222ba62d2badd8569d74b4e567f63e1f5de779b44ee4f83afa65469890454f12

Analysis

user interaction
yes
max time kernel
90s
max time network
91s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 19:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.txt
Size 105B
Sample260808-ya35cstcpc
SHA256 222ba62d2badd8569d74b4e567f63e1f5de779b44ee4f83afa65469890454f12
MD5 58aa66a510041e01fe544bd103ffd464
SHA1 1cc610ed9820a37317354fa7188b445cf6bb3470
SHA512 c1cf407b66887c4a242bcb56fcfbfbc117765d2fb580747203a4a4c0dab23d090c9fddb064b816596a925a0fb1c4eb2ab61a5627345e4fe67683a79c623710e5
TLSH
T159B0123695283470AE6C01F4C6B581049B402040B4DEDF51FA78E338440C7AFB5C0A8B
MD5 SHA1 SHA512 TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
33	discord.com
144	discord.com
32	discord.com

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnkgmjnbphhjkiiedlfhcjaaomhffhp\1.3.0_0\manifest.json	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3336	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306913784225573"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{E106FFF2-5637-45A4-92C1-4CF68F1E0717}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe
Token: SeShutdownPrivilege	860	chrome.exe
Token: SeCreatePagefilePrivilege	860	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe
860	chrome.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 860 wrote to memory of 4460	860	chrome.exe	92
PID 860 wrote to memory of 4876	860	chrome.exe	93
PID 860 wrote to memory of 4876	860	chrome.exe	93
PID 860 wrote to memory of 3336	860	chrome.exe	94
PID 860 wrote to memory of 1104	860	chrome.exe	95
PID 860 wrote to memory of 1104	860	chrome.exe	95
PID 860 wrote to memory of 1864	860	chrome.exe	98
PID 860 wrote to memory of 4024	860	chrome.exe	99
PID 860 wrote to memory of 1864	860	chrome.exe	98
PID 860 wrote to memory of 4024	860	chrome.exe	99
PID 860 wrote to memory of 64	860	chrome.exe	100
PID 860 wrote to memory of 64	860	chrome.exe	100
PID 860 wrote to memory of 4320	860	chrome.exe	101
PID 860 wrote to memory of 4320	860	chrome.exe	101
PID 860 wrote to memory of 1092	860	chrome.exe	102
PID 860 wrote to memory of 1092	860	chrome.exe	102
PID 860 wrote to memory of 2588	860	chrome.exe	103
PID 860 wrote to memory of 2588	860	chrome.exe	103
PID 860 wrote to memory of 3928	860	chrome.exe	106
PID 860 wrote to memory of 3928	860	chrome.exe	106
PID 860 wrote to memory of 696	860	chrome.exe	107
PID 860 wrote to memory of 696	860	chrome.exe	107
PID 860 wrote to memory of 2884	860	chrome.exe	108
PID 860 wrote to memory of 4432	860	chrome.exe	109
PID 860 wrote to memory of 2884	860	chrome.exe	108
PID 860 wrote to memory of 4188	860	chrome.exe	110
PID 860 wrote to memory of 4188	860	chrome.exe	110
PID 860 wrote to memory of 3388	860	chrome.exe	111
PID 860 wrote to memory of 3388	860	chrome.exe	111
PID 860 wrote to memory of 3776	860	chrome.exe	112
PID 860 wrote to memory of 452	860	chrome.exe	114
PID 860 wrote to memory of 452	860	chrome.exe	114
PID 860 wrote to memory of 2616	860	chrome.exe	115
PID 860 wrote to memory of 3440	860	chrome.exe	116
PID 860 wrote to memory of 3440	860	chrome.exe	116
PID 860 wrote to memory of 4360	860	chrome.exe	117
PID 860 wrote to memory of 4360	860	chrome.exe	117
PID 860 wrote to memory of 2728	860	chrome.exe	118
PID 860 wrote to memory of 2728	860	chrome.exe	118
PID 860 wrote to memory of 3368	860	chrome.exe	119
PID 860 wrote to memory of 3368	860	chrome.exe	119
PID 860 wrote to memory of 2396	860	chrome.exe	122
PID 860 wrote to memory of 2396	860	chrome.exe	122
PID 860 wrote to memory of 976	860	chrome.exe	123
PID 860 wrote to memory of 836	860	chrome.exe	124
PID 860 wrote to memory of 4968	860	chrome.exe	125
PID 860 wrote to memory of 1864	860	chrome.exe	126
PID 860 wrote to memory of 1864	860	chrome.exe	126
PID 860 wrote to memory of 4344	860	chrome.exe	127
PID 860 wrote to memory of 4344	860	chrome.exe	127
PID 860 wrote to memory of 6076	860	chrome.exe	128
PID 860 wrote to memory of 6076	860	chrome.exe	128

