798e77b2ced27b379f38e935ef18beaa7ea23e34270a9af20b37e1b1c5edf9478606311cf1acabd83992766cb3da8444de9394c674d5955bdbc53c0d0
SSDEEP 12:bHCskaXhVMMBKEKSCemJKlkQfIYVhYJ0X:bi0ROMMBS+MkEPYW
TLSH
T151259286B34455BBC54189B188AA17606274F9E89F82179A3B18E60F1E661DC0F51964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad\settings.dat
Size 40B
SHA256 06f5dae68cd477e5f5001dc65ab190cc7b65011022066621b1a76a16fe269481
MD5 c0902111fbf560d9a8d7782c0b09c5a8
SHA1 6de9e897d3fbd1e23652b2cc4347a91f9d7a7717
SHA512 53e018d34c0084fc92bee5b6a115c41bc7671ef8bf16be373c0f7b60a3b8636fd2b5e912fd60f207e7dbcf80d47bac947a4432f54eafb0b302bf715e7932525d
MD5 SHA1 SHA512

Submit Download

528ff9b6-9aa3-44dd-ac15-c29cbe8e1133.tmp

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\528ff9b6-9aa3-44dd-ac15-c29cbe8e1133.tmp
Size 20KB
SHA256 3a55847ae3890de15c59cd18ea68bee82b2a27b128f4f75c2b909e1783bf4a03
MD5 c65d46350eb50c70f03d10971d3616cb
SHA1 df82e35a0b340652fdf9fe27e428b9e2eef8e5e9
SHA512 7d1e3b435ea65d2fa56bc452464d3520bb05bc41b63f35737441fd5d96c0fafb0fb2bca036f17ac1a017430bd99554a26ed40a52d34ebe0429acdda22d15cdb7
SSDEEP 384:rVjn27KxkXqKf/pUZNCgVLH2HfgsljM7pLuLcifclIM8KCBAa8XODnS+ErU3iIHA:rFn27KxkXqKf/pUZNCgVLH2HfgslM7px
TLSH
T1AA920977684C997B0F94D6C9DC2A7A4FDCF5014A65D9886883FB9C2903D5BCB020A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Account Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 6eb7996ff625515ad7ce88d9d70bf71e5ca37821f95dcec5c97e215481a91a8f
MD5 c74f8fd4c723fb4286416e96ebb76691
SHA1 e32b6d07178026e3d5c451a73e5df9b700ebfa36
SHA512 c3ddf282174c7b3173ba877e49f23d774d96f21950d8b7d47a1b5630d59363ac7b360b6cbe2b0cb2b89285cad666f916ad5200054e9b91d0eb9e533ac8a9eced
SSDEEP 6:/FLXtGy9NSooqJe7Nk+PftITdhGlGl7GoFedMrh:dLY2NDoZNk+dEdhG8NAMV
TLSH
T10213C23CD69C0F0AE3F0D538B80B0B702375CB08A9A2CB833370742C2404745BD1D018
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 f620183a244218e1f70daec2012ba297014aecf304fb8a535da42a72e1b9b818
MD5 302597fa55d711aeffdf28b13ed20166
SHA1 886782a2b69e6700b9e5ef90cce163c215bf6b61
SHA512 9ef0f7a0bd97b9a3b7ac8f977b11a81c926a51d6813940107e003dd600d71c796d8de7543ae91e5cae6e06c8a55d8cee9b9ef0fad68e039056c48916a22dac1d
SSDEEP 48:eXK/6YqqIMCXglo89MiXW1RGxoyCqS8aBCycaB8W0K:eoqqI/glo8DWHPDqSCycaBF0K
TLSH
T1E44498E72D44E9C7DB28CEB11C5052388D33921A6CD4BD77F55404B35789AF33268B95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 53ac11b56fd0e8fecb82a53722c105a4da24ac9e3e69aa5367a2d858eb08e3f0
MD5 7db20c5884471c08fe742935bb22f20d
SHA1 ad7172feae27ccd43c4cb5250420cdd6f1f3b4b4
SHA512 8229d925969d175cc2915ee893dd617de2b48c4d508d61b9bc53f518e83f3e83172b134584596b1eaec7428027693066902ee68a46af105bddf25bcef3245edf
SSDEEP 24:WTqkGCDOj2NIRqBXQ8XloJc0C/PuhPgg1eA3uRxbagzu3XO7mlOji2n:NkGaGZRqRdoJVCehPgBADHHGmlYVn
TLSH
T15A25E656DC4BEE41D4FC1638AF10DA42BAA44CBB71DA60D628B805DA2694672988D0A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 6abdb522ecee55c76c177c7b6a2f530b877b00a1ed023d0a245305204e29baf9
MD5 c0fff819e6dc5f75f3476b94222542d0
SHA1 7d33ea271d0442eaa6f52966b53b35923d72aff8
SHA512 419f67ad832cd7bc2897719ec026eed8e36d72b203f35fde2372fadccacc2646c0858ff62218bc5889e0e98222f20fd369d4643cc5b016c57b2497cac720c150
SSDEEP 768:gUfDPLSgcRUv+CX/K4w24q4R4G4XUfDPLSgcRUv+nZ4VUfDPLSgcRUv+HX/K46f7:uyzAz0ZDW
TLSH
T1DB163CE32E706583E6C1EA70E6CCDD39BCF412419897E9D1A166427A76E1FC527800DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000002
Size 69KB
SHA256 aa9ebea13743f59a883deb50b1aa3cee79445c26865d8691c2f4af9f67d20f3e
MD5 d06a9d66f08f8137312a84a034486ff3
SHA1 69507564f5063ec0cd1e3dddf0ff829a01a9f1d1
SHA512 3d2438726dfa758301fc3d76fcd9210ced1cdd206eff02ca7c93275154352f94095f93d43943de4194d865495ba7c2f242439ce17fb1199193f37d65f953fc40
SSDEEP 1536:Yor+MYgZu+Kwdf5oVgUThTCqkTpjL8gtxRFL8vh9QXXijpXmG:Yok2KwPoVlToqWpZhQvbQXsx
