dfbc980f5b3e063523620f2758265796d1db885e78469689ca6367faae6b1c2d

Analysis

user interaction
yes
max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 11:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
trigger_test.dll
Size 101KB
Sample260826-nvtfjsvxet
SHA256 dfbc980f5b3e063523620f2758265796d1db885e78469689ca6367faae6b1c2d
MD5 9d0b0fe3433325ad426ec8f6bf0ffcce
SHA1 9299cfddd689fd01326643017761165ac3ee557d
SHA512 bc38056b5f43ff0ec310740ff044f5b1405b620a01b8d05e2ad08802b558abe6f743785713cc4ab444a22ea4d93b5e272498903ee26d21f4280fe8244ae35d38
SSDEEP 3072:H56QGtrMdsmTWZ2t5L8Yzs9N10cZIWxfr:IdtrOzK2t5AY09
TLSH
T12CA34A9776E500BBE1B78674C8670E45E3B6F82107619BEF03A4425A2F237E14D3AB31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4620	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322182908534105"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe
Token: SeShutdownPrivilege	1696	chrome.exe
Token: SeCreatePagefilePrivilege	1696	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe
1696	chrome.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 1696 wrote to memory of 5220	1696	chrome.exe	92
PID 1696 wrote to memory of 4620	1696	chrome.exe	93
PID 1696 wrote to memory of 2344	1696	chrome.exe	94
PID 1696 wrote to memory of 2344	1696	chrome.exe	94
PID 1696 wrote to memory of 4372	1696	chrome.exe	96
PID 1696 wrote to memory of 4372	1696	chrome.exe	96
PID 1696 wrote to memory of 1208	1696	chrome.exe	97
PID 1696 wrote to memory of 1208	1696	chrome.exe	97
PID 1696 wrote to memory of 1956	1696	chrome.exe	98
PID 1696 wrote to memory of 1956	1696	chrome.exe	98
PID 1696 wrote to memory of 1236	1696	chrome.exe	99
PID 1696 wrote to memory of 1236	1696	chrome.exe	99
PID 1696 wrote to memory of 572	1696	chrome.exe	100
PID 1696 wrote to memory of 572	1696	chrome.exe	100
PID 1696 wrote to memory of 1916	1696	chrome.exe	101
PID 1696 wrote to memory of 3844	1696	chrome.exe	102
PID 1696 wrote to memory of 5308	1696	chrome.exe	103
PID 1696 wrote to memory of 3844	1696	chrome.exe	102
PID 1696 wrote to memory of 5308	1696	chrome.exe	103
PID 1696 wrote to memory of 5432	1696	chrome.exe	107
PID 1696 wrote to memory of 5244	1696	chrome.exe	108
PID 1696 wrote to memory of 5432	1696	chrome.exe	107
PID 1696 wrote to memory of 5032	1696	chrome.exe	109
PID 1696 wrote to memory of 5244	1696	chrome.exe	108
PID 1696 wrote to memory of 5032	1696	chrome.exe	109
PID 1696 wrote to memory of 1468	1696	chrome.exe	110
PID 1696 wrote to memory of 1468	1696	chrome.exe	110
PID 1696 wrote to memory of 1692	1696	chrome.exe	111
PID 1696 wrote to memory of 3728	1696	chrome.exe	112
PID 1696 wrote to memory of 1692	1696	chrome.exe	111
PID 1696 wrote to memory of 3728	1696	chrome.exe	112
PID 1696 wrote to memory of 1308	1696	chrome.exe	113
PID 1696 wrote to memory of 1308	1696	chrome.exe	113
PID 1696 wrote to memory of 5216	1696	chrome.exe	114
PID 1696 wrote to memory of 5216	1696	chrome.exe	114
PID 1696 wrote to memory of 3216	1696	chrome.exe	115
PID 1696 wrote to memory of 3216	1696	chrome.exe	115
PID 1696 wrote to memory of 6080	1696	chrome.exe	116
PID 1696 wrote to memory of 6080	1696	chrome.exe	116
PID 1696 wrote to memory of 2148	1696	chrome.exe	117
PID 1696 wrote to memory of 2148	1696	chrome.exe	117
PID 1696 wrote to memory of 5076	1696	chrome.exe	118
PID 1696 wrote to memory of 5076	1696	chrome.exe	118
PID 1696 wrote to memory of 3856	1696	chrome.exe	119
PID 1696 wrote to memory of 5308	1696	chrome.exe	120
PID 1696 wrote to memory of 2192	1696	chrome.exe	121
PID 1696 wrote to memory of 2668	1696	chrome.exe	122
PID 1696 wrote to memory of 2668	1696	chrome.exe	122
PID 1696 wrote to memory of 2040	1696	chrome.exe	123
PID 1696 wrote to memory of 2040	1696	chrome.exe	123