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\.txt
1⤵
PID:4356

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops Chrome extension
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc30acc728,0x7ffc30acc734,0x7ffc30acc740
  2⤵
  PID:4460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1728,i,16816038611600460761,12668331636197053338,262144 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,9893790793124688866,1820518872683149711,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,3515314819476964611,9700820554421343260,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,7275986870925574664,3448310676992054783,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3448,i,18213615567550494900,3125127603851327794,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4464,i,3129257199848297719,5042955870874691882,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:2
  2⤵
  PID:64
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4648,i,8629226271883958075,139331345932432699,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4940,i,3227092853361074586,1502308366637628682,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4760,i,14674335195959101852,11893455845611168688,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4712,i,12445691907464349429,9374436167075198759,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5396,i,5039623556337935948,8239013448850452809,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3976,i,10393660857991216971,10610042230135434368,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4756,i,4201098614131331094,132561768677438304,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4836 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3584,i,7160345402681025907,12116056860967053086,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4648,i,8271365562694019567,12881418119016316037,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6292,i,4219201834489577845,2718099036547957425,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6332,i,15941976250102255945,11066572948022235382,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  PID:452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6440,i,5673016009099923791,18347124887079084639,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6360,i,14830289830933222069,16226908109130950961,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6440,i,3841430675848902004,12997682465000976823,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6448,i,15996804286998787567,18087650120852080188,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6452,i,7850607004657258027,1625461089310196207,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5608 /prefetch:2
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5320,i,17043717973025704559,18049314242637350049,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5112,i,2032019773341854040,8649685050861499853,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,3038810453253572724,2584466582535577401,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,4623964151497340915,15238337518673773028,524288 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5592,i,1254018514775810389,4327784923093053224,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5628,i,4785304205371988575,6148020587860427015,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6672 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6868,i,532093307019418053,9045574834539741209,2097152 --field-trial-handle=1980,i,4384790395409232155,8216200301143378406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:6076

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2756

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 32f615c1cdeb04240c93b47d8af9cef18ad7c810c28ad2e0b6317f58fdd697d5
MD5 4236700661a4b6208ae3f7999491da2d
SHA1 f3603ced1283ee4e6bc4894f6bfb6b4651bfdcd1
SHA512 627bb640d554d78972448d34f73607017a16aa9e6fd005be5c3b9306175912ca895b2dcebd0e22d68c14f62e1f9b7f411d7fcc81a99a2399db48a0440507b654
TLSH
T157E02BA9CD21BC2718FD071C90140649E750135B2B91590F3A3D510DCFB062681C6CAC
MD5 SHA1 SHA512 TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 405KB
SHA256 413b54b702b9c57672bc7cf5b25b59002a309420b22029ed43b88b7c87ec7f22
MD5 6fc2c5394bc1d70d93af1f737f4a39b0
SHA1 75bd2dc9714a2b5812be70e70bcdb1688da964ec
SHA512 8bf8f4aecd424fc91bba720ebe78bd88aa4fc625fb5d05649ef4daebe489db50e0150dc8e0e980fe79206932554f1329470a055e618aeb28eb265e60a374f1a3
SSDEEP 6144:2b4PfKLuC134Xff+i5hHiJeFP2UbexO+Aahuz/sYlmjPBs1UCcF9523h30qOEXqF:2bhLue34Xd6sTbdahK/se0J95Q30Ac
TLSH
T1D29423DFB1EC5DD67DB8B325D292B7F04A62E4368C09AFC1D630AEA8514719DCF09062
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 aac0d67eb51eed67569cffb853ac4553fac92588a634328514e8075c556f97cf
MD5 86079e1a0562a272fbd66fc8b26d21cb
SHA1 6ca013b2bd779356b54af99a4a1c6767c9b05cf5
SHA512 a6f8767f767ec72807a70a834b841c45e5843ccc88740a8d4bce41c120839ac79d82dbaa6e27c3e0a9aca5f2653baf4c1fc25ac290e54958c330658c75e7a286
SSDEEP 192:b58Wx5SYXnlbuemcSpnQulqYdEVONYXiBW1B/75O:2Wx5rcevSpLqINrg/Q
TLSH
T17452D57A39D220F4C7F62A7784F6C764F23DC40940AB8DC52B5DAE301977B29CA71498
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir860_1363055736\CRX_INSTALL\LICENSE
Size 1KB
SHA256 1394d42ecd443b28cc79985bee3b5d11467b3d17a5e3d35cc3ae1f16568874db
MD5 44f7e387ae637c12b24ffb0dea352ae8
SHA1 aec4d316c9ab4c6d401b1af65a0245aa95a6b3ac
SHA512 b17c9eacdb7cd8119f98e00b8fa2db773832363bd090518597117d51977ad6337349ddc6a4b76e97becaa42a6724d0e560f8fa54b6e1e667f46ab9a9472af11a
TLSH
T1B311422E725147621C9A13605578A8D5F22BB25A7A9F2A84246EF245232A06CC5FB844
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir860_1363055736\CRX_INSTALL\_metadata\verified_contents.json
Size 2KB
SHA256 d2ff80a390f8d05eba9f25ba730f856234abb26c190df2832ea4f26cce35773a
MD5 5ecf0222c4a142b5251a42bfe6842792
SHA1 94927a978d6afe93c4f9ed189776ca69fb0ae1c5
SHA512 1ddb2a1924cb254e1707d20b8bfd050d7f20671f17efd270baf67f5ffd26828ef75a26782a4c73df5f4d2e7a5611bc2c286b5e6b5291940fc05365ff09de5671
TLSH
T16D41E8B0D87AB18D6814307429B67B325B39D0E9B2D9341F52C39C3DD4EB115A6B70ED
MD5 SHA1 SHA512 TLSH

