65534c6b40438c28bf946aea5e83a3061920f40053efa3f9324d326547874473

Analysis

user interaction
yes
max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 14:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
quiz/quizes/brokenquiz.txt
Size 16B
Sample260905-rh24psec96
SHA256 65534c6b40438c28bf946aea5e83a3061920f40053efa3f9324d326547874473
MD5 37af044772c7e55001fcc48f4b3e4759
SHA1 6fbe7661e18ddad947c4baae3f120117a099e32c
SHA512 debdf2e8109fb72165534ec5241cb18d9a386acdde9044b4c81561fd16289b2353a69a13b8253c8ce0f376b3df5b7f6ca61a393905b6fb1f9c1159a83f96dd36
MD5 SHA1 SHA512

Score

3^/10

discovery ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3808	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330911739705024"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{D46DF96F-EF0B-42C2-BF76-7D3DFE5986E4}	chrome.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
3116	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
1328	chrome.exe
1328	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeCreatePagefilePrivilege	2676	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe

Suspicious use of WriteProcessMemory 60 IoCs

description	pid	Process	procid_target
PID 2676 wrote to memory of 4288	2676	chrome.exe	90
PID 2676 wrote to memory of 4512	2676	chrome.exe	91
PID 2676 wrote to memory of 4512	2676	chrome.exe	91
PID 2676 wrote to memory of 3808	2676	chrome.exe	92
PID 2676 wrote to memory of 4952	2676	chrome.exe	94
PID 2676 wrote to memory of 4952	2676	chrome.exe	94
PID 2676 wrote to memory of 596	2676	chrome.exe	96
PID 2676 wrote to memory of 5944	2676	chrome.exe	95
PID 2676 wrote to memory of 596	2676	chrome.exe	96
PID 2676 wrote to memory of 5944	2676	chrome.exe	95
PID 2676 wrote to memory of 3572	2676	chrome.exe	97
PID 2676 wrote to memory of 3572	2676	chrome.exe	97
PID 2676 wrote to memory of 6008	2676	chrome.exe	98
PID 2676 wrote to memory of 6008	2676	chrome.exe	98
PID 2676 wrote to memory of 2568	2676	chrome.exe	99
PID 2676 wrote to memory of 1748	2676	chrome.exe	100
PID 2676 wrote to memory of 1748	2676	chrome.exe	100
PID 2676 wrote to memory of 5244	2676	chrome.exe	101
PID 2676 wrote to memory of 5244	2676	chrome.exe	101
PID 2676 wrote to memory of 1316	2676	chrome.exe	105
PID 2676 wrote to memory of 1316	2676	chrome.exe	105
PID 2676 wrote to memory of 2816	2676	chrome.exe	106
PID 2676 wrote to memory of 2816	2676	chrome.exe	106
PID 2676 wrote to memory of 2800	2676	chrome.exe	107
PID 2676 wrote to memory of 5036	2676	chrome.exe	108
PID 2676 wrote to memory of 2800	2676	chrome.exe	107
PID 2676 wrote to memory of 5036	2676	chrome.exe	108
PID 2676 wrote to memory of 5576	2676	chrome.exe	109
PID 2676 wrote to memory of 5576	2676	chrome.exe	109
PID 2676 wrote to memory of 4936	2676	chrome.exe	110
PID 2676 wrote to memory of 4936	2676	chrome.exe	110
PID 2676 wrote to memory of 5692	2676	chrome.exe	111
PID 2676 wrote to memory of 5692	2676	chrome.exe	111
PID 2676 wrote to memory of 1324	2676	chrome.exe	113
PID 2676 wrote to memory of 1324	2676	chrome.exe	113
PID 2676 wrote to memory of 4924	2676	chrome.exe	114
PID 2676 wrote to memory of 4924	2676	chrome.exe	114
PID 2676 wrote to memory of 4524	2676	chrome.exe	115
PID 2676 wrote to memory of 4524	2676	chrome.exe	115
PID 2676 wrote to memory of 1504	2676	chrome.exe	116
PID 2676 wrote to memory of 1504	2676	chrome.exe	116
PID 2676 wrote to memory of 3552	2676	chrome.exe	117
PID 2676 wrote to memory of 5704	2676	chrome.exe	118
PID 2676 wrote to memory of 3552	2676	chrome.exe	117
PID 2676 wrote to memory of 5704	2676	chrome.exe	118
PID 2676 wrote to memory of 5316	2676	chrome.exe	119
PID 2676 wrote to memory of 4120	2676	chrome.exe	120
PID 2676 wrote to memory of 3100	2676	chrome.exe	121
PID 2676 wrote to memory of 3064	2676	chrome.exe	122
PID 2676 wrote to memory of 3064	2676	chrome.exe	122
PID 2676 wrote to memory of 5908	2676	chrome.exe	123
PID 2676 wrote to memory of 5908	2676	chrome.exe	123
PID 2676 wrote to memory of 1264	2676	chrome.exe	124
PID 2676 wrote to memory of 1264	2676	chrome.exe	124
PID 2676 wrote to memory of 124	2676	chrome.exe	125
PID 2676 wrote to memory of 124	2676	chrome.exe	125
PID 2676 wrote to memory of 1236	2676	chrome.exe	127
PID 2676 wrote to memory of 5704	2676	chrome.exe	128
PID 2676 wrote to memory of 5704	2676	chrome.exe	128
PID 2676 wrote to memory of 1328	2676	chrome.exe	129