TLSH
T17F6302775A9C7C3D3E6E60EFB5FCEF2B41658FC4A216D64A414022EED4068CC6141F92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000003
Size 38KB
SHA256 1d39335bcc92df6017b3a1b2c0ee549a3cbde2d3ced0b09519a043d38a8bec30
MD5 356eb2db86a3c20d9f12ab52423b7030
SHA1 2faedf35f5b49a4d4a15316641990498c2358c6b
SHA512 caa693ae790cb8298723e113709d3f8bbd7ede64ccfaf25c445f9092040dfb61e14796ba5c983a801b05502763a33c030c1a6494d0e79fe351708879f68e1fb2
SSDEEP 768:gEpDNzk8U9Yip1z6CK+fMSqYc4l5q+GrMV1H/1d37gkVKIY1JCEeDP3396d5dIyZ:TpDOzB1z6CDfMLYugV1x5RY1JCEeD/S/
TLSH
T1DB03F1877A25AB2E99FC4EEA1C9FA04F5821C5DEC3EDA5CB0C07F54241A123654DAA03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000004
Size 35KB
SHA256 2c10beedcd0316cf808008c5503b2f76c4b1789fe78b2a3d1dadbae81ef0b7d7
MD5 fc71ac4a443032d3e4eb1011d47c2f48
SHA1 0c379e95c2b069096fbec4ee43a6c88570429533
SHA512 edb6cee9560d839dcd3cf7963ac600dfa213d335602759a0032af98a0dbcdcd7243e7030592ec1e3ab9cbcb19e5acd464ee0db0ab940ee7c2121ebcd88cda07d
SSDEEP 768:aTUd7dCDu932CBy70VXJY82SgrftvZk3uyk47oB2oob7:6UVQu9modySmva3uykx2o67
TLSH
T16BF2F1BFE847363E90543083E25987C83B4A55AE7D72A149D31B980034ADE41FBC72F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000007
Size 72KB
SHA256 d5b4dc2ab50789e0e714e36e63ae2196d94bdb465e3af4f2ba38cbb24cb5e202
MD5 176aaf60740f257a8feaa1d398f34fc3
SHA1 3a44998f7d761b56a0fd130ea3c563a4279d150a
SHA512 1061f57e79623a98c0f14dfe28e9600a4d7bc0da837096d98a7b1777b985dd75fb5212df2105bfb7f083fd257dae15489ee6e23c07aee514fc16fbd907f0d51d
SSDEEP 1536:bWhLK3U363hGDCGhoFIe6S3FN26bAySzIM0xqWb/WUihh9UXwEzrubus:yhLK663hGDC326bAySzIM0xj/FihhMw3
TLSH
T1227302AECCAC855C47D797DE8AD311ECFBBB3499820A4D68CE47B42F9557940C722E02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000008
Size 197KB
SHA256 3ab6544b6a30210f4976745af45d4e881054cc9d20f659667ca4d29a2d2d33e0
MD5 780d8e890bddd2e45de173c68f6e7472
SHA1 346f32ea618918f08a5344c0d64b90ab9cc8599f
SHA512 4289f61b6eb82b8b1330dec1ebba1407bb01577dc3d5b044bc16ed3a0fce0f1d482f30f2eef20ce9cd1a79a41ca78e940eff1a8a732279eaae53277244f691c2
SSDEEP 3072:WlbVBnd+gcFORNTt7lfymFBjbfxB3kPSC2xQ6HIaXmubHiSF2Ipl5UiVPALi:kb/KY53LjdB3USRV7L2CY6IG
TLSH
T1DB142216B600C355EC6F9F9A5ADDCE1C68E35879AE6770DA47C28A9C50031C9D8CA38F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000009
Size 233KB
SHA256 98e0c0a1a6f53598ce44e1dbba9ce0898b7e418e2f0d87ea78a24117aaaff3f9
MD5 dc31e24bfc23e42c42c90ff60c37a00f
SHA1 1a139cd9682d6ff9bfce8640c6bbd7b498fc4bca
SHA512 c4c2481fac7aff93d7011bdf8b520942925a991021fd55f576b179feb7b649e8d680a6958de9b5a011bc00d353a3c67df5f28159266d08ff7078da5fc3b6dc5f
SSDEEP 6144:I8quUa2pe2CI7xCM+GwSCs+SOM41R4zBu2PHWT:IVEah+ZSCslY34Y2PHWT
TLSH
T18E342379835D2045FAA646EEC30451A480BAA8E059E6E034D1FDE0F2D567CFD379FE0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000a
Size 142KB
SHA256 b42973c8785b057351e30eee424c0affa0b28f1746e7d4561f96eeb495abd3df
MD5 f9a2090349d3ad6af18435e280e4a601
SHA1 317aa8e68823155ff7c996fcf2f8bb4386e3c754
SHA512 d417cdc687b1c322b86c8502d0307ecead0b70c3d150c198ff8220705b4e7f6f78d8b85ea0183b06e5cf800ece126c562091d77aeae10813c82e1d3cedea1e83
SSDEEP 3072:gUBQvGxtUdGzsdINX87MLQ3Lit4AZVHquLZ9TQbwO2S61ei6hiAKZ2grmpG:gJextUdIsINXRbtlZ1qi7TzBtHOI
TLSH
T16CE312B7303B563E249AE45C87D2E67A10FBC3C300CD0DE4DB65E1C5DB5AA14259E8BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000c
Size 88KB
SHA256 56818e0270e9e7174cf3b7f3e39cb474fddd0cee4aa2ee29cf06aca0988a34fa
MD5 7e7169536d3f99c1cad1851e81b5d072
SHA1 c17d223102e8fd4b5c8f6753a7a8bf56d74a2868
SHA512 0bc65589f8b9502574a274f42e93af8e12fb00fafc0b8134ed72051cc7f3147f753dd3b42cbd528b0ea34686443e50c4f763e44470da59ed92679242b1729a19
SSDEEP 1536:tdkeGnwyrJgGNYD4fF1eIw4vAQv52+NGmbRLQRlcCq1NuKJCrwGQn7rMPIRT1:TAJHNYD4N1Fw4vHNGcLxNNSr1ErMARR
TLSH
