hxxps://chromewebstore[.]google[.]com/detail/equalizer-+-bass-boost-pe/plkncppcgglcjdkmcdeajhbfccbnnoee/reviews?utm_source=ext_app_menu

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
50s
max time network
51s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/09/2026, 19:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://chromewebstore.google.com/detail/equalizer-+-bass-boost-pe/plkncppcgglcjdkmcdeajhbfccbnnoee/reviews?utm_source=ext_app_menu
Sample260903-xzpgtsel21

Score

6^/10

discovery

Malware Config

Signatures

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\plkncppcgglcjdkmcdeajhbfccbnnoee\2.4.1_0\manifest.json	chrome.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3088	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134329366816305038"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Webstore Downloads\plkncppcgglcjdkmcdeajhbfccbnnoee_53822.crx:Zone.Identifier	chrome.exe
File created	C:\Users\Admin\AppData\Local\Temp\scoped_dir2596_1751442984\plkncppcgglcjdkmcdeajhbfccbnnoee_53822.crx\:Zone.Identifier:$DATA	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2596	chrome.exe
2596	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe
Token: SeShutdownPrivilege	2596	chrome.exe
Token: SeCreatePagefilePrivilege	2596	chrome.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe
2596	chrome.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2596 wrote to memory of 4156	2596	chrome.exe	81
PID 2596 wrote to memory of 4308	2596	chrome.exe	82
PID 2596 wrote to memory of 4308	2596	chrome.exe	82
PID 2596 wrote to memory of 3088	2596	chrome.exe	83
PID 2596 wrote to memory of 2956	2596	chrome.exe	84
PID 2596 wrote to memory of 4936	2596	chrome.exe	85
PID 2596 wrote to memory of 2956	2596	chrome.exe	84
PID 2596 wrote to memory of 2752	2596	chrome.exe	86
PID 2596 wrote to memory of 4936	2596	chrome.exe	85
PID 2596 wrote to memory of 2752	2596	chrome.exe	86
PID 2596 wrote to memory of 3860	2596	chrome.exe	89
PID 2596 wrote to memory of 3860	2596	chrome.exe	89
PID 2596 wrote to memory of 1164	2596	chrome.exe	90
PID 2596 wrote to memory of 1164	2596	chrome.exe	90
PID 2596 wrote to memory of 3308	2596	chrome.exe	91
PID 2596 wrote to memory of 3308	2596	chrome.exe	91
PID 2596 wrote to memory of 2296	2596	chrome.exe	92
PID 2596 wrote to memory of 880	2596	chrome.exe	94
PID 2596 wrote to memory of 4716	2596	chrome.exe	95
PID 2596 wrote to memory of 4716	2596	chrome.exe	95
PID 2596 wrote to memory of 1772	2596	chrome.exe	96
PID 2596 wrote to memory of 1772	2596	chrome.exe	96
PID 2596 wrote to memory of 4692	2596	chrome.exe	97
PID 2596 wrote to memory of 4692	2596	chrome.exe	97
PID 2596 wrote to memory of 4740	2596	chrome.exe	98
PID 2596 wrote to memory of 4740	2596	chrome.exe	98
PID 2596 wrote to memory of 5040	2596	chrome.exe	99
PID 2596 wrote to memory of 5040	2596	chrome.exe	99
PID 2596 wrote to memory of 4608	2596	chrome.exe	100
PID 2596 wrote to memory of 4608	2596	chrome.exe	100
PID 2596 wrote to memory of 2788	2596	chrome.exe	101
PID 2596 wrote to memory of 2788	2596	chrome.exe	101
PID 2596 wrote to memory of 428	2596	chrome.exe	102
PID 2596 wrote to memory of 3748	2596	chrome.exe	103
PID 2596 wrote to memory of 920	2596	chrome.exe	104

