socelars | e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0

Analysis

max time kernel
149s
max time network
136s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 01:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Size 1.5MB
Sample260504-bg171saz21
SHA256 e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0
MD5 cf9ee841dd4a302868e451c868fd353f
SHA1 28a7693b0d614953d3d9e2e8f9b6e7957132acd7
SHA512 cd054decf88772451165f7bbb3b1e87860fdd9fca96556d77ff964d9bff95aee040da06021d5885aa1cd4033bcb55403f139801ede0b81d08056771b410bbcc9
SSDEEP 49152:4Jtpx1iErFrLK3F7QojUnHo4Sa0ra0b2dPs5O9Gqczr:4hrFzo4nHo4SVr
TLSH
T10E75AE21F7818076E8E301B685FE46BF8D68B631031854D7E3C4189E9E659E27A3F727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery socelars spyware stealer

Malware Config

Extracted

Family

socelars

http://www.iyiqian.com/
http://www.xxhufdc.top/
http://www.uefhkice.xyz/
http://www.fcektsy.top/

Signatures

Family: Socelars
Socelars is an infostealer targeting browser cookies and credit card credentials.
stealer socelars

Socelars payload 4 IoCs

resource	yara_rule
behavioral2/memory/2000-1-0x0000000000C90000-0x0000000000E21000-memory.dmp	family_socelars
behavioral2/memory/2000-10-0x0000000000C90000-0x0000000000E21000-memory.dmp	family_socelars
behavioral2/memory/2000-11-0x0000000000C90000-0x0000000000E21000-memory.dmp	family_socelars
behavioral2/memory/2000-1228-0x0000000000C90000-0x0000000000E21000-memory.dmp	family_socelars

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	iplogger.org

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe

Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4452	chrome.exe

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
4008	taskkill.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2504	chrome.exe
2504	chrome.exe
3068	chrome.exe
3068	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2504	chrome.exe
2504	chrome.exe
2504	chrome.exe
2504	chrome.exe
2504	chrome.exe
2504	chrome.exe
2504	chrome.exe
2504	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeCreateTokenPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeAssignPrimaryTokenPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeLockMemoryPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeIncreaseQuotaPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeMachineAccountPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeTcbPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSecurityPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeTakeOwnershipPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeLoadDriverPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSystemProfilePrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSystemtimePrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeProfSingleProcessPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeIncBasePriorityPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeCreatePagefilePrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeCreatePermanentPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeBackupPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeRestorePrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeShutdownPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeDebugPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeAuditPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSystemEnvironmentPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeChangeNotifyPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeRemoteShutdownPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeUndockPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeSyncAgentPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeEnableDelegationPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeManageVolumePrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeImpersonatePrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeCreateGlobalPrivilege	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 31	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 32	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 33	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 34	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: 35	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
Token: SeDebugPrivilege	4008	taskkill.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe
Token: SeCreatePagefilePrivilege	2504	chrome.exe
Token: SeShutdownPrivilege	2504	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2504	chrome.exe
2504	chrome.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2000 wrote to memory of 2352	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe	79
PID 2352 wrote to memory of 4008	2352	cmd.exe	81
PID 2000 wrote to memory of 1056	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe	83
PID 2000 wrote to memory of 2504	2000	e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe	85
PID 2504 wrote to memory of 5004	2504	chrome.exe	86
PID 2504 wrote to memory of 4604	2504	chrome.exe	87
PID 2504 wrote to memory of 4604	2504	chrome.exe	87
PID 2504 wrote to memory of 4452	2504	chrome.exe	88
PID 2504 wrote to memory of 4404	2504	chrome.exe	89
PID 2504 wrote to memory of 4404	2504	chrome.exe	89
PID 2504 wrote to memory of 1276	2504	chrome.exe	90
PID 2504 wrote to memory of 1276	2504	chrome.exe	90
PID 2504 wrote to memory of 3056	2504	chrome.exe	91
PID 2504 wrote to memory of 3056	2504	chrome.exe	91
PID 2504 wrote to memory of 3876	2504	chrome.exe	92
PID 2504 wrote to memory of 3876	2504	chrome.exe	92
PID 2504 wrote to memory of 4156	2504	chrome.exe	93
PID 2504 wrote to memory of 4156	2504	chrome.exe	93
PID 2504 wrote to memory of 4348	2504	chrome.exe	94
PID 2504 wrote to memory of 4348	2504	chrome.exe	94
PID 2504 wrote to memory of 868	2504	chrome.exe	95
PID 2504 wrote to memory of 868	2504	chrome.exe	95
PID 2504 wrote to memory of 1028	2504	chrome.exe	96
PID 2504 wrote to memory of 1028	2504	chrome.exe	96
PID 2504 wrote to memory of 620	2504	chrome.exe	97
PID 2504 wrote to memory of 620	2504	chrome.exe	97
PID 2504 wrote to memory of 1588	2504	chrome.exe	98
PID 2504 wrote to memory of 4196	2504	chrome.exe	99
PID 2504 wrote to memory of 3584	2504	chrome.exe	100
PID 2504 wrote to memory of 3068	2504	chrome.exe	101

C:\Users\Admin\AppData\Local\Temp\e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe
"C:\Users\Admin\AppData\Local\Temp\e181f2eb535daafe10c158d73e41b90daecf713abf38539398a2d9906cc928d0.exe"
1⤵
- Drops Chrome extension
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2000
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im chrome.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2352
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im chrome.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:4008
- C:\Windows\SysWOW64\xcopy.exe
  xcopy "C:\Users\Admin\AppData\Local\Google\Chrome\User Data" "C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\" /s /e /y
  2⤵
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  PID:1056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --window-position=-50000,-50000 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" https://www.facebook.com/ https://www.facebook.com/pages/ https://secure.facebook.com/ads/manager/account_settings/account_billing/
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2504
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7fff5763c728,0x7fff5763c734,0x7fff5763c740
    3⤵
    PID:5004
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,18350478017180188427,7727925956378314324,262144 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1960 /prefetch:2
    3⤵
    PID:4604
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=1460,i,4246728022513920452,2646257183363788289,524288 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2264 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4452
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,16669300570882548548,3387372602538998996,524288 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2408 /prefetch:13
    3⤵
    PID:4404
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3160,i,2780861447007958626,11593167236405573528,2097152 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3168 /prefetch:1
    3⤵
    PID:1276
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3172,i,14563171025316194734,18271758931295288995,2097152 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3188 /prefetch:1
    3⤵
    PID:3056
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3740,i,10743237288451233776,9047601629962440355,2097152 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3752 /prefetch:1
    3⤵
    PID:3876
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3884,i,13848229821077192548,15610318348553009163,2097152 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3892 /prefetch:1
    3⤵
    PID:4156
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4596,i,79642268349601914,5442580495100305710,2097152 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4612 /prefetch:9
    3⤵
    PID:4348
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4872,i,11021636565988420731,7253506546136162811,2097152 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4920 /prefetch:1
    3⤵
    PID:868
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5072,i,14687412453495911429,8390639251312836137,2097152 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5084 /prefetch:1
    3⤵
    PID:1028
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5236,i,1911143142397637772,2293293926854166284,2097152 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5248 /prefetch:1
    3⤵
    PID:620
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,16665760765751485031,15644711736850364617,524288 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5640 /prefetch:14
    3⤵
    PID:1588
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,13783040762027134316,14012140383650162081,524288 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5664 /prefetch:14
    3⤵
    PID:4196
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5660,i,2610948922519346353,16401220102604642598,524288 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5604 /prefetch:14
    3⤵
    PID:3584
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5792,i,3273362704260185110,8665414488677204049,262144 --field-trial-handle=1964,i,17068230740410889082,7128326915470421406,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5800 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

