1fb83f6bff2ddca793eee04534d68b48907c5251d3372ca39eef3c5fb5f6a1b3

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 06:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KryptonClient1.21.11 hackvshack.net.zip
Size 7.6MB
Sample260807-hmrn4aee46
SHA256 1fb83f6bff2ddca793eee04534d68b48907c5251d3372ca39eef3c5fb5f6a1b3
MD5 eec599b5d63926ebd64913eda8795f39
SHA1 0f0ec8e81f083778ee6dda9afd3b2085f21fc5b5
SHA512 dff990fe98e7bb8c612169a5cb4efd3fbf7a35981a8feeaf156fd04a5c1f54ed3a9fee091bbc1562567dfb66a688df0ac93deb196251a4a2b4287584d5b6e8ee
SSDEEP 196608:N6k8Q/eSpo7OX9/gMDDL7bsxuD2HWd1lvfhnD/tABp:N18T97OX9/7DbsxuD22VvfxZ+
TLSH
T1148633B2A66000B63F5960C37C5646DBE25BD7A2819F4E1FB8BA91E748003335B7D94F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4844	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305591282279228"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{085063B6-0CFC-4E58-90BA-D472B87533FB}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5416	chrome.exe
5416	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe
Token: SeShutdownPrivilege	5108	chrome.exe
Token: SeCreatePagefilePrivilege	5108	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe
5108	chrome.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 5108 wrote to memory of 2376	5108	chrome.exe	90
PID 5108 wrote to memory of 1844	5108	chrome.exe	91
PID 5108 wrote to memory of 1844	5108	chrome.exe	91
PID 5108 wrote to memory of 4844	5108	chrome.exe	92
PID 5108 wrote to memory of 4540	5108	chrome.exe	94
PID 5108 wrote to memory of 4540	5108	chrome.exe	94
PID 5108 wrote to memory of 3232	5108	chrome.exe	96
PID 5108 wrote to memory of 1484	5108	chrome.exe	95
PID 5108 wrote to memory of 3232	5108	chrome.exe	96
PID 5108 wrote to memory of 1484	5108	chrome.exe	95
PID 5108 wrote to memory of 2492	5108	chrome.exe	97
PID 5108 wrote to memory of 2492	5108	chrome.exe	97
PID 5108 wrote to memory of 3440	5108	chrome.exe	98
PID 5108 wrote to memory of 3440	5108	chrome.exe	98
PID 5108 wrote to memory of 3360	5108	chrome.exe	99
PID 5108 wrote to memory of 2476	5108	chrome.exe	100
PID 5108 wrote to memory of 2476	5108	chrome.exe	100
PID 5108 wrote to memory of 4672	5108	chrome.exe	101
PID 5108 wrote to memory of 4672	5108	chrome.exe	101
PID 5108 wrote to memory of 2548	5108	chrome.exe	107
PID 5108 wrote to memory of 812	5108	chrome.exe	105
PID 5108 wrote to memory of 2548	5108	chrome.exe	107
PID 5108 wrote to memory of 960	5108	chrome.exe	106
PID 5108 wrote to memory of 812	5108	chrome.exe	105
PID 5108 wrote to memory of 960	5108	chrome.exe	106
PID 5108 wrote to memory of 2188	5108	chrome.exe	108
PID 5108 wrote to memory of 4196	5108	chrome.exe	109
PID 5108 wrote to memory of 4460	5108	chrome.exe	110
PID 5108 wrote to memory of 2188	5108	chrome.exe	108
PID 5108 wrote to memory of 4196	5108	chrome.exe	109
PID 5108 wrote to memory of 4460	5108	chrome.exe	110
PID 5108 wrote to memory of 4180	5108	chrome.exe	111
PID 5108 wrote to memory of 4180	5108	chrome.exe	111
PID 5108 wrote to memory of 4144	5108	chrome.exe	112
PID 5108 wrote to memory of 4144	5108	chrome.exe	112