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://chromewebstore.google.com/detail/equalizer-+-bass-boost-pe/plkncppcgglcjdkmcdeajhbfccbnnoee/reviews?utm_source=ext_app_menu
1⤵
- Drops Chrome extension
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9edcac728,0x7ff9edcac734,0x7ff9edcac740
  2⤵
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,10198299205748735594,6709125584844809117,262144 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2240,i,2858297010408857072,11719436851714128879,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2244 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,9900404522945074598,3097825771833791100,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2784 /prefetch:13
  2⤵
  PID:2956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3064,i,2786169353809089561,15114078961878148317,2097152 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3080 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3088,i,12036747716158207823,8476123039359457508,2097152 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4280,i,14082384787567373631,6304769467635355236,2097152 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4264 /prefetch:9
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4252,i,17970915644736032663,1177525075169572050,2097152 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3692,i,2557409999454434819,14876092009810563198,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3668 /prefetch:14
  2⤵
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5604,i,1829128711092732771,5333216416174785533,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:2296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3668,i,8652501071107286201,6854809098878671325,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  - NTFS ADS
  PID:880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5480,i,10230292552322470030,13377090562781604938,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5328,i,2102706079587145464,8994930513479078265,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5672 /prefetch:14
  2⤵
  PID:1772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5308,i,16126602180710850766,15342345426860608823,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5368,i,5978295472581859587,5173198033457713005,2097152 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5352 /prefetch:9
  2⤵
  PID:4740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5892,i,15360831875380373483,14696208483593710430,2097152 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5380,i,4289643239880609897,6347911325955777543,2097152 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6044,i,9060074954242496320,9448816369132902977,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6056 /prefetch:12
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4284,i,10319000812545565340,14292637461007362612,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6208,i,17278939910578612600,5263540508752535819,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4832 /prefetch:14
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4844,i,1120107432836934438,10128894252255418894,524288 --field-trial-handle=1968,i,8601367196436912105,13511583140996564579,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4836 /prefetch:14
  2⤵
  PID:920

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3768

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1ee0f09d87f9e48d4c74f79a18c921a93b204ef92982c7379a0da23e976406e6
MD5 6c40e4a4c9046bda4c2c2998907e1e55
SHA1 87214247655b25496528a77e496577b9b900a5a3
SHA512 8e8526649f1f85393770803d8266cd08e676560b5d4787abad9c5d633d9df31f2439ff64000b1d20a4aa565256023c5b2a18a054ee80e73ab857cc52e2243250
TLSH
T1C6E02BA9C835EC3B1CFE071C61544686E711135B2A80854F3A3C41098FB06364195D1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 480B
SHA256 83ecf5e9c1b4c909dfb7ac0ebf16fa07aca4d2cee060cfc0e6c7d7e84f06a034
MD5 920aace20f00a0037038364a43c667c3
SHA1 110ea2e344688adc52b70788f9d8a9b4a5a4a655
SHA512 5489e8f86447ce176f5c79c6b4041335f49d10e53b0b48b7f5639def97aa1f633ac112266a748db5b8f1962f2bd9089aa0359cc57db0f3f6bc6f1979f37babf0
TLSH
T10CF022B010C20C86FB8008F629100C8406CAE1CA7092133BF168F27AF4AB1CC8253B26
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\_metadata\verified_contents.json
Size 3KB
SHA256 70caf61c81d407deddbe0c5f95b672efe63c63ea65de0be556b035e6af8457df
MD5 c1cb65810735ad7fd01b62dcaa2165b8
SHA1 b52907cafa1dcdad484e3d79662b60d5a6476a79
SHA512 f1f4ab91e91f39358b647cda63e6ec15b3cfb6dfc4123a8c396c9441ce39aa7260c14c135b637ae28792f0d63e29cce13a856c4b1d531df29443c964db3fa5db
TLSH
T1EB61E7904CB9F09CE80A677097CF7747A64D91E4B2193D3B82D64D8874F2A02C2A34DF
MD5 SHA1 SHA512 TLSH

Submit Download

background.js-BGexjeHz.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\assets\background.js-BGexjeHz.js
Size 4KB
SHA256 6d88f9215d4d940fb7005dd650e9eb827726a609e319c0e66ec6c0091f8ede34
MD5 269b592e6c8c36a368d805dbae3d961c
SHA1 c2a1b4c72054f0e710c8abd9b670844260a22a95
SHA512 9bcca5142095e59e4e18e49a94a5b4a9767c61b16f0c36774d1225331f9512e12b6809f66793985c5da59ed9d78a19c047fc4a211b9e671aa9e3d7d909e177bc
SSDEEP 96:6oJk8SkX9Jfe3gXSIkd30vuXGXx5f/uVrEAErZAuL7Xxi/1GL/lxZxi+tpT1:1JkUXPs2v+EAEry0xYGJxLprx
TLSH
T159A1C67D2227043DB6913F23B4251181FDBA46252C0AF077BDEECA7D9828644D86EFE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index-B76yf4g0.css