T1C49312ADD27E49C395F092578EE6319E9F35440F8AF3DA2A47E65179484B233C83ADC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000f
Size 74KB
SHA256 9ff1b5057e57c518a88581a3078cbde668e76e4575bc7ff92547209a04fd3645
MD5 d7c0ebb7b5db8914b2c28c510e9ea2ac
SHA1 9a04f08ac02c9a850be1984803fdddff746ab735
SHA512 390a1616b82b3c1d06581055c2246dc5dfa679ab10599e38e28715b99d9008e3a168d3a98c2dfa6aa2f96edda4cc5d53eeeba278c7b797e9dca386690652027b
SSDEEP 1536:vaW68nayei5ptpn9bG+dCHl9DkUWk44CTdPnowbdVe7HW:yW68nZei5Rn9b7el9DhWYYtO2
TLSH
T1A273028E5AAF1023235C79D06E04A1F214E2C8A9172E86F1DF55B4B4C225DE67B90DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000011
Size 60KB
SHA256 14f2ab6267512380a52574b56064d4f2f0cb69d79863162c0ae698ae7a839c14
MD5 b90118ac7612b19043fca42cf4aebf1d
SHA1 3ad29636e10be31deee5c96f1f2c3b3321d6470b
SHA512 f0d2849034f6940ad63dd3ba8a1243b05e1a385b188a3f90d9d5d6c07d7fffee9b84b78a460f9f7077a4bda9054089a11393ce2cefde854926879d65710aea3f
SSDEEP 1536:6ksoUXAPBccIlsDJoP9h/Sgo/0Nc5JefPzDSX9+9:69lQdIsozFo80eTDW9+9
TLSH
T173530271B0F08055E4A00C638A3F8D452EF7F27FC54AD7265AE6418D99CE4BEC661FA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000014
Size 25KB
SHA256 531e91672daf6063fd6be177ffbc47be83f7091cb8824537bef79bac20102f0e
MD5 9d23ecbf96471315bdda15e799bf1a60
SHA1 783505e687b300d1f9f51691c0cbd9f9ef475527
SHA512 9ea87e5eaad047ccee4eb90e603e0e0944fcbe56c09c33d91fe7ae58e226e668a6484ddbbad3632f10ed972efae93114cc25f08ed9eec6d10a57c9a16cf12ca3
SSDEEP 768:M0sY2oZb5o/PDS54I5BQOweAsU2lSrvBqwH4Hdcvqs:9lzFGG2Ijfj8TP3v
TLSH
T1EEB2E1833AD334B171B5E0A9609D4B1294382AAFF34E851AD9027FAB6496F111535CEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000015
Size 39KB
SHA256 10502836eab0055fd85f524dcdcac18d339736eed9e63d54dba5eebed120f240
MD5 a66c17e7abca7b23237b620b38f9c157
SHA1 66c6db056c622165734c76120d4c2961d35b1688
SHA512 a3f55b0fde8b5fb80dee4f05c96efaa3ce4628564fba165c7cff1dcc8e916ebed176e3f9f42a7f7cb5060780028fe6c7210c1f63a6178b7c174d17ec126a47ca
SSDEEP 768:ciVI7XMoMiNQgmb5xqzbWWxVNl5dXAU3nDu9hSO3UFneF+4wg:cgKM3olmdxq3WWxVrXTXDu9hl+neF+Lg
TLSH
T1DE03013EC774BB2B841B2CBA41D2DDA438F85CF214E61D055FE2A976516A72EE1E0C41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000016
Size 19KB
SHA256 d60d307db85847b82b11288fe460505dc4068f49faf14688b67374d39e0a6f7b
MD5 96bbe1fa7c6e027e618cae0f28c99bac
SHA1 30233d6bcbdd33cd6c52f815efe7fb1d39625ee6
SHA512 b53593fa3343dd6965e9b62ecb8cedcecdd278ac72e6ac9615b44b5d26cb989a2d06389083db0bd66cedff3303f362fbb879ba7b38eead6d45960b891af7db97
SSDEEP 384:x3rcp/4YBntISYT1NRTahSuoW9gkT0ID47crELVwSz4Kc2L3yaFA1qU424C:R6DRmr+hgJbI94p7y7qh24C
TLSH
T1FA92E1C7E7DCF15D896E95AF266F82D1AB38753BC219211C64F490DC604EC116774B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000017
Size 66KB
SHA256 f35b6d4251611f6e97f33edbdebe058749691db42dfa08f90d2abae6dfa5ab6d
MD5 1446e921db7b000b7bbc62372331a54d
SHA1 af299bbbc604c1a028646c885f75a7f7fad3a9e8
SHA512 1d0307f1b5c2f224997815542891c6554e155cdd8283f143baff3b123c3e69b2c015920240fe917dfe1dd0c9cdf9ad4af93f51099d32d8991aafc3967b6b5d5d
SSDEEP 1536:9WxeT2AqelUSD1DnKJY8NpS0OodLtM5C87J:9sBAHJS+SM557J
TLSH
T19563022609C847EBC58C73F86D6424BF7F59B40058B8BDDD297E097A7C047B13062979
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000018
Size 178KB
SHA256 0dce730051c3b1526526743fc0079505bdf5454b79f6ec1c1fb2a7cb26350694
MD5 c0254118e3ebe12378022bfef999912f
SHA1 8ac9051c56091acd2b31036d8cd37bcf2f36aad7
SHA512 2014dd6332c3b1e6e4691533e88e66651d227cc8091274beb7aead5766bee626d7332b90328b46c7a19a5874ce9d2db52436799af9ab1448e9aab7ae4139d636
SSDEEP 3072:f6pPcK94Pdr1Il6r0/2TDx3rIYZ5gX5GaShNqIXIzmp3YuYb8:fdK6Pxx0/2TDx3sYTgpGX5IzmpIud
TLSH
T1A20412816BD0A4C5342CF6C5CAAA33FC845955E4B2DE4C4DBA3ABBC90670DA7950EE43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\index