Submit Download

icon128.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir860_1363055736\CRX_INSTALL\icons\icon128.png
Size 18KB
SHA256 e637e4ef94c30730eb3401d90b5601004c1f5f476b831a30f08546d4012ac770
MD5 42f76443a602c62b4a10097437c5f1a0
SHA1 28d2308ae406fdf93d5db7fd8e901dbdc5140cfb
SHA512 2315aeaf93eb4e816dcef7146210ec3495ff6cc19f8f299869e9901d3f7ee4292f0189afcd360eb2b728936989d3048f864e2eb8be521c77bf2fc7f9d750b11c
SSDEEP 384:XYcV3laQPQKOjSMcg6F/BwHD0PypZKHiwcsTrfh2BLgnSg53j:XYcV1f4xr6GpSdcurfh2BLgrt
TLSH
T15E92E1E1474C024B47FE630ADFC4EB79A48B503496FAEDA4C2BB5D39871403C6595AD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon32.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir860_1363055736\CRX_INSTALL\icons\icon32.png
Size 2KB
SHA256 8e491945f0b163f11c1c52fcbdc8c36bba3a8210d8da7d1757e6b756e28acecb
MD5 9275ff7b1df10ada93f23a1b2b71f699
SHA1 b8f7d3ded8822eb94c1716b576bd195a6aa1e78b
SHA512 e74856651c320ee2cbd13e45dbd6279bd146c89e9f891b2ae0045d71a6917d377bb3008d86737afb8201d1032f8d3d84ea039013bad6664c098ea957d6e81b9f
TLSH
T15C413AC77167319A6211822A24B025DFE4A38555DA7233CAC3DA824CE6F1D3F43CD6D0
MD5 SHA1 SHA512 TLSH

Submit Download

icon48.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir860_1363055736\CRX_INSTALL\icons\icon48.png
Size 3KB
SHA256 5b17b934e930ffcf3f89432b773a05121e7ea8b988b09591272d8e2dfea5b644
MD5 ec9c51c4f55e105f3db2b38ff9f2a9dc
SHA1 732d660aabae5d54161d510d62dfe93e6d3806c7
SHA512 e853ec1f595ce9696def237716605a323ae8b0e6e9ce28da8d7a1b11e16786090875c29e9afe6065fffc05649e54abf2a759c0a10baf3fd9cbda915b25c6d4b9
TLSH
T162815CB30E2756056C9B606172C471CBAC5BB58DABB78B5DE25BC3A0273C58A382F544
MD5 SHA1 SHA512 TLSH

Submit Download

popup.css

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir860_1363055736\CRX_INSTALL\popup.css
Size 26KB
SHA256 502d14588529d7e7c233d3a41d0e5aa89c5f45968019314b3aa15fe1c2ea8fbd
MD5 6d21841b9afeeb8aea1f0f238ef75de8
SHA1 682df5dae828f033bda66cf1ead1a9bdae33fd8a
SHA512 eb7f47dcdc029be41247d9441e880836a05897fd36097d032363353e53cbabd7a1837b7e45a519dc4b86ad2a692f3c4b4cd1edec9b6e950be1e130ca3495c74b
SSDEEP 768:mL5IUCJI8utOUJn6rNLENlNAdhl40BFFNoCimFLgv8mhCudX7Fzv8c/dA79pbkrE:maLv2M3oCHGks+malym
TLSH
T194C2652663031814B4176B657BFBDB492368B007D606D93CBDD920D8CF992E8EA26FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