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\assets\index-B76yf4g0.css
Size 24KB
SHA256 ec32b8aba05ca2a51be3acec986d5109ad07e2d5ef3c3f2b0935e37069166a29
MD5 9d01af2121bdcad87ef4cef9bf1f0a88
SHA1 29f34a8a904a7f55b915f3d533bdb65caed0d994
SHA512 06bddabad9413a3d50818a34c174711ef2712f272414b4feed3dae506c15f5135e181c4ebd5c1570b15208bbefb0a3cac7046cafdd5381c15fc2151219915944
SSDEEP 384:kwMSah6j3oSvRW8EFqc5LU6T9GHUrrwF/PCz87v:+6j3oS5WBUxUrU/PB7v
TLSH
T1C7B28519A619607E7D13D5ECC3D8B6DD722AF0C0EE3A5BF9B98611212BC23F50DE2644
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html-ChB7xn2t.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\assets\index.html-ChB7xn2t.js
Size 252KB
SHA256 da24b8a99ff6f2ae857ffd5710d6e8e12d8b650acecfe552bf527f924a773999
MD5 28b6af82497038c76203f9a375b63995
SHA1 66006cf6512cc40bbb0f743e47e005bde8ccb6a3
SHA512 6f9944300974b45445ced65de54d20e55c1ce8929532d92d9567bc8c22f84f5e72e67be161f564105cc79cc344fe3161a80016f50494b9b00a0fc0cf01c72c04
SSDEEP 6144:U9+JF4JLvsalG4LoBqGEejFGZPPDHomUCzSgr:xJ002KqGEejQHDUQ
TLSH
T13A447DE830AA767A5BA306F5506F510BB33C1926B80D8450F139ED7A7BB500991BBFDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GeistMono-Regular.ttf

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\fonts\GeistMono-Regular.ttf
Size 113KB
SHA256 f13603e45fe847d2517ac1aa2932d58ca56fb2652d1c060bca89b5ef419aac3a
MD5 5f8d47bde9b98bc0940d94cc5efff9c4
SHA1 192788daf83a929832a6048cde5c095562fe6f39
SHA512 f143ddc05a46aeba096272835ae1d8b69a19baa35bcac4abeb11f29af7542a1568369acc8f7480ab7383c5963727f07434fe50d13970f62902f624f18179e370
SSDEEP 1536:e1fLFdRYNWtJJZd6nikXHf7QxkxL0U080jO5AZgciMGB8EsYYYYYYYuP8X7LGnhC:e1jFH3bJZ6ikXHDcEU807icJw8END
TLSH
T13EB32807B752C30AEC025F3456AA33BAE394FF6B671A835781493A6D9C8B1DD091E1CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InterVariable.ttf

