socelars | c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 03:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Size 1.5MB
Sample260504-dpafdaft6n
SHA256 c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e
MD5 5a4ca1bea2518119c2a385509ff50a46
SHA1 1b0e9dd661c3cba59301dea448fe2edce4726eae
SHA512 f3ff0f8effaa7aa327941ba755c9156dc8e91c64114a0db6db427ad3f88f9c05c0b12071d680796a19583c4fc9a7cb94930e9cf40dd76b807754583865e9cf61
SSDEEP 24576:bIVFA1pqtg/TnMbX0lwyh0FVmEByA1swFYyOsdwsuQOSIt21QbYfS0IP0kgzgGH:6FA1pvTMbOwa0TmUqMYEOFQOSIsQbY6E
TLSH
T1EA65AF21F6829076F8E301B685FE467F8D68B631031854D7E3C4186E9E649E27A3F727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery socelars spyware stealer

Malware Config

Extracted

Family

socelars

http://www.iyiqian.com/
http://www.xxhufdc.top/
http://www.uefhkice.xyz/
http://www.fcektsy.top/

Signatures

Family: Socelars
Socelars is an infostealer targeting browser cookies and credit card credentials.
stealer socelars

Socelars payload 5 IoCs

resource	yara_rule
behavioral2/memory/5804-1-0x0000000000340000-0x00000000004C7000-memory.dmp	family_socelars
behavioral2/memory/5804-2-0x0000000000340000-0x00000000004C7000-memory.dmp	family_socelars
behavioral2/memory/5804-7-0x0000000000340000-0x00000000004C7000-memory.dmp	family_socelars
behavioral2/memory/5804-14-0x0000000000340000-0x00000000004C7000-memory.dmp	family_socelars
behavioral2/memory/5804-1236-0x0000000000340000-0x00000000004C7000-memory.dmp	family_socelars

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	iplogger.org
4	iplogger.org
7	iplogger.org

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe

Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
600	chrome.exe

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
1204	taskkill.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3244	chrome.exe
3244	chrome.exe
5844	chrome.exe
5844	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3244	chrome.exe
3244	chrome.exe
3244	chrome.exe
3244	chrome.exe
3244	chrome.exe
3244	chrome.exe
3244	chrome.exe
3244	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeCreateTokenPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeAssignPrimaryTokenPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeLockMemoryPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeIncreaseQuotaPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeMachineAccountPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeTcbPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeSecurityPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeTakeOwnershipPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeLoadDriverPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeSystemProfilePrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeSystemtimePrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeProfSingleProcessPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeIncBasePriorityPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeCreatePagefilePrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeCreatePermanentPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeBackupPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeRestorePrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeShutdownPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeDebugPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeAuditPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeSystemEnvironmentPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeChangeNotifyPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeRemoteShutdownPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeUndockPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeSyncAgentPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeEnableDelegationPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeManageVolumePrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeImpersonatePrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeCreateGlobalPrivilege	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: 31	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: 32	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: 33	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: 34	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: 35	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
Token: SeDebugPrivilege	1204	taskkill.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe
Token: SeCreatePagefilePrivilege	3244	chrome.exe
Token: SeShutdownPrivilege	3244	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3244	chrome.exe
3244	chrome.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5804 wrote to memory of 2820	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe	79
PID 2820 wrote to memory of 1204	2820	cmd.exe	81
PID 5804 wrote to memory of 3728	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe	83
PID 5804 wrote to memory of 3244	5804	c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe	85
PID 3244 wrote to memory of 5724	3244	chrome.exe	86
PID 3244 wrote to memory of 6000	3244	chrome.exe	87
PID 3244 wrote to memory of 6000	3244	chrome.exe	87
PID 3244 wrote to memory of 600	3244	chrome.exe	88
PID 3244 wrote to memory of 4380	3244	chrome.exe	89
PID 3244 wrote to memory of 4380	3244	chrome.exe	89
PID 3244 wrote to memory of 440	3244	chrome.exe	90
PID 3244 wrote to memory of 440	3244	chrome.exe	90
PID 3244 wrote to memory of 2944	3244	chrome.exe	91
PID 3244 wrote to memory of 2944	3244	chrome.exe	91
PID 3244 wrote to memory of 5180	3244	chrome.exe	92
PID 3244 wrote to memory of 5180	3244	chrome.exe	92
PID 3244 wrote to memory of 4764	3244	chrome.exe	93
PID 3244 wrote to memory of 4764	3244	chrome.exe	93
PID 3244 wrote to memory of 4236	3244	chrome.exe	94
PID 3244 wrote to memory of 4236	3244	chrome.exe	94
PID 3244 wrote to memory of 3712	3244	chrome.exe	95
PID 3244 wrote to memory of 3712	3244	chrome.exe	95
PID 3244 wrote to memory of 5976	3244	chrome.exe	96
PID 3244 wrote to memory of 5976	3244	chrome.exe	96
PID 3244 wrote to memory of 5748	3244	chrome.exe	97
PID 3244 wrote to memory of 5748	3244	chrome.exe	97
PID 3244 wrote to memory of 6128	3244	chrome.exe	98
PID 3244 wrote to memory of 464	3244	chrome.exe	99
PID 3244 wrote to memory of 2724	3244	chrome.exe	100
PID 3244 wrote to memory of 5844	3244	chrome.exe	101

C:\Users\Admin\AppData\Local\Temp\c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe
"C:\Users\Admin\AppData\Local\Temp\c02d85211ec26be7328abc26216f32318c08a45ed971346a11f4111d71f46a8e.exe"
1⤵
- Drops Chrome extension
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5804
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im chrome.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2820
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im chrome.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1204
- C:\Windows\SysWOW64\xcopy.exe
  xcopy "C:\Users\Admin\AppData\Local\Google\Chrome\User Data" "C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\" /s /e /y
  2⤵
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --window-position=-50000,-50000 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" https://www.facebook.com/ https://www.facebook.com/pages/ https://secure.facebook.com/ads/manager/account_settings/account_billing/
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3244
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ffab097c728,0x7ffab097c734,0x7ffab097c740
    3⤵
    PID:5724
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,4673019238544078295,7879330764608957896,262144 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1960 /prefetch:2
    3⤵
    PID:6000
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=1472,i,2998198311678460991,10585036503214663202,524288 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2252 /prefetch:11
    3⤵
    - System Time Discovery
    PID:600
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,6889117186423168032,9739936155983301156,524288 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2560 /prefetch:13
    3⤵
    PID:4380
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,2085048944175021181,4302074543118001159,2097152 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3312 /prefetch:1
    3⤵
    PID:440
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,8499729062678626039,14749770702521778799,2097152 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3288 /prefetch:1
    3⤵
    PID:2944
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3744,i,2943618663241974596,18326128601547066833,2097152 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3760 /prefetch:1
    3⤵
    PID:5180
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3756,i,6844856496675085957,58336829858665865,2097152 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4324 /prefetch:1
    3⤵
    PID:4764
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4724,i,14985603995876993584,11614674525761151930,2097152 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4740 /prefetch:9
    3⤵
    PID:4236
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4852,i,14693321237458547673,5753472756552965873,2097152 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4764 /prefetch:1
    3⤵
    PID:3712
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3932,i,8250113219585492431,14134150466352744744,2097152 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3356 /prefetch:1
    3⤵
    PID:5976
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5224,i,18397221690076116502,8005844405277381832,2097152 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5232 /prefetch:1
    3⤵
    PID:5748
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,14956590774872769217,9893808157787531305,524288 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5648 /prefetch:14
    3⤵
    PID:6128
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5644,i,327176311334183974,8665712590365351430,524288 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5660 /prefetch:14
    3⤵
    PID:464
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,17394189746299650592,15196384112946247762,524288 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5700 /prefetch:14
    3⤵
    PID:2724
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4780,i,17581143668730896680,18379711248444636397,262144 --field-trial-handle=1968,i,8775266058725671598,12975086171578180467,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4784 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