popup.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir860_1363055736\CRX_INSTALL\popup.js
Size 48KB
SHA256 64382c78dd57a6f8cf8d47ea2a0880e4d84b8a657e1e4a8b94dcee9539b06cd9
MD5 721620c73164357b49b6ea3862eaf951
SHA1 7dcc93aacb9efcc86b386bf91ef597523f7146e0
SHA512 6d54a8f6d6b891ee933b0d5af9f6fd4f07720e24926f3d7a82b3f4d314ba23d042b1be00af8e6c38a1832cdbcc390e519d1152f36cc36b9950f4b2abf302bbe4
SSDEEP 768:kFjrIgWiztfFOKEdzGOkRq4ait10YUuwjK/bOHb:kBrIgjRfFyZkRq4zfwjKiHb
TLSH
T11123642A25B3113585632C799BFBAD1536213003E149CE147DADDAC81FB2E94EDB37E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnkgmjnbphhjkiiedlfhcjaaomhffhp\1.3.0_0\icons\icon16.png
Size 688B
SHA256 535bebd40025fcebf2f86782e2274f5ed3cf66f8eb452817f3fa99000296baef
MD5 10f79657a8b3e868e08a8b90108495aa
SHA1 e9512045aa1521d4459653f3d20470d90605d403
SHA512 32dc41d8e6b88f379c750409e716dfdf24d9c36cc60f1fec7e327b6c57b63b4e52d9cfdc6fbc065f6245808548041188dbdd2ab4893a47654deb32e6a563e7c0
TLSH
T1520144CF422C0434FF995A96A2C4468A352457BBD960E2DB17B6D1288C78688566D506
MD5 SHA1 SHA512 TLSH