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\fonts\InterVariable.ttf
Size 859KB
SHA256 4989b125924991b90d05b2d16e0e388c48f7d5bb8b30539bbf9c755278d0ccaf
MD5 7c80433dfb0d6e565327d9beeb774bac
SHA1 41941415a6de8f3dc776822ccfa02951615d435b
SHA512 8bccd4ab36c74ef16927f6ca4a7acc385d1cb8133bbcd7ebb5fe4ef211e15fe23890ac50f2af7c47fceef511737a736fbc44c71688958896dfe37df1280d174b
SSDEEP 24576:CsCgYVagxhuuuPz2iKeRpz6irFEOweyF8Fbhey:CzSX2iKeRpz6i5rFFh
TLSH
T139158D53F182CF5AC25A673485730B95623A68B1FF17030F596A33B8BE933E1694D6E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OFL-GeistMono.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\fonts\OFL-GeistMono.txt
Size 4KB
SHA256 930853ee1daa68554d9e35c8a9175affb74f699fad9a5da6ee5ebe76379d9137
MD5 563d13575f813953c3151e1ecce3b76f
SHA1 e426f28a99fe4b09ed4ce4cbc6f8bb0edc73ffb1
SHA512 3be627bca09b59b03cc4c5d629f762573af109cd0040591825181e40583dfc2e2ff413bffc757677b6a5b91dba206d45f2838fa5be9e8a7052ea5ad0c65a574f
SSDEEP 96:2n/UibMxxUzfGkKnjfRU88f7BktjVKvR1wyQeQHDZoN:/sMPzW88f7XvR9QHtE
TLSH
T18B91CA2A3F4423B109C1D252F736E9DEF61A517D33AB69C9506AC16C23A6D2803FE790
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OFL-Inter.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\fonts\OFL-Inter.txt
Size 4KB
SHA256 262481e844521b326f5ecd053e59b98c8b2da78c8ee1bdbb6e8174305e54935a
MD5 082d8cc7db39783f598b7eda8c911f9d
SHA1 174b037934980ddcad39144da3ce7b0f9d73546c
SHA512 593d608d18186478ee378027cbf8ec480055862acdbd437626f3c36b65b61f08024ac90d2ce007d718e55a4134e61f6e9df46e18ccbd5fcd7499737ede288b2b
SSDEEP 96:ftn/UibMxxUzfGkKnjfRU88f7BktjVKvR1wyQeQHDZoN:fusMPzW88f7XvR9QHtE
TLSH
T10491C82A3F4423B109C0D252F736F9DEE61A512D33AB69C9506AC16C23A7D2803FE790
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offscreen.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\offscreen.html
Size 246B
SHA256 c158d43a039cd3052a8455412a44a16af61b1ab552994b9421d05a06e2060710
MD5 b1f386c326d398d637a41bab48b6e78c
SHA1 35abcd190b2b655a9378f80369cc1b2e67313dc3
SHA512 b6d17b1133845caa7d6bd10a498594efab6045bb2de6b46f47086f1bd3b2e92c5b96e065e889ec5a0a1cd44f201e60fc83d8af51a988f5b819b8fdf0818c9dde
TLSH
T16BD0A7AECD06919089201AC579C8F6D428E7F6C570DAC47884DEE03AE941B09D9075D8
MD5 SHA1 SHA512 TLSH

Submit Download

offscreen.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\offscreen.js
Size 16KB
SHA256 4dceb6f5caf509fda6d921c17b99e14ad03922e3a42388ea17e64c2f9472ffb7
MD5 757c8f47b5ad33a4207fa072912e69ee
SHA1 649f3e1d26c2e8542261fc6de523cfcb8eb92d2f
SHA512 722d6646d1050d7cb7be53b09b381e4901d8207a6dde838aeb2f94331607bfc9480ead56588790dde99ac3aa9429479279795161cb31fe75deb8e176f336dcfa
SSDEEP 192:hFOE4mUC04wGSFyGqubHnurb1L5M5Xf2X2gQ58aiFE78YEBta/tGU+jDp9o+c9Su:hFOZC7mcGrvBEE5ckmkRcYRt3z
TLSH
T1CB72E7B92DB511364223D0EDB20F5294FB2181032754DCE1758DC328AFE649AD9BEFE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onboarding.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\onboarding.html
Size 25KB
SHA256 b7080c566d0363937d1e149e19f7d600ea9cbf5f34d8599dd534a4086e668b7e
MD5 5a725d5ca74a156855caa0e954524d1e
SHA1 02550cd1727239299e22aa5eefcac96a06f5edd6
SHA512 8a2088fea82adf6288354f857d56f9baaef8d68ea098eaf357ddf0fb82608c35779f6c1bcf03ad6358caa6be7b003846197049de3ad9892629ac3aca549d2eac
SSDEEP 384:XFKnWC6+HF3KHF30YzAN+Cb03biP4c6df:1Kf6+CA7b03GArf
TLSH
T107C2B72B4625152EB01382D4FB93636B3279E107E2059638BDDE0564CF8ACDDEDBB2D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onboarding.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2596_442420611\CRX_INSTALL\onboarding.js
Size 3KB
SHA256 ec640aef1a4bca6e1af738a61fb51e2c830c72663663464247c1e892faa41e73
MD5 10b920ba8890682471f28782aacf291f
SHA1 33c15aa2458a72c6e6d6b714dac93825a017cbe4
SHA512 54bc0b6a99bd22f1d7f87f4f872593e13d7b431e4c118731a24c3845f17f343cbc102a8060511f4563d2be427cc045df633ad487f070e5f3f847859c65c039ba
TLSH
T1758184BA96FC103A01266067F54DE6487A1620FF3E46B99429EC405F3BD453C91B2AC9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plkncppcgglcjdkmcdeajhbfccbnnoee\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\plkncppcgglcjdkmcdeajhbfccbnnoee\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 7c03c212cd57919d455887e3f204105f5b2e65a1e9f626f281fa4d644b1b1a19
MD5 42d930cec44d488d8d758707edd673c7
SHA1 0f23f79626d413afb904e3fa72f8421cd4625ff3
SHA512 997c4550e1b22b111c00e6f1f57a8137917698717f658b514bf2011b0d032525a6afc0e95e7fa3940a1bbe938fbb261520def74a8781865dcb593e83dfcc8ba7
SSDEEP 96:DWn3lxl+e+mSIEdefU5gHJYGBVoawGoQV/R:DWn3lD+/mSIEdefU5gpYGBVoawGoy/R
TLSH
T181D19DF7C3D9C66D894196F4A7156F1FCE290A14432C3C6AC8E4EE1B93E2872D11539E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 858B
SHA256 68a971a30f3823f7d0db321227dc861066f182a0262a1db80f04a02b2a604212
MD5 4c23d61bcc53ee2ed25a5c88f39fa4bf
SHA1 76bd8aff8bfa1ad6a210b0d1a04eace7e7785f3c
SHA512 e9d0843f1a10dc814a4c175a985e18e0ae37c0cba895f66ee97a7d172862b2763b1099fbca16d67b0bcceb7367df504fcff8d778d5ed5ffb39ab68c77f9e7e6b
TLSH
T1FC1148F7D17EB56B213C4DBB0E08B84625B6B431128068E4DE9781ADB0D18F32B12433
MD5 SHA1 SHA512 TLSH