Size 512KB
SHA256 0d93883a25cf1d1afd2cffbe25b13f1a801d8dfd828a0e0e849fc7172494deb7
MD5 e98ce191016f0faf0e5e815a3f4a1ef7
SHA1 6ac850eb0185714b3707062513505d9d19f7442b
SHA512 1010f7f9e2b0ae8057fe922cbe9c74ce6eaa7c722bd378d9c8a98f3a766d5d88092a9197de0a6ebcf06f0b10c1f1521520766e1611a5fbfdab3224b386834813
SSDEEP 3:Ls0lDl/lllnlElll4N+fl/Jltllv1y9l/n1FXL/r/5NtlAlsE/2Ntlzl5lXl:LsctlnlM/A+N/J1WlzBrE+N
TLSH
T1C5B4925C03010F0ECBE005FC84838B306370C000EFEF42430345903144C13400F2F194
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 94583c6ac99352d4ef01d8a453ab7e7876f4ba036cad127833509fb2962b15f7
MD5 9cc95e55d5cefae826e95b931ce753af
SHA1 839e448da5c6e6128a52e34704d43156022d0d1d
SHA512 d61c663240e29665d10c90c09d7a6b1829a8c56dab341a53e056e8f2fe095a1b581c997ed318b2206557819e83011431d4d2168fa3539d2dd7791e8a050e1f37
TLSH
T132A0021463F21443CB950172242545C0130069641096535B81E014CB88963F54602ED1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 936B
SHA256 6b64118a9f94e279e4bbd43a1be5145bb47c63413611824648ab2a98c5ff2e3e
MD5 543689f64821a81397352e61bbf34123
SHA1 920be1ec9d2a3e415d5314085150dee7eae35911
SHA512 237f12200a3c043d91ec80aac848e80db0302567830eba03a0ad6b16a3b0a8242cfae1eab424367540524824c37c9609c821fa95d6feb209462c6bfa42d33d58
TLSH
T1CF11422795B16563CB1D7F7846A3913E3634F805DDD30E6A4292E8EE24523D783108EA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588e51.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index~RFe588e51.TMP
Size 72B
SHA256 902ab7219801a11ea944cdfe308db9f102fce248fdb57985614c7fcc56b00a6d
MD5 df2255e185cf8014eaed9d37fe9ce2c0
SHA1 44e614d2b3dbc0a7da065c984ceaafb4a319c6ee
SHA512 e6298681799d596a28e58ae489d2e87707c5d4df97e4c4afb660b623184cc608e17304724542f016f72ae9ab5bb0f0171c18ab4d0ba34158cae7d1f1d19cd96b
TLSH
T1B9A0021153D014C3C7C503B16492128073219D9845533A5EC1D161EF8D54F7146011D1
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 97d3d5822679adb066c7f027ee9347e89f2609381c4cbeb3efb1f3f90ba7f034
MD5 673374ac48852901687949197ebc74bb
SHA1 f4e4435e92b6e7c0465c5556fb721241dd1f537d
SHA512 713823ff0ea07ea57abf5a502600a641dad5d0527e540d3b14546d25ef2fb18f01fcf9ee1d52e48e18d8a69ab66fab9a160884ec9ec022bdc39f268b08272317
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\000003.log
Size 114B
SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
MD5 891a884b9fa2bff4519f5f56d2a25d62
SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_metadata\computed_hashes.json
Size 5KB
SHA256 7470eb2b7d57e5ba2f6a2f86e2f94c5f509ff78d55a8b21361e4d6d115287b9f
MD5 e205387951d4b59daca72fd4371af7c1
SHA1 5f70a82c60144577a105cd6a144f2940b5cb1cd9
SHA512 600c8782592dfb7a32b4cd808abf4aadebebc6cc82f8c9aa4e584b5ec458094edfd49a636475cee7ddb80786cfc24ab1a84e0656f706112f353f89767a928151
SSDEEP 96:PbLBlwtH4ILhbGgZ1e5tc6vhEK9PLAe3U5buu62:TLBALhagTevc6vhE2LAj5buu62
TLSH
T1D7C130451DBA559B9F157B463D031812C80A6FC18D4C6EC7BE59E328F68891F02E3A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_metadata\verified_contents.json
Size 11KB
SHA256 27cb984ae94e6399b354a90afd1db4c76f99877c09721620401eec056c53cfb6
MD5 64010b5a93bb4d0d70405a54925f7501
SHA1 829dc158bfc24319e8ff034dbd277ea7bec6c64a
SHA512 cf5e6d67594ab33327da66319851c35c2dc40cb175aa8ee31fca183c235c094f728e73aabcaecf365b4c357f134d075a201febf598811bb5ac4626b711ff33c0
SSDEEP 192:RBG1a5Ma9+PqITEPc6R+ZdmOp+lbONd/jUmkD2mLLpPwcgT9QrWBlXnswXexRSJt:e5xn3Bol8U1EsOiSD
TLSH
T197327668CC4D708CBC56FB768B6A75769B48C9C9B14D2E1E13D34C603CB7A4948A30DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\background.js
Size 15KB
SHA256 65e168b4d99d6c95a584285f43299255cfb2e3aa2098369e5ad859fa8cd4a0b7
MD5 ffe886a9a2df579b51de987e764ca50e
SHA1 50579bb6655d1140996c1e670646aac9b8360225
SHA512 d39890272199c9371068da20df9dbe77d2d1c56e7791ee3ff2df0b16bd94f6b65217ea8e420544143342891a2247c9b807351e615981050b36884a68bf52209c