background.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\background.html
Size 786B
SHA256 a1064146f622fe68b94cd65a0e8f273b583449fbacfd6fd75fec1eaaf2ec8d6e
MD5 9ffe618d587a0685d80e9f8bb7d89d39
SHA1 8e9cae42c911027aafae56f9b1a16eb8dd7a739c
SHA512 a4e1f53d1e3bf0ff6893f188a510c6b3da37b99b52ddd560d4c90226cb14de6c9e311ee0a93192b1a26db2d76382eb2350dc30ab9db7cbd9ca0a80a507ea1a12
TLSH
T1AF01900E1D04A56AF4154DCC70B1FA2C188EDF03F106CC6441F4D9A6ED9A7CD8C626F5
MD5 SHA1 SHA512 TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\icon.png
Size 6KB
SHA256 9434dd7008059a60d6d5ced8c8a63ab5cae407e7152da98ca4dda408510f08f5
MD5 c8d8c174df68910527edabe6b5278f06
SHA1 8ac53b3605fea693b59027b9b471202d150f266f
SHA512 d439e5124399d1901934319535b7156c0ca8d76b5aa4ddf1dd0b598d43582f6d23c16f96be74d3cd5fe764396da55ca51811d08695f356f12f7a8a71bcc7e45c
SSDEEP 192:arFa6ynwcj6POoDbxN9EUQYZRia+ce/lkygkkl0:apa6mhjshD9QYZR3qkr/S
TLSH
T1A0E19E1CEDD537BCA35E1601214F81B164E7B85383341A5C11B898FA94C6A9ED39F2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aes.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\aes.js
Size 13KB
SHA256 fc7e184beeda61bf6427938a84560f52348976bb55e807b224eb53930e97ef6a
MD5 4ff108e4584780dce15d610c142c3e62
SHA1 77e4519962e2f6a9fc93342137dbb31c33b76b04
SHA512 d6eee0fc02205a3422c16ad120cad8d871563d8fcd4bde924654eac5a37026726328f9a47240cf89ed6c9e93ba5f89c833e84e65eee7db2b4d7d1b4240deaef2
SSDEEP 192:9pQGDuD690MPdz8Ui015ll1I57I2Tru6h0hNmHV+m9eIfyAqYfinNVYEUUFJZmUY:9OiT0wz8Uiw/1S7DegkcHpeIuScZbAX
TLSH
T1B95296C936EDB94263A63068587F7017B86B28B5945C4824F298D4DDF9A899DC03AE3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\content.js
Size 14KB
SHA256 41e129bb90c2ac61da7dac92a908559448c6448ba698a450b6e7add9493739c6
MD5 dd274022b4205b0da19d427b9ac176bf
SHA1 91ee7c40b55a1525438c2b1abe166d3cb862e5cb
SHA512 8ee074da689a7d90eca3c8242f7d16b0390b8c9b133d7bbdef77f8bf7f9a912e2d60b4a16f1c934f1bd38b380d6536c23b3a2f9939e31a8ef9f9c539573387b4
SSDEEP 384:rlBc5VG/MavcrTkzqaKNVyQiYCIizzSEWfw0:rrc5VG/MavcrTkzlKNVyuw0
TLSH
T17D52D2DE53D8E97B2ECD1E83BD508ED650B2A236D7C932C7872CB94C51E90ABC5084B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jquery-3.3.1.min.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\jquery-3.3.1.min.js
Size 84KB
SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
MD5 a09e13ee94d51c524b7e2a728c7d4039
SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
TLSH
T1748319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mode-ecb.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\mode-ecb.js
Size 604B
SHA256 03164b1ac43853fecdbf988ce900016fb174cf65b03e41c0a9a7bf3a95e8c26a
MD5 23231681d1c6f85fa32e725d6d63b19b
SHA1 f69315530b49ac743b0e012652a3a5efaed94f17
SHA512 36860113871707a08401f29ab2828545932e57a4ae99e727d8ca2a9f85518d3db3a4e5e4d46ac2b6ba09494fa9727c033d77c36c4bdc376ae048541222724bc2
TLSH
T10EF04C877CF9AEC1D5A2B1AD8B7FC51D787400130556DB407B0C5160EFD84300B45AAC
MD5 SHA1 SHA512 TLSH

Submit Download

pad-nopadding.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\pad-nopadding.js
Size 268B
SHA256 282308ebc3702c44129438f8299839ca4d392a0a09fdf0737f08ef1e4aff937d
MD5 0f26002ee3b4b4440e5949a969ea7503
SHA1 31fc518828fe4894e8077ec5686dce7b1ed281d7
SHA512 4290a1aee5601fcbf1eb2beec9b4924c30cd218e94ae099b87ba72c9a4fa077e39d218fc723b8465d259028a6961cc07c0cd6896aa2f67e83f833ca023a80b11
TLSH
T1B0D02B5E3DFBAF42D49972E5C73DC14C71244103066A5EC2AF0C02728F61C395799AAC
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\manifest.json
Size 1KB
SHA256 20d39e65b119ed47afd5942d2a67e5057e34e2aef144569796a19825fea4348e
MD5 f0b8f439874eade31b42dad090126c3e
SHA1 9011bca518eeeba3ef292c257ff4b65cba20f8ce
SHA512 833e3e30f091b4e50364b10fc75258e8c647ddd3f32d473d1991beda0095827d02f010bf783c22d8f8a3fa1433b6b22400ad93dc34b0eb59a78e1e18e7d9b05f
TLSH
T137318537E580883B26F5EB01BEB83282FB62835B55404D4FB07EA05C0F75E2A018435C
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 20KB
SHA256 1aca06cc88744e24443c1a2e2d5e115a3c8e5df40491ae2755677f6a0d125280
MD5 40745ebdd785744435d5939a358b1bcc
SHA1 4c2bcbe448824f3297267ab0721d240a203a8e94
SHA512 8780ff878629cde84fe402eecf55131683e74ea726b8638e244486915c972caa7e543668c73c802d5a8a88a36f5829a0a1aa1ecbd0540a3fc0743a06a1416f14
SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrY7pLuLcPfccm8KCBAjTXOD0b+ErU3wRHGM:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1Y7pU
TLSH
T1C8922B37684C993B0F94DAC8DC1A7A4FADB1024B65D9D8A983F69C2D03D5BCE01052FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\CrashpadMetrics-active.pma
Size 1024KB
SHA256 67ee11b51cd6f637795e31ab501f135ed595c8459bce885735f08b0418513a17
MD5 34c29bdb9e41b1f47f2d2786762c12ec
SHA1 4075131b18c3487e3e848361e112009c897629c7
SHA512 ca3a978798e77b2ced27b379f38e935ef18beaa7ea23e34270a9af20b37e1b1c5edf9478606311cf1acabd83992766cb3da8444de9394c674d5955bdbc53c0d0
SSDEEP 12:bHCskaXhVMMBKEKSCemJKlkQfIYVhYJ0X:bi0ROMMBS+MkEPYW
TLSH
T151259286B34455BBC54189B188AA17606274F9E89F82179A3B18E60F1E661DC0F51964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Crashpad\settings.dat
Size 40B
SHA256 dc16642704bbd372b6b47bd40a67b3413b4b7662236763e613a05a38e3b945e9
MD5 6c354b71b1035c9a05249154bf2c7eaa
SHA1 818a1522b5415c5dde6731dea3ccdd609647f1b0
SHA512 64495d08931e8c0d7fce3ed657eac2ade85545fba2df0ad2a6fcbebf2cadea317fef84c21734100265a8766cf23f22ade353123805ce79e3170a8a9be5feb6d4
MD5 SHA1 SHA512