background.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\background.html
Size 786B
SHA256 a1064146f622fe68b94cd65a0e8f273b583449fbacfd6fd75fec1eaaf2ec8d6e
MD5 9ffe618d587a0685d80e9f8bb7d89d39
SHA1 8e9cae42c911027aafae56f9b1a16eb8dd7a739c
SHA512 a4e1f53d1e3bf0ff6893f188a510c6b3da37b99b52ddd560d4c90226cb14de6c9e311ee0a93192b1a26db2d76382eb2350dc30ab9db7cbd9ca0a80a507ea1a12
TLSH
T1AF01900E1D04A56AF4154DCC70B1FA2C188EDF03F106CC6441F4D9A6ED9A7CD8C626F5
MD5 SHA1 SHA512 TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\icon.png
Size 6KB
SHA256 9434dd7008059a60d6d5ced8c8a63ab5cae407e7152da98ca4dda408510f08f5
MD5 c8d8c174df68910527edabe6b5278f06
SHA1 8ac53b3605fea693b59027b9b471202d150f266f
SHA512 d439e5124399d1901934319535b7156c0ca8d76b5aa4ddf1dd0b598d43582f6d23c16f96be74d3cd5fe764396da55ca51811d08695f356f12f7a8a71bcc7e45c
SSDEEP 192:arFa6ynwcj6POoDbxN9EUQYZRia+ce/lkygkkl0:apa6mhjshD9QYZR3qkr/S
TLSH
T1A0E19E1CEDD537BCA35E1601214F81B164E7B85383341A5C11B898FA94C6A9ED39F2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aes.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\aes.js
Size 13KB
SHA256 fc7e184beeda61bf6427938a84560f52348976bb55e807b224eb53930e97ef6a
MD5 4ff108e4584780dce15d610c142c3e62
SHA1 77e4519962e2f6a9fc93342137dbb31c33b76b04
SHA512 d6eee0fc02205a3422c16ad120cad8d871563d8fcd4bde924654eac5a37026726328f9a47240cf89ed6c9e93ba5f89c833e84e65eee7db2b4d7d1b4240deaef2
SSDEEP 192:9pQGDuD690MPdz8Ui015ll1I57I2Tru6h0hNmHV+m9eIfyAqYfinNVYEUUFJZmUY:9OiT0wz8Uiw/1S7DegkcHpeIuScZbAX
TLSH
T1B95296C936EDB94263A63068587F7017B86B28B5945C4824F298D4DDF9A899DC03AE3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\background.js
Size 15KB
SHA256 b3088c802467b93f1c942ebc2477a8aaeaec5698ca09b1467a8bab7a04d21e63
MD5 119930d888a03e570469329849984c68
SHA1 491575320c88d4d34d53e8d9cf1c4a0b63910796
SHA512 b80a6278a754f49f5c289f3e9a8a87db016df151d7f2479985ae02fc0ff6e1a4abb944c1d9ae15bee4926b478f783fe15b16ddc20c985a3b555cd2bab71b7d1c
SSDEEP 384:1SqK+K3tmygSoFlp9kROMSC/SaHjj2lq40fzBlobew:1omygSoFlp9EOMSCqaHj6f0tubew
TLSH
T1A4629D886295B88719BE8B3359A34F45B07FB762EA8336BB4319BA8404F1C07CD557F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\content.js
Size 14KB
SHA256 41e129bb90c2ac61da7dac92a908559448c6448ba698a450b6e7add9493739c6
MD5 dd274022b4205b0da19d427b9ac176bf
SHA1 91ee7c40b55a1525438c2b1abe166d3cb862e5cb
SHA512 8ee074da689a7d90eca3c8242f7d16b0390b8c9b133d7bbdef77f8bf7f9a912e2d60b4a16f1c934f1bd38b380d6536c23b3a2f9939e31a8ef9f9c539573387b4
SSDEEP 384:rlBc5VG/MavcrTkzqaKNVyQiYCIizzSEWfw0:rrc5VG/MavcrTkzlKNVyuw0
TLSH
T17D52D2DE53D8E97B2ECD1E83BD508ED650B2A236D7C932C7872CB94C51E90ABC5084B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jquery-3.3.1.min.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\jquery-3.3.1.min.js
Size 84KB
SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
MD5 a09e13ee94d51c524b7e2a728c7d4039
SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
TLSH
T1748319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mode-ecb.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\mode-ecb.js
Size 604B
SHA256 03164b1ac43853fecdbf988ce900016fb174cf65b03e41c0a9a7bf3a95e8c26a
MD5 23231681d1c6f85fa32e725d6d63b19b
SHA1 f69315530b49ac743b0e012652a3a5efaed94f17
SHA512 36860113871707a08401f29ab2828545932e57a4ae99e727d8ca2a9f85518d3db3a4e5e4d46ac2b6ba09494fa9727c033d77c36c4bdc376ae048541222724bc2
TLSH
T10EF04C877CF9AEC1D5A2B1AD8B7FC51D787400130556DB407B0C5160EFD84300B45AAC
MD5 SHA1 SHA512 TLSH