Submit Download

27384f6f-5c82-485e-a853-0cb9ad4c0b45.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\27384f6f-5c82-485e-a853-0cb9ad4c0b45.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 f720e8947a0fc0167e0978b50ce064342a4741463e0540143c2095ae95392c27
MD5 b58b822d36ac65667cb8180a1174925c
SHA1 fa00bfeae9dd2a22a81c72ec54965ffa939b975f
SHA512 c2907c23ba1c5883b975172ae395794f68d15d8334702a432445f20ab6cb23c11486d604e493384fcbcaaaecba0f017dcafc6fb9511817c0bfaeafb7903fc316
SSDEEP 384:DvMYrIxrjekpipZwJhNa5Xt/rYhBIivAAM3/bhaE8LA6/emHcgrqRiUnrzx:NoUF
TLSH
T15242ADF7C3D8862DC91156F49B257F1ECE290928432C3C2BC8E8AE5F93E6571E24165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 68a246459622a83f112dee09af146d1a0d05f48afb5122e7a75f0d70bab062aa
MD5 db3f1a68c29099a25fff95cab1ba7bbc
SHA1 230f16fd205c3c30b0bf192e26c0b4a717a02af9
SHA512 63ae533fddd43b97ade40d755d9f44ccd4c6e2a1e6acec4fe67da6b434a16f8c29e5dec9c2a3b0392d42eadde8d3ed56740d1f337aec99d83172dea943598a4e
TLSH
T13C416AB3C7D8857D891052F4BB156E1FCD2D0E24535C3D5AC8D8AE0F63E68B5E20058E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 59698b023541ac94e6896f282ace6fe4be9237916c178386ed26b612be21856b
MD5 73d81465e89fcaea7bb6dd3239073989
SHA1 bc9241af7c596fffa28aae51185fe4d6819aca44
SHA512 315743b69ea17ced31c39188800a0575c2c6420a70743bafa7d23c789f69dd9849cd3e6b2ace70fa029846c6bddb1be7bd6726c6bb86cb90dae322f4b8902512
TLSH
T150416AB3C7D8857D891052F4BA156E1FCD2D0E24535C3D5AC8D8AE0F63E68B5E20058E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5bfcdbea51c1a6c9f1c7c01a0f5393247e9f5e6dea9952e773c7cf71a3351f58
MD5 7d1f62901e168d3439b9d92fed7ed1b7
SHA1 71255ac0c8f27fd16c56be3cd138b1c45be7ac8f
SHA512 b56c5fc56cee506353407d0103120c82e6bc1041c0470dbd5db68d28d9513b684aafb7cf5fbcb6bf6ff73c3481ca0fab615df8ad2981b22429aac10314f98804
SSDEEP 192:VxRXrcBz9rqkRkl+v77wAPRp22m4cK9wHsb+WNnf+dzA+Qn2k2Skw7WVyIsnAUge:jRXrmz906fBX/FKwGq52LSCe
TLSH
T1A552F72EBD14693B5CCBC229FD62BB57E3F1202161842E94E6FC892C25DB9CC3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0554d5ac7527b368a6ca7153af79143f89d2ef62191b69f7d327d88fa889b6df
MD5 8f99da3a19fc51bb966a2066a5f87345
SHA1 542d3198386b61d9139c20f42ccd5030d79d6d62
SHA512 6c3da5f65b79560059b2cbfea0bf28d6c100f80e877094704a72a70357143e38de7d9ddfbfc836fb85d394a6cc8cd297fe4e0dfdb3b98d8d2f3e501deca055b5
SSDEEP 192:VxRXrcBz9rsIRkl+v77wAPRp22Om4cf19wHsb+WNROf+dzA+Qn2k2Skw7WVyIsnH:jRXrmz9gv6fBX/D1Kwpq52LSC8
TLSH
T17952F82FBD14297B5CDAC229F962B75BE7F1202161941E94E6FCC92C24EB9CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d0e4473a2045097ac7f8fee70f64c4ccf7197794ce2384667dc320694a663157
MD5 192b9bcceff0c74139b2e0dca146a687
SHA1 ac4da5023a4c6f3072ade1ec1ace8c9423487f2f
SHA512 284c39f1b7a40cc5d759599987eb9efb19caa07f0c6aae2954804030e9a2c6bc137f84debf9608b05a80a9eac3299e5d3ba128337138bf9e1b65da21ae7a1671
SSDEEP 192:VxRXrcBz9MsIRkl+v77wAPRp22Om4Zf19wHsb+WNr6Of+dzA+Qn2P2Skw7NVyIsB:jRXrmz95v6fBX/S1KwMq52OSPe
TLSH
T13E52F86BB914297B6CDAD229F922B75BE3F1202161841E94E6FCCD2C25DB9CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\4077f3fb-bb69-453f-9cc8-b21f139e14fc\index-dir\the-real-index
Size 72B
SHA256 d2e23bf212183fa0219a5d4528ba1b71a770dd4fac1cebb17511df02e31b385c
MD5 55cfa136c52775f21f8867c4805f45aa
SHA1 89e1cf77cd71c7db7cd955c38ae7caf7ffd620d5
SHA512 f160c6bfcece7324ebe04310545dcf9ddea5689328bdaba57462064cc33c3190cf755704801273e47981490cdd4ce858ebef2206aea451b1703b89991b466d76
TLSH
T1B9A0026891845116D1692A711573455036214A115942026263A10149ACA42844A12010
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fcf9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\4077f3fb-bb69-453f-9cc8-b21f139e14fc\index-dir\the-real-index~RFe58fcf9.TMP
Size 48B
SHA256 979b71084b704b2356bd72cb50829bcd00d7c2fd94d3281233decf186b76267e
MD5 61cd5f756a0aad858bc4f0e4ce4bcb0e
SHA1 b1c93ef8e10ab497f896f0a6a76a48ff482bbb75
SHA512 a3b84a4d54f9859e00fe445bf0ef8bd0bb6a53eb52f871c891e8b12b1d11fe31b3430a0ca66e07a77afc9165f6ca8a0de0d8310342f0977431494ce4b61a5d32
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\47af5e13-0809-4771-b4b1-67519e00ef90\index-dir\the-real-index
Size 72B
SHA256 b647658aa78b2f92a07ccb3c4e47c0d37b35a31c1a5fc399b316765ae0afe172
MD5 4e707e890f34bf00e5d47c3a08399bbf
SHA1 a89a570a5b48e6d1b9e53cf473b2bbd1f1398a30
SHA512 b3c8fe616fc38460513be972fefd561e9fcd932be39f64b12437bef50e78686402e3be842f17f099b616366ed939249a66ee3964845d52d3bf5b636cc40efa8f
TLSH
T136A002B1ADB09785D04247FBA471428533346DF90D954601E199C758C97E2E05BE5040