Submit Download

3b98552e-93c1-444d-8841-e3894bf889fc.tmp

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\3b98552e-93c1-444d-8841-e3894bf889fc.tmp
Size 20KB
SHA256 da2396d5c3e5c2fa467bd52af539790f83b17ff1f7894c2c8673562e7b66fee5
MD5 3fe9cb299466b34ab29cb66808a8fd5f
SHA1 00389c4bac7337eb7ca616378af3c56a644abad0
SHA512 f6c3a8d65815cf6b39495869d34005822d8f2e2a760b2b3d90a3d8a8c78277f7ea6e6b2c9986304dbf1dd860e84f1e72f8c533a90fd274d1a7f46f3876130667
SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrL7pLuLcifclIM8KCBA1TXOD0b+ErU3wRHd:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1L7pL
TLSH
T1D0922A676C4C993B0F94DAC8DC1A7A4FADF5024B65D9986883F69C2D03D5BCE01062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Account Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 6906066e94963aae73f9db2b69cb97ccb5ea652283d0dddfc4b0cdca8fedb087
MD5 6dd17c7380b80ad55b0f96f9afbd7f97
SHA1 2cc692382372166c119eca9843edb4147388de46
SHA512 4188e1fadad08d760898031fb9a4721bf2935a75c84f893ff6fe1270278b38c7512a6c5125ffc20daf5312eacab40fbeec472c442c9aeca6814ee9a71082ea4e
SSDEEP 12:dcXS/17uIvf+HZoaZ6RDZWet+5mOBsQZ/:dcy3ioFrno59Bsq
TLSH
T19C13DF3F498D0E15E9D8003C048F0FF0ABF0D104C4BA76C713B8B4A05686BE1390B269
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 8565d0372ba2728f76f37ae4f01cbc105b16e70cbfe141a5c2f228c6f5961ca7
MD5 7358596ababf379e964a7b3bb3c10cff
SHA1 0c83f077bf8e5cf499d7dd7a087df4ef5eedb6df
SHA512 1c47137c9c5147acdcce5bd1313e03728d18078fa90226eb6573a718f11f69546483c85b127ec0fde39139cc4a00adf54b88a3779178c1fb4b0702df7e0d136c
SSDEEP 96:vsO3/gloAJjWWfVOLHKWolVaBF0/IDW0SPDqSCy:vjCjJffSclA+IR43
TLSH
T17B44C8FB1909EDC7EB3C8EB11C5092388E3156262CE5BD77F17944A106455F332287A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 3978a0e68e882020dc525c680a2ea130ef06d1ba9a51fa6a5f17f37434ef972a
MD5 eadfd56dc7aefebc6bd5be0d9d094820
SHA1 b2805b780171d07fedd1e9932649ed0c8fa52b5f
SHA512 41ef2990ddc2a7bf5bfbc4873380136856b62aee9e5a269b673c7bdeebe5ad2f57a66496b212657b067c3ec3f858ebb92c31ff54b40c22aaa3cb9949168daa40
SSDEEP 96:4vlSooAxQzaX98z7jJtMufGaFWJo9ADGmlYVn:4vlSOxQ+N8XjzMuevq9HmlM
TLSH
T1F3256D265C0BC9CAD1F85272AF98E5F8F2F48FABE1CB13E118A1C2C10581956C697D6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 44e694c90a748d05ab5ac42b2e787f563e620fe9d1d50b564d4de42423b0b745
MD5 02aff5b5b1768a82267b37dc8bc55303
SHA1 808527a1794feb75466aed0d7d415911c860e1ab
SHA512 059b7406267e615894c0752ccbc86441fd080f3c80de68eb46c3da3ccf492a4ac0b43fd6a02e3cf7835ea5db5e41410a4d1a2b2757113e32b30055fb9e9d5e3b
SSDEEP 768:/fDPLSgcRUv+/Z4B49w4f474O4/UfDPLSgcRUv+NZ4MUfDPLSgcRUv+/Z44UfDPk:6Z8fei/2ZbZmZR
TLSH
T19A163BE70F64B543EA95EBB0BBCDEC183C702295EC979882E12292BD4AF1FC4174519D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000002
Size 69KB
SHA256 aa9ebea13743f59a883deb50b1aa3cee79445c26865d8691c2f4af9f67d20f3e
MD5 d06a9d66f08f8137312a84a034486ff3
SHA1 69507564f5063ec0cd1e3dddf0ff829a01a9f1d1
SHA512 3d2438726dfa758301fc3d76fcd9210ced1cdd206eff02ca7c93275154352f94095f93d43943de4194d865495ba7c2f242439ce17fb1199193f37d65f953fc40
SSDEEP 1536:Yor+MYgZu+Kwdf5oVgUThTCqkTpjL8gtxRFL8vh9QXXijpXmG:Yok2KwPoVlToqWpZhQvbQXsx
TLSH
T17F6302775A9C7C3D3E6E60EFB5FCEF2B41658FC4A216D64A414022EED4068CC6141F92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000003
Size 38KB
SHA256 1d39335bcc92df6017b3a1b2c0ee549a3cbde2d3ced0b09519a043d38a8bec30
MD5 356eb2db86a3c20d9f12ab52423b7030
SHA1 2faedf35f5b49a4d4a15316641990498c2358c6b
SHA512 caa693ae790cb8298723e113709d3f8bbd7ede64ccfaf25c445f9092040dfb61e14796ba5c983a801b05502763a33c030c1a6494d0e79fe351708879f68e1fb2
SSDEEP 768:gEpDNzk8U9Yip1z6CK+fMSqYc4l5q+GrMV1H/1d37gkVKIY1JCEeDP3396d5dIyZ:TpDOzB1z6CDfMLYugV1x5RY1JCEeD/S/
TLSH
T1DB03F1877A25AB2E99FC4EEA1C9FA04F5821C5DEC3EDA5CB0C07F54241A123654DAA03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000004
Size 35KB
SHA256 0b8e765d30038af62365bfc853d149c5c5614b25e84bee9e1401085f618025be
MD5 eae8445dac01b5f8070b2c4d1ff8f110
SHA1 bb0048a526a2a9acdc9d5dfa8968ed12aa530f98
SHA512 0f671fbb5de8bfc2e1b21f2d2dbc4affa94cbd3a6a164752f7aabd2c92f5a7414f5258908112e092b5b01a1207b176b72de5686eeb156f8171ed146c866b34d9
SSDEEP 768:KPZSWVtowAuG3Krqwfad+2Qm+ZGeBu6BNm1DdRQkAhM/OKmMIsxeh5Vbxiy:KxSWcwA33KrqwCdwm+ZG0s1DdRqhM/3g
TLSH
T15EF2F26B723EC1061CFF94985623398F53FD55E070B7E2006AA9ADCDB62C9900CC9D49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000007
Size 72KB
SHA256 d5b4dc2ab50789e0e714e36e63ae2196d94bdb465e3af4f2ba38cbb24cb5e202
MD5 176aaf60740f257a8feaa1d398f34fc3
SHA1 3a44998f7d761b56a0fd130ea3c563a4279d150a
SHA512 1061f57e79623a98c0f14dfe28e9600a4d7bc0da837096d98a7b1777b985dd75fb5212df2105bfb7f083fd257dae15489ee6e23c07aee514fc16fbd907f0d51d
SSDEEP 1536:bWhLK3U363hGDCGhoFIe6S3FN26bAySzIM0xqWb/WUihh9UXwEzrubus:yhLK663hGDC326bAySzIM0xj/FihhMw3
TLSH
T1227302AECCAC855C47D797DE8AD311ECFBBB3499820A4D68CE47B42F9557940C722E02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000008
Size 197KB
SHA256 3ab6544b6a30210f4976745af45d4e881054cc9d20f659667ca4d29a2d2d33e0
MD5 780d8e890bddd2e45de173c68f6e7472
SHA1 346f32ea618918f08a5344c0d64b90ab9cc8599f
SHA512 4289f61b6eb82b8b1330dec1ebba1407bb01577dc3d5b044bc16ed3a0fce0f1d482f30f2eef20ce9cd1a79a41ca78e940eff1a8a732279eaae53277244f691c2
SSDEEP 3072:WlbVBnd+gcFORNTt7lfymFBjbfxB3kPSC2xQ6HIaXmubHiSF2Ipl5UiVPALi:kb/KY53LjdB3USRV7L2CY6IG
TLSH
T1DB142216B600C355EC6F9F9A5ADDCE1C68E35879AE6770DA47C28A9C50031C9D8CA38F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000009
Size 233KB
SHA256 98e0c0a1a6f53598ce44e1dbba9ce0898b7e418e2f0d87ea78a24117aaaff3f9
MD5 dc31e24bfc23e42c42c90ff60c37a00f
SHA1 1a139cd9682d6ff9bfce8640c6bbd7b498fc4bca
SHA512 c4c2481fac7aff93d7011bdf8b520942925a991021fd55f576b179feb7b649e8d680a6958de9b5a011bc00d353a3c67df5f28159266d08ff7078da5fc3b6dc5f
SSDEEP 6144:I8quUa2pe2CI7xCM+GwSCs+SOM41R4zBu2PHWT:IVEah+ZSCslY34Y2PHWT
TLSH
T18E342379835D2045FAA646EEC30451A480BAA8E059E6E034D1FDE0F2D567CFD379FE0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_00000e
