hxxps://wearedevs[.]net/exploits

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
900s
max time network
882s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 03:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://wearedevs.net/exploits
Sample260528-ehrxhse12l

Score

6^/10

discovery execution

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
62	camo.githubusercontent.com
64	sites.google.com
248	sites.google.com
321	camo.githubusercontent.com
322	camo.githubusercontent.com

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4164	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134244142340448627"	chrome.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1679180529-4058988202-686829476-1000\{8BF2CB31-D1F2-4076-9B18-C4C435272B15}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	OpenWith.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\jjsploit-main.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
944	chrome.exe
944	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1384	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs

pid	Process
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe
Token: SeShutdownPrivilege	1708	chrome.exe
Token: SeCreatePagefilePrivilege	1708	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe
1708	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1384	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1708 wrote to memory of 4868	1708	chrome.exe	81
PID 1708 wrote to memory of 4208	1708	chrome.exe	82
PID 1708 wrote to memory of 4208	1708	chrome.exe	82
PID 1708 wrote to memory of 4164	1708	chrome.exe	83
PID 1708 wrote to memory of 3724	1708	chrome.exe	84
PID 1708 wrote to memory of 3724	1708	chrome.exe	84
PID 1708 wrote to memory of 3908	1708	chrome.exe	86
PID 1708 wrote to memory of 4224	1708	chrome.exe	85
PID 1708 wrote to memory of 3908	1708	chrome.exe	86
PID 1708 wrote to memory of 4224	1708	chrome.exe	85
PID 1708 wrote to memory of 4948	1708	chrome.exe	88
PID 1708 wrote to memory of 4948	1708	chrome.exe	88
PID 1708 wrote to memory of 4468	1708	chrome.exe	90
PID 1708 wrote to memory of 4508	1708	chrome.exe	92
PID 1708 wrote to memory of 4508	1708	chrome.exe	92
PID 1708 wrote to memory of 4548	1708	chrome.exe	93
PID 1708 wrote to memory of 4548	1708	chrome.exe	93
PID 1708 wrote to memory of 3304	1708	chrome.exe	94
PID 1708 wrote to memory of 3304	1708	chrome.exe	94
PID 1708 wrote to memory of 732	1708	chrome.exe	95
PID 1708 wrote to memory of 732	1708	chrome.exe	95
PID 1708 wrote to memory of 4628	1708	chrome.exe	96
PID 1708 wrote to memory of 4628	1708	chrome.exe	96
PID 1708 wrote to memory of 4040	1708	chrome.exe	97
PID 1708 wrote to memory of 4040	1708	chrome.exe	97
PID 1708 wrote to memory of 3328	1708	chrome.exe	98
PID 1708 wrote to memory of 3328	1708	chrome.exe	98
PID 1708 wrote to memory of 2868	1708	chrome.exe	99
PID 1708 wrote to memory of 2868	1708	chrome.exe	99
PID 1708 wrote to memory of 5080	1708	chrome.exe	100
PID 1708 wrote to memory of 5080	1708	chrome.exe	100
PID 1708 wrote to memory of 2148	1708	chrome.exe	101
PID 1708 wrote to memory of 2148	1708	chrome.exe	101
PID 1708 wrote to memory of 1948	1708	chrome.exe	102
PID 1708 wrote to memory of 1948	1708	chrome.exe	102
PID 1708 wrote to memory of 3976	1708	chrome.exe	103
PID 1708 wrote to memory of 3976	1708	chrome.exe	103
PID 1708 wrote to memory of 1800	1708	chrome.exe	104
PID 1708 wrote to memory of 1800	1708	chrome.exe	104
PID 1708 wrote to memory of 4156	1708	chrome.exe	105
PID 1708 wrote to memory of 4156	1708	chrome.exe	105
PID 1708 wrote to memory of 4460	1708	chrome.exe	106
PID 1708 wrote to memory of 4460	1708	chrome.exe	106
PID 1708 wrote to memory of 4944	1708	chrome.exe	107
PID 1708 wrote to memory of 4944	1708	chrome.exe	107
PID 1708 wrote to memory of 4972	1708	chrome.exe	108
PID 1708 wrote to memory of 4972	1708	chrome.exe	108
PID 1708 wrote to memory of 4912	1708	chrome.exe	109
PID 1708 wrote to memory of 4912	1708	chrome.exe	109
PID 1708 wrote to memory of 3900	1708	chrome.exe	110
PID 1708 wrote to memory of 4844	1708	chrome.exe	111
PID 1708 wrote to memory of 3628	1708	chrome.exe	112
PID 1708 wrote to memory of 4264	1708	chrome.exe	113
PID 1708 wrote to memory of 4264	1708	chrome.exe	113
PID 1708 wrote to memory of 4288	1708	chrome.exe	114
PID 1708 wrote to memory of 4288	1708	chrome.exe	114
PID 1708 wrote to memory of 4456	1708	chrome.exe	115
PID 1708 wrote to memory of 4804	1708	chrome.exe	116
PID 1708 wrote to memory of 4804	1708	chrome.exe	116
PID 1708 wrote to memory of 1600	1708	chrome.exe	117
PID 1708 wrote to memory of 1600	1708	chrome.exe	117
PID 1708 wrote to memory of 348	1708	chrome.exe	118
PID 1708 wrote to memory of 348	1708	chrome.exe	118
PID 1708 wrote to memory of 944	1708	chrome.exe	119