Submit Download

aeeb1899-ce7b-4831-900d-99826fb391dc.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\aeeb1899-ce7b-4831-900d-99826fb391dc.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bb0db9840b3caa0485abc84303ae57e257315ed4c01f86dc0d8c1737fb8a136f
MD5 a4e3239339abf36aa0e67d510744dce9
SHA1 5aa79d3bbdc6f7a38c24fe6e51eb15f2cded2cfd
SHA512 e605807535c8c177e62be3937b0ab72351f2850bc576a8c84f8345bceca6ce164cc32984c4d0e474be882ae33406e5e23bb6fb19f77bf371018347d31fa83d6b
SSDEEP 192:RRXRv2/TYabP5kOv7H+pAPRp20uj9WHsb+WNnsIrOm2JL2PGJ5VyIsnAUge:RRXppAGqiUXsUwtj2t2PKfe
TLSH
T16B42C63EB950693B9CCBC215FA6677A7E7F5102164D02E84E6FC892C11EB6CC221742F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4171f4fbc37531b7c004967aeb7df1d9adb2d2cca31b421e0ccbced707cfc988
MD5 c67b81f0e06c578e71c40183cefda563
SHA1 a25a523b874aee647021e8a2388a8679d1ad15fc
SHA512 33a6ba45bc4ba0ce5adaf3db38d37306091b4cf6f70b638b20c8949d1b9d21f22d3154a01d73402be5986bc5f0de5b4bf5730a8cd639a1f30d8e188c62bb1b58
SSDEEP 192:RRXRv2/TYabP5k9v7H+pAPRp20uj9WHsb+WNnsIrOm2JL2PGJ5VyIsnAUge:RRXppAG9iUXsUwtj2t2PKfe
TLSH
T18442C63EB950693B9CCBC215FA6277A7E7F5102164D02E84E6FC892C11EB6CC221742F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 76a0c7a746727a99470ece2ef30c56e15798f8679c6ff441fe2862c9c7124eee
MD5 500a967aeedf8ef6df8171ea05dfeb78
SHA1 f88943f86ac060817b3498dd2a4df4d9fa28ea18
SHA512 8919aec61739e7f2caf44087d29d88753bff2fa1579f1c30698e955db57048b158073436f714570e8773a6d6cc2f84d2e069fd5fa5744d3fbfc86ce1e693a37b
SSDEEP 192:RRXRv2/TYabP5kDv7H+pAPRp20uj9WHsb+WNnsIrOm2WL2PGp5VyIsnAUgE:RRXppAG7iUXsUwtj282PmfE
TLSH
T13D52D83EB950693B9CCBD319FA6277A3E7F5102164D02E84E6FC892C11E76CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 19KB
SHA256 1f79792b823ff73f1b60b0a4f38627896a4b82d547a618db9edc40caac86fda9
MD5 75e8196ee133c01ede7abecaf2ace66e
SHA1 ba07e1c70921192644943e8148c373171ffa2af8
SHA512 c124a1a81d9be6c2cc01a1f7bcdacb8987af3694681c976dc8995318ae109e805aaf031f5472c6c12c8957eda7198802070a08255b509bd1a1b2aa8c8bc26c28
SSDEEP 384:6kj+F7KxkXqKf/pUZNCgVLH2HfgslzO7pLuLcSjsNXOD+F+ErU3JbHGGT77dMYv/:6o+F7KxkXqKf/pUZNCgVLH2HfgsJO7p4
TLSH
T1C192FA776C4C9E370F94DACCED177A8FADB5024B65E9886443FA582803D5ACF11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 202eb136805532be7c85a0c6e9892a0113042db440a0a09773b6e311aefbe921
MD5 9c35f18903b68307be94339224b164e5
SHA1 2da7b6ccaa1ad293e1f1d5a883e2d4a1c8fcda6f
SHA512 149ec8ac3888b375d47822e856ac037534a272421ca7c63527506d323ebd1fe741530757094b34e3ccdc915e246cb9527c50f473800f6be2875d086c41c94d1e
TLSH
T12FC022028200A002E00203B880A0A0E83388AFA0E20A038082B02A0BAC320A28023382
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589cb8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589cb8.TMP
Size 96B
SHA256 87f98e7a8f3afbcd34ba223dca4bc836a6d662109d75bffa73650b32a8285a3f