SSDEEP 384:YWSqK+K3tmygSoFlp9kROMSC/SaHjj2lq40fzBlobew:YWomygSoFlp9EOMSCqaHj6f0tubew
TLSH
T1F6629D886295B88719BE8B3359A34F45B07FB762EA8336BB4319BA8404F1C07CD557F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
Size 10KB
SHA256 965203d541e442c107dbc6d5b395168123d0397559774beae4e5b9abc44ef268
MD5 90f880064a42b29ccff51fe5425bf1a3
SHA1 6a3cae3996e9fff653a1ddf731ced32b2be2acbf
SHA512 d9cbfcd865356f19a57954f8fd952caf3d31b354112766c41892d1ef40bd2533682d4ec3f4da0e59a5397364f67a484b45091ba94e6c69ed18ab681403dfd3f3
SSDEEP 192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
TLSH
T13B327DA05F9EF1DB9F9873F82F132C12A8564B518A95E9647F90DBC5B38D20F520243E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\verified_contents.json
Size 7KB
SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
MD5 0834821960cb5c6e9d477aef649cb2e4
SHA1 7d25f027d7cee9e94e9cbdee1f9220c8d20a1588
SHA512 9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4
SSDEEP 192:RktDNJ2UzsL5KcASyoH+CouKP/iNGRo/oRHMIT:AZQflcsU
TLSH
T1EBF1A568CC5D758CFC56B77987AA36768B48C5C9E14D3E2E12C30CA178F6A4888B30DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Favicons
Size 20KB
SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
MD5 198e1617955c70ad9263e5ae041f3c36
SHA1 623233da85a56e3b75fbd55f5159d83f764db270
SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
TLSH
T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\GPUCache\index
Size 256KB
SHA256 2d8510eb94398e9f2021a1b37b03749501f131bfa78555e4feef1fac52fa9012
MD5 badb8b38b68193049d55d562e271d80c
SHA1 8f2c0f124bb6d817dfa36fb0f959a182d271e6d2
SHA512 26bd502a3d86ca904f01f144dfda7522ad3527d0550ed33bc94024be4fbbb695c131af2d34aefe671d23b44467d9e6ee10efe568692149fe716a26625a1c64c1
SSDEEP 3:LsOllllklkXl8dZRK/:LsUlP8bRK
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\History
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Login Data For Account
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 3KB
SHA256 13abafcd434b5ed6337c61195e2956b41d9bcbaf14ab53036c64a6c89e3cfaed
MD5 e56f976478fb4a6d6b6b7da6a00a4093
SHA1 45d5506ce8aec26175c00052cdc64861e6928c49
SHA512 fa3ddcb0cade311b5aacfe3f2371fcf39ac900b18bb77908d116567017b9652cb17ea5400effb79bcf10383628c662400be9d5e59f9084670303758811a0f3af
TLSH
T1A281ECF787E4962DDD2192F0EB156E2FCE2A0924531C3C6AC8D59F5B93E2471E200B5E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 13KB
SHA256 b901e352676d297861bb5c7211a207f5c65c0a8e99be0bba4e023e33c52f8cb5
MD5 ebfcbb831f831bb7e8b4c11e132e6109
SHA1 02f0b464988e06e218b597261cf8b863ee36c358
SHA512 b4314c0e3bd1767be6f8eaaf46af090b2803866ad7bafb49ce865bd37d9c26e9d2b7251a3c661815b33a4d9ce483e797712051873328260b9aa51dfee4c650e2
SSDEEP 192:sRPFineKvJAv73pAPRp2V9YHsb+WNnWF2EBwDTXzqPyIsnAUge:sRPFieSyTUX6Cw42mwvXIe
TLSH
T1CB52F62DA918757B0CCAD229FA617B5BDBF12021B4D02E48DBFC9A3C15C76CD6207413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 12KB
SHA256 b6ecdcec1232807c00b23efbc13924e4d077ec39f3770903c3ba7bd2b35f29ce
MD5 7e781be1e5b753bbdfe8c788d8c9ad8f
SHA1 6e1b3049d00f1913404e7bae692c049aaa8a162b
SHA512 02a6f12739743f25a94f4a621300f6b974c6c2e840a076e30ca27c25ce2b388eef2576d75308ed97fa03889bf6b06df0c3af4edefc8c4bc89fa7eb14e53237fc
SSDEEP 192:sRrjPOHq79TCv73pAPRp2VKG9YHsb+WNnaqSuFYv3egnVyIsnAUge:sRrjLTOTUXgCwx9YJBe
TLSH
T13B42C52ABA14653B5CCBD239F961BB1BD7F2202174942E84E7FC8A2C14E76CD321B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 2ade7ad8f15eccb025798893f007bc3a04679504411bbad75e4d1f35cf47a65e
MD5 40c4021f7a23fc1b361904d0519eb714
SHA1 eb811f03ded3cf26dc320980307be2b2f9335df5
SHA512 6cfd57cdb92272641c9ad007872cf25c11579c5bfd44935b988559b5e0cca1f4eff976265ff2c2b002f5176af6c8c21961f58e8fb108fcedf4370f9d640186ff