PID 5108 wrote to memory of 5404	5108	chrome.exe	113
PID 5108 wrote to memory of 3936	5108	chrome.exe	114
PID 5108 wrote to memory of 5404	5108	chrome.exe	113
PID 5108 wrote to memory of 3936	5108	chrome.exe	114
PID 5108 wrote to memory of 3008	5108	chrome.exe	115
PID 5108 wrote to memory of 968	5108	chrome.exe	116
PID 5108 wrote to memory of 3008	5108	chrome.exe	115
PID 5108 wrote to memory of 968	5108	chrome.exe	116
PID 5108 wrote to memory of 5148	5108	chrome.exe	117
PID 5108 wrote to memory of 5148	5108	chrome.exe	117
PID 5108 wrote to memory of 3256	5108	chrome.exe	118
PID 5108 wrote to memory of 3256	5108	chrome.exe	118
PID 5108 wrote to memory of 2340	5108	chrome.exe	120
PID 5108 wrote to memory of 2728	5108	chrome.exe	121
PID 5108 wrote to memory of 4484	5108	chrome.exe	122
PID 5108 wrote to memory of 5368	5108	chrome.exe	123
PID 5108 wrote to memory of 5368	5108	chrome.exe	123
PID 5108 wrote to memory of 3368	5108	chrome.exe	124
PID 5108 wrote to memory of 5684	5108	chrome.exe	125
PID 5108 wrote to memory of 5684	5108	chrome.exe	125
PID 5108 wrote to memory of 3572	5108	chrome.exe	126
PID 5108 wrote to memory of 3572	5108	chrome.exe	126
PID 5108 wrote to memory of 5416	5108	chrome.exe	127

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\KryptonClient1.21.11 hackvshack.net.zip"
1⤵
PID:3956

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0xac,0x134,0x7ffec0c6c728,0x7ffec0c6c734,0x7ffec0c6c740
  2⤵
  PID:2376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1624,i,13861322422942529545,5423137455195430269,262144 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:1844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2172,i,14930618886089095977,16224456762607349757,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,12470981335000678164,13582307456204523518,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:13
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,8088395542179800978,5122722483209966340,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,11656982725356504131,8108029270081239626,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4704,i,12560476048445929792,17200182801648636185,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:14
  2⤵
  PID:2492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4872,i,2065201479183750076,13840009610714049601,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5408,i,17973452291348754896,10782940865139809848,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5512,i,5727053923151296734,17358152989691340182,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5452,i,14345314708191049333,17541066756523114599,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5504,i,15183693012105182064,12460438676727587278,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6112,i,15878676344020546844,9916680449130451937,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5796,i,10825710673969433853,15797026176343348133,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5376,i,13947462723712242042,15854781310245744677,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6240,i,4462112331436652830,7583668819604346632,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:14