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://wearedevs.net/exploits
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd4d91c728,0x7ffd4d91c734,0x7ffd4d91c740
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,896243490046629648,2109269932668597758,262144 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:4208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2232,i,1430795659819496162,3724054927443974622,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2244 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,7197229972725830844,1275988544207520021,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2360 /prefetch:13
  2⤵
  PID:3724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,4683572435455198645,11333011889395646351,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,11960955746280286808,4274639727261762954,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4296,i,1590358483172602990,16046020696600778338,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4312 /prefetch:9
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,6213910468628629718,17928405550072827609,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5720,i,14766564917763574927,1892990398465717371,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5368,i,17890861924330075130,4953071483934095679,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5844,i,12509374196454946733,7742432062840648822,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3232,i,12931119368395268727,8261589952208787844,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:1
  2⤵
  PID:732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3492,i,17989548420375024406,4095320853803318981,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3332,i,4711174608903664201,29517044140604134,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6032,i,1379175694412403867,17182674554684691533,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3512,i,16296878829560928081,14876988651270795858,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6300,i,10826782350436927953,14150222695835535101,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6464,i,8486661096168246835,13347961577795927209,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6480 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6444,i,15496748889416307288,9964766228092012216,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5596,i,5243667218153209363,5218400095217228466,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6632 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6776,i,8125234848006590898,14946883879993629824,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6328,i,8946691489854365035,6447515239229282392,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3476,i,11517715115866869726,5051354783512437018,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7056,i,9282247041716877664,458781097174420015,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5996,i,7377617466763810030,7123802798436425616,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5892,i,13405088188727382349,8088382220316203906,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7088,i,13867049492172058918,4717622499500339613,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5936 /prefetch:14
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7044,i,15839813358540935883,15797870525421123950,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7120 /prefetch:14
  2⤵
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7096,i,1174617332809724728,7978467421741062846,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7164 /prefetch:14
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7044,i,1745137010350824360,17958180411261798624,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6980 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6012,i,16964448656372803440,13863012684582315146,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6312,i,12565802482540294238,1819425286318342423,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6308 /prefetch:14
  2⤵
  - Modifies registry class
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5772,i,13379571280425515476,14344410640086484248,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6120 /prefetch:12
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7420,i,1500055939639942232,4535983175780547635,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7424 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=5628,i,17165992350128446846,10459155501478129950,2097152 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7676,i,7541360121966793411,18113009112655772199,262144 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7668 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7092,i,8381133740566883056,712881160274213276,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7648 /prefetch:14
  2⤵
  - NTFS ADS
  PID:5844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5568,i,18340128467702861910,8390990739872120343,524288 --field-trial-handle=1948,i,11039319549233024776,13659587586087021796,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4584 /prefetch:14
  2⤵
  PID:3832

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3332

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3340

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6048

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Temp1_jjsploit-main.zip\jjsploit-main\scripts.js"
1⤵
PID:3800