Size 88KB
SHA256 56818e0270e9e7174cf3b7f3e39cb474fddd0cee4aa2ee29cf06aca0988a34fa
MD5 7e7169536d3f99c1cad1851e81b5d072
SHA1 c17d223102e8fd4b5c8f6753a7a8bf56d74a2868
SHA512 0bc65589f8b9502574a274f42e93af8e12fb00fafc0b8134ed72051cc7f3147f753dd3b42cbd528b0ea34686443e50c4f763e44470da59ed92679242b1729a19
SSDEEP 1536:tdkeGnwyrJgGNYD4fF1eIw4vAQv52+NGmbRLQRlcCq1NuKJCrwGQn7rMPIRT1:TAJHNYD4N1Fw4vHNGcLxNNSr1ErMARR
TLSH
T1C49312ADD27E49C395F092578EE6319E9F35440F8AF3DA2A47E65179484B233C83ADC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000013
Size 25KB
SHA256 5e4611fdb5c7906e74b744366efc4778029bd654117c564a285dba17d1183e12
MD5 960038e61249b8206edf905c44f06e1f
SHA1 4eade31097df53ddce9bca4f9d3c0829da38f827
SHA512 0d0c83d8ceebda95004bcc078334576462d9ae8f4536f7c882a13fd1770ca8fb6776149c3984bd177c07acf239bc0d5507e2a9a3617c63d972d0f75eab40ac21
SSDEEP 768:U6v1HTpbmOblQZkN4yU5+vwiZdwQUKBw9xGU+X:UAzpbjblQe+2vwkwQTsGvX
TLSH
T101C2E1C07FEA088D4A711A697AAAC9437189676EC8C43D4EF7C20167611F2DCF6C1D64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000014
Size 25KB
SHA256 531e91672daf6063fd6be177ffbc47be83f7091cb8824537bef79bac20102f0e
MD5 9d23ecbf96471315bdda15e799bf1a60
SHA1 783505e687b300d1f9f51691c0cbd9f9ef475527
SHA512 9ea87e5eaad047ccee4eb90e603e0e0944fcbe56c09c33d91fe7ae58e226e668a6484ddbbad3632f10ed972efae93114cc25f08ed9eec6d10a57c9a16cf12ca3
SSDEEP 768:M0sY2oZb5o/PDS54I5BQOweAsU2lSrvBqwH4Hdcvqs:9lzFGG2Ijfj8TP3v
TLSH
T1EEB2E1833AD334B171B5E0A9609D4B1294382AAFF34E851AD9027FAB6496F111535CEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\f_000015
Size 39KB
SHA256 10502836eab0055fd85f524dcdcac18d339736eed9e63d54dba5eebed120f240
MD5 a66c17e7abca7b23237b620b38f9c157
SHA1 66c6db056c622165734c76120d4c2961d35b1688
SHA512 a3f55b0fde8b5fb80dee4f05c96efaa3ce4628564fba165c7cff1dcc8e916ebed176e3f9f42a7f7cb5060780028fe6c7210c1f63a6178b7c174d17ec126a47ca
SSDEEP 768:ciVI7XMoMiNQgmb5xqzbWWxVNl5dXAU3nDu9hSO3UFneF+4wg:cgKM3olmdxq3WWxVrXTXDu9hl+neF+Lg
TLSH
T1DE03013EC774BB2B841B2CBA41D2DDA438F85CF214E61D055FE2A976516A72EE1E0C41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Cache\Cache_Data\index
Size 512KB
SHA256 8646addae59c582cf735d7f0aa967cd93624c0c2ebdbe5b0fb2dbfe5fe694336
MD5 7bfb9d86a1f495071f6f2ccb908e23b2
SHA1 2b87afcb03eadb1fb106c33b38c3af3c5cf263cd
SHA512 a31f6eac309ba7ca6a1a43718eecfaebef8119072321b1c6bf03ff632f2c162e40b38516c76c7e85bc805f223278f0a2f9d81fa768065a582e48c6ae84f29f7e
SSDEEP 3:Ls2l7l/lllnlEllla6g/4lgtWXS18tL/all//7/2Ntl5NtlsE/9lXlbNl/l4lXly:LsmlnlM/avogD8NSltD+NJOEp+K
TLSH
T134B4929E9F858E1AC7C006FCCCA34B313370C189C3EF83431348042091D27690EAF480
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index
Size 888B
SHA256 dcc0ff7083e60b2967c9972de34873db05270b7cef42be96befc678982089101
MD5 4e2aa41610a771f25be42f9f88d027d7
SHA1 67ca88105b7d1c3b14822584ae8239d1032ffa5b
SHA512 a4dbea6637da59803a48223698605a46ff0b96fbcac2a1f55e9642346149c95c0e7cba3bd6d7f4509d99d790665596a7615507763960fc9a631b046f9da49192
TLSH
T144117B609491D3D6CF0848F901ABD505F6F41001ECF78FD282882E66E44F3BFC664438
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cfaf.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\js\index-dir\the-real-index~RFe58cfaf.TMP
Size 72B
SHA256 36e3ba80833ea20ba0483a4c90fd37ce89ed872fd929e8860703590c1680a4d9
MD5 3e4055d90de0feeea588223169cdc386
SHA1 fd758246842d18569a9cb0e6ef3d97430cd75865
SHA512 be7d0e963444e551b3b898e417847c55d88c5e535c2482763c5edcb407876f5c75ad00ad2553bd385fd44a2707805a8999ee8c735ac489ecb6a21e6131d937b9
TLSH
T136A002545B807051DAC4437014A5178076399D568562262391D425ECAD547625D072C1
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\DawnWebGPUCache\index
Size 256KB
SHA256 216bafd6ecd4afe557e608671d8577c75a88e3ceaefb4e870d5412a3a2a6487b
MD5 508966e6df8701743b19477deb1b536a
SHA1 ae7c76d72581ea22c452d6c79da2d23b2b50fa00
SHA512 aa7bfda70860d4c48aa5af5687d2109fa811bea1a22cd5f62a906beeea0c32c7c5478cee29ebd771e4afb51e06aff426bd56c58dbc190bfd705c9e45d483eec3
SSDEEP 3:LsOllllklkXlZ+l/:LsUlP
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\000003.log
Size 114B
SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
MD5 891a884b9fa2bff4519f5f56d2a25d62
SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_metadata\computed_hashes.json
Size 5KB
SHA256 7470eb2b7d57e5ba2f6a2f86e2f94c5f509ff78d55a8b21361e4d6d115287b9f
MD5 e205387951d4b59daca72fd4371af7c1
SHA1 5f70a82c60144577a105cd6a144f2940b5cb1cd9
SHA512 600c8782592dfb7a32b4cd808abf4aadebebc6cc82f8c9aa4e584b5ec458094edfd49a636475cee7ddb80786cfc24ab1a84e0656f706112f353f89767a928151
SSDEEP 96:PbLBlwtH4ILhbGgZ1e5tc6vhEK9PLAe3U5buu62:TLBALhagTevc6vhE2LAj5buu62
TLSH
T1D7C130451DBA559B9F157B463D031812C80A6FC18D4C6EC7BE59E328F68891F02E3A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.100.1_0\_metadata\verified_contents.json
Size 11KB
SHA256 27cb984ae94e6399b354a90afd1db4c76f99877c09721620401eec056c53cfb6
MD5 64010b5a93bb4d0d70405a54925f7501
SHA1 829dc158bfc24319e8ff034dbd277ea7bec6c64a
SHA512 cf5e6d67594ab33327da66319851c35c2dc40cb175aa8ee31fca183c235c094f728e73aabcaecf365b4c357f134d075a201febf598811bb5ac4626b711ff33c0
SSDEEP 192:RBG1a5Ma9+PqITEPc6R+ZdmOp+lbONd/jUmkD2mLLpPwcgT9QrWBlXnswXexRSJt:e5xn3Bol8U1EsOiSD
TLSH
T197327668CC4D708CBC56FB768B6A75769B48C9C9B14D2E1E13D34C603CB7A4948A30DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\kjkfjbddnkpfcflenfcleijhgaaiapaf\8.66.88_0\js\background.js
Size 15KB
SHA256 2fa5d4de25195ae8f50741e125422f51934d727438d3deb5ac0918b9f169561a
MD5 760ddcf416f9f102ae029512f300f25c
SHA1 8dc3b161838f80b44cb5e5cd27b3f0be6e8c696e
SHA512 b64821fe4a7f32d21d07788355a79f5e7d2c3c9ad2026ca374ca9abd8715f0d889257eb458ad0e5dbd394c328e38ecd4a9f5c3e3e1ba93361d76501a850d2018
SSDEEP 384:bSqK+K3tmygSoFlp9kROMSC/SaHjj2lq40fzBlobew:bomygSoFlp9EOMSCqaHj6f0tubew
TLSH
T146629D886295B88719BE8B3359A34F45B07FB762EA8336BB4319BA8404F1C07CD557F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