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5820,i,7619927644125516559,16439943546440311200,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5684,i,4461833188601520306,1430877644352644669,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6600,i,10723886968980920657,13462454012938344399,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6388,i,6271928559850001097,17112045993974609551,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:14
  2⤵
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6132,i,10789793483691988814,8700734260626581850,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6124,i,11216723649400234075,4351055382835789500,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4872,i,7193707363789021527,16611256768806680540,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:9
  2⤵
  PID:968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4884,i,14405031555407817756,16523476722484373217,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3084,i,6914460958923566449,15664296712417013581,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6160,i,18365130887143249933,15589550819656891528,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:14
  2⤵
  PID:2340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5680,i,2748289040345266803,3652882941995316520,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:14
  2⤵
  PID:2728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6508,i,13887993092508547758,12998423764719318253,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3248,i,4232298616887505993,7700065906494556916,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:5368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6828,i,1093406607884841195,1884486579269020928,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6840,i,10818467970583407753,2821512158083508013,524288 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:12
  2⤵
  PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6544,i,10707218019578551308,16839181273242733228,2097152 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6808,i,6352269036837954265,669784853732373471,262144 --field-trial-handle=1948,i,13258882135352240946,14543300659231642720,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5416

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4284

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1232

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:2628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 43KB
SHA256 88984fa6f785effe691a9ea8ebc90e1aac2aed6cc09fb0b70c33d23c3c3c6a9d
MD5 4c32bb118efae2318b26b0e073f353a5
SHA1 9fc23a1fd9a4556d4f595617a0d57fe98d75b1ec
SHA512 791e980ba97f0eb39ca761a48dc6143bd13124773bfadeb6c13b431c58636c774d9606f3d7b20402041311355c3e15a68498426eb2c1717df674af0e048210a0
SSDEEP 768:rLeY04QiTEKx7LMbzvLY4bDaVIYKzxKIazC8Q15Nio5ciADW31BZSZ3X5sArBpJ6:bzbRxexHaV6Ywp3IW31BI5sArBbPS
TLSH
T1C713F190EF32A1DE9A76EB9CE3EFA725F69B5D170454C291A414CF768D4D7CB8042280