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 252a68c02fde533bab8220ac9a931739b9582f7460840e742c9aa6b7be76014d
MD5 3161d692f37437e9cc1df9635fa4275a
SHA1 d7f6644d5cd5836368fe4e81e4a7bc18009c7a68
SHA512 d3cb73958608a624648d08d2e4b59076c2f66b86e16085b4ca222d614e2dbf5d9d2a9cbeff05ac5491d90909f97b8b273231d9e2f9613d1a9130d8e874c00bb1
TLSH
T138F0F9B6CA21AC6B18FD0B1864944B4BEB5413672740494F3B3D520D8FB1637468581C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 73KB
SHA256 fb69de564c55a631541f30a26e52223a2b422597eefa5a9e4edf9bceb8231067
MD5 8822fe579701e42c5e040b1744724840
SHA1 0c416166b448914abe086a784c24a83078a1b499
SHA512 016813d4e5539b4e3d6cb4ec59c91afe114a9e530115727c49a21f98b9624bae968083443a1c554716fd6a19da056d9c1d57206484c1f8db58e28ecea3804927
SSDEEP 1536:yfMXjpph2FzFBd9el1ehoPgjakxvP8Cmm4gTkQ7yo3DR24fxvyyEX2v9iFJ:+MXjpphqzF7ElfgBvPlmKTNyoPfxvykc
TLSH
T10C73025D799F1FDB1D648642F0ECB084892E687229317AB8D5C89000BF3F625EB1F579
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 35KB
SHA256 57ad3bc69c218a19cc3f44dde72302f0c9731f36fdc0d3f8ec3e781925b529ed
MD5 070d7d3386c1c8c50764eef60a294de6
SHA1 d2ecb8d07341b919ef86416d2d89c8c7e4659b75
SHA512 9921b6139eeb7ed515a3de9e62882a6c3d26b3b87c9330985f33ddaec02d8877ced0f61a0df5c0184c65506980eab74c53354f23bdb823e7dda5c846c71ff11c
SSDEEP 768:xWZEZmISDMaa3XrrkytF16QDZ8pZC/71aU6q1FryHd4C:xWOZmIOG33kUF16xpZIav0F1C
TLSH
T156F2F15D6E5FDFB2A2C0F802F0B2042D43C219B456E287ED6602773B1DB8C99B650FA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Size 61KB
SHA256 7c00ab4a9c7f9bb013b8902f8f0f0e7af5c0236b1e142a07ee9fe80c4ee5ce03
MD5 218ac5ab2c7b659c74ac5b97b224c184
SHA1 ea5df0e3382824b74692dfcf8faf43e3bcc3987f
SHA512 01a28cd9aca57d1eb65c81bd0992e8ceb0cce5c7eaa6bc1bf95c45620c59f41c02043bf16dcf97af7f482c21b64c4210b39d1ebd5ddfd48d1fe3ce90736ba578
SSDEEP 1536:Wg0/p38I4rO9S95sEovQm8PV8MoccALDH2AwqrJqgR:5ECI4rO9WsEHGMJPrwqtLR
TLSH
T1AD5302A3F269BF3D3B074395D87C6EA833B05DC7A58440B06955C8E21607B4B58BD32B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
Size 21KB
SHA256 64dffe36b3f74b0eb4364261c78568b6fe79c9317469e82ed2a5529e79241f44
MD5 7d86312d3147d1cfce62975efadfc067
SHA1 fea5270287330285c68d357a7686e6e11779b5b1
SHA512 14416ce9a505d86e4d9c7143cda541a75a5c0ff15801819da7855db7633452b3f8a2df6d9cc7cf088c542cb06bdf2817c3e7f2aec6cd052a1480e0851a1d196d
SSDEEP 384:mhsinpfFSQcv7TmNJZ8Dbz0uiCMHZULI/iquwAAlylI+FvV00oCVTumX4SjXR+Tg:es8pf/cPmNX8Hz0rCMSs7gZkCtNX4Sjh
TLSH
T1FCA2DF6A74CA675A938352B62B7262FC315AB2FC7803E44A7B62B30317AF5403D5E854
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007d
Size 16KB
SHA256 31b8af5d23addf7e2458d83082c0a19c0a4cad8536722ad119d66091debc7423
MD5 6d6500d74bdb62d26f489953a29a4806
SHA1 78ad9cb6440f40f2f423010ba750300cada596ae
SHA512 1408a622d07e454e07218b65119011f0909992c8f25bc39c9030324ebf395aa9525e54024d9406597243b63deeab0d7f4f67f88c1603ced1d6238036cbbc2181
SSDEEP 384:MOoJ0OpqyxAT0/k8NaYiTSSkvu75hjBSk1yWosD7FYozHKjb:ZORpNibpTSSkQQOF7FYoob
TLSH
T16472D07E24761178DF9BDEE71B6B721374A50E2B073EB07292BD245A055C709320A768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c7e124f438521b2_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2c7e124f438521b2_0
Size 10KB
SHA256 7ab81fcfd2060f710ebe635a1f23316383ab9e7fba678530c0d110d7992d2502
MD5 c48962db0e63ce26ef7b64a9ec38370b
SHA1 0c602bcfaacdf9863345b3fade364a9b5d259191
SHA512 123e616aeaa80fc1e003a72bf70a755edca927ad7b254f1b1032b34f101757aa477ba34db0ec5c1ef1a8c7afebbf449b35b46dd83225f6c14b6521acf12c9189
SSDEEP 192:QAzGHrAITA2E+jwneedRIJBsaERKCAZSitb6qoPeA:fzu03Vnn1dRyBS8SitWpe
TLSH
T196222F45ABF1EB29CF2713F5025A89AB7731590D2ED3EA0725F1E6380C4B1E54967C0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35d5aa88fbbf209a_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\35d5aa88fbbf209a_0
Size 263B
SHA256 c62d0215d4aa0178749ace04c4830511844260712fb02d01c77e6036683f70ce
MD5 272dee445eae0f917851b51d6151e77f
SHA1 d9488ac6af40aec4907fb91b99e69a23798deb2f
SHA512 c422de5239d9864a6108a263873865b2ac27340c750b1fd356f2fdc35096e9e0929d29ac9c08b1e761e9a304363642ed5afe59d0e0c99332911d53647a8b0a57
TLSH
T133D0978B14EA3982C25049BACA3E220ECF33819809CCC482823C206A0AC6AF0D1CD10A
MD5 SHA1 SHA512 TLSH