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\trigger_test.dll,#1
1⤵
PID:4828

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffe4df5c728,0x7ffe4df5c734,0x7ffe4df5c740
  2⤵
  PID:5220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1928,i,14909726692213393900,12838455605810857719,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,7926801258451575389,1670474939303976970,262144 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:2
  2⤵
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2324,i,323496795618777065,1513062212572029333,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:13
  2⤵
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3292,i,2634787367656689176,7189785519327787392,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3376,i,4823218877306393779,8271798928261335647,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4740,i,11274394628349799261,10669463478848185084,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4892,i,10958241130156341456,18156577071041273787,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
  2⤵
  PID:572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5404,i,13445331795188881037,9363407505470339432,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5508,i,15323438964937528828,9553783021270659579,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:3844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5520,i,62447400507042076,9511202045534388160,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5504,i,7045877807862761186,12405476525369759475,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5600,i,1041456463672228927,16976862545464913707,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:14
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6072,i,13403146825793092592,16362156437169730946,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6108,i,5703942278816597019,15763189597093041952,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5560,i,1771986917606211363,688877616315813923,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:14
  2⤵
  PID:1692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5800,i,1358158135330106222,15863517382838321251,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5508,i,1132014700701959038,115873261956080115,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6208,i,6932486769539735503,11581046859919300478,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,2370333371689084094,6604106976777984975,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:3216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6076,i,6445651983410993285,7587625144827668458,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5444,i,10337504886093665097,1235324827906448741,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:9
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5548,i,460148805823016207,1257248532962007239,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5760,i,15360665388391706502,6569015426882249224,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5576,i,11374802896001910559,5850074741877332321,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,5119215437930597429,16050992607747318781,524288 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
  2⤵
  PID:2192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6288,i,16495228303133698086,4288000448678697955,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=3544,i,10691384607832078512,16512881862083254661,2097152 --field-trial-handle=2016,i,7097958483982957698,6722564458449360939,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2040