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 52KB
SHA256 6850b5dff15848cd10a24b74cf76d245efe20360053e3565c514651340086f33
MD5 2224dc0aba381cd27e50592801d09bd1
SHA1 1c52aef0422e2caeb8c37f372824c3f7b0ce4692
SHA512 9269c88913a73a4b565ab612af4fdb31ddec7f4a00e38c123d51dfe8b4c918419138f55c4084bee53483b3e5d08959b1e155f6e982dadb75fffb200a601cc3ea
SSDEEP 1536:vlMKj8wCh+Eo06S7quEpxfmh+jy8xKxELPfohsHvYQ6O:N6t+S72JsyyyYOHQHO
TLSH
T1723302E1BBCE61A9D509847C9966D9F1D1E090BCEE32E5B28B04E8E3C14C9FC5E93741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 45KB
SHA256 0616bc0c9acc6c727290038f651f691b646ad3865eb20befa98be9fff2851a35
MD5 6a44dd189c5dd6333b313fc7697f55da
SHA1 fa642d4c10b73af7609385582fa59bee716ebf80
SHA512 7aef887792168e17fe5ca84c15b6ef70967513db62bfca8cfcfa56b635c4a7fc54947b6e48c4dca3187eec1329f5d637b77f036319952eb21989fc7606535ca4
SSDEEP 768:dhZPXHAF80mcC49W/9c6AypANtF4rUiQS8dA/HcW6RSwb3obbh6UW77:drfAFDmcTg/SgqNtYUcvV6RlobXW77
TLSH
T105230299878FFC320036E9EFD47953B68C9A674A40B04C3AB654F2F1123D64249F9B13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
Size 749KB
SHA256 5188ae7363dc29d9c17198fb3b7096faa5f2b957e4f431adfeefacb4e0948bba
MD5 3483f23c2193e8f72ebf2cb0292514ab
SHA1 8d40983f41b188c8d237fcae2d3dafb52bc4c288
SHA512 4297743ef5e462578151b1f271e1b4d56f8c3044a7c06a0aadebc96037fd00b4371b4de226779224b7388df8fe860b181653a2c5d749273c6a99c81cccb399a6
SSDEEP 12288:44N/1hZL2PKGfgLRMJoVwqYjGLBUTJwM594oSZ9O1le7pakMW4SfBwrLl8H2W5Cs:44N9hZbGfgLwGU3k7PO7lPRm5h
TLSH
T139F4231D92A89B6BB74E1E79D047C086C6F1F2C940AC9E878C4648AFC9DDD5C3B458CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 2a0497e4c47249dbc8cf97038a834ecdfb6222f44c577ac38dfc0a17b7ebdcba
MD5 aac2e3baa9f3724f78ae5d3f95a52be6
SHA1 ee886949c8eb2b048ffacae3b464f2a3dd8f34a2
SHA512 c565934685bb4fc9c2310263aff908703530d17a7f14a1feb8356cf8def0a45339c621cd584e7c162384804d4c3728bc44f8e727a685ff4051915ddcb8140049
TLSH
T1BA215391208115ECCB98037592A64CEC327F366A6087AF0C87830D7772F5FB95888281
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 e00b5f3b331daa821331423550b90cda74c92e5a4f4d7472fae9ffa42f35490d
MD5 61fe506069a2089c2c3afc7d96481c0e
SHA1 0b6a218c462f9edfb3f2ba0041fdde544f598a9e
SHA512 ea3c59cbc5a5d67ed42c7ee06b6ca00f67a6db79c73a02a2f84f5411b976f5259de952b9ce051750e5c1e8cdd19dd6aeb97cc2e4a46f77e16c1126c9d1a42aaf
SSDEEP 192:Drs7JRHboaMbyNUHJY+RO117DtOA7NPNaP2bNkfOaerY+8A7WofLgTjhU4:Drs7JRHboaMbyNUHJY+RO117DtOA7Nl8
TLSH
T199229DB7C3D8D53DCC4262F5AB156F1BCE19191852283C2BC9D8AF8B97E2872D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 b5aae3788c52acdaebf13bcf4f10967be71a6656d2bb6b73420e8f1e2f579a6f
MD5 e6d4dd75481474f8d3a0fd7e8ada490b
SHA1 92a467bf01e9989808a9631639fbd69c716ea153
SHA512 08bae1024f0aeafccc2dbf8307b53f5a5982ab9d282fb0b746b1d6e875ca2d88f4fed42dfa7fa66dc715995890b3e40a7fcb709d206012ebbb612e3d975d9e0b
SSDEEP 192:Drs7JRHboaMbyNUebdJY+RO117DtOA7NPNaP2bLaerY+8A7kTjh6ofCM2sJHbq:Drs7JRHboaMbyNUebdJY+RO117DtOA7r
TLSH
T188327DB7C3D8C52DCC5262F5AB156F1BCE1D191852283C2BC9D8EF8B97E2872D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 7327cc4f92e295b9e8df4130f8cdee00f02abe61229b241eb851b801585f6aa6