Submit Download

pad-nopadding.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\pad-nopadding.js
Size 268B
SHA256 282308ebc3702c44129438f8299839ca4d392a0a09fdf0737f08ef1e4aff937d
MD5 0f26002ee3b4b4440e5949a969ea7503
SHA1 31fc518828fe4894e8077ec5686dce7b1ed281d7
SHA512 4290a1aee5601fcbf1eb2beec9b4924c30cd218e94ae099b87ba72c9a4fa077e39d218fc723b8465d259028a6961cc07c0cd6896aa2f67e83f833ca023a80b11
TLSH
T1B0D02B5E3DFBAF42D49972E5C73DC14C71244103066A5EC2AF0C02728F61C395799AAC
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json
Size 1KB
SHA256 20d39e65b119ed47afd5942d2a67e5057e34e2aef144569796a19825fea4348e
MD5 f0b8f439874eade31b42dad090126c3e
SHA1 9011bca518eeeba3ef292c257ff4b65cba20f8ce
SHA512 833e3e30f091b4e50364b10fc75258e8c647ddd3f32d473d1991beda0095827d02f010bf783c22d8f8a3fa1433b6b22400ad93dc34b0eb59a78e1e18e7d9b05f
TLSH
T137318537E580883B26F5EB01BEB83282FB62835B55404D4FB07EA05C0F75E2A018435C
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 20KB
SHA256 2bac0449e12108e5b77fa1e6eea2fb79151b87202965f803df494c836f5fa4d1
MD5 369035a5726a8d2dad5a436758e6d02a
SHA1 39c5109b751df6418e786dfeefe7bdea409e4e82
SHA512 dd130929a0e145df290db16522eef11c23c13de88c126eef304425f33365719083bc60dc90c684d0e037080e77a7ce0e1d1384f451b00233d26664891480addf
SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslox7pLuLcPfccm8KCBAdlXODqt+ErU3sjHGu:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsqx7ps
TLSH
T1D9920A676C0CD97B0F94DACCDC1A7A4FADF5014B65D8986893FA9C2903D1BCA12062F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\CrashpadMetrics-active.pma
Size 1024KB
SHA256 67ee11b51cd6f637795e31ab501f135ed595c8459bce885735f08b0418513a17
MD5 34c29bdb9e41b1f47f2d2786762c12ec
SHA1 4075131b18c3487e3e848361e112009c897629c7
SHA512 ca3a978798e77b2ced27b379f38e935ef18beaa7ea23e34270a9af20b37e1b1c5edf9478606311cf1acabd83992766cb3da8444de9394c674d5955bdbc53c0d0
SSDEEP 12:bHCskaXhVMMBKEKSCemJKlkQfIYVhYJ0X:bi0ROMMBS+MkEPYW
TLSH
T151259286B34455BBC54189B188AA17606274F9E89F82179A3B18E60F1E661DC0F51964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad\settings.dat
Size 40B
SHA256 4ab90ee72321a1f65d12083802908cee44fd663c4de721d6a550a31b067a0f84
MD5 7a0d2e89df843297b6e4dff991e54a8d
SHA1 90c6e246b01e331a2a44f53bfd0bd631cecfbf41
SHA512 04f12d956d1319731fab914a4b22b6b8ef606d918dd131834b6c45f614832000491ab61798c9917c0dde78eb1dbf51e4e115c76da8d1b557cfdb569962f3c711
MD5 SHA1 SHA512