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1616

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2684

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:4324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 312KB
SHA256 0b6251fd38152a7a7319d54a8e993417dfe359650a9581c135c3950fe5704861
MD5 932d4b5eb7460fda1f102de6f7149790
SHA1 fadbac31c043b89a72bf3abf502f9ee53ccbf86c
SHA512 eaad89143b37482972189a3ff86698a7ae3332c42248d177fc74e0ec6aa9e1756a0699cb77d3b83cd815e2651df267c0cca4e9866d7a59a26d0dbeadb060189d
SSDEEP 6144:Y87U1JYBYrHsCcjPUrsgrwz9Ot6mjoSF7SI/5Czsl/sfz+IeJqJi:REJYqaQ8QN7p5Cz0jqJi
TLSH
T1786423C8B9A7916BD9F3FEECE0C64958B3FE733433C684798421915B87122D882E45D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 31ec01121dab874a5067bbfa06cdbebfd381fed40f0499f87a9d832a0fe3a66e
MD5 3ebff191b9a461c9d58d281732483a79
SHA1 5141cece82d8bb76787b27f51a2131440e2d64f8
SHA512 9e991109d3e311f454e8f9183f28ec0f966c5507a7014ad2ef05b02a455aa14fd32a43f65c42a05d037ea6df32c42642bae219dc0aa747b6d9e35aa537a78aaa
TLSH
T1706141CA2D8D284CCF212FB060D8324A7DF18142AC078E6AF2469AFF24B37E90509F41
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 8273bc00e108e214193bf4ce785274b9bd0d6dabb04b22ff3b5d60dd60afb36f
MD5 6855835a77038756a3daf6cb716c9288
SHA1 b09ba02a4ec1101220e31083b496772075184bae
SHA512 10e6cb0d9758460a3ea2ffe1e6cff293ba59de84178a4cacb37b58d70f88ba029927419ca4157d8bdcd96741f157986cdc9042389e903c41068005273b1404cf
SSDEEP 192:Dq/jYSn/PFJrJmGI1xmZ0R3qWwNP/aPIPdzlvIfPDNmRmmmtmGmDmzmH:Dq/jYSn/PFJrJmGI1xmZ0R3qWwNHawPp
TLSH
T12FF18DFBC3D4C52D895156F4AB15AF1ECE2E0624432C3C26C8D5BE5B93E2871E21535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0fed5e839afabe47da277a4c4af846d1403c246d87f246eab7770ba61b6258c5
MD5 9c5e2d550c73f3bbeb01b8326e8d076a
SHA1 854f60edf588c5df681e3dcd4e981158b616abf3
SHA512 711749c455c1215351759a4a1887084b52c7d7c7a36ee6f68ae024c40e810792f40d8f274aee15870b3d43089b31177a4fc6bbf810b76fee0c35420f9ee78898
SSDEEP 192:cRUcBzjb4eAv7gJPRpP8//ko964Hsb+WNh5ci4vdWGuCkwHhIfmQBT2VyIsnAUgE:cRUmz3zcqXsbwhiWlC18OE
TLSH
T17C52C32AA9606D7BACDBC219FD51BB57E7F5102220D42E84E7FC8A2C11E7ACD3217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 3e99576d4be3b55c2133d61604801a6de020fb0766821a5973d725df7da1f612
MD5 a081b1472ee62fd25ad483eb4db7309d
SHA1 386bc8a7cb986159a7999117d4737869becb89d4
SHA512 c10ef702b641e7bad3bca77d2c9611595f3dd8364806690ecd7443f0e333092e70011efecde97335922c85a824732dd34514e5265199c2ed12c93fd4adf0a601
SSDEEP 192:cREjb4Vfv7gAPRp2X964Hsb+WNnci0QuCkwHhIfmQBH2VyIsnAUge:cRE303VXUbwp0DC1iOe
TLSH
T1D442C43EAA64697B6CDBC219FD557B43DBF5102220942E84E7F88A2C15E79CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 888d9e0b2823169601dc8d58b475baee638a6bdaafcb2abdd3901698197cff1c
MD5 51cab2a553cc5a06f0391f7860b4785b
SHA1 d2ae33bac1f8b01ff7fc0ede5c8e258d65777b2c
SHA512 03082d6387a420dd5ebf2693a6b20f188b096e4896064ffe78a544b3b5e62dbbfcedeb53e860ea270cb949740f0ffda1b59980d0e74756b5f2ed594d4961d85e
SSDEEP 192:cREjb4efv7gAPRp2EAT964Hsb+WNnci4vdWVuCkwHhIfmQBH2VyIsnAUge:cRE3z3VXEbwpiWAC1iOe
TLSH
T14742C32EA964697B6CDBC219FD51BB43EBF5102220942E84F7FC8A2C15E79CD3227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c0e24a259d493bd66886723ea6ac3f6f8a3ec360a36b5e9740dbc9b9274ee85a
MD5 63a4e9649f41476de8a8652a973ab9e1
SHA1 d8228ca7dd8c457124c09007904b5129144c85cc
SHA512 156f8e35df2951b0044f68ce66a0a740d96c656b73b7607cc4404958fa604e7f103bd636f8b2bb1c6a8673228457cc7a6b27ddd6971e62256a950e3cded35517
SSDEEP 192:cRUcBzjb4efv7gAPRp2E/ko964Hsb+WNh5ci4vdWRuCkwHhIfmQBP2VyIsnAUgE:cRUmz3z3VXvbwhiWUC1aOE
TLSH
T1DA42B22EA960697BACDBC219F951BB47E7F5102220D42E84F7FC8A2C15E7ACD3217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 430df35e14109fc26cf6dd13a680ee55a50d2dac722c77dc3186d6c9d43bfb2f