Submit Download

d8b410fbd9f32c00_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d8b410fbd9f32c00_0
Size 305KB
SHA256 7021458fb21624e1f32caf68909b4804a3a6256728b24f6bd14faa3ed0c7127c
MD5 9ddeba916bdcf33e2c4f0fc780bbdc4b
SHA1 8d477b50aa6eb02c1702951bfd4644cf6a665bd5
SHA512 3383d50b5b5ced341533b2cdd07a0e54a1051123893142a281da3febd3c0d15d28e97acc2766e025ab6d805e1780854cf9cb7b63a66a372fca1fa3ff976664e5
SSDEEP 6144:2Sn2n6/rQA328IHomjYgDcUuoZDrxX4MqnGjeVLMfV:2n6/rCuIrxE56fV
TLSH
T17464A4045785AD37CB7BA3F581638A66723245583FC3920793E1FB392C163E6AD82D4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e40ec39b6ada1398_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e40ec39b6ada1398_0
Size 289B
SHA256 b603c7e7231eec75c8e418f8751875635cfad254d832db60e7d599a13605bfa7
MD5 dfaffeff4f0daed74ace29192bfc0fe1
SHA1 ae6b4fd2f10f55710e20d1a40dde055f3c459f64
SHA512 0796d7d0a64c001ea7c53c6fb640327d8e5236b5ed00b32df6a78623e291cafaf90a2667d6aad5d22e15afd6bf65a21a5b7e054e212b6c74cea4033c5f3aa5ac
TLSH
T151D02BE780593901D23900F0DBBD424B572B48EE28698AA5B034913613197F62B4B542
MD5 SHA1 SHA512 TLSH