Submit Download

Account Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 daabadc32db64b61bd9fe76c63f7a5b3b53f397bae16a3899de5027434099aab
MD5 02400800ec7991c868721c02109a567e
SHA1 a429ddd0a7236460dac90af62d13ee7abb7cda3f
SHA512 23d04898379bc37f104c7de232e91d2772864d1abe9f256c070cf79232b365a3d55a71461ed9407d376c7ac39499f4942c267568168979050734d270b1e8b08b
SSDEEP 12:dL11oDktpIKwS4QoQY2yDxZzt+osR91CODt:dL11aUpIKwSrS1DxZx+osRzCO
TLSH
T1E913C23C46BD5F3BFBC901793C17ABB19B319838AA5C3253C1237420144C300B48E019
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 fb751e76fe99f25d34a819f759139be7a7ce9a80c3a9b3678ac96b25230525c8
MD5 85589b4202e156d975f3df5d438f59ca
SHA1 cc985b801a790639bba46d197b3ad5ffadc78107
SHA512 f274f6612f422aa3380a50c4ec8751902273674de2c1288b7972f077426086362699e4ac647b089ad1a9162536c9e54cc021d06a655671aee3bcc7bd716c3bb1
SSDEEP 48:eXNiYuaGMCXgloU3MiXW1RGxoyCqS8aBCyjaB8W0:etuaG/gloqDWHPDqSCyjaBF0
TLSH
T1134496E72E54F5C7DA38CAF11C501238CE32961A1C94ED77F52814B2578AAF33268E96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 53ac11b56fd0e8fecb82a53722c105a4da24ac9e3e69aa5367a2d858eb08e3f0
MD5 7db20c5884471c08fe742935bb22f20d
SHA1 ad7172feae27ccd43c4cb5250420cdd6f1f3b4b4
SHA512 8229d925969d175cc2915ee893dd617de2b48c4d508d61b9bc53f518e83f3e83172b134584596b1eaec7428027693066902ee68a46af105bddf25bcef3245edf
SSDEEP 24:WTqkGCDOj2NIRqBXQ8XloJc0C/PuhPgg1eA3uRxbagzu3XO7mlOji2n:NkGaGZRqRdoJVCehPgBADHHGmlYVn
TLSH
T15A25E656DC4BEE41D4FC1638AF10DA42BAA44CBB71DA60D628B805DA2694672988D0A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 e3771b95de9be0aaac211b14767a66a0d93b0997acf875fd92abd67996060cb9
MD5 e10be5f43576059711aac875405ca455
SHA1 1175e441cd93197fbe26434494ac6b8c7a69ab75
SHA512 63d1d85f28e2a7ec93847f4d85dcd88624d37c7d9a19391bce3c29d85fce191dad778a1b95f804e671db0ef4c286014b8966c935277ef0cd5b4854ccafa92cc6
SSDEEP 768:dfDPLSgcRUv+TZ4Fk4b4E4W4pUfDPLSgcRUv+3Z48UfDPLSgcRUv+lZ4dUfDPLSl:oZzKd7GZ1ZzZ
TLSH
T1D8163BE70F64B543EA85EBB0BBCCDD183C702295EC9698D2E122927D4AF1FC41B8519D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000002
Size 69KB
SHA256 aa9ebea13743f59a883deb50b1aa3cee79445c26865d8691c2f4af9f67d20f3e
MD5 d06a9d66f08f8137312a84a034486ff3
SHA1 69507564f5063ec0cd1e3dddf0ff829a01a9f1d1
SHA512 3d2438726dfa758301fc3d76fcd9210ced1cdd206eff02ca7c93275154352f94095f93d43943de4194d865495ba7c2f242439ce17fb1199193f37d65f953fc40
SSDEEP 1536:Yor+MYgZu+Kwdf5oVgUThTCqkTpjL8gtxRFL8vh9QXXijpXmG:Yok2KwPoVlToqWpZhQvbQXsx
TLSH
T17F6302775A9C7C3D3E6E60EFB5FCEF2B41658FC4A216D64A414022EED4068CC6141F92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000003
Size 38KB
SHA256 1d39335bcc92df6017b3a1b2c0ee549a3cbde2d3ced0b09519a043d38a8bec30
MD5 356eb2db86a3c20d9f12ab52423b7030
SHA1 2faedf35f5b49a4d4a15316641990498c2358c6b
SHA512 caa693ae790cb8298723e113709d3f8bbd7ede64ccfaf25c445f9092040dfb61e14796ba5c983a801b05502763a33c030c1a6494d0e79fe351708879f68e1fb2
SSDEEP 768:gEpDNzk8U9Yip1z6CK+fMSqYc4l5q+GrMV1H/1d37gkVKIY1JCEeDP3396d5dIyZ:TpDOzB1z6CDfMLYugV1x5RY1JCEeD/S/
TLSH
T1DB03F1877A25AB2E99FC4EEA1C9FA04F5821C5DEC3EDA5CB0C07F54241A123654DAA03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000004
Size 35KB
SHA256 51771f2482180e2baab3e20b3fe4e9289f3aaa98a84b44491ac85d5fab0832ec
MD5 dd551f56f5c28414df5cb2eb9f187d30
SHA1 3294f38ff6cfb55cc84d38288830544f881932e1
SHA512 7c4587ab3188166c8df2f0899dab3b8acff6bf6f0b08e105c8e2749b50d5a5bd6a8858adb71be8342d06178c5be1e45995d1327ace9cfb8f856f40fab839b76a
SSDEEP 768:sUQW5U27p0hlKp1CwHOJ/MWFAFFxYsOIakEkD+HsUNi:snStNKl4AAysDaFkDysUNi
TLSH
T107F2E1B36EFF9D19813591602FCC636E8492FA8FE3C7A9949CD81789C3AC3EB1560444
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000011
Size 74KB
SHA256 9ff1b5057e57c518a88581a3078cbde668e76e4575bc7ff92547209a04fd3645
MD5 d7c0ebb7b5db8914b2c28c510e9ea2ac
SHA1 9a04f08ac02c9a850be1984803fdddff746ab735
SHA512 390a1616b82b3c1d06581055c2246dc5dfa679ab10599e38e28715b99d9008e3a168d3a98c2dfa6aa2f96edda4cc5d53eeeba278c7b797e9dca386690652027b
SSDEEP 1536:vaW68nayei5ptpn9bG+dCHl9DkUWk44CTdPnowbdVe7HW:yW68nZei5Rn9b7el9DhWYYtO2
TLSH
T1A273028E5AAF1023235C79D06E04A1F214E2C8A9172E86F1DF55B4B4C225DE67B90DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000014
Size 25KB
SHA256 5e4611fdb5c7906e74b744366efc4778029bd654117c564a285dba17d1183e12
MD5 960038e61249b8206edf905c44f06e1f
SHA1 4eade31097df53ddce9bca4f9d3c0829da38f827