Size 10KB
SHA256 965203d541e442c107dbc6d5b395168123d0397559774beae4e5b9abc44ef268
MD5 90f880064a42b29ccff51fe5425bf1a3
SHA1 6a3cae3996e9fff653a1ddf731ced32b2be2acbf
SHA512 d9cbfcd865356f19a57954f8fd952caf3d31b354112766c41892d1ef40bd2533682d4ec3f4da0e59a5397364f67a484b45091ba94e6c69ed18ab681403dfd3f3
SSDEEP 192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
TLSH
T13B327DA05F9EF1DB9F9873F82F132C12A8564B518A95E9647F90DBC5B38D20F520243E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\verified_contents.json
Size 7KB
SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
MD5 0834821960cb5c6e9d477aef649cb2e4
SHA1 7d25f027d7cee9e94e9cbdee1f9220c8d20a1588
SHA512 9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4
SSDEEP 192:RktDNJ2UzsL5KcASyoH+CouKP/iNGRo/oRHMIT:AZQflcsU
TLSH
T1EBF1A568CC5D758CFC56B77987AA36768B48C5C9E14D3E2E12C30CA178F6A4888B30DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Favicons
Size 20KB
SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
MD5 198e1617955c70ad9263e5ae041f3c36
SHA1 623233da85a56e3b75fbd55f5159d83f764db270
SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
TLSH
T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\History
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Login Data For Account
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Cookies
Size 20KB
SHA256 651e4c4e4c03462dde86555a64e02044a775414ec7ba6e37fc6d85f5e219e70f
MD5 4d8ada63bdb5b8a6e0288a13a1fc6f6f
SHA1 d266f8b91aea99671f6bd083aac6e3893ea7685a
SHA512 b4b4b662ce2307765f0605d38dda2ac0517c37244ac5a5a68b2b241783340f4062fd6b9992f9bd1836e78e9455b52d1d2bca474fa3e429e2d1a14a3494cdd552
SSDEEP 24:TLyW91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBnwd5H7fqrmcKdVINuj:TeW9aw/aHLopFMavU1iBwHbfqrmcKcC
TLSH
T15A921F8F1F303614C0F49772E9C219961E7C252C93136A9AEE2444B39D865ABB6059E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 3KB
SHA256 1be6e07998e3b69f5c56437e26e8839c0fb825785b828275866a7f643236c7c5
MD5 45810bcfe93b75bd7d27afd378118d3a
SHA1 a68f496cbebc99b386718d2cd251b166a45e1413
SHA512 ea515025e8e0eb7a22b00802431386e129cfc544218d5275752c1284125469bc9f6369d49ef89f47cbfbc223e3adef12caab2839d53ac712e8403fe39cf921f2
TLSH
T1CB71ACF787E48A3D992192F0EB156E2FCE290920531C3C6AC8D59F5B93F6471E201B5E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Network Persistent State
Size 2KB
SHA256 330a8d5bbda6d155c4d73881a1124978646483ef8634ae335805b4f24a36792c
MD5 b2b22b75cb53d438a7809e3253c5da87
SHA1 ca09f9c985a67c2d79b85a1a5e2b72196a05f53c
SHA512 951fbe86ccfe3ccbf528e777fe89518b049c544a030b8b7b62bf2539ce5519729a4fb6f696a83ede19106e65e05f29c005849addeabbfb174a97bee2ccec9df2
TLSH
T177518BF3C3EC997D890156E4AA256F2BCD790A64525C3C57C8D4EE0F93E68B6D200A4E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Reporting and NEL
Size 36KB
SHA256 d5ea617c0a7fb949796aa63b9e4fa8b9174eefc109d4dd4513d94a8fdc6bff92
MD5 bb72f8c5aee8b2492af9ef64ccacc9ba
SHA1 30a98d05aafd3a7bd3412361a282278015e40d5a
SHA512 7886d10c29e4ee5e1846e3be3ca4382db06833800ee8d720bfef13764ca0a00b6e0c8b942b5d779c22e28e5bbda1a425088971e8986ecdc7f9a05cb68124b432
SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBLR5:+IEumQv8m1ccnvS6jDD
TLSH
T157F20FFF1B05B601C0E491B4E5810ECFFD2D112D4BAABEC0AA9809F357C66F39528259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\TransportSecurity
Size 523B
SHA256 ea8a3c356b13748374cbabc7bf173e10113c52573c8f310a565cb7aeafaacd34
MD5 5a5e96ba20304dd5d62e56c8ecce9b2f
SHA1 4364c6b20769e8dac670ff9e26769cdf8b6edfa0
SHA512 e08be4486b41f1911a63a96908d79c582fb9c7dab29ab9c9ddfcadca061240937d8afde0a06585ebef7fe0b8f4efa4b58c08c5b824b73ecb53ef5cbf0eb70cf3
TLSH
T14DF050A7923F747710AD45661E007C0528B9E4321250D4F4CED9812D908A4F71B11813
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Network\Trust Tokens
Size 36KB
SHA256 f6dc3ce8ce21647c61b493cd86c6c3fb5992d5ee4507bae9da8e33fdec247804
MD5 2098aa1459265f01606da9581b7b810b
SHA1 4d9839da23cda7ca4a315b87253f7dff444b6178
SHA512 ddb46a6c9bc1ac4e52483dafb92bdd67f0456473a4b2a5ee7cfbf471615eacddcc6c0ac47b3088ba592af39822e9cbd9769430658d2b1e1e0cb9cfe5bd88714f
SSDEEP 24:TLKEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TWEeWOT/nDtX5nDOvyKDhU1cSB
TLSH
T18AF29A4BE93C6FA3CCC56FB08B07D5B41F722BCAE68276C4247120A01DA964495E7447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 13KB
SHA256 3c297a85d1da39b955a0d08783dcef969bba98a798f7b3fd1e05c63d539f7e88
MD5 c4a90e3fa8c5f772b347b6a87d902bbe
SHA1 3328075886a416b56beca78e45027502359f5e72
SHA512 7942fb975e413d52f09bddd8dcb2388f85f9c358071f7beb33ec347f8333ccf8398fd83e2a575e8f5f00518068140ea9f28e9667672bf655cf1748519beee92f
SSDEEP 192:zR0enzhKHajwtyv7+FpAPRp239hHsb+WNngR2uS7RviPyIsnAUge:zR0ez6aWe6FUXQbwg2uM0e
TLSH
T16D52E81EE918797B4CEAD219FE51BB57E7F1102164802E98E6FCCE2C15DB9CD222341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Preferences
Size 12KB
SHA256 7a809834c2939e59b2b97c2ba295fab025b20190b75eaac54131c3b8af55b0af
MD5 34c8fb4fed70e0e8280ab7a70c25db82
SHA1 ee42f3b1bba60d74913673ec8fe9bb9d7178fe46
SHA512 163be693810e8165d7634500ec323bbf8437e5958250d507ac539d0babacbebe9914bc1b0aaf45cf8eb78609467894768a9d0319d62458d3416fdaca1f6838c8
SSDEEP 192:zRh49PBq/fyv7+FpAPRp2bz89hHsb+WNnLYSImYK6eJ/cew4VyIsnAUge:zRa98e6FUX/bw0wYK6q/Sce
TLSH
T19C42C82AF914697B5CEBC225FD62BB17E7F6102160941E88E6FC8A2C15D75CD322305B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 2ade7ad8f15eccb025798893f007bc3a04679504411bbad75e4d1f35cf47a65e
MD5 40c4021f7a23fc1b361904d0519eb714
SHA1 eb811f03ded3cf26dc320980307be2b2f9335df5
SHA512 6cfd57cdb92272641c9ad007872cf25c11579c5bfd44935b988559b5e0cca1f4eff976265ff2c2b002f5176af6c8c21961f58e8fb108fcedf4370f9d640186ff
SSDEEP 24:TLf91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fB:T79aw/aHLopFMavU1iB
TLSH
T1B392AD8E1F343620C0F44B33F9C249972E7C212C93637A89EE5410F3DD965ABF50A5A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ServerCertificate