Submit Download

fe8b7ca011cc9644_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
Size 301B
SHA256 03974f1a826fbe414a0262e09263f13a6ef45a1e89face0cd95701d1c2033e3a
MD5 6b54f2c7a5775e9b4217c68d37d44ebc
SHA1 9aaf61787b010b938106282141e68e8fb586f137
SHA512 af727626626017a59a1867e259f4c3c9c3efed18dd5979118eb4ff750a68549111475fbd4e26e9fbb51494cc9d72ee5a05d3db95650ee32b04852efca607be07
TLSH
T100E02BB3459A5173CD2AC5F0EE2FA25A4617D1DC18FDE1819B74A0B3E7908B98885371
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 f86dd428c584755e2c1c8823e35011974b7a7be586acf65ddb81088c0888c093
MD5 ea311a0129a6c28983de1578c956aec4
SHA1 891e8417cf50728c1e3a992c84b6650a6a952b5c
SHA512 d52608294d6927cf67ea1dbca970e9d50314f95450237464ed8ba651963395631309be2c019fd949de85839ed2cfeb1587a155fb220cda9ed4f2a6c45eb227e7
SSDEEP 96:d079PQCVoYy+5xtlASHk4c66m3BziiHaaKir55k9RUFeCxWhTqcw5xcnKBg5:Wx7/TkinFQmOjixng5
TLSH
T1C3E1800A5FD07D24FB9759356CFA191ABD3408A5D9872F1B27066D376E83BA3E00C812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f938caf4e4d6f5ebe191eb23fbe92acdc4a9e983a34e9b3a0da5c1e1dc77267d
MD5 c9b34a9001bd35556e15d354a065af9b
SHA1 f5ce96ac0da55a7f780cc65a838eb3e12450c3af
SHA512 300ab2dfe7a77be0ec1e3f23f4f38113ad9d80b28b7cf8a9ba2e2617789d20d9987095a27fe67eec2578deb1c427bc09b700be0e0604bf4e83a6c82f914f947f
TLSH
T18971430E6AD06C30FF929A316CFB2914A0301865DE9A2F173747BD6B7FC3AA3601C502
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 24KB
SHA256 390f1e2dc376a99b7a5bc3ce6a533abe1dc3f2d9fa06f328fb9a4bf8910409a6
MD5 a2a87b228f09e7e476dd3ef747b11566
SHA1 84873fd63e2a2102ca10bf3bb5877b2abd1f8e8d
SHA512 2f188e2570edbd5ff5f7d6ecf5eb61d6ab40ba0c891dc690f5e6d8ae833224cbf44ca96e7e396a76639c48cb1c73b2d6a6a2225a2e3ac8f187a91a4e523fffb4
SSDEEP 384:DvFRD30Ie5/SsuNBeTAYKCMZJelIlnoRfQe8YwyJGJ2LSqbXIzaBDMiWc3SAYUtZ:xrgU9PhtyVp3ClHg
TLSH
T139B29FB3C2E88A7D996165F497246D3ACE1E191903183D66CDE8EF4F93E2432E30164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 34KB
SHA256 772beb5b5f271d0e4fb054ffdcfa4533d86fb8e911c938ca23cf776f0c66484e
MD5 0649138d04ca2d2009a6f21664d8caaf
SHA1 e4d573c532199dee9cdb4fb63b91bd65ec3812d1
SHA512 34c991ac5b2a7c2b37747c6f9a9eab8cb0341ff3f55d3c1e6d04407c326f1f3a02136c9f38fda5eb89175d3b3cfda4f6b70c5162148689a817b4f2ec90439ce7
SSDEEP 768:fk47rx4N9ecraB8j3K63iItryYxOi2MqTKi8P5f:y883H
TLSH
T1D2F27DF7C3F4896E992165F497246E2FCE191919032C3D76CDE8AE4AD3E1432E24164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 4KB
SHA256 144d7b01b7368e506e2997451e28b48e2a84002a18c2c8263cf2af1ec85f0de7
MD5 62b74528e0e9a2100fec42d8d9ab89f5
SHA1 74ef0cbd1fffd6deabc8dbba07851e5193b07f0e
SHA512 3a0fe8315691afcd139a91f7351d0d4cfd65c5fe5b2c93a643686fbd9e3c7dc2cf3d06448a8613ce52930ea6e6907834a871a9a7c34587319d88afe6f1d37bb3
SSDEEP 96:XUnUmUqdUzyieUSsUXUXUtkBU5bUdU4URKUfU1vUf7UP3UIU6S0UDMeU66KUQUj4:XUnUmUcUaUSsUXUXUkUFUdU4UkUfUdUT
TLSH
T138A1AE938B7EB41731BE49BF0D54BC1A29BAAC39029164F0DFA681ACB0815F70716877
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b602b4a3-b138-4fff-8b56-4d10380d1d88.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b602b4a3-b138-4fff-8b56-4d10380d1d88.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 39628d1060d1bfc8a45b5c63c1ac3de2065e9880ae94cf5908b44ea0781dce4a
MD5 f89f6fa9cc4ceebdc63eac1d50a84fc1
SHA1 1f46fd172aaf6da6033b26315edd54d73607cfc7
SHA512 6234e633d61e71609d61d5538ab033dad17344c92fc0937cb66edb5edb975e5e55942c62f5bcc3dd0ea58f5d3be03ade703502ea81357138d698d662876a1df6
SSDEEP 192:NRa7z1iaLWXsv7sBpAPRp28X9NHsb+WNn/7JdS2HC2necPVyIsnAUge:NRa7R3s48UXNrwz+2i25e
TLSH
T18B42D52FBA10657B9CDAC229F926B757E3F5102171D42D80EAFCCA2C15E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 4069cd9ed23bca1800b6266f57321d70757a04a0cb4deb4d6449928ae14f9769
MD5 fa3928c20026d5c263b16160a3b7ffa7
SHA1 b899d9432e4e29e855f2993cea9189c1ee12025a
SHA512 8574fd14b9f3904368283d2e8b743b8fce951635ddba761f95e6230460e4cb4cda06a027e67a96711eec8b5a31b2cfcabfbd74d1cd9d70f80734c7f9e1846852
SSDEEP 192:dRancBAz1iaLW0w0v7dLBpePRpgeuZt0x929NHsb+WNY6nC/Kx3oI2cwC2nec0Vo:dRanmAR3lj7iXWrwOQOc32gE
TLSH
T17262D76BB920297B9CDBD269F915B75BE3F5202166D42D80EAFCCA2C15D76CC3207407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 40eef88f98acfdc0eb6f489499ab43f833aa1343e3c94406f3a9b8d6e6f9242e
MD5 492f1e97c734360fbd8eec63ecadb0a5
SHA1 5c13ce770d3c66c734018d8673a8bae3930bf837
SHA512 96b2d824ba67bfac1dd3ce33e7b00adf25aca70447902d80c86739f59ae35211e02b473d950b07e9af2a93195ec6d4b85a81407e610a6f39f5e53f97c246bf06
SSDEEP 192:dRancBAH1iaLW0w0v7dLBpePRpgeuZt0x929NHsb+WNY6nC/vq4Ix3oI2cOC2neS:dRanmAV3lj7iXWrwOtOOcV2gE
TLSH