MD5 691cb4dfa54b9a95d92f2901262ac6f3
SHA1 d8466ef6470d073674d9d9c53f22fd1cdc44b81e
SHA512 53869c3dc05dae56199e57687683b006e114bc7223058c98151ad419212c488391782636e32f521ec426eca8205566e89b010548a8c3a120fdea9718a869c6fb
SSDEEP 192:vRScBzoaXKWv7FAPRp2th59XxHsb+WNnZe4/s2qwqev2qDE4+VyIsnAUgR:vRSmzo1isXAfw0L2N2qDE42R
TLSH
T12E42C76ABE1069376DCBD229F9627B57D7F6102221E52E80EBFC5A3C11E75CC2227407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 aed7ca7067388819f8438da013f58e9a631dea5063490aa107055d8511578ac5
MD5 0335952fa952ddd4738b2c29281b6850
SHA1 4f1f67efd476c611f9cf2025ec3bde08c24894ef
SHA512 e19cd402cd502f22a8c7331b5a7d2f8d5afd4909d2ff05b3d86af9c52e2332f14dc48c953cf361a6f87245cffafe8738c462de39710822ba53660d6c8ec2b1da
SSDEEP 192:vRScBzoJXK4v7LpPRp1h3h7d9XxHsb+WNTxZe4/s2lwqev2qDEg+VyIsnAUgE:vRSmzoMkxXnfwyL2Q2qDEg2E
TLSH
T1EB52E86AB9106A376DCBD269F9527B57D7F6102221E02D90FBFC9A3C01EB6CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cbf38d8ce6fd1bc8d7c7a7f824c0f4ca7a377d92b893a61a51b4b10f357f9d2b
MD5 6f6812a8db88fc8a0770d26f4db49112
SHA1 1b48e24241947f5234a19305e6b516a90831933a
SHA512 28400ec7198627475f1b1c1d5ccd7d6add0fd82a27afbe217e0121591e6349c21d678080cbb4d993fa96a9f5c56693cb58e7cb38a7b986cce550930ba8275d5c
SSDEEP 192:vRScBzoaXKrv7FAPRp2th7x9XxHsb+WNTxZe4/s2qwqev2qDE4+VyIsnAUge:vRSmzo1TsXofwyL2N2qDE42e
TLSH
T1CB42C66ABE106A3B6DCBD229F9617B57D7F6102221D52E80EBFC993C01DB5CC2227407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f65c9e0aa627e71da008644e5b87fc0d92600e42d83a435518a287f2321a8ce8
MD5 c24d6618deb1082489a2870a7d2cc112
SHA1 2828a0113d46b468a2b00484be8305465d7111dd
SHA512 139332c4b331c2173ced62c297e180c6a9da1e27bd8d33b70ae6c81f40c11d9d00217f6d111cdcb7fc94f564940f18207889a45a0d48d21d50aac80ba2d94bf4
SSDEEP 192:vRScBzoaXKSv7FAPRp2h3h7G9XxHsb+WNTxZe4/s2xwqev2qDE8+VyIsnAUgE:vRSmzo1+sXhfwyL2E2qDE82E
TLSH
T1F652D76AB9106A376DCBD229F9627B57D7F6102220D52E90EBFC993C11EB6CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f522458df18d72b076dcc44fe97825f4d177b5f1d804b21c1205731d0763f3a9
MD5 d71b9d2ea7cca14ac41866b91584457d
SHA1 5bcaeea4b6c99207c27f97607e989a5adcab72e4
SHA512 7ceddd9dfdfc2f69b26eb295c5cd0718b9e0bacbd81a40be8d4d60b81f235be39da6dbab1c36ef4052f80bfecfb8e335e63a7783892f44840cada39053e4ce0d
SSDEEP 192:vRScBzoaXK4v7LAPRp2h3h7x9XxHsb+WNTxZe4/s2xwqev2qDE8+VyIsnAUgE:vRSmzo1kSX+fwyL2E2qDE82E
TLSH
T18F52D76ABD106A376DCBD229F9627B57D7F6102220D52E90EBFC993C11EB6CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 b46e3088047d6c40941a958009137edc29c7e5f1362d01c080358671d10f550e
MD5 ad3d641651e0027dc1636388dd55cc44
SHA1 a9ceb971698ffd4598dcea3b3125ee48fcc96204
SHA512 d9d83e7e288f4b5d14f1618ebb06c4b2b28dc77eea97d0a5d858aa2a1e6d70a43d84141d2d7be86323a16daae8bca22ee0109e3d2664873f8054c181b03a15cb
SSDEEP 192:e294K6vX7KxkXqK4I40pUZNCgVLHrKHfFKslEClTXzKD/cb+ErUkKN9w6jBTK8VT:/9j0X7KxkXqKf/pUZNCgVLH2HfgslNTu
TLSH
T13532D827A48D9A3F4FD8D519DC026F8BADF5029672780D2497FF5D0403A978E114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\2c3b3cfd-4c94-4d30-91ce-90b1c5556480\index-dir\the-real-index