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59267a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\47af5e13-0809-4771-b4b1-67519e00ef90\index-dir\the-real-index~RFe59267a.TMP
Size 48B
SHA256 f454b8817676d9adecba1d84fdb710a123dc9baad77be8927088e7bb3277ee6b
MD5 16c4463bb8a5de6af96d6589e36b79a2
SHA1 68e75aef0c387d6ef72480b2c064abd2acb0926f
SHA512 dd3af11e9758313d34e94d323f1b934396dd47cae356e70fc5bedf101a74d9c986932890dc38506a6ccc955e0ec1af0d1eee8393aee619f6d00a21710397f439
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 2cad8ed2b8796bd294223b79dcbc3e8fce9efbf969ba7b062c8a19fa47eebc2d
MD5 96bdd73435e30646a40346e53e8b18bb
SHA1 65a8dd693721c68267f5df208e012df18583c175
SHA512 993f57238ab221ed45d5b3a5fbf6550a8817c5b981190a370f7992670d25fa0580f8db3b5822c87866ca50e535a6c76115cfad93b978e8073f07dc4ace5d172d
TLSH
T12AD0979BF0231861FF778AC0073200694B387CC80981808CE842392C20B9A43A300F93
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 d7e179257e8d84efd4318c95a3b7facbaaa42aa2ad02862dcfafc652b24de6e8
MD5 22cb866ff622b9e7794f8d7b1ce069a3
SHA1 1e163bc505780fce9d45a175ae3307968adcf624
SHA512 533826c9886f5223c5294a75349d9b7f1353d26f61660be362a613aaa5151d924bd4d653b3e12dfc82e552f7fd9f787d10daa05d90e4c73583d40be1a26b5503
TLSH
T13ED097ABF0175861BEBBCBC0063200294728B8C8068680CCE841082C2499A43A301F93
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 7a267ed220a016b4d33edfff7b3cf37bdf7a02c7dd13f2710087cad05d5ca0ee
MD5 98a3548fc0f8f5f43df437a246d1a99a
SHA1 8de74d30e0c9114cee27b9ef6698c7faca2f5f45
SHA512 3e93ad86be316a6d4c63b077bdeb25b48d10e2c132ee77adbff86992b4ccf2bcef1cc8cea01b2841ab5492a517e526e073f37e14cff76af30694d292a6ab5540
TLSH
T1A7D0979BF0132851BEB38BC1063200284B3CA4CC468290CDE861885D109DA036301FE7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58311d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe58311d.TMP
Size 138B
SHA256 5b59bb74e3d831a9476eef79fad3f2d84b482bd51f41cf6008eb0c9f0e85000e
MD5 b23a87cb49c6085604e4eb3dd9bcc724
SHA1 d5d19451bc4929dad7e31cd4b35261b336ca528f
SHA512 a8746721ca8bad90aa0d12403d35263e2a69120819bc509bf122354311a59d5789e1592c4be5e20156d0c98f83a3c9f5dd18b37be2d8fae5909f03a69dec2f34
TLSH
T180C04CD7A15604528A6A56910632515D47196D8C5887848AA956796C20B8E136211EA2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 259a7405ba0474b2e2e53cb673e8bb815a3102dd396c9adc99eda56795bb85c4
MD5 12aaff8ba33db74a0d4d61ea529d588a
SHA1 df163165aefa39df12a9bc356331737e1d62fd12
SHA512 be09b5619bb50af9891009245b8c8440b28e185169601a2069c19c8bce34f492ee852c766c7fa667f0b04f2baa3456a17beb2f321c763277178c29f0f6f12a15
TLSH
T11DC01207C5057201C04703B91282EC987364BF35DE1F175C53E41E26DC38161C05639A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a572.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a572.TMP
Size 96B
SHA256 ba35e20b4fbd3fd4fd1f0b4005bbcb64caa2e82ca9f948e01e5ed72993bf583d
MD5 aa9f33baec5b8610ee0318445065dc95
SHA1 cf72b4866265f0155bf2412f51efc81332938457
SHA512 667e97001c21e825cd3d1b32f23cde3f9bdf598d655b11ac9c740dfacd1a32084821ed8f7c97f8b8091e0e2474145ad677079d01a3c4646fa553a9f90ed4b998
TLSH
T1BCB02200C00A2203C0A38BF0A380B2CCF020CF28C203022283E00E22CC20A308220020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 653b7f0be6cf170c8b96ce6a0bc15a95a8c062db27b14802e04030d3ccd5776c
MD5 371e3d7300e79eb184649b531faaa49a
SHA1 b7379988b934e5057adbbd29adf1e4ccd6a73e8b
SHA512 5f2041bb76df4b5364a37b6aa8b87930e3a861839e0aadbf463c7d36aedbdb73e639eb046abfa1aa0a6c4ac01c2e71f0d9b9d7e09376a17d8d62782c5c509ccc
TLSH
T170B0220CA38B3B03CA0A83B200C3F000B220BC0023C30CA230F0C0E8CCC3AA2CA00880
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\49093041-e661-4928-b3c9-502b2a59b1a8\index-dir\the-real-index
Size 72B
SHA256 5926ed2be8c23197569299a1b0ed82de51216619cabac33c7bfa5e7a7dad5601
MD5 908837f59b34672e859212c66e7d8b08
SHA1 d8de7b9a92765521ccb7a8734bf2b82dd4873b34
SHA512 22ada8ae2712b69b02b448ad31f1a3b956bafb7d0adeda631d8ffc19a8a2f381bc41c66e704e56dd8780aab1447a6b85621ea9720f1f71da0ab8214334059f9a
TLSH
T150A0023087C51544D890417465450BE12300CC5085000B4394D1828C8C601C59915069
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dcbf.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\49093041-e661-4928-b3c9-502b2a59b1a8\index-dir\the-real-index~RFe58dcbf.TMP
Size 48B
SHA256 d8b957d180fdae0e2f5ddaceca4501bc0948e3455c8913b353d590219bfbba9d
MD5 31465702c86b45e9ab625df55546b2e8
SHA1 5ebbaaee77ef7fc3464e9e11306eece8a3a15363
SHA512 6619164f5c339aa565ae9ff7daa1417782361ceddd593b21b40d07585b0582a46f6eed58c16c08a9433450830dbf3908e66ef16db70d5ca2a843cf838c71cdbf