SSDEEP 24:TLf91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fB:T79aw/aHLopFMavU1iB
TLSH
T1B392AD8E1F343620C0F44B33F9C249972E7C212C93637A89EE5410F3DD965ABF50A5A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ServerCertificate

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\ServerCertificate
Size 20KB
SHA256 55c38a40a44105325365ebfb7615e7d38e55d7d02853c1002fa2a9ae98974140
MD5 c36580cb88a6268715ad1c3213ee3e62
SHA1 0e829bd8521137f80ac1b6fc9439c2622e3c89f8
SHA512 268e6d3593d346f2e9289d3b1505282d8bb684f4a829fecf1d807a04645a93d94f4267a50bf99df54047612023388a4afdb809781ca362581ee1e8a7826a56b4
SSDEEP 12:TLiNXB+TR0wfQQ+aoMllfIHFxOUwa5qgufTsZ75fOS:TLiZkZC6UwccI5fB
TLSH
T1D492468F9F843935E8A947B9458706E00F7AD73E8382AD6352E848503F90D8081BD45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\LOG
Size 333B
SHA256 ed73c63dbdf9aea94274c3f39f13685e37f4b5ab55b52c66a350471ad0f91c0e
MD5 bbef3a3edec0ec3bfaaa441ab3b8e9ca
SHA1 77583072d81dd2be109fcea04ea79d848ee179b8
SHA512 10345a63b5d73037c870d7b970c954556e569b02e36134fff007fa42ff15c10b4122d4703bfb1f18ca257d24f407e9f5f7d0352b06212eb01617583e91964dff
TLSH
T137E0DFA027CA92BE6055808702A0B34887EDB41BD2EC2C025F00E84451CA82CF0F12E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\LOG.old
Size 295B
SHA256 0f45ca76daab85b799f0969fd4225a406b7b90f1666cd1cdc62b1fb627cbc953
MD5 6e13bf36253d7f3ed7c4f0285c4d6e7a
SHA1 20f7977f86c025566863f1284e1da8930ec96f55
SHA512 0c2d4fdb18c1fafb93e6e304913ece6863f90dc8c22b6289a884526e796aa5bd7ae259e49a0e1c63b6bb61c2d1d4ba0792a05a78e26bc31e2a098cc721ba058e
TLSH
T1E3E0C21459D5C6BE605581D20662B30DCADCA00ADADDBA0A0F65D90810CAC0CB1B1A90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2fe48d02d7266754188a4cf2bb4d22ef1124ab04c1ec50ed35eb611b9395d3c2
MD5 3e9ee0c1f710740bd262206c7fd3e7d1
SHA1 4f8749bb73e59ce9c36712f9e4fcfdbe57688b20
SHA512 dcf837b2cef8565384dd834edd590d25b4753227fad0c5258468809564050b0fc11c83dc37fcba6e11f24b7cd11c8c004daae297a96b9ddbe4ac5f8a601b082e
TLSH
T1C9B0125180025511C04F02F411C604C833949F559705170253E0A9F5D82A1D08024160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5888f2.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5888f2.TMP
Size 96B
SHA256 3a1a142964327ed61057096b822ec81a5514db9e7b46555b0418292af3cbb461
MD5 b20978d5d92489a7c6873b348c030904
SHA1 6eeddd3b1f9b175eb1e4225efe8a26d4603c580e
SHA512 3d9fb5cced49ea68a2f8d1906895c89cc17a4f79b48daff4c97706f77c7e1b5ddb6a5094f1d93451a749714aabb7313df617255e9c9046153c67c5694d3553e2
TLSH
T131B02202C003322AC00203B028A2A2C8F020CF2CC203020283E02AE2CC28220003C220
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG
Size 345B
SHA256 21654694748f18d0e2f46764783657fb07230c50c7cb6f3b86279863b33c5087
MD5 55ea14df916dfd170121f0d5f7f25a76
SHA1 7a1daa947a709c486d67dc17e4c2f5c104204e10
SHA512 d329390759fbc878e008f574a5cb79a0c769049876cb30c96d2e265e476b60b5e14cef51036bcef74d7827a8a3f9ac32f0e399ecc55966909d95a90885fda49a
TLSH
T110E0926027CB876F6045405E6360F36CC6E3B406D6E918225B04E5C492C5404A1B1390
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG.old
Size 307B
SHA256 172fa7c4913d1f02715c6b7ee83d24473625a84e6f351bb4c83ba958eb434cca
MD5 fe17c5144d7ee5c7eb2ec001a1b2b583
SHA1 cd51d42b65a44c477a1c2c93e64d9f00a2366081
SHA512 83bcb5c96fce1098b95160ff5e83d25bb79443febd775b2a3991216c51d6ab7b36827b210b2ae9a3024e048cb729aada3b091d30f57bfa71d8f0e02caf29433a
TLSH
T1D9E0CD3476D5C77F714981EA5312F30DCAFD6004D6DDA53A1F2DE944228E808B0A2781
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\index
Size 256KB
SHA256 6c69763b99a2d522718f7730ede56867abdf265618b7f3cb406daa0065b3a59a
MD5 5ad416918aaf474d47ae7138f9eda076
SHA1 db62d5f482d52e50d9d8aa1166eae369c8466edd
SHA512 a23f6a40d77a55c358b2efb32036b805fcb020a6049e96b95a80df8f9cf3eddd4baa6d9bb51e7c983c85bb1a58b66477efb987f92aeb6eb3a6cb0c993457b3a6