Size 72B
SHA256 9971a56a52a2827894014f97b396221c40a004b5f1584553946f17eabe6e216f
MD5 f208fef1e63f5e41ecc6e39053a4e891
SHA1 a154e8fdf72ba8c6f84463928ada3fc076b2b8e5
SHA512 3e29f3b7a5418225dad24f8e250344383ada52fa85ba345d3dac0f1a81a2802d36789a21161392344dea481c5de769ee130e56a073595f6f09df6273fd2fc8b5
TLSH
T129A0021407E00A3AD4AC0B73108D11456AB59A2DA1221A264998D8A8CAE11D58B0150A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e749.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\2c3b3cfd-4c94-4d30-91ce-90b1c5556480\index-dir\the-real-index~RFe59e749.TMP
Size 48B
SHA256 fe90d7b8304a5449a3e9d056a422f82578b48161e16b5b2e55434a23b1ffff6e
MD5 a4427408845cd74ce330f76c499bc0dd
SHA1 7d4fdc0a2bb9e55ed59f832e7925d5a660c1275a
SHA512 56743f4a480b6a482a67aaae8d7d237163e247b6ecca1316376e0d4b5d24a8a8275e6e240e8585ea894b6eb0575e7490ee981f2b61fbb66d2291ba79273c8ebf
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\index.txt
Size 135B
SHA256 e4467f538b069dfb985329e12040f2933371cd3c39900bba85c6e80a37d5c5a3
MD5 b9f248363b14079222d7e78392c4d640
SHA1 5bb99681f1ece8f3746ba239a31fd9e659563862
SHA512 332f16bae64976c0cc2c442570f3ed943811fc62a65e0a09733013c9bbe10f7ce9cee160ad39e97bd290f7782cf44c2e3b0a9c3e71cbfa5461e4a36ddd0fc228
TLSH
T1CEC02B9F047553010D411738A450000E827EE44F0C21440CF4C208943B1D41830C38C0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59e788.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\index.txt~RFe59e788.TMP
Size 141B
SHA256 7212ca646732b8f086d08f866c63d2a5f1b10352840ebf5c714167d9f084491c
MD5 0ffb13adce1d563a388ac80f68b16aa1
SHA1 111d11590fc35b31cc597f6183ab6ac0ff0e6fd3
SHA512 b76f0830b2f695f3b0c52f0ab4e0579c1bd2ec59658b5584c12e780c61c10809b1ed491cbcb35aa7a77130da524ecb9766e442b6613f6fc05338e18e87d2e0a1
TLSH
T1C6C02B9F043507011E450529E470800F427EEC4E0C15840CF0C338943B3D01462828C0
MD5 SHA1 SHA512 TLSH

Submit Download

f1cdccba37924bda_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
Size 8KB
SHA256 0ec718736789326f0bf578eefa0c6237cd9098d28ad9860643a6e0dd165e6ada
MD5 d421085f0431b1b7f469c4bf3c09b6f9
SHA1 f7e5105821f475a87e77c5973a13679ab0d98f11
SHA512 3badd394f85b725b25c66ae4b49209747f624b9b333c75ac7f5a7b0d7abba293642c32a7f51bb04a326cff8a19ee67d352cc2939398f22fd9f7052598a22d5e9
SSDEEP 192:57tHQ09byzOGKOz0xoYbKqbxpd3sVn2D13rh+FqeR:rL9bqOGXK3sVnu3rh+FjR
TLSH
T16312F9C6AF7CD4B70BB61178E945E4573C7EB0B36F8BE0D3E18D0A38A04158796ADA05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1cdccba37924bda_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1
Size 8KB
SHA256 19d3750c17c2ae2d7db9a71b28b6ae84877d9c4d1d995e5584447c4cd21e1f49
MD5 aa8066fb1136ff4b66901b558cc1001c
SHA1 04a883476d7cb4ca19e0d3992319c56397fccf9a
SHA512 12bc485571cf692ae2e552bdbc770f5142665060ef3f8e1244a13c060302ec0e1768a436e580b8c5517b0365da11656bf57651cfd6c653b6ab4df154420dc530
SSDEEP 192:PoLwpaS4zquekXgj0AzsNewktmCYGd2letCAtOVZDoS/:Weavq9kwAAzsNpAPYGdMOCAw7c
TLSH
T1471293C283717937DE7713FE029749A673358000BF87E32D65A323749C227F6A89A51A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2ad62ea3588d0059a23d5a696bbddf6ac5155d05a8619ea57f0b1800f6577802