SHA512 0d0c83d8ceebda95004bcc078334576462d9ae8f4536f7c882a13fd1770ca8fb6776149c3984bd177c07acf239bc0d5507e2a9a3617c63d972d0f75eab40ac21
SSDEEP 768:U6v1HTpbmOblQZkN4yU5+vwiZdwQUKBw9xGU+X:UAzpbjblQe+2vwkwQTsGvX
TLSH
T101C2E1C07FEA088D4A711A697AAAC9437189676EC8C43D4EF7C20167611F2DCF6C1D64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000015
Size 25KB
SHA256 531e91672daf6063fd6be177ffbc47be83f7091cb8824537bef79bac20102f0e
MD5 9d23ecbf96471315bdda15e799bf1a60
SHA1 783505e687b300d1f9f51691c0cbd9f9ef475527
SHA512 9ea87e5eaad047ccee4eb90e603e0e0944fcbe56c09c33d91fe7ae58e226e668a6484ddbbad3632f10ed972efae93114cc25f08ed9eec6d10a57c9a16cf12ca3
SSDEEP 768:M0sY2oZb5o/PDS54I5BQOweAsU2lSrvBqwH4Hdcvqs:9lzFGG2Ijfj8TP3v
TLSH
T1EEB2E1833AD334B171B5E0A9609D4B1294382AAFF34E851AD9027FAB6496F111535CEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000016
Size 39KB
SHA256 10502836eab0055fd85f524dcdcac18d339736eed9e63d54dba5eebed120f240
MD5 a66c17e7abca7b23237b620b38f9c157
SHA1 66c6db056c622165734c76120d4c2961d35b1688
SHA512 a3f55b0fde8b5fb80dee4f05c96efaa3ce4628564fba165c7cff1dcc8e916ebed176e3f9f42a7f7cb5060780028fe6c7210c1f63a6178b7c174d17ec126a47ca
SSDEEP 768:ciVI7XMoMiNQgmb5xqzbWWxVNl5dXAU3nDu9hSO3UFneF+4wg:cgKM3olmdxq3WWxVrXTXDu9hl+neF+Lg
TLSH
T1DE03013EC774BB2B841B2CBA41D2DDA438F85CF214E61D055FE2A976516A72EE1E0C41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000017
Size 19KB
SHA256 d60d307db85847b82b11288fe460505dc4068f49faf14688b67374d39e0a6f7b
MD5 96bbe1fa7c6e027e618cae0f28c99bac
SHA1 30233d6bcbdd33cd6c52f815efe7fb1d39625ee6
SHA512 b53593fa3343dd6965e9b62ecb8cedcecdd278ac72e6ac9615b44b5d26cb989a2d06389083db0bd66cedff3303f362fbb879ba7b38eead6d45960b891af7db97
SSDEEP 384:x3rcp/4YBntISYT1NRTahSuoW9gkT0ID47crELVwSz4Kc2L3yaFA1qU424C:R6DRmr+hgJbI94p7y7qh24C
TLSH
T1FA92E1C7E7DCF15D896E95AF266F82D1AB38753BC219211C64F490DC604EC116774B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000018
Size 178KB
SHA256 0dce730051c3b1526526743fc0079505bdf5454b79f6ec1c1fb2a7cb26350694
MD5 c0254118e3ebe12378022bfef999912f
SHA1 8ac9051c56091acd2b31036d8cd37bcf2f36aad7
SHA512 2014dd6332c3b1e6e4691533e88e66651d227cc8091274beb7aead5766bee626d7332b90328b46c7a19a5874ce9d2db52436799af9ab1448e9aab7ae4139d636
SSDEEP 3072:f6pPcK94Pdr1Il6r0/2TDx3rIYZ5gX5GaShNqIXIzmp3YuYb8:fdK6Pxx0/2TDx3sYTgpGX5IzmpIud
TLSH
T1A20412816BD0A4C5342CF6C5CAAA33FC845955E4B2DE4C4DBA3ABBC90670DA7950EE43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\index
Size 512KB
SHA256 d385d1981461ddccf10d6da783a99189787c474c9b5c168df92388a07a2ab809
MD5 64b0ec7abd6b5e0e019dc60aaa7b4d17
SHA1 4870048928d6e83e1b67deabb8860ab98ff9091d
SHA512 d4a42f7aedc70eda3ad3535b8d6d30ea4b96a5c3daae766f5fb0683c49bb7efa7623a807e11783443171f94aaf0d573dd120a7d83c90a7614ec4e7e1f53652c0
SSDEEP 3:Ls0lDl/lllnlElllZnXlzltllv1y9l/n1FXL/r/5NtlAly/l8E/bl//lGNtlzl5v:LsctlnlM/ZXJ1WlzB8ECN
TLSH
T11DB492AD63000F0EC7E005FC89834B302779C004EEAB42430380502544C13440F2F2A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 888B
SHA256 b769dda946c8d4648510b1517a08eac207edccbeba2ba689bbd4ba9de98f1308
MD5 aca6c6df47cba3f963230cb59cddada8
SHA1 91ff4f50e8573fad2371356aae7beae5db33e5e8
SHA512 e0351ba591e047fac3c7d976851b772238dab101d5ae64114f3d09684290644ba55352172ae3018ab0b90bd691d19ddb8432348bc067d7022d0d3fc36725a797
TLSH
T1F211475FC4F06D83FB0C2D75E7A2890D246815C4C11BCD92CE8EE5EF2705B40520041D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bbba.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index~RFe58bbba.TMP
Size 72B
SHA256 11102d16c9a1fa37f62b6d523de38d41fd47b59e6299304e119e2fc0da610892
MD5 9ac65fdfb65d5eb8f1709fd98e1323ec
SHA1 c79efd0f1f6979ee455106cad4b6d64c4f4929ce
SHA512 6a5c4bae9ff9379c2b56e646d8379688891f900b2fe230294d2cb11110cefb5d779ef0f14c35cb2471b7b156f6f03d426b0c88eac55b778ad0b800dca16eabea
TLSH
T1F7A0021113942001D7981371369506C477608D180F121ED6E1E155ECCE943656502092
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\000003.log
Size 114B
SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
MD5 891a884b9fa2bff4519f5f56d2a25d62
SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Favicons
Size 20KB
SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
MD5 198e1617955c70ad9263e5ae041f3c36
SHA1 623233da85a56e3b75fbd55f5159d83f764db270
SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
TLSH
T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\GPUCache\index
Size 256KB
SHA256 c28e01e579361d5df956cb7bf763b5474b554d983ab2b2aa89b35df074cfe30e