T10A62D66BB920297B9CEBD269F915B75BE3F5202166D42D80EAFCCB2C15D76CC2207407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 34a5922d7450621394c9408184fb5ca761156fcf858d503fcd6817c6e6905c93
MD5 f76072846f2927b3b7a62111c7d13507
SHA1 56c93bace08d908ade4e0485064225e04ee7410f
SHA512 a081600928adc8d3609b70de968a387e2c22a5cdefc33c6d0d5404628c307b2eb903748a08f09da604cba484bc78b49cbf36c96dbc1029968d06942c4743b5f0
SSDEEP 192:dRa7z1iaLWgw0v7sBpAPRp2829NHsb+WNnC/KFyWuC2necPVyIsnAUge:dRa7R3Fj8UXwrww3W125e
TLSH
T13F42C42EBA10657B6CDBD229F9267757E7F5102176C42E80EAFCCA2C15E79CC221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 21c46968387b32f0c2bd80b26d87031a7ddea0503a019270b903fc735df4577a
MD5 726ac0461ae1f2e829a0f12633c4e4b1
SHA1 7c54fd65f8ce7136098eba1594d1c5e60cb929f8
SHA512 125961f21edd74064753f00db490abd2ec045dd99d3fcc5ee51d97d603dbcdcde34dc04c594df3ef39d69962d0bfcce4928868b7bbb5a8b90917c898d8f689ce
SSDEEP 192:dRancBzz1iaLWiw0v7sBpAPRp2aWm29NHsb+WNnC/KFye/Q2vC2necQVyIsnAUgE:dRanmzR3bj8UX8rww3X2a2kE
TLSH
T1F852D62FBA10697B6CDBD269F922B75BE3F5102166C41D80EAFCCA2C15E79CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 4761681434a578f3aa9c71df7b197e2a4771ba434d5ad9b163cc85a354e18333
MD5 ff85cf340c21d3789c13078e2e579719
SHA1 946582c41f5d3f8ecc8f95e2ae89f4b7ef10e7dc
SHA512 f897509f6ddbe5a1c72aaa3aef344c24dc81e852eea7c128422f6d6be2d9a62130c797adeda7c6be1737db98a7964d9b4bcfbe9a924a71279bfb9e80a9ebb954
SSDEEP 192:dRancBAH1paLW0w0v7dLBpePRpgeuZt0x929NHsb+WNY6nC/vq4Ix3oI2cOC2ner:dRanmAVYlj7iXWrwOtOOcV2gV
TLSH
T1A562D76BB920297B9CDAD269F952B75BE3F52021A6D41D80EAFCCB2C15D76CC2207407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c62d1c3d6fe98e5d3ab4c9f600a0242fce4d06bb9f115e7e10a466036255b27e
MD5 b8730666ae316d7ae48cc05b863846a5
SHA1 249a0c54a7ee865d0c90c26a740ad85a5f06f69a
SHA512 0b387aea4e84dad3ad9dbf5edd9dcba95ffae0562674c212145a8924a6b97f008c06b9dbeb9cf63e40af3bd5212fc2658bcfc35d377c6d13eb7dc795349443f0
SSDEEP 192:dRancBhz1iaLWiw0v7dLBpePRpgau129NHsb+WNnC/KFyeqXYuC2nec0VyIsnAU3:dRanmhR3bj7iXbrww3zY12gE
TLSH
T1C252E72FBA10297B5CDBD269F922BB5BE3F5102166C41D84E6FCCA2C15E79CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 0d2a156654c1c543f684a1b78fc1acde7a605db8760d180da55c6029bd11d4cc
MD5 fca0a080e03e1f9f1f1ec2f425ee2b0e
SHA1 04435d408b3c935d0c54889e9019a986e7e3d26e
SHA512 0133469141ee35d9bb385a53718d74af5f96fe7ea3c4d774df026da6bbcd201abccd4b10b8b4bb6f9e60e57cecfd324ba1f320a5bc5ef4bba05fdb56deff9ffe
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLuLcSj5EXODtw+ErU3U2HG4B6T6:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pa
TLSH
T14572F9A76C4C8E770F94CACCDC16BB4FADB5024B65E9886487FA581903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 5223054d10b8d4eff8c2eeb871dbf4acae1581b06f99d26309c25d8df753abf3
MD5 37a04d1871d288d3222f02b672456627
SHA1 72d79a236eb2dc38664541c52d679522aeab04b1
SHA512 1eb9e8d4e7d39a4be069d3ef7f17e6bfb5fcfcf233e4c519bfe58f2594ad5898b78ddb3ab8221f8852153994105efd71a11b850de8b836c8baa34b45d1f16a23
TLSH
T178C01212C90AB131C00A03B93252E8DCB114FF31D60E274C52F8695BDC387328116152
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5896ec.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5896ec.TMP
Size 96B
SHA256 f5382245644066f85e40aa1760cf9ffd70cbc5083c4dba0db8bf8ad513048d3d
MD5 0de3c6e778503008f56e1fbc6452c2a3
SHA1 59ea55881c685488c4903a2f9c0802c8b381ab56
SHA512 c22922387722aea4a671855f7f6ddd8275e0c99ae415861a9c79d2e3309a61bf1fb4f493600bb78461e5eccdc255089805ceff0769ad065b06dba9337be7d2aa
TLSH
T1FAB00256C502A253C08203B079DB95D87179EF37C683121B96F41A77DD2967045EA660
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 439b55ad01dc70f2bf873b2c2a80118c705a642e8ac2eb42d680712a0d78b179
MD5 0dadbb8a54972ebea01ed23e02a28aef
SHA1 bfa7a9373d77d5233ee4b89162ac4d16fab6e3d0
SHA512 6da06479e00e0827db1ad31b703090efb73a00bd58482bec5b2ea1fbdf8ec549ad55054a935dc4495fd5e5b8f5a1a3df48c69a4bb00113b6d36585a2e1e38d5d
TLSH
T1C5A0027022D0BC05DD8602F550A18B942256681012458253A890018BADD25C0D9C1002
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 76B
SHA256 5a4c156e40caf101ec0a0cc726e631af8baee8c05a74c2822d16a4d9d824f541
MD5 568e7e61523398473af556dae2918fb7
SHA1 4091b1e52408b3ab3d34683f0b442fa35e661f9c
SHA512 e58b30b6b81c7992eb7754974941b789b465e9caced2cb4fc27709c77da9eb0ec6375f1f4294ed2d3419abb7d13224dbb96bb93008ef94308670f2daa580cbb5
TLSH
T187A002FB1D04809F0F30E8EC203CB22DE45B928C8CC4DDF8C80881532178F370002868
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 157B
SHA256 65730feb93424d7384aa89719f94bbc394c30b9d7652c2fc210bd2c2ef01ab77
MD5 17f9f152e1926cb0dde9fd58b142ab99
SHA1 b4d295fb27beb45f597363a63ea90ccedecebfa1