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\ServerCertificate
Size 20KB
SHA256 55c38a40a44105325365ebfb7615e7d38e55d7d02853c1002fa2a9ae98974140
MD5 c36580cb88a6268715ad1c3213ee3e62
SHA1 0e829bd8521137f80ac1b6fc9439c2622e3c89f8
SHA512 268e6d3593d346f2e9289d3b1505282d8bb684f4a829fecf1d807a04645a93d94f4267a50bf99df54047612023388a4afdb809781ca362581ee1e8a7826a56b4
SSDEEP 12:TLiNXB+TR0wfQQ+aoMllfIHFxOUwa5qgufTsZ75fOS:TLiZkZC6UwccI5fB
TLSH
T1D492468F9F843935E8A947B9458706E00F7AD73E8382AD6352E848503F90D8081BD45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 bc43e8c4c8f6b3e19bb42c37a92fde2490280c6dd85f53ada2e06e6d306fbfcf
MD5 8624d6350923077e88cbca9a7f3d13b0
SHA1 85e6a15b821f2dd6cb2404b66f9894fb7de0a453
SHA512 3a1439fa3d73965b866007ab8c94e8fb04251da73c8ad4918fd0f1f15211d0cc9dabdb888cea9637100b3201cd14d562f137970724cd3cd16a49e02ea3e74cd1
TLSH
T138B0125084019901C00303F43587048C31189F20C705130553F47E72A82F7918114251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c87b.TMP