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 91B
SHA256 b2868a378d48dd2d0a8b1f9f0fc91fc8f6c51510152ddd8707ab7b30272eef89
MD5 ad403f8db487fae66b9f95d5a7cf2f31
SHA1 354f27b34d9531c26eefa59b6c81dc46d3fe2673
SHA512 741c8f89f6e54c7633753fc28270d9c6bbc7eb2e3a63f7078085b297e5c4f6a9e3908a302535c490bd5fb81f5df7323e25b8ae15652b36ee10afe2013af09dd8
TLSH
T1B8B002BB504259D51F7534F7014732DDC56633CC9C85DE8D94721058321457F2001C65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58e4ec.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe58e4ec.TMP
Size 178B
SHA256 17495a19a7ed833fb0c2955279c6dc7bffc12538f70f829d8fcb0126eb9e933b
MD5 a3663e09404bbc19807715f24a06e248
SHA1 91628fc3003ede99950115ef024fa3ad16724826
SHA512 1a8afb1ff363de8b81a48811fe7dcae9fbed197a832acf9ab9d5603c2a0dc1506ff59332210429b2633397603326531862f5e9ef5dd101412d80a42d79c8c024
TLSH
T1BEC0127720919A952A2868EA031A33E8CA663FC98C80EA4E842230583334A2A2111DA5
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 0865fde2381d231205d4dee73d3c0ed69ce43975f6e2deae216e75aa7fa0dd55
MD5 edbab2a68f85d68588574c98e4e9d6fd
SHA1 7b268e331ec6340d7912c1ddc26523f139109447
SHA512 cd8e88dd7c57e0275dfce2bfd70563a503ffa88228ff3d2cee35acc8e01b692ddf91261f42a63ace0ebe57c184fa4b07b6b2927c06a8774ebf677a8775ba1dd1
SSDEEP 3072:UGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Xm7Rkm1tYpBeh2BAoK
TLSH
T15CC3123B5D65E9779979B70EB08E0B1F1EF149A2D920DE52C8D86A0837E97CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3503dc446ab77514ed5d7333d6eb2fc4adcf6798ec02a01929a9f05218f24056
MD5 4e6b8d5e377af75f1858aa93ea7e53c7
SHA1 2681075e251839f930f61ebc56a19dbf7279b54c
SHA512 75a378a7e8c92a9a33d4c24e5b1a1bd7898f6f46e3723ccbcd492a95755d974a1666deaa7b6992478be09c0edabf112247e75575949ebd19d5c7060f2c0d2b07
SSDEEP 3072:pGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMj:Im7Rkm1tYpBeh2BAoj
TLSH
T176C3123B5D65BC3759B9BB1EB08E0A1F1EF149A6C920DE52C8D85B0837E97CD0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 20ea8f15c648296a6652231b4a877d7ddc6800c3e5be0d0b7effa2fb58b883e9
MD5 b98018971f81ae0fbb17ce1027c72225
SHA1 e36094c25a508916d268c9fd82873fd704804f9c
SHA512 f9b34693688b99f0562d74c5a5c3de6af34b058c39c0cbb7c522e6bcc296daf735e0c9336312bb317574c56c65a99ed404d07fe2febf718c645d8fdc46c14442
SSDEEP 6144:2hxNPRW2PYddqmY7U52Fbm7Rkm1tYpBeh2BAoM:iXPRW4Kq97UAc9oBGcAoM
TLSH
T18D3423126DB5AD794C5DFE1D308F2D2E2FF28EE4D4A4AEC2C8D49F0827AAD841512D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 9e5559d0c270c426f820151f48e05ac21dee0053690426ee6c2826c3c4e993f7
MD5 c18aa7831ca161f4a23038ed878db59f
SHA1 8a1c8f8d0c4ef2b26c732196ee4d45578bfe857d
SHA512 b21b9dae6508530b606d4222a5220d21bf008a7ca3175490d76deafcb105a18a317ad2913b2a76a952dc428cdec7b7dd965704a417b6f24a0946c6874b7ce8ed
SSDEEP 6144:UghxNPRW2PYddqmY7U52Fbm7Rkm1tYpBeh2BAoM:9XPRW4Kq97UAc9oBGcAoM
TLSH
T11B3423327CB4B9794C5DFE0D308E2D2E1EF28DDAD864BEC6C8D46F08269E9441912D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1065628826\CRX_INSTALL\background.js
Size 6KB
SHA256 a2ab41f3958c48c5916b2912807e692b8f026064e59d8973ac91591af7cce96f
MD5 e5768b8f81a34adb12c0279e7cffdb40
SHA1 ac0cdb13711806b5ff7173a23e703125e12ac7a6
SHA512 41d27d82fc91075df66a90a2e489cb70cd072cdf86ff8be479186f136a9d95b8079739fd954f33cda5ac341c96cdfe6b0346b74021a84b57d75ac568aa5dd64f
SSDEEP 192:WcbENHvM6GA+gxVynd4ViQxmx/J0TI55Lp9:RA+r0i95a69
TLSH
T1B3E1359F19F3587A66F321789B6B900E7B21A003200CCD657F9CE2945FA06A466E3FD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1065628826\CRX_INSTALL\icons\icon128.png
Size 18KB
SHA256 b11e0e3deba08e721ac43d3e83b9c2c7d8cd09912218bd5dc5cf54dd7fc82321
MD5 2bb5d792cba43313919383dca221d302
SHA1 80c9d82c0d657fb2ee95cb7ea744647a05ec3550
SHA512 61cee3b869e1585bb728834aa498b16ccd3f2676ecf38e1e139aebc83d2d7f41b1a30b3ece83e06150efa6c05c69bc4306415de3a591cddbc221f047f30b08e1
SSDEEP 384:TBV4rBvWZfdLBLROlY5D/S+gpMDeSP2VPFfxb7rfWMyCuGP8Tvzfscr0:wvudFLROlY5Dq+leSP2XxPrWMXDPgvzs
TLSH
T12C82C0EFB606939C984E3F75767DC28A7C12B47A002395065ED45CD802B4F2A279B2F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1065628826\CRX_INSTALL\manifest.json
Size 1KB
SHA256 d3d235629fab45aa2ce6e246eb2c17e8434b7b555524acc802a236570962d077
MD5 049d952e8dd0228a0f84a72c8682f8b8
SHA1 f561ef407b37cbf509837e8efbdfe3a90be2b8f8
SHA512 f0e677b99184a75a2cf58d9881d99cc82d5b8e7a752bf294a16d7e01cacedc6e3cd9d604fe33786871331278d78c7c341a24871c1e397e6b3478116eea5a9557
TLSH
T1C021991B8864D87F037C8774ADB65A03F205232E5E81E99E38BCD158CFF035A9591BC9
MD5 SHA1 SHA512 TLSH