MD5 bb197c7a8db05e1ebc4dd5961ec4cf10
SHA1 d5ff2adcec8716dc2701f518383867784413e801
SHA512 7ec3198fbea436d42af06ac268dba0ee41564743f9cb596a245800bf39b4c5e662895e128b6924c7226616bddb3dc3505ae9784b8be917c4c1e77bc9248c37f4
SSDEEP 3:LsOllllklkXll+i+:LsUlPl
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\History
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Login Data For Account
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Cookies
Size 20KB
SHA256 f132e4f2d10443fc8a027f18a907bfdb5e9c31f551a5656a6c2c903822c42782
MD5 580c587f3b76548b597b470d775f9120
SHA1 fc4036272013f22409605702525a443db23fc335
SHA512 ad5e613c87b8cf8c9c7714a6edc05dcbed752f9e727134ef5b8fb25bc4b7e4e8d8515dcd7d21e3fb45eeb7adb8bf3253fc407deb04fc259b9403e819549145d7
SSDEEP 24:TLyW91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBnwd5m0mEtLvd0qkNqu1Uj:TeW9aw/aHLopFMavU1iBwHlNvo0
TLSH
T11A92508F0F303601C1F8467AE8C2089B1F7C112C8363AA89EE8014F28C835ABF1065B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 3KB
SHA256 8ea4908b9c4576050d2b26308dd506308c2fc6373e7456e788b2806ebd74fb88
MD5 93fef54c1c8cee7bdb2827d68ce58ab3
SHA1 e6550375d6fb1fa97ad729070c5f303b5dd61076
SHA512 25ac1c51952a79590792d62f2d5b465a788b906e91b54b21fa88f440aa2a7b73a15c57332ed70c0629b5a350e141584606f29909e9e17c6012c23d1f5d0fc6fd
TLSH
T151719AF787E4962D9921D2F0EB152E2FCE6D0920535C3C6AC8D99F5B53E2971E200B4E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 2KB
SHA256 15f64f547031ae648efb61c2451a372703265609f57258c9863efd8d924632ef
MD5 d65ec75f9c8d8afd5a8e33dffceed644
SHA1 2d08fe0280db1e6d2f99d15bb73d5074503f6046
SHA512 f295c1c8d461d6a8e08c5aceffebe03beeac0bbc817b11ff88e98afeb717d6694ce9d55c9802526c3017db0a19d370f13af493c26c12ebdb911e551ac2817f29
TLSH
T15851DDB3C3E8997D881156F4AA246F2BDD7A0A14531C3C56C8D8AE0F57F28B6E21124F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Reporting and NEL
Size 36KB
SHA256 63e4b00faec23c968deff1a2a0ede19f91038f6cef5fb6414e7e7195f2731909
MD5 8ec2f75d8e77ce1fbe8d2079a82572db
SHA1 c1a36dddec1371e20be643bc978fb4346a635e82
SHA512 36f10f28070a0eeda7d09114f3f21f043a3f5bbd420769468ab05a1e533c92aab17a4643749a7cfd7ab290832d15d7f61a09a9589a5fa26b3b584b63175f923e
SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBLR/:+IEumQv8m1ccnvS6jpD
TLSH
T19CF2FFFF1B05B601C0D491B4E5810ECFFD6D112D4B9ABED09A9809F357C66F39528359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\TransportSecurity
Size 517B
SHA256 ca106f2e4914cb9d9b534a3c4f57f3ec541b1af4bd79fb04f067b1c4d8bb34c6
MD5 b1dc19ccf0cd760689b3937f72ca7769
SHA1 acda44565f9e4119987fcc9eddf9f03f8395dc0d
SHA512 cc8aab5e4922137ab875fe693604a6a92b9df0fa037d5a7c4ab11fcd90c1c2896c4e2936076061ac26265f852d9850d62cd54c38344d617c047664e817d056d7
TLSH
T102F025DBD97DF92B20BD95AF1D14B80559B59831168154E8CFD6417CB09B6E70B03407
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Trust Tokens
Size 36KB
SHA256 f6dc3ce8ce21647c61b493cd86c6c3fb5992d5ee4507bae9da8e33fdec247804
MD5 2098aa1459265f01606da9581b7b810b
SHA1 4d9839da23cda7ca4a315b87253f7dff444b6178
SHA512 ddb46a6c9bc1ac4e52483dafb92bdd67f0456473a4b2a5ee7cfbf471615eacddcc6c0ac47b3088ba592af39822e9cbd9769430658d2b1e1e0cb9cfe5bd88714f
SSDEEP 24:TLKEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TWEeWOT/nDtX5nDOvyKDhU1cSB
TLSH
T18AF29A4BE93C6FA3CCC56FB08B07D5B41F722BCAE68276C4247120A01DA964495E7447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 13KB
SHA256 3b020e092e210f0111c34756c2c99b3d501262f44b80e046e949e03b3c6dd3db
MD5 95e2bae66072bb7afceca160ad217f7a
SHA1 a93728ea8fe5932223015b68f5b7727de2546773
SHA512 97621bb228be24e4ab3a33c0d0508c517c4bc78520cf25a8b41cf45677b7c501e876ba28f72163802992ff8dba2b0f81251b56b06fa6cfb62116df99011598da
SSDEEP 192:2RlHnWY8Lmv7ApAPRp2w9qHsb+WNnZv2C1TM4HHaPk2wNGPyIsnAUge:2RlHWjLSsUXz4wJ2C1TBas25e
TLSH
T11052C51AA91C797B4CCBD219FA65B683F7F6102160D42E98D7FC8A2C05D7ACD721B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 12KB
SHA256 5544a63d045f23e514645d4c4a06c4d519b0082ed2bd9f312577ac9c43ce3ede
MD5 77ef52e66275c08315fd335d2d2da1cd
SHA1 812eb8f642e1078a9080d33592af3ab572503e3e
SHA512 8d804a8995d0233816d10892789cc3cb11ec50df25badbc4b7c4664444a63c3047dd0a7d67e9071ebffd7f8a48b005c3d48f4cba99ac0cea49bb05cbb414243d
SSDEEP 192:2Rf44PAdX6Yv7ApAPRp2uMI9qHsb+WNnO+SP1YCk9Aex2GuVyIsnAUge:2RQ44AEsUXh4wfMYL9D2Gme
TLSH
T11442D72EF914693B5CCBC229F961BB67E3F5102171941E88E6FC8A2C15E7ACD311742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ServerCertificate