MD5 3bb41ba32e05f05cae5450e23ee91f25
SHA1 ce959ca2f7e026c43c92633f0254db6834290518
SHA512 7994d2be317e3fa5c5890071c6f93404c2986073337a9d3b088e42700f86c3034eb08860838a1b8f71ba593a3c50fec33ae05f49e1a16e13a95e7c1124709bf6
TLSH
T15DB02280C0032203C00303B0388280E83220CF30CA030222E2E02B22CC222308222222
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bc2674eabfc85fc8d2dba577a6c6aff257d2b910d3d4a63a291f5800d442a863
MD5 9e8046cf4a0dff494385aecec09e87a2
SHA1 8dff101b28bcb4821113d706f483757ead3b9f03
SHA512 634296ebb421ddd11f1a6289bc68c22955d643e63e0b4fcb52da9acafd82c7f779b129bebba647b9ed340e57c8afa51ce1362c39a5949301105a37928e97e78a
SSDEEP 3072:GZ/zWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:GlWDfxA3OnjrYQ9EU0/hEV
TLSH
T19BC302A11C3ABD660DF8EE98B40D3A60BFF4AC9A91875DD362ED1F4C14FA5C81179930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9b3c861006c152edd6ba7a04498cb9fa2b85f36765876918bcd6be5008be39c8
MD5 f77f966239c3010970c4299f92ce169b
SHA1 41cfc153ddd1aee63d790f3cb0cab90f427b4dd3
SHA512 f8400aa43c6f3ade145cea04371ed00af37d559f4d372e5ca98181d29692d30b0fa66f417aa11f2d012b2e4681437e5bc73478537ac0c77e2f2ad8753f5fa27f
SSDEEP 3072:mzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:EWDfxA3OnjrYQ9EU0/hEV
TLSH
T1D6C302A15C36BD660DF8EE98B40D3A60BFF4AC9A91835DC361ED2F0C24FA5C81139930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0c4a895a8b7dea9db9f45091d776062bfe8f0f22f60e2ccf9ce06cfafdf70624
MD5 6f8e8200cb8c49e69953c87fdbfe56ad
SHA1 7b86f345076a964efd2c97b13e164bff84241662
SHA512 0ab09eb723dd521e79eeb35422f2d09d52fb4b07fdd9591a9da051ab96e97bb09d6948d246babb1049162b70c894e77d850446f571bcd9a887223f2036c075f2
SSDEEP 3072:G2/zWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:GmWDfxA3OnjrYQ9EU0/hEV
TLSH
T135C302A11C3ABD660DF8EE98A40D3A60BFF4AC9A91875DD352ED1F4C14FA5C81179930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 6365d0541b750dae98aae8eda351b7b8f16492c6fa9255b68182d5f2bfa29bb7
MD5 cd12091bc7a165eb84fc85fb147d99da
SHA1 5165cbff2d8d4946c0848c4cb3d1bcbf113db8a9
SHA512 8cf52ab1d260febe48ae7c9be5494481567af62cc38bb3d05fb3d31aa4172362976ef2fa2d2dc02171a4cdb224a1834a2cd598a929559a68e0fdc062d99f163f
SSDEEP 3072:bZ/zWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:blWDfxA3OnjrYQ9EU0/hEV
TLSH
T16CC302A11C39BD660DF8EE98A40D3A60BFF4AC9A91835DD3A2ED1F4C14FA5C81179D30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 90e1b665f6471946ea86e4572bde9a050144a88667204e09357260f269b1e627
MD5 28117abb10e0ed2866f918c2a3bf21d8
SHA1 8d6bdbf287ea91a878d1e4112ad21b3d5610004d
SHA512 416c0fd1d46fdeea394f23a3f1606676ad5db18678bc4b61e766648639d9ee9c384a30e9d58bf174a276257d3ed8914f217f57945a7663b67d4f6477f936a4c2
SSDEEP 3:MsEllllkEthXllkl2zEkl0vJl:/M/xT02zn0vr
TLSH
T16C440404FFD01545C5045030C013C3540371F4100511575774535513DDD75400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