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c87b.TMP
Size 96B
SHA256 7605f8dcaadacc0a64d06a4af16df3a951bcf20e83beff1e4a1cca0a4bd70a6a
MD5 88015f21eab079a9f083ee643f3980c2
SHA1 65f1306e1d5f6eafee52bc1af5eb274be568b1dc
SHA512 3d5f29449846a1c005c0204e12739e003c5f1f767ce4254de787557bf62c1e86bf685c456192e9ef944d2174b1076c2af8f9c254039f3769a23008d93fbc9d8f
TLSH
T1B2B02280C003A202C00203B02AC0A2C8B220EF3AC203020282E00A2AEC28320802C030
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 fcbaeb78e66edccddc324c9a85193043e567758ae61975148b611808956d58b9
MD5 8a555669abde646f4c23bd2394d4f4e3
SHA1 c99973f353d4b256ef752fc4f95e9cc65738197f
SHA512 b4aeca9fbd6693e93e3ea7e0c3a52baa0b51e301e49f49b93fffa040ca81a136ce14e1d291914ea124c66f864cdb43d4aa35aaa180c2868ec3b3ddfc30b414ee
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG
Size 348B
SHA256 7d4fda5ec8ee63e76e4de36e883cdf1320fd5f1f655253754afed156209b942d
MD5 72f1dbe3c9ac945be92ade78555b427a
SHA1 270a82c354f818c3f2b2908e10db27aee6ab1f39
SHA512 249f9d03df686ecea4797a3f52385c1f0127829f0f319547f0f243033872dd8b8c61a4e0fd0928238294d92c4252fbdebb2aaa29558d54da226acc12b1072cf2
TLSH
T16CE0DF31A6CD867F909980DB53A0F30CD6E1B401E7DE15326F0AA28CB28A404F3E2B90
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Site Characteristics Database\LOG.old
Size 305B
SHA256 9957ed87710b3396aa23a11c9b2b989e4122396dfb08ef1f798ffb3513c0dd30
MD5 2117a3e96e3e77c4a7902c42d0e422fc
SHA1 3a34304e7b8dcffabc8effac1b0dfe0aebcab0c3
SHA512 456b1150eb3f982e334f51e89b85a5c13dcd68d580f782393803a6a2fbf892357f7e2d0f47a23d25f1a355f3d7c65dae75039d23554c6afd07cb989d13e77778
TLSH
T18DE07D316AC5C77F0185C0EE6611F30DC9E1A000E6DD15120F16E00823CE448F0E2791
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\index
Size 256KB
SHA256 832aea228fb05abae064f83fb54f79775774499200f880ad94408a4a717826e0
MD5 fc6af33a5f372cc5a69fd8f61cef2b2c
SHA1 52894ec16b98c75a773510b0c81e3145eacb6897
SHA512 1103f094dd8f291d0d489555e282e2d9f79ddac1d24525e3de2f664b4147bc49e8c6f896ab4ab7b214691543f1a2f6a18b8a454f7be667fd6fba99a7adc6013b
SSDEEP 3:LstlNllkll/lfY:LsX3lEtf
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\db
Size 44KB
SHA256 b08af7745c49533422c5afb2e683b61ab1b025a2ef13f892321a2cd1383fba79
MD5 ad4b0d21f32cbccefd98c28e33a59a6e
SHA1 1850a90ed7ec61efca181fcc35927a2888549e6e
SHA512 0bc8a37f441ce5cbb0fe4ea3f766f741cc6424ac4274ffa42fcf507c8fc7154115375bc669449da02d8b57a19227483814357367cc8611cbecdf247d7b65706b
SSDEEP 24:TL6BgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg8TPq81fBG:T1OIy4m1b3fbUdeqSB
TLSH
T16B13BB0F1E187551D1BD0236E9E64E6B2E7E204C9B8369D125F01AF24DE211C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\000003.log
Size 2KB
SHA256 a70423c48119f29be0127edf68dbffe2a325b9955a3462f5d6224af84ac397ab
MD5 903e512bbf5604c333ba41266a37f2b2
SHA1 03e0040d85a348e1e8e5c1d0c2369ff26a2cdb8e
SHA512 7b6bb3a5296220d5dba5703c14b057335669de57967ab8ea9ce4116c7522f1097f8c990bd1bb4926350f2ac4203b71c2606c45d8709d32ee76a561ee05a874d4
TLSH
T1FE51D1F37D015435FD6398FA11EA385CCE6B930E18A8D3E5D3C65D31204395AB41F2A2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 ef85d4b8e35c00d7d747ea7e649f1b0970c19c41d7fa4e1b869a1db979ef2c7c
MD5 17c1ab2437fdf26f3b298446531a7576
SHA1 c4206f49f79d2caa58b4e5903fa258ee55523118
SHA512 130beb2ca6028d3780346ca2b60b220b81f07afc9712e721f4cc8a1a76cb1d490b139729a194ed8d0c9db6ef55610b25fe9651aaf8a24c7642b71ddb5bc4c154
TLSH
T1B1E086B2A5C9CBBD5049C0D743A4B75D87F0BC0597CD3556D709548CB186618E3F17D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Sync Data\LevelDB\LOG.old
Size 283B
SHA256 25fe1abcc2ea3fe85ad2e6c82c4379bf2b94872f63f7844dcbcd6daa2167d558
MD5 24d76bd57850057d4291a4effb81a383
SHA1 292a480482105e607cbd4d23935ca7625d6dd9de
SHA512 ebb4295bfa3649bb406b001c6da2ece64ffd84cfc8907332dd54ff12ad3e0ceb5782c9b6a3eee20c0599cc8dc6a408445699700f2bff34cfb89b0e042796c064
TLSH
T150D0C27199C4C67A0444C1D29261F32EC9F4A80697DE360A4B05A408718A41CB4F07C2
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\Web Data
Size 138KB
SHA256 06a51994d99bb1fab217c1445d1c67c3c1e351493aeb9ee5c85b73f421117a5c
MD5 039254d055c29cf77592c602edfd85ea
SHA1 ef8089a6d7405a9d91188755192bca1f1e96500a
SHA512 32c24f3400f73651d9ec79da711713b7b4a72002ea85fd89d7d47ec07b54477d880fb674d8d5002fde453e3e0de25643d9b953f34062f19454f17aaa5fb031fa
SSDEEP 384:zeuvBnhJsueMEGvIW1DcP2O5xdVumfnKa:FnbZeMrv/hGt5xhnKa
TLSH
T1B4D3774B3A743002EDE59A722CF055BB5D3C716D8F11A5D428B620688EF2963B63D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trusted_vault.pb