MD5 a2fa040d4bac05ec47ca4a7fdfd0b1a2
SHA1 43fbe853a5c83ea687e9a1824d3c5efa0bafb67c
SHA512 e83700155a756cd154c71a631de76e4b9f4b4e7c5db69736c3d817232a745dd268a3cf34a60e9c9f6a5294bf7228dca040972e44e8079842f6d58fbae047e130
SSDEEP 384:lzjxQ7KxkXqKf/pUZNCgVLH2HfgslzSXODxQ+ErU39tHGj7RqbK:l/xQ7KxkXqKf/pUZNCgVLH2HfgsNAONu
TLSH
T1F9520867648D9A3F0FC8DA8CD8277F4FADB5015666680D2496FB9C0803E5BCA114A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 de225ff57e9a9b0307e4086e1f5c11474ad8dfb3fefdece6bcde264b6b8847d8
MD5 633fe1ece3af198c880c86c51e9ce940
SHA1 689b4148f27fb64719e5e77a347c9639e41707da
SHA512 f75c2a0d9dae345d325f52403cc90d5b976e37c34a15a905b6358ed68b1a9b548fcd4734f2e12758da472b6455ffa5060dd8582a6deb95c739cdf07c6de6c8ea
TLSH
T1B1A0025156844165C18C13F1159601947351883041C30202C1906594AD519A07126844
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 8cd2dc6544858d155b5e9658ab47599a37d8763387b1b4ca0112367617dba8c4
MD5 a458d2a768b51da8fc96d951a38c2bb0
SHA1 e87e0206e23bc29f14f5a8b182f14d8b3eb35995
SHA512 56d96bacd48589697729a1c5a70abc859379e3528c614a30b3241f38f410b0b78eb4ad81474d6a32d0c2cb117880891b60f5f565cc756000aa3688f95439b83b
TLSH
T1BFA0026541D00922CD8097B0606105C53AB18D261961534355E299489A9B1D54251655
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5abfd7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe5abfd7.TMP
Size 48B
SHA256 14ce8fc0afb7676059561709b96b41f1191b1f7381e0c0529adbcae474236cf0
MD5 21d0171fc326ade11359b7c04737cec1
SHA1 b58e979a4dfb5e1e776b839ef90c8233eeb6965c
SHA512 d1af46d6ce24af4bced541380589cc9a00dce61862bf17c15b9c0a37a43023c69961be82ad6f00fe2c0a6487e70b745dba94a1fb22e43d54bef4599ef264be56
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 129KB
SHA256 0a4691afa5d005b8aab6f160e913e223f408baa709657170c760e06800436f23
MD5 c6c50425ac990e2b1b686932fedb0b1a
SHA1 5d26051c9e6a72c1db876962c6ab36f5708a8ca5
SHA512 9578cc57b62ab5c19a0bff77ef4b25f181803ff1bd599222e6e0242e96f653df7050d5fbc747f350691529f8f9fbe557e5044477d9e5b104c0527b28988fa4e3
SSDEEP 3072:q7YeG4Our47mMDrQkbG9XkkP0AhHZ+cTDzv3AftM:q7hOurjMI+G9bjWcTHv3Afa
TLSH
T17FD3124968F57DF25324E9CDFD0FA4AF8EEC656E8F10B60445AB021C89AD09D9F1072B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 129KB
SHA256 0019bd2dddb97e98658dd1ac6ad38ed8f8988d2ee84143a98d83fa446d0abf59
MD5 2268d137dba6c9670f262c543466ec88
SHA1 542193913aa670330a3baef0a9e7e440bf3e8c10
SHA512 1f6b1b74f6c8602fc274e5fd467c2b14f056780dc5f0a4aad758bb0b34c995f7a0f25907a8488f9fca81e8ee92908c7677e31f899efa609f9b467c111eb55f75
SSDEEP 3072:b7YeG4Our47mMDrQkbG9XkkP0AhHZ+cTDzv3AftM:b7hOurjMI+G9bjWcTHv3Afa
TLSH
T11ED3124968F57DF25324E9CDFD0FA4AF8EEC656E8F10B60045AB021C89AD19D9F1072B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 90000b47251412585073ffa11aea4c247e260deb0b70fefe94c3f79176e18030
MD5 5863927fab783a2e27e2853dde0e9059
SHA1 594b265ab2e83be1fca26a8cf50e66e65ec3e230
SHA512 73709468f798dff3f459321139afad220e146e9c82031c774ee89b9f32e288cb71b8a3d8624405b2735e66187110806adc1ea630d7f80cf1add398b114dc8bb2
SSDEEP 3072:47YeG4Our47mMDrQkbG9XkkP0AhHZ+cTDzv3AftM:47hOurjMI+G9bjWcTHv3Afa
TLSH
T17BD3127A78E57CF21730E9C9F90FA8AF4DECA56F8F10B60444971619486C19E9F10B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 34b8f988a329833cad2b811f1aaf25b4965f97aca635ec554633355e401b9968
MD5 274117a557cfcf5674e121ca4955d747
SHA1 967cefcd2f98703d3ea3ae9a5be1c432449792ac
SHA512 eafa5e55462e620e878005f8d96f012cdb496b7780bba96cb67681a7fd905f68895af0c73b1f4846a7a7da876cec454f9fc7c3e760da823e05f0528897e54045
SSDEEP 96:gC0d+cAOIt5aDVmufj7jcbRDotok5nLMCDniJB6/dGyv95SEdhbb2Jv4a:gC0LA/TE57cDUDDiPUweSqhbKl
TLSH
T1FCA10971B4A95EB75D7AC584F9827E83CF78A127A9216F80D8DD1F0C11E74EC1382A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1696_187435395\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download