MD5 b54669191e3f5102be600040f104c2df
SHA1 a7d3dd112476c5f9fc62ec9ea1de83e82ddec5f7
SHA512 bb6b044ac6e8d7bd6ee45826c386aee32ca7190637b8c816da366421724d02b680b8e3ff2ed8c4877e01db7e83043a65d68ebce91b81ee73ff0221d81e9dd2e9
TLSH
T1F2B01215844A5584C87981702104105521525F7580552746C2E09599DC832F01221550
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 6ee33a1b7ad1c590ce8865483cbabeebfbc315184df6c5b6387490e0a7d10c47
MD5 35de8e7027f80aa27e0e7bd35100b5ad
SHA1 8d417d30f4d9b63a45da5250d10045acc3a9e7b8
SHA512 ebcd6055ead4dfc4b776bbd95260ce95099d2cbc5cadf4aa81d1625ee526ae765b17a3e5b60a67ac52bf09091f9d479a194316d9b5015c0741bfcdb2f7ea5a78
TLSH
T1B9B0222E30C80CC3CE0803F8B0C8C80C32332C803AC3C2A2B0BC802A8C33A820202E80
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 a84db5d3197415d2ca4a3a59402f19c478ea19fe43cc32e831e876bd8bafbdad
MD5 fa5f3545d929d2348cfb2e1fc558e260
SHA1 78ede5e80f8c37f582a86eea66c205a5e821946e
SHA512 97a22f5cff10ca8461bd967b4be00ffbaea8f3e6269548f71192e15cc9b92ea1c80541d7b4ea40a4f73c3a02f088dc943fd00e882477bc9420ab673ce26d0b7c
TLSH
T12CA0222002C00CA0EC0803B02820208E230388003A000B03C0E308028CCF8C028823C0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598fd2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe598fd2.TMP
Size 48B
SHA256 06bb47dd6222427f93de52dd69cfb2c2108ec7791fb91c9c0cd70c665a388db0
MD5 58f0210d6e0f700a2070daed5fdb0f69
SHA1 f6869aa2fbfd5a2b222425f270b175aab68d4ad1
SHA512 575d4096208f1b5361a61321d997e451f22ac6a48f10f9c22960b77d6b203250844cda036e3f3c0a2d743b66f9f0575abcfc3f48827f36ec090e5b0ad583eada
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\19a37ea2-0080-4574-8a1e-282adb2ec13a\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 154B
SHA256 36d6dd6c52074f9aec864053a5a19cd8f214cb6519fbd5297e477a9841c5e734
MD5 e6247fe3d2cbac2659b28ce57bae9005
SHA1 a41d47b1321a4047f5aaaeac94872b55e83c2eb2
SHA512 c6bac68cb0693c9f99dfaa633d82a45e69bea1bbf4633a2599f6032c22a5e424f7d3c78cc4f8ec02f9a4e2720d8ac5f01858639a7d06a9b6860694357a186e68
TLSH
T1CDC08CEB1410C14E0B30AAD86028320ED70B820D4CD0CDF8E888400620788128803621
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 80B
SHA256 1cdc52aa415ec6f480351f856ccbd614d00a9cc5e1a6719fa5a8d8a856d49a96
MD5 791fc4bf11ec8883966aee99b818c7c5
SHA1 a58ba2ff0d544005de5d40416d789457981888a4
SHA512 4f6cfb3c3125e5cbb0f6fe9d9e4546006db8195f031a493e1020dbe7c880038543baee5ba43c2e0aa03f3b91e7d124bf9a8aa1d82b4091c64ba231817cdfb057
TLSH
T1D2A002FB0C14818A0F30A8ECA134B21EE14FD18D8DE0CDF4E5889457313DA321403950
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 161B
SHA256 281813f9792b1f1fbaa6476a79b2c8bc770f1592e6ed53bce95d992311b498cc
MD5 4fff22d5efa15a1b7607cc408ee531c8
SHA1 bea8350ccf39a349ea40d6d3610528422394bfe3
SHA512 b71937592c7af3ce2a56c9c9e84e23b41916c30e7b3f902ad78ad0a229bdf94c254a308bc5f46281481adf56870db4e18636e06a7d86d63a980cf6aae099bea9
TLSH
T15AC08CEB1420C14A0B3169D4A028324ED61B8D1E4CC0CDF8E888B00230788238802621
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59efd5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe59efd5.TMP