Submit Download

popup.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1065628826\CRX_INSTALL\popup.html
Size 14KB
SHA256 cece5f3e113918f0708f749a41eab873abdef2a7f37f1e0a874883e645d8fd88
MD5 e98ec19582cf07b5ed257ee67c1b69d4
SHA1 abcd328803cf5f7e3a573d2028a39af42f6759b9
SHA512 bab59edd662fec5e40d2095d193f7a09f37f379afbabdc6fe21f3e1e893ba28f3efe60a83258709bd69eab3e1dbfc55505b81963a8664d48d69048ffcb3bc149
SSDEEP 96:tTwRaFoeU/ZI4I1a60nbfXdSBqFVRESKVdVlsXKzeyh+0vrREpoNZ7ospiTSUWM/:r5X4rvlK/ec7aTr6e
TLSH
T1F6520F3062FC1E3E91534091965577373A6EA2D3E70E5210B97E05F5CF86E8AEA370B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gnnkgmjnbphhjkiiedlfhcjaaomhffhp_23528.crx

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1065628826\gnnkgmjnbphhjkiiedlfhcjaaomhffhp_23528.crx
Size 51KB
SHA256 c4268a6baf967af7455fa29eb0c51ca045a30f4837e160630b63d3e688bbca75
MD5 b200189fc549fbcd05c3c2db925311b5
SHA1 f2e902aae6cb2be6fc1f1760dca62cef43b2a53a
SHA512 87ac2a7d5b6e435ab607770b067deb4dd2580102cd9c1fe18fd92807a704023d941eb5010eb85bb1b28eae7a4128307ddec73dd6b1788b0f592f4f42118fa2ae
SSDEEP 1536:FcAa09dTpnB3weYXKu7aGU+GOWQu7FWY5Dq+ltOXxLToOVeE:FQkdTpB3nY6uuQuh9bQxXo9E
TLSH
T15F33F19EAEAAD17DCECDBB30137CD763AD13607A1806990604E44CCA4DB0B593B52DF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download