plkncppcgglcjdkmcdeajhbfccbnnoee_53822.crx

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Webstore Downloads\plkncppcgglcjdkmcdeajhbfccbnnoee_53822.crx
Size 629KB
SHA256 106002dbd2de0f0c9456c1663baee97164d12eaa571e2301300612f2edd02e20
MD5 0eb87b0e4d23fe555ad18bf9709f55ef
SHA1 c952d68980b1de158a6013f1a4367586df9ec20c
SHA512 929607888278854ec93f245d14eea523192ac44dc42924a8873f460c89f23d3ca11891366cf7f56c8d581788f4fcbc6d9b618fdffe001c110671d6c0b944e7fe
SSDEEP 12288:2NE9ZqqqZZcd7OpDGwtIlYP0u777777777777777777777777777777777PrsInw:D3qPW7OpDQlYPF77777777777777777S
TLSH
T1F5D423DA0A86CB5BC5A749B835D9596783FC1AB84A2F3CF01FDD5403C5E273809A87E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

plkncppcgglcjdkmcdeajhbfccbnnoee_53822.crx:Zone.Identifier

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Webstore Downloads\plkncppcgglcjdkmcdeajhbfccbnnoee_53822.crx:Zone.Identifier
Size 342B
SHA256 38e30b3612b69984f3fc9efdd0b215291379cfba337456624aca9e5c41f39e61
MD5 3209c60402944ff83d64210ef21cb30e
SHA1 12586a0d9c63212aed811f8f698995f1c15cded6
SHA512 c9797561da08f0e554d9a4d70451062c0f96cf0beded96d2378210559a17f528a50b029e045bd730420cff588bcc88c729f2d5368c89adb1f9e4bc678fce25f0
TLSH
T1B2E0C0E378440F414B00B1CC30A4D51EB13826444CAD4190E840998F5A559BD45A09A2
MD5 SHA1 SHA512 TLSH

Submit Download

icon128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2596_1751442984\CRX_INSTALL\icon128.png
Size 8KB
SHA256 6548a74d8d8ae49384f712debf8edc55af65089db14435009ffaafde2bd2f3c4
MD5 72e8446b7cd9638dea38f65dfc0f89db
SHA1 5e34840b3ff70d04b54ee4908e845b7aba7843a1
SHA512 57f076301e61c5920f33b4722442ddf093c710cc1218c32fc3121ac238a3a40dcac8e19c7d4dc18764e3eaf063473b7db990d1e1c078f782b692c7db576f2f88
SSDEEP 192:s/u8Kd6SAb6fTK6gQw8t8WEEfchxYrEiV0RBf9Fhu1j8qAK:s/u8PsTK6S8GWEEfchKQiV0B3hAgql
TLSH
T10C029F92624313BA94BF0D35CF91276531D3248E4BE7CB7350BC801D5952AE720CAF99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon16.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2596_1751442984\CRX_INSTALL\icon16.png
Size 568B
SHA256 6e4742b6b60b8d04259f3dfd93f0d344ec5db7e46b60749804d128921088dbd2
MD5 673d6a636de509dd04c167201940df85
SHA1 cb4e0baa8dbdabcf0308d96048a8182f020364e4
SHA512 48394b4da2fc91c7d53c7c73347df56bbb30366b535b2cec64e4a42c78d4309ac3e68ea630aa4c297b97a8a5335b5adecd775ca9a1da0cf653035c5d3ba26e02
TLSH
T15AF0E1F7AAB84C28DD5EACB2F114448CAD214386918095182A08C47A6537189D4EE352
MD5 SHA1 SHA512 TLSH