Size 164B
SHA256 d4662cab9282e787569cd3862edf427deaf94878b635a7c31435c5543a43c0f4
MD5 477f74bd716f0ae31c5b0c279d2d85d4
SHA1 0f5aa723edfa6b657bda3e8c10316155811276fd
SHA512 2d101b4bfef6bda4f010e886ec3ee04df1a0311d2a9cde5f687ac3132d1ad676e21c7e65303ace451da43e14d41c60f54429707002edd46689dd2d64387b9ffb
TLSH
T101C08CE74636A0060B20A4E49038220DC08BEC4E8ED1D8F9C944B093707C222D002A18
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 2f53e85271a43689c6c19701ff422747220ad5865d389022e117ab929823db0d
MD5 b16d03dcc92b48e813d9073dddefe39d
SHA1 d175b2aecf6bffc4abe10120f2caa3620f74b43a
SHA512 9b9ba7243d9658e86285967d37cdd9c121722ba8d3642891939d1c1661dc117612b10d38d5d0306936a056f2a551ff560ddb6b9c893a9d86f8995d28cb4d2d58
SSDEEP 3072:USDjQtqKuFFj6jyjyHeWxpztLNh2mVlMb/lJxR1JfsnkYnR5:UUjQt6T+jTeWbztLzx3GdnnJfIn7
TLSH
T100C312127409CD1610333339823693650F71B47A5AE5BC7C60D92B7D9A96FE88FF083A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 d969e155c97d53a98488f1ef0c294fdde5429f0599459407f66a92bb532bed78
MD5 2121272743619243ef2a6ed994448b6a
SHA1 97f8da063a4f8f7852a83cdc58396ac0fd82193f
SHA512 405924dcc48badda3945d5cfc684147da91f6a9055f5b66f30a49564330720d4115f2beeaea9a449aa173490f20b2e6ead47553a1cd01221eda4920e0c8d71d5
SSDEEP 96:xC0d+r2io+TJ/E0f6m934zM4RDotok5amDFB6nGyvn0b4T8pybJv4a:xC0ITo+TQ0InDUDx7PPb4T8pybl
TLSH
T13AA10935E0285D774476D486F1622A43CFB9706BE972AFE0EAD91E0D14F70EC1352A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 125KB
SHA256 433190d86ae9f2a87faceab2862b8e2d3b73e603eefbce4c2da1a71f0eb5f3b5
MD5 960feb4696d92a631d9cd22a24003f74
SHA1 92867db8829873d5a2b14664eb8aaf9fab89b155
SHA512 fd60a0a2ce6165d7068be69dee2de1f89f455b35181c8315c5e18f7408af03d489648e846a6068039be8066e6ae1e74af22aec3978236db28b1b875457bc4e65
SSDEEP 3072:kDjQtqKuFFj6jyjyHeWxpztLNh2mVlMb/lJxR1JfsnkYnR5:GjQt6T+jTeWbztLzx3GdnnJfIn7
TLSH
T1B4C3023374099C5614333239812693610FB1F46B5FA5BC7C64992B6D9A5AFE8CFE0C3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 125KB
SHA256 3a6283d7807d33ad687d8beee289248374f61e9e1cdcbc9febad09a2aa4e737a
MD5 cd82fb89f4df66b02382c9efae7559fc
SHA1 d9194b1ada735913b6fcca0f15e214aed34276d5
SHA512 43121701126915a7eaebe0607c07af9642fc4d5c9afc481d6602807e0fd3aed8dadba9bb8ce70dc24df2cbf176c15245e5222aa7ad06fe8e93a9759d2da3ac08
SSDEEP 3072:4DjQtqKuFFj6jyjyHeWxpztLNh2mVlMb/lJxR1JfsnkYnR5:KjQt6T+jTeWbztLzx3GdnnJfIn7
TLSH
T13BC3023374099C5614333239822693610FB1F46B5FA5BC7C64992B6D9A56FE8CFE0C3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 39c176617e8b481c9faadc018d01a2109ea275ae20cbd0ef0d27f33f741db569
MD5 e3dd0477e6b745093000b0cb1b2881ca
SHA1 9ed37256a0890b5e496eebb1b3e93161e288deb1
SHA512 d70165d3e4afb7f4c627c38dab824b10c509dd29e365415f5c67a426a1fa9e25a7127fa49bb1f60a7dd7b00a2166e54d5fc56c87c681d05b42ec73b506d7cb92
SSDEEP 3072:pSDjQtqKuFFj6jyjyHeWxpztLNh2mVlMb/lJxR1JfsnkYnR5:pUjQt6T+jTeWbztLzx3GdnnJfIn7
TLSH
T146C312167409DD1610333339823693650F71B47A5AE5BC7C60D92B7D9A96FE88FF083A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5108_1392819396\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download