SSDEEP 3:LstlNllkll/lL:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 5adbe8f64f85baf0f7d4bbc5d9bb5f6c98165ef105fed90d394655d24df2562a
MD5 10c1ee3bd6c1c61de0fa3389d6e9b55d
SHA1 8d03c5708db54fdb811ab80ee2c0582d108cf2fc
SHA512 442cb6d05f90a2dc666eaefe8425507cfc46671fda56b162fcd68f4710004755a8aefc80dffc14e8c0de6086586e9612e5fdf438c8e7db6fea6767da27957f60
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\db
Size 44KB
SHA256 b08af7745c49533422c5afb2e683b61ab1b025a2ef13f892321a2cd1383fba79
MD5 ad4b0d21f32cbccefd98c28e33a59a6e
SHA1 1850a90ed7ec61efca181fcc35927a2888549e6e
SHA512 0bc8a37f441ce5cbb0fe4ea3f766f741cc6424ac4274ffa42fcf507c8fc7154115375bc669449da02d8b57a19227483814357367cc8611cbecdf247d7b65706b
SSDEEP 24:TL6BgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg8TPq81fBG:T1OIy4m1b3fbUdeqSB
TLSH
T16B13BB0F1E187551D1BD0236E9E64E6B2E7E204C9B8369D125F01AF24DE211C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\000003.log
Size 2KB
SHA256 a70423c48119f29be0127edf68dbffe2a325b9955a3462f5d6224af84ac397ab
MD5 903e512bbf5604c333ba41266a37f2b2
SHA1 03e0040d85a348e1e8e5c1d0c2369ff26a2cdb8e
SHA512 7b6bb3a5296220d5dba5703c14b057335669de57967ab8ea9ce4116c7522f1097f8c990bd1bb4926350f2ac4203b71c2606c45d8709d32ee76a561ee05a874d4
TLSH
T1FE51D1F37D015435FD6398FA11EA385CCE6B930E18A8D3E5D3C65D31204395AB41F2A2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG
Size 324B
SHA256 39deffc39cef4887b901e5adbd23a5833467770f9847a967ec326e303ce4b0bc
MD5 0ca5ca97f4892d0882311f43d1f99e9e
SHA1 7b2c9e50a924185d22bfd756aeeba7031217848c
SHA512 b5dd4f554a0d1c7708425da855d6b979db9d09bcf10e39c2fb9c40c506cbe64ca3cad641d097912b04b608fe8257f626a1694099ab135fad6481e445d68a7404
TLSH
T1B7E0267067DFC3BE5064C0C743B0BB1DC6F4B809D3C93D6287046054A1C041CA1B13E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG.old
Size 283B
SHA256 2850b3ed5dae5e42c91ba87684bd62c02fdd52d93fead5b2b1d0c8b533fac666
MD5 0bf3a854b210170ffa8d5b532a2cfb38
SHA1 0edc2336c26bfb642511d3e93d0d20b1e2695ea2
SHA512 1b713f15193a1caccfb2a250f008de8891c6a1599e82f331f95da156304fefd109bb28a4a139a85a2f9f6436b34df88c153c49d11e50f1432c628acf55b23cfe
TLSH
T16BD0C27496D4C67F9084C0E24761B31EC9F8A80597DAB60A4B1CE40C628A80CA0B07C1
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Web Data
Size 138KB
SHA256 f6c807ec9f9460571cb3358b398f493fdee8af85eb5d1ffd9637844542743cc0
MD5 eeec396e9163f8acf6f5fc4db7b19fb5
SHA1 03548d10ad37978745390e637609c64e55b2d2d3
SHA512 57029717ee371fbcb1d012202ede9703137a5a611c42c6c51a5259493611245b320040fc771e450a067ce608f4f74649c03bea0aa40a90c13c3687cad6a475b9
SSDEEP 384:zeuvBnhJsueMEGvIW1DcP2OtONUVumJnRi:FnbZeMrv/hGttOgnRi
TLSH
T1CAD3864B3A747102EDE59A722CF050BB5E3C716D4F55A5D428B620688EF2863B23D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trusted_vault.pb

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\trusted_vault.pb
Size 84B
SHA256 b87bf305aafae1f1ec7dd947176c9529b2a9cbd4a3bf296fce25fc009e725366
MD5 85d7a7c1e12b26cd994cd41e587629d6
SHA1 bf53173aa4b19a217eb542951dbafe3ec3506810
SHA512 b3562e0466d9e218e96be44a01feac567e2843f61d1fe5201a5c7d6eef0e714cb5d7d8aa380dbe4f341aca2c46e615f3bfd29621a4898cb8e027cf1155b8df83
TLSH
T115A0128266008642461DB130C80B4C4018311C5A0B34400111F36EA362D5900C541440
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 e70a0d67082db5af4317b1b32058f5fbba9a76a2e0c520431bf755e7aaa3031f
MD5 188d0519ee5c505eb58323e28765223a
SHA1 4cf4a5dde6124f362602e78f33e01643c806a942
SHA512 5486f39d357d66cba2054b3fa51fdf58d9508800ec3f5ab51e51c88de771cf411b0a9ba138080aac893b2f5729ed9ae7d421ed98e0ff214c7373408e69fe15f6
SSDEEP 1536:HYcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3G:43Qw/xLANk0mUW5GmRntSFCjEENg
TLSH
T1E29312BA5E2A46F795BD4691729E7C09CE12220D715FA8CC72A8938C21C41CD2F73E63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 89KB