SHA512 d9ca2eb3ef69c77429ae40d9b3c324a5881cc11ba4fd4be8908cfad3f03dd7367c31ac3376f2ae889cf65173508d3ceca2bdd616517b76a0655c36ce181e1182
TLSH
T14AC08CE30830018B0730A9E42028B26ED41B4C4C4CC0CCF8A906710264B8F33440052C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 234B
SHA256 f40fab2fc38be506af1a9b41d0882f4221747649a28cb9789574489b46a10570
MD5 2930095f4efef9f2fddc2692dcaa2e38
SHA1 581ca9ad6820fc0abdef827c2d09ed2b557158b4
SHA512 8e09e3f16b26f8e183e73d4de773ca5743fb6b98cb7bae94870bae1a98cd5f52779befacdd5304290439b35878992443863533cbc151ee52fc9c03c67cd0a78e
TLSH
T132D0A7E7093045A71230AA94112A715EC1165D484EC4DCF89D84F197A8F8F238001638
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 150B
SHA256 87b148a63cae460ad5680fd065ebaf9f2c8177a9c5aa6c8a12d77f5ff54cc5dc
MD5 ee475b89e76e29d8dd56e2fbe44c36d9
SHA1 ec4c66df2ca7eadf442a9a473b2a2b2ab78db4e2
SHA512 429fb08ecd21096a860d795488966d66d5d1bf87d8c241bce2014a1a4229d4965bf7d7b0b53271d2d46a2a66dafdc1711b6b16fd0a7a9c960b7419fbde132354
TLSH
T1BBC08CE31820418B0630EAE82018722ED00B454C4DC4CCFCA948510368B8F33000152C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5934e1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5934e1.TMP
Size 160B
SHA256 77791b9e21960656c54ca09067ddd5b825292393d50ff12c566774d2e9d977fb
MD5 424d1055f1bf8ed352359586d249279c
SHA1 dc7dda1a3cb25633528ebe5b882063aaab2cf33c
SHA512 44c7e624155d635d33ed3a19af9860559adacefd61db39806d5f8d4b90033b9fbbac319dac1bd7f8919cdb05e32583d34e6bf970e5c02eb9a4b92a0c737f6a15
TLSH
T121C08CEB0A30805B1A30D8D86038710CC01EBD2A5CC0DDECC840F19224BCB3A8001A28
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a36a2af2b6f72d73c06184c5e658ef9b00ec2c8a065eb582216a9f5cf1034701
MD5 765a71eb7e64a2cbf2e56d45c40e5182
SHA1 987226ae8a2bf4302136352097d89010cb8fdd7b
SHA512 448c90bf45155225ce1ebd76e8a1f1bcdc45425d4169b830cff9f29f76c77cabf0b588bb9412d3a7456d44716b1f9e7f4c19e997415bdf32bf5016fb6b3c9582
SSDEEP 3072:3Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:2m7Rkm1tYpBeh2BAoe
TLSH
T196C312376EB4A93759B5BB1EB04E1B1F1EF149A7C920DE92C8D45B0833EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 3385d0172637cc681c680194ccddf4b5578f3c8f20a7a857beb2c85787dcf643
MD5 fd4306d1d919da6e94091bea39ae8a95
SHA1 67943a87cd1a0b9e4f9290335e8784a95765e842
SHA512 015b6daf5c1358b9d16cdcc2f2dc2b445ba2130765e336fff8a235858715395b8d0c8ed5a1a439b67397530d9fad3bd8a5851c393c7d7e51fa804ad301fbde28
SSDEEP 3072:OhGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:Owm7Rkm1tYpBeh2BAoe
TLSH
T166C312375D78A8375DB5BB1EB04E1E1F1EF149A7C924EE91C8D85B0423E9BCC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b26c00b8c5805286de567cfe6e01fc8e2e91e9913ce71d8e1a8ee152881f3ccb
MD5 d0395fd4d028b8e657413c8f25ae446a
SHA1 b9637304ad09a4a98c2d87616c888cebc53fabff
SHA512 6526b5ac0b05ecf7f834b148c122d8c73e2f7931a8734861002fef59df2f67a87217c8e80f556a3dcac19dbdd4f0c6474db630f872d67959c84bf1a144f40823
SSDEEP 3072:XGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:Wm7Rkm1tYpBeh2BAoe
TLSH
T15FC3122B5E75A97759B5AB0EB08E1B1F1EF14EA6C920DE82C8D85B0437E97CC0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3af0d03f916a94eb8bdc3c0fa29d50661f0d526e8362a462cd45684dafc98ea5
MD5 725193d61937a4a801cb77a9e13340cb
SHA1 be22072482a67ebc9e660ec3d21cfd43f3be89e0
SHA512 1624bb4332f84077ecaa2701acd0145061ae3775aa152e155b7dc04e089d0f185da0237f064b4cc971e4addd686a9c8f5d6b1a6f89239663add518e2795dbb5d
SSDEEP 3072:GGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:xm7Rkm1tYpBeh2BAoe
TLSH
T108C312376EB4A93759B5BB1EB04E1B1F1EF149A7C920DE92C8D45B0833EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 82050874ea123bbc846615ecc65a731f5cbfccac1495de3e6b86f98103b0eea7
MD5 1b7be182d9252eac649125916231aeef
SHA1 fd99bb508ba1a74d1b0768bd9d55b18e5a95cfc3
SHA512 f7f0fddad54a58e295abb7da4b2e2dd87925d2cc60f62babcad562f9952fb0defbf21cf33ef87b8561a9f16d95d71f67b4bf925e15b7c2ad0892a72f47fb3096
SSDEEP 3072:OGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:Jm7Rkm1tYpBeh2BAoe
TLSH
T1F5C312376EB4A93759B5BB1EB04E1B1F1EF149A7C920DE92C8D45B0833EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1fbaccb5c7ad21f617f2839a3cc451ac3b84224442fea346b10c7f61ab117032
MD5 21f3d23055f55155c8ae2b2b88b76256
SHA1 5e1c67f623280aaf8eb99ac0139d07fa6e07aa46
SHA512 6f7ecce11fee282001cab46bdfdaa799288f7b2c2265f95e358da86dda872ce6a04aa778be822f72c44e3b4f449b51b6b41c15c303217a03240c3d57d014c5a0
SSDEEP 3072:ahGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:awm7Rkm1tYpBeh2BAoe
TLSH
T1D6C312375D74A8375DB5BB0EB04E1E1F1EF149A7D924EE91C8D85B0423E9BCC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jjsploit-main.zip