Submit Download

icon32.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2596_1751442984\CRX_INSTALL\icon32.png
Size 1KB
SHA256 a3ce58f83d2e4b31fb5d703f0823bf5120e7663b3c63da38687f85d5ecc9f139
MD5 7d79d5bdd74932cc834a571a25e106ea
SHA1 c17b243af414e02aa0ab145234bc94cce471d308
SHA512 7461e78afdbd8fbed951ec26ab2691ce123374c506afcf8e75383bc282d094b980f0a067231831a0c915a7078be8aaf93f5f3ab941ca5a2023873c89c5c04e90
TLSH
T16221A3AEB69B7F05A0D7132AAB26D42448E790B142324C84AAADD0A2142368652DDA85
MD5 SHA1 SHA512 TLSH

Submit Download

icon48.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2596_1751442984\CRX_INSTALL\icon48.png
Size 1KB
SHA256 5a629fbb565b2ac3a50799d0be2be9d9101429a2f568f0171e1a97828fd8a365
MD5 3714bb40dd8e8756ed8f749053001e68
SHA1 d57f485389eb421f5fafc8dffaa514019b2ae241
SHA512 45f313024db40f83ad5b92bfd70fba80bb8ebc26007c89fbb03d5f81b916b38bbd6a80deeb8d317b9f1fbb7216eae04b74f97d2f6738d847392b7f5f20d0738a
TLSH
T112410A6B90128F4C7B57D37DA801202E898A35FB13D90551156ED09874FD5AAA3563CF
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2596_1751442984\CRX_INSTALL\manifest.json
Size 1KB
SHA256 2d26ac57371a8e00e8cd91d14f2d14f90e659c2285ece13c57cbec1a29e5083f
MD5 c9b689bc3a0ac4d8d83ce69b408f6567
SHA1 a9488a10536ea1bfe25d8c5455033abb7c2b69f7
SHA512 03b5a575d8a086b0b22ba25ef8c82191cb47a93ce12bce5180fa5c16fc9f8d2ddd760be236a5f3b627d7b6beb2b226e27880ab9abd6f687be6ad383e28729785
TLSH
T1C32114274684D47717B497617CB51E82F664332E6604686F367CE10CCFF2AAE5041B8D
MD5 SHA1 SHA512 TLSH

Submit Download

service-worker-loader.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2596_1751442984\CRX_INSTALL\service-worker-loader.js
Size 45B
SHA256 80a74b74193d2ca20abc730a353d3334f9a469b690595d285a75a552570e0de1
MD5 77351e5a8e973a62a2b90046590b18fb
SHA1 f3fdbed775bbb95cfdba0310c3b0f1eda13af539
SHA512 52107bc57d98e63d772d3a1789d983cd0ed09e7cf368fd3c1e378b55d336ef31b5085f58f290102755f03a661a1aee2f1272a9506e75862b6ff7d74b3ac015eb
MD5 SHA1 SHA512

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2596_1751442984\CRX_INSTALL\src\popup\index.html
Size 332B
SHA256 027b8561a56cb304ff2ef413cd146a883c9712df7bf9fe099cfa33c3543d6248
MD5 734ecd641b9120900871b051cfc4eada
SHA1 56e0e5e10d9742ee7ef5e800b04fbd42d961b64d
SHA512 c92c9f8c78ccb79d3fb0c62020e67a7cd379b85ed92a2bb8839a45d09919b8af54b158bf4c7c39643fa8bf52863fceea5f39bd68af6350f035e630d4369214ce
TLSH
T133E02648ECA04911832427886EC0B8062993F7478289E60C20F760B89F683C7CCCFEB8
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download