SHA256 2970dbde269aee1c886a9884ff06326249cf2ec68e5fc5ab410cdc6e26919e20
MD5 cfdca20d786367a38b02e303fa3febb5
SHA1 7762f1b05e95de3f204f4e16b7bc91ed2c2ea973
SHA512 3ef9ba325ff9ff94d07901cf25f0ed1846914fed5a3db65ed7dd829e8fade7b24d169b77dbcec54e4d925243241bef840cdb5c1476fd4b9bb40e289df7ebd10d
SSDEEP 1536:2h6cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEQ:t3Qw/xLANk0mUW5GmRntSFCjEENS
TLSH
T18B9312B94F2A46F7957D468176AE7808CE22234D709FA9CC316CA39C61D41C92B73E63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 89KB
SHA256 78aaf48fe4148f534629d2ecaaad24c135674e3f80a3ca6a4f3b9cd17a2f200c
MD5 78bca72e59b5b6c1fa9ba62803c08bb1
SHA1 78d6a371943e9606645d501b98b840af08178329
SHA512 4ae3bf57aa9dff22684c51fa795415c036b9f8297044a8a6e64297c1f8286bf1cfc32f357f103b439e89596b9eec7e4772f633aea9066b403dbcc2bf63cf73ed
SSDEEP 1536:5O6cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEj:j3Qw/xLANk0mUW5GmRntSFCjEENV
TLSH
T1D79312B94E1A46F7957D468276AE7808CE12234D709FA9CC316CA39C71D41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 f979e6b62da036211bf0c9dd365cb8e523ae28af06d5470d820eb0b1ebd54460
MD5 8481f0d31bf926284a783e7196b770ab
SHA1 6057fa20b2c36ae7e63b3a4c9fc531254d2467e5
SHA512 ef2a0772726c2ff951aa872c5b5d4f4b7f00e2325633b82c955bef85961dd4288a5137389921ac3e8fb87e8d29c5691d8b12f078231f88e5755ed84a08f323d2
SSDEEP 1536:HJKx4cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9Y:pc43Qw/xLANk0mUW5GmRntSFCjEENg
TLSH
T1E79312BA5E2B46F755BE4691725E7C0ACD12130E715FA9CC3268939C21C41CD2B73E63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 48d93f965e89beeefcecd9ce4ec2d4b6acc1a74b07ca7fe545228e321b1648ed
MD5 a270f587c3e993691a545fabb1a149c3
SHA1 67bf757c62ede1c98310f54104e2c16f490379b8
SHA512 c91a44e45b3abc8d52ede0c46e5532994796c3e47ce5c9b793e801be0aa1fd31483c5f4c9966da90f74071eabf47c5c86a9cb7872d75bd7463d79302cc81dfb0
SSDEEP 1536:GJKx4cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9Y:uc43Qw/xLANk0mUW5GmRntSFCjEENg
TLSH
T1039312BA9E2B46F755BE4691725E7C0ACE12130E715FA5CC3268939C21C41CD2B73E63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\ShaderCache\index
Size 256KB
SHA256 fd692091819ee1899c3bde81ed3a64d52abd8ee142a5f639d4f7c01eef952e3c
MD5 575262b92d937a5e87155430575480d2
SHA1 264180fdeddebd996e576a3938b2109e53b9ba86
SHA512 7fb85007ad79efe79b3e188b8803710234bfd707101c8f0feacf061e6a7404aa43de0c5f6d01f4b9a2057dc2c55facaa8a895a687391656910b542d40a2b2873
SSDEEP 3:LszllklkXlqM:LsJlPq
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Variations
Size 86B
SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
MD5 f732dbed9289177d15e236d0f8f2ddd3
SHA1 53f822af51b014bc3d4b575865d9c3ef0e4debde
SHA512 b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4
TLSH
T168A012078473800AE4184092C45C024114A480460119D0015070931314950CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\segmentation_platform\ukm_db
Size 48KB
SHA256 7434597d22726641acf6c1817319992b54ec582f0a7474d28dab085fe2f3747e
MD5 a9ae40fb5b25887e90a305a17a7d352f
SHA1 81c9a3d4ea776de2605c894f759d773e2eee77ed
SHA512 dab18020ef0e0506b4f0f2fffe09c502aec24955ae1c5a3072f21dfa1df1f98be0a25bbe1953fa2c0ac3f6cab3b111ceb0f5e81b6cd9a7bf217713e45acd3389
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0JQ:TkkhCU2QB2zbBxx
TLSH
T18D23490E5A6821E9D4D9193EFED34C517DBE0F588A2B78D205E00C768CE21EE553E4BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4620-0-0x000000000045D000-0x000000000045E000-memory.dmp

Download

memory/4620-1-0x00000000002E0000-0x0000000000471000-memory.dmp

Download

memory/4620-1237-0x0000000002990000-0x0000000002A0E000-memory.dmp

Download

memory/4620-1238-0x00000000002E0000-0x0000000000471000-memory.dmp

Download

memory/4888-16-0x0000000001090000-0x000000000110E000-memory.dmp

Download