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\ServerCertificate
Size 20KB
SHA256 55c38a40a44105325365ebfb7615e7d38e55d7d02853c1002fa2a9ae98974140
MD5 c36580cb88a6268715ad1c3213ee3e62
SHA1 0e829bd8521137f80ac1b6fc9439c2622e3c89f8
SHA512 268e6d3593d346f2e9289d3b1505282d8bb684f4a829fecf1d807a04645a93d94f4267a50bf99df54047612023388a4afdb809781ca362581ee1e8a7826a56b4
SSDEEP 12:TLiNXB+TR0wfQQ+aoMllfIHFxOUwa5qgufTsZ75fOS:TLiZkZC6UwccI5fB
TLSH
T1D492468F9F843935E8A947B9458706E00F7AD73E8382AD6352E848503F90D8081BD45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\000003.log
Size 3KB
SHA256 00ef64a92ffdd17790b7b515f589aa5e19edc39f54a9aae48918bead25c4755c
MD5 f29da16da54a1dcf1c6ce7b73d53892d
SHA1 98e8a813da4a9d5a7782ddf92ff625c9b92596c8
SHA512 d8a5ca0069d7b835be86c4fd7623235e5576f835099c4866183b3f0270a2f97d8c2f3d16bf7f0f588e3f391a36d7108b4f903d1b30ddcb5e9b0036c0384d1405
TLSH
T1B0817C6EA509084EE4A9093BCD79570B6F7DCF1C2BFE3767B9DE8A0409B095711086E3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\LOG
Size 333B
SHA256 73a0b5c7d4c2f4c7a0519d52631abca42e396e6f2f6f4efa7a578a42f48f6f26
MD5 4befcdfc9eb5c1a1d81226fc42758c5e
SHA1 87487729a2922547649b2e1c05c3483d89dc9d3f
SHA512 54b8f17b86aa0e46f2212f2db812de5ec0ca1d6695d7267550cc5e5b8332fa484c6521a24f7cd789016758f23844c5345c9d39e77c6d4fd4e69446c4be7ac1fb
TLSH
T153E04F60A5C9C1BD90EA80A342B1B31AC6E8F416D6CD68225F65A74821C590CB1BB2D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\Database\LOG.old
Size 295B
SHA256 ccc3fb604b39d3f71ec75e1ecd492ee141bc60f0dc4d9f2d3ae1e7528eacd5f6
MD5 33d4302e10f5b375d0358f7e715210b8
SHA1 ff2b0e94a1b901ed9a1cd17cfffeb5afeffb61a7
SHA512 6f0f1378b84c7bba82697504cbc34500f9dfb5419ca544594adef6729eca2f317c3aeaefe3ebc142e2218afcc8de096c38e6ec6f3cb976b3f8d1ff95c592107a
TLSH
T1DEE0C22095C1D7BE155DC1D20625A30DCBD8E05ADBDC39061FA1ED4811CE90CB4E3281
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d1046bb97c9d20829942a3da1befbffcd13eb9d15366138822f57241b33b3b16
MD5 fb2cdc1b8c6d3f1fefed0a2c3cf69dab
SHA1 e6794092b266739d76d0514f749c6608ed31cd7d
SHA512 40159bffd9023a1dc0f41c874cc55cff958b6c32c69304c4306309f69c875fc32b01ba1477edbd07a3650c4d3f0db2fb1688c92cf4a794182a5ef2a7812a697b
TLSH
T12AB0125184415521C05B02F4118614883258DF1097091B0153E0EAB5A8262A15025151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b39b.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b39b.TMP
Size 96B
SHA256 321b34ef35d5ba863e66620a185dbf40febe509c0bceac7ce64263b40edd84de
MD5 55c121c2d9a038cfc16a009a89dfa6b7
SHA1 6917817a425610f605cc12cd92627d1a7129e4cd
SHA512 86144afc0d70cd4d9a031bd6a939a998b8cb2f5d3e6472074bb8edd4a5bd87c3461db578886a16c44457df895101505d608cc63ac1fc7ff49c9dc1b882555e05
TLSH
T1B9B02282C002B202C00303B028A3A2E830B0CF20CF830302A2F00EFAEC302208830830
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 05f5fb55dcb048e3035764352977d46ff1d7e7c55194cddcc54c6c712a100c84
MD5 6a1df3bdd5a49af86e2118d7dc4c3ba9
SHA1 cd0000c32c7ca94c9e7534889eedc225297e964d
SHA512 d0478b0464bdf435ef28faf0c19d1e4237a0319dde17bba4ab22624b4869a4c3b8f5230bcca9fdeee5193d1ff9d46ddcdbaf154702d9e99c60b0c2ed2a1108f0
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG
Size 345B
SHA256 94125da364fe6a3147bd51fc27f1f27488b41f64bc157eabbc790dfb86bbb0fd
MD5 cbc792f840484df3ea54739d7c3a8f53
SHA1 aff648c659413141747f5d5de6999c922424c004
SHA512 2386bc27ad8c1df1df97241c32632a2146062a07699ba75b7dbef4f5d4e0cc719bedfab44040864609c39361000fa49e269584c058f13a888bf3a034441f5393
TLSH
T15FE0D83065C9C67E52DA40576264F34FC5E2F801D6DD54311B18B34862C5408B19A3C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG.old
Size 307B
SHA256 64dc245fbfe36f3e7807a13c090cb483f25119208668e8cf73530533f819f6e7
MD5 a794a7d142d52a6d941347fd0499f035
SHA1 f3518c6a329442cda46f836da6a067f6e3b97486
SHA512 ce0fd05e9aa2e22f70877bfd93df3491da44fce6346535539662fcb9d998538ea9294d6e737ad3614cb5503780a22fe148db1ca2ea5ffd9b0518e6692141da69
TLSH
T18FE086256AC6C76F1189C0EB6611F30D89E5B405EBE929261F19F54422CE40CB4D3790
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\index
Size 256KB
SHA256 3f23b3ecc5b69386ca7c4affddba9822b244a93f6b43871cb56c2223017b5ff6
MD5 f9091b0a198007c0066d55504e7ff4fc
SHA1 398444239a8a5619258a4f23dc20088a9472b84c
SHA512 23e6b4e75356413869f3a558286779ba59e2e0e5e843cca0cd29fbeab732c90a619321f38807e2fea68e18c7af5d4d970e50aa4c41e3624d02063bfe20206677
SSDEEP 3:LstlNllkll/lLq:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\db
Size 44KB
SHA256 b08af7745c49533422c5afb2e683b61ab1b025a2ef13f892321a2cd1383fba79
MD5 ad4b0d21f32cbccefd98c28e33a59a6e
SHA1 1850a90ed7ec61efca181fcc35927a2888549e6e
SHA512 0bc8a37f441ce5cbb0fe4ea3f766f741cc6424ac4274ffa42fcf507c8fc7154115375bc669449da02d8b57a19227483814357367cc8611cbecdf247d7b65706b
SSDEEP 24:TL6BgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg8TPq81fBG:T1OIy4m1b3fbUdeqSB
TLSH
T16B13BB0F1E187551D1BD0236E9E64E6B2E7E204C9B8369D125F01AF24DE211C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\000003.log
Size 2KB
SHA256 a70423c48119f29be0127edf68dbffe2a325b9955a3462f5d6224af84ac397ab
MD5 903e512bbf5604c333ba41266a37f2b2
SHA1 03e0040d85a348e1e8e5c1d0c2369ff26a2cdb8e
SHA512 7b6bb3a5296220d5dba5703c14b057335669de57967ab8ea9ce4116c7522f1097f8c990bd1bb4926350f2ac4203b71c2606c45d8709d32ee76a561ee05a874d4
TLSH
T1FE51D1F37D015435FD6398FA11EA385CCE6B930E18A8D3E5D3C65D31204395AB41F2A2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 89a3799357ba53de8e35730b3c9a97f94ab925fa02f21d9f19012d0f234725ad
MD5 5412b9cb6b6992937f627a05b5f5f650
SHA1 eb4e9eba1cf948f500d1a79ccc21e8983cafdee3
SHA512 e0f312b7481ae966f5cdedf81f380a1c00d5b3955cc5cbb4ad49394fa9c19c7701a54fd7d18855e00b23d81c64f4782c2e163f504a57614e48c9990b5b4c0a1a
TLSH
T1B3E08674A6C9C7BD5498C09342E4B31FC6F4F905D7CA36A65B28668471C1904B1BE7D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG.old
Size 283B
SHA256 f489d2011d332dc4a009b552e2de7544eed6c9d665f83a55337ab44b98c28346
MD5 2de51942fa13a056b4483fbfe7c4dd13
SHA1 085459810b56ad263b937d17215ae13a25a65e7b
SHA512 d0257e230cec0826988c26313bad497de9f5b6aca7f6df718b0ab642b12784693b508e03fb1b766e3a80f50ae7b3206a34dbf260a0fcdfae83b418b7860b9315
TLSH
T1FFD0C234AAC2C7BA4598C0D24264B30E8AF4A8059BDA3A4A4F08B84831CA40CE4F22D1
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Web Data
Size 138KB
SHA256 7ab72e9472f8bb9b145eeb90eeaf5cfd7a2a1473026fb8f65f0b62b05f697f8c
MD5 7ca5a2dc336e2e572be282cb8276ce2d
SHA1 7fd8ca1811aa5d681a4b70646e4f7e10373708b7
SHA512 75aa4aa62bac6dfe2100bd441a93475207e6ef55804d58f8e374e41a8dff3d3b0e61843b5db7d71591933f1b2606e7a2dd0e9602f4347b67de46e5d1a5c75296
SSDEEP 192:9B+XuvBnl3JsueMEGvIW1/rcP2O7pX6Oq4VumjPBwkLl:zeuvBnhJsueMEGvIW1DcP2O1rVumdn5
TLSH
T1F4D3864B3A747002EDE69A722CE0547B5E3CB16D4F55E5D428B620588EF2923A23D4FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc61607e-a7f1-41e5-ab43-e04dce1e7f0e.tmp