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Default\trusted_vault.pb
Size 84B
SHA256 b87bf305aafae1f1ec7dd947176c9529b2a9cbd4a3bf296fce25fc009e725366
MD5 85d7a7c1e12b26cd994cd41e587629d6
SHA1 bf53173aa4b19a217eb542951dbafe3ec3506810
SHA512 b3562e0466d9e218e96be44a01feac567e2843f61d1fe5201a5c7d6eef0e714cb5d7d8aa380dbe4f341aca2c46e615f3bfd29621a4898cb8e027cf1155b8df83
TLSH
T115A0128266008642461DB130C80B4C4018311C5A0B34400111F36EA362D5900C541440
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 9d1d8e37bd1c50a1c7d3a594b2e532c107d11b8e474da78dd4146dc556a326c4
MD5 cce0ce2d3ef5cacb507e914356d8953b
SHA1 9d491f7f30d6cacf3149074bad24b8639980cb3d
SHA512 ec8831f1db800cf41de0442384765f61820ac10a371ee43bacebf2af514a1094d00ec5a52d8a4f62013c712d506b47809fad1b84113a3d461c20f1cf2513cb83
SSDEEP 1536:tGOnwP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNn:x2++J3qUQm08KMWF0bFTcVHr6zI
TLSH
T1759312B9991E7D35636AC6D690079DAC88E3DCCE151411BC30C7AB1E28FE393931B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 5707087182fa58f3066787e1c740f77dae23d64dd20640c16f24c0ca61329d97
MD5 9669cc8b8fb987fa7f0fec14599204fb
SHA1 4ac0deab011fa9f5ada96e7f52f95338bd001ad0
SHA512 61aed87cfbb37cb2df1545413d88a571356d9af9ae2ebd88d4a661ff9462fb86b75d095df6a4ae0566ea4f4d3e7d9c882d44dc1fb652abeebb9effd002f40d1e
SSDEEP 1536:PGUWP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNF:LM++J3qUQm08KMWF0bFTcVHr6za
TLSH
T1909302B9991E7D3563ABD6E690079CAC8CE3DCCE1518157C30C39F0E14AA393A30B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 15d7f8a7c4ddadc13f0486aee125e0a292f6933678400f70bf61b13a415728b1
MD5 5dc818f6dea37b495a8af0b60bf5ee5f
SHA1 a24d3ea339fbb6b1dc9f210f214a17cb1dcf6507
SHA512 be9458cefe625f54e7ae6e4bfde710c8126ec5c502dd248a592a20e859f63fea08b0d6fc426a39e8828b747dba75f412572d810238033782aeb0d93c723a0e0d
SSDEEP 1536:sGAlP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNF:i9++J3qUQm08KMWF0bFTcVHr6za
TLSH
T1E09312B9992E7C3563ABD6E690079DAC8CE3DCCE1514157C31C39F1E14EA392A30B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 90KB
SHA256 fc2a071306cc3f2d2e72404cf39f3b77b89fe3f1202a2493eaaee81b2a8644bc
MD5 331c42448daf77638540782f8ef031a0
SHA1 924a6020dc2eb439acd79c6e0f9c426e34734ec9
SHA512 cbea25bc5c5e07a5786019b0fdbbcc20f06bf8163e939e2b57f0947b7cbf280fc68277151bfcc8fd4589732ba586300f4d6529b36c2740d9b0bd863d66373dbd
SSDEEP 1536:eGO4jP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:Z7++J3qUQm08KMWF0bFTcVHr6zD
TLSH
T11C9312B9991E7D75636AC6D690079CAC88E3DCCE1514117C30C7AB1E28BE393A30B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Local State
Size 91KB
SHA256 b54b394c57b2777980b4b88ca087eec6593f2ee7ac2cb1a519e89b6a6667b2c9
MD5 b05dfaf5aff277781bba7204262fcf5f
SHA1 7d4e33512f1ca48dc391b9467f55d4b0c6acacd6
SHA512 d9719192919c21d5ec95e3be88d107f1862f89a0690b4da52958e49bcddec6cf8f6305dd2787b8ae1b13f9819832e7b8b31647f9f965269f87896b4d7d7458aa
SSDEEP 1536:PGAlP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNF:J9++J3qUQm08KMWF0bFTcVHr6za
TLSH
T1189312B9991E7C3563ABD6E6A0079DAC8CE3DCCE1514157C31C39F1E14EA393A30B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\ShaderCache\index
Size 256KB
SHA256 fe9f71ccb2f980ca639f2b6669f78f8ab7ab91dfbe553acc705f8d6d168e107c
MD5 ca93171770122bd8ffa26c1408b769f6
SHA1 d9e2adc7dd5c9250a779e4fb79a2ef3a99fef98d
SHA512 f81c7b832d33538d2f73460ed8fb22cabfb288d634a3860ea943324de29606443cea82048184b1193091ffd181e44dd1e83f7c2ce6c8311a45be5ea19b1a4ae0
SSDEEP 3:LszllklkXlj7Klt:LsJlPj7+
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Temp\cghjgasaaz99\segmentation_platform\ukm_db
Size 48KB
SHA256 7434597d22726641acf6c1817319992b54ec582f0a7474d28dab085fe2f3747e
MD5 a9ae40fb5b25887e90a305a17a7d352f
SHA1 81c9a3d4ea776de2605c894f759d773e2eee77ed
SHA512 dab18020ef0e0506b4f0f2fffe09c502aec24955ae1c5a3072f21dfa1df1f98be0a25bbe1953fa2c0ac3f6cab3b111ceb0f5e81b6cd9a7bf217713e45acd3389
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0JQ:TkkhCU2QB2zbBxx
TLSH
T18D23490E5A6821E9D4D9193EFED34C517DBE0F588A2B78D205E00C768CE21EE553E4BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1204-13-0x0000000000B70000-0x0000000000BBA000-memory.dmp

Download

memory/5804-1-0x0000000000340000-0x00000000004C7000-memory.dmp

Download

memory/5804-2-0x0000000000340000-0x00000000004C7000-memory.dmp

Download

memory/5804-7-0x0000000000340000-0x00000000004C7000-memory.dmp

Download

memory/5804-9-0x0000000002C00000-0x0000000002C4A000-memory.dmp

Download

memory/5804-14-0x0000000000340000-0x00000000004C7000-memory.dmp

Download

memory/5804-0-0x00000000004B5000-0x00000000004B6000-memory.dmp

Download

memory/5804-1235-0x0000000002C00000-0x0000000002C4A000-memory.dmp

Download

memory/5804-1236-0x0000000000340000-0x00000000004C7000-memory.dmp

Download