Path C:\Users\Admin\Downloads\jjsploit-main.zip
Size 11KB
SHA256 fc7d6dd3561b270f7c4be282d3ceaeeb4234f12ed4cefff14c99bb9b68b81c92
MD5 d8ffdbf51d1560d6cb113f2ceeeea710
SHA1 00fd52b31c746f256d654f13451d9d057b35b4da
SHA512 d6b3b39ed89ee3bcad662e816241b1c263af02616f7eb66c3fb5c90eea7f5649f4bf7602a81b0575d92a8ac1c506afb575a81b18da53b24d5dcab29eece717e5
SSDEEP 192:9W7t6qdZ3HhrQ6yYEviQtDBYfeU0hFHs0cFiwzszxaIKRQQG242tMIpBuqhTmjnV:47t6q3BrLhEvhZBfFTM5FiHab+QG2gIg
TLSH
T18E32AFAC0C597A45EDF451B0D3CB033642424AAFE12D1E4907BD596B0B0AB847AA8BDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jjsploit-main.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\jjsploit-main.zip:Zone.Identifier
Size 149B
SHA256 57389878767f458aa044b59fcdd4ffb513fb32bb0227035dec8566cfa013da4c
MD5 a669f06609f57b9806870c1009f15e32
SHA1 b794905da623ebc899deeef41d6ea7444a514d65
SHA512 afa31065a0165f1e511385049b2fb1c9c1170643485832eeaa835e80e2b64d57b65408981251713723cb3f013ff457dfd7a054a0d6eadeaf1a731a4c943c5981
TLSH
T142C02BCB0C00884C0F2034C871DF4C08F0AF250C8C9456D8C84440EBD44403D61D9897
MD5 SHA1 SHA512 TLSH

Submit Download