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\fc61607e-a7f1-41e5-ab43-e04dce1e7f0e.tmp
Size 20KB
SHA256 67210385e29b90349d52093f758b624f1e6ba54069bd7bc949437d9ffeb45a04
MD5 6293705e7422428ed9b28f4c477d9d5c
SHA1 09f8874722b358af02543b56c9ef91992b70bc7f
SHA512 2530ad8cfc170e843a97ce4d2c1a746f39fbfad55474ae02f8a7f7989134151492ef1c73df0811598693a07745c41d90a519885ae2dd18a37c2ba150f88a6859
SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifclIM8KCBALlXODqt+ErU3sjHk:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67po
TLSH
T1C3920A676C0CD97B0F94D6CCDC1A7E4FADF5014A65D8986883FA9C2903D5BCA120A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trusted_vault.pb

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\trusted_vault.pb
Size 84B
SHA256 b87bf305aafae1f1ec7dd947176c9529b2a9cbd4a3bf296fce25fc009e725366
MD5 85d7a7c1e12b26cd994cd41e587629d6
SHA1 bf53173aa4b19a217eb542951dbafe3ec3506810
SHA512 b3562e0466d9e218e96be44a01feac567e2843f61d1fe5201a5c7d6eef0e714cb5d7d8aa380dbe4f341aca2c46e615f3bfd29621a4898cb8e027cf1155b8df83
TLSH
T115A0128266008642461DB130C80B4C4018311C5A0B34400111F36EA362D5900C541440
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 e2a7f8312236148174af19a5a4fc9d8bd7d84b4d98a8b4f272f8192dcfdf711a
MD5 064f9fa159a99610da69c040c1d4e2a6
SHA1 7dc20b9c68e701e00930597fc1b76fc3b3b7333a
SHA512 187d0f882dc2a0d2122ee6da4615280a6465f9d58ed616add1d6f02eb3d9e561e2bb76780ba988d1f9c713961420f9e53718e18ed1172bee281d54293f1dc267
SSDEEP 1536:eyrP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNZ:3++J3qUQm08KMWF0bFTcVHr6z2
TLSH
T1129302B9AD1E7D3513ABD6A6D0079CAC8CE39CCE1614557C30C7AF0E14BA393A34B895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 c2d03e71435b903dd2f0389d16b7b98705bdf286d2c498053d5f80581f1c6144
MD5 fc6d3ae52e9eaeea6bf560a21e0c94a2
SHA1 5f350ba2f07c07bea1a0cc97697a11159b79d200
SHA512 8bb5cf0044706ae294ddebf1ed1c4037980248e999f43f25a578029622b44ef3b72326ac9ade3b659a56f8e044809b007ac2ecb7ce2d40c0df5852c3dd506161
SSDEEP 1536:PZyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNX:m++J3qUQm08KMWF0bFTcVHr6z4
TLSH
T1439302BA991E7D39636AC3D69007DCAC4CE3DCCE1514557C30C7AB1E18BA393A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 f58497742d8971afac6078a884d5c197aa4ccf81d544c9f93d5c38e617916b97
MD5 a1aa74c030ab9ee746c9a9a32e4ae3bf
SHA1 c137a159e9977b9f29e3a8892cc0396d166e6241
SHA512 490be16d8722526ff294333b01ec31675801e1be3526a76ebe460675c5d8cdf5994d016e3f859af537d04624e3abd2547209ec75496873995714f90bee2b97d4
SSDEEP 1536:eyMxP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNZ:C++J3qUQm08KMWF0bFTcVHr6z2
TLSH
T1EE9302B99C1E7D3513ABD2A6D1079CAC8CE398CE151455BC31C76F0E14FA393A34B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 f5aa090aa2d34467f52d5a96cbc3f85bc41593e699ce43d828d4c090b7006a54
MD5 547174be813bdfa9e0f330188ec77cef
SHA1 f9bfc3f9d544007931bcfc2bac814e82665b546c
SHA512 e355c6b09c65276d3b2de3ad7e9519a76492240331ba7742d980f25a08f3f3954825fa16a6cab5223cf5f8fe4e9677a0f3df4ea97583a64c5addca278eaf9566
SSDEEP 1536:hZsP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:K++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1509312BA991E7D39536AC2A6D007DCAC4CD3CCCE1514557C30C7AB1E14BA393A30B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 773cae14e85af9890cf15572b674f0cca1a3f1cebf03c415ed19c8b5953538a9
MD5 835e5730d3f9f66a7e77172150029b7a
SHA1 4b3e0b6cbfab68943804957fb6030bf9affa48a6
SHA512 a601d25bf7954075665d504e6b8fb7287529f0e087cdf9d9c127bc78b18a644105fb175485017dc5a700059cc1f7894b092ba2ee653f3b03040e697675ef285c
SSDEEP 1536:LyMxP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNZ:9++J3qUQm08KMWF0bFTcVHr6z2
TLSH
T18D9302B99C1E7D3513ABD2A6D0079CAC8CE398CE161455BC31C76F0E14FA393A30B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\ShaderCache\index
Size 256KB
SHA256 a269ca453d0bf3122a2f7f46caea6e2d1f7a68ff7d64ca964b20f703f04281bf
MD5 e31bc68969c81b2c19eb795f755b39c0
SHA1 267a49ed8108f45ff42a256566a9e4f434360a30
SHA512 a2870bed35e77e4aeb109db44cecd682c320f4ac0952ff0086c98d2fdd85a4de4427da86de38b7b44bf423edaf2d2661f1fb73b72febfc28f4a05ef0611b55c5
SSDEEP 3:LszllklkXlc+OY/:LsJlPPOY/
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Variations
Size 86B
SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
MD5 f732dbed9289177d15e236d0f8f2ddd3
SHA1 53f822af51b014bc3d4b575865d9c3ef0e4debde
SHA512 b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4
TLSH
T168A012078473800AE4184092C45C024114A480460119D0015070931314950CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\segmentation_platform\ukm_db
Size 48KB
SHA256 7434597d22726641acf6c1817319992b54ec582f0a7474d28dab085fe2f3747e
MD5 a9ae40fb5b25887e90a305a17a7d352f
SHA1 81c9a3d4ea776de2605c894f759d773e2eee77ed
SHA512 dab18020ef0e0506b4f0f2fffe09c502aec24955ae1c5a3072f21dfa1df1f98be0a25bbe1953fa2c0ac3f6cab3b111ceb0f5e81b6cd9a7bf217713e45acd3389
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0JQ:TkkhCU2QB2zbBxx
TLSH
T18D23490E5A6821E9D4D9193EFED34C517DBE0F588A2B78D205E00C768CE21EE553E4BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2000-0-0x0000000000E0D000-0x0000000000E0E000-memory.dmp

Download

memory/2000-11-0x0000000000C90000-0x0000000000E21000-memory.dmp

Download

memory/2000-10-0x0000000000C90000-0x0000000000E21000-memory.dmp

Download

memory/2000-1228-0x0000000000C90000-0x0000000000E21000-memory.dmp

Download

memory/2000-1-0x0000000000C90000-0x0000000000E21000-memory.dmp

Download