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\quiz\quizes\brokenquiz.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffd064bc728,0x7ffd064bc734,0x7ffd064bc740
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,8078190199851137271,10786919856691245562,262144 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=1928 /prefetch:2
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2156,i,18062681612026717435,9762612093324869249,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2320,i,725194594830309407,5208238798154498561,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:13
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3316,i,15777775807991651504,4506108132992644496,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3312,i,8992229212235322490,14176572361447818977,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4720,i,4332350530316970051,12074810013434967671,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4864,i,9363100015022080118,12334906879079830631,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5396,i,12017840944082345874,9359431012181642396,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:2568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5496,i,10215596447141867330,11941873009825701592,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5536,i,8394664934620850181,7911406131064607651,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5836,i,16994980032488706691,2662309256074164520,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5784,i,3938949872485081061,5290307776265666124,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6104,i,9548940586031606541,17536512068475280671,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5496,i,1441461710537902852,16599318489531190623,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5684,i,7587572082523398674,10340038930243382381,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5632,i,2203449371697521330,7962522191575327664,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5812,i,11208949958437851786,16019074677202981768,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3432,i,15025001234929397094,15072212949826846868,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:14
  2⤵
  PID:1324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3356,i,4799893795817897431,12713227739186208924,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:14
  2⤵
  PID:4924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3456,i,10528983510287215632,10936485149542894706,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2816,i,8274939426594643446,3904683276566815687,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:14
  2⤵
  PID:1504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3576,i,2722534974618408672,9131162225477925258,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:3552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3460,i,16928733332234209739,14130780301627097340,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:9
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4772,i,18159462739769260845,133606407135707756,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:14
  2⤵
  PID:5316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5812,i,8762682991818985134,2402941604475646379,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,2411960860326873180,6180705708153010546,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:14
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=3404,i,367303023948116237,3128919217372062304,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4844,i,2729777629688442461,14322002636610342699,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=3952,i,1750320782074388231,2311152804358442397,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,4838218363487392399,16121024897868925721,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:12
  2⤵
  PID:124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6164,i,2318942786734440868,1568231968201281210,524288 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6540,i,3037344553831429135,16170269548162529508,2097152 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6628,i,12423550520405370904,11711300002928854236,262144 --field-trial-handle=1940,i,12479910879667291105,11674532450687010084,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1328

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1204

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:4968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:1656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
Size 21KB
SHA256 b9e3d011c7087541d4918703e43435f9407b8113fef5bd6d60220438acb27210
MD5 ce8f091c5ea755b9c78dd50566e30240
SHA1 4483642b912a881350ce30b7f38f977a702b5bb2
SHA512 6d6a1a708d38d8caab4373e4e4b8eec25e7f816d530c832fcbb808e1ffa906dba65449c179a6d3f476d2e5a0015b521647256d2a96f068cf0f8f7d03e15de9fa
SSDEEP 384:k8n66HhfttS14euHakg0UlKBlHl3R3w/QfIOWPWEysKed7nFYg6gMzAz0R8F7rGF:k8bhft+uQ05FhAYAXuwxOgmArGF
TLSH
T188A2E1D1E0C64866E113015E7D9F57A7C5FAC8A13467C1E88F2978CADC563FD12B0832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
Size 53KB
SHA256 edd45d53fc64806b2bbe96ae0213bd4dac0005c9ebef26785666170f2e430b3a
MD5 e3e25fd4d4a1685d3ce41beb511d7bcd
SHA1 753ed61abdf1c3b182da2d3197e1cfab39d7eee7
SHA512 4d1d8aa89274137c9af412fa5c1ec54bcaadf84473bc3adfaf9e5ec8668a9d3f0b777a810a481b0d455e2296f5fe9f44d18fa72ebefdd87a741991e3c5d5ae6a
SSDEEP 1536:8khOjN6tYD4kmymk/xyZx3xqzNax+gyaoInrbUuDG:nh0stBkpxyZx3QG+gkInPVG
TLSH
T1AE3302E5DF2C71962A4E993926874C20B36C84B7E6311A4DE7C181ACA219F4F985D7F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Size 412KB
SHA256 b4d8c08e3ab32e4c93228f471398ecd18168707bca8bb09bbc0bf19a317a831f
MD5 b3ae42ed069dff23a94b1093b4494c63
SHA1 efde4a700757e48adcb889ab3a82bc240faeb76a
SHA512 2908605dd0e588c7440ea0c41178e6ad22657609d9c6f6205e3a84c549502c76548d776823cd3249994ebcd15e90241d491ed736d63ffb0f4afd5ff956ae5bdd
SSDEEP 6144:9DYZnTRQSsLDKao5tp4szMSyBa3jiMhahCq0VyTu75RloXVTM3yfvvGJgxMrM9jU:9DiTRQRHSphHyIjChCqCyTu7KpyluEUa
TLSH
T1DB9423512774A7DD4048A55B00CE0BEE585C3DFE8233C279A9091FAA39ACD56DADC0BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a42221d5facd83c5f060579a6a6446b10478d723f094ac390746afd1f5896e6e
MD5 24dd91ea7a3382051b9d351ffc592961
SHA1 1de88a814ada536d383639e392c18c9a779262c4
SHA512 528842bd3af71361b80afbc2bf6b242b63e3883ebe547f21987ce182264fd9d0f2e239d4e409b65fc9ee4057ac1e28f8f8c4f27b0e797345bb6cf6739c8c3efb
TLSH
T12471B8D09ABE4CA3FB873931EAD0994374BD195831CB0ECB0186D5BE3A8D360348706D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 1c8c5d01733a0b34deb89499b0bc48dd1d73ac886c8752ded59368a54f82742e
MD5 13d57ce12e48b9506dfa5b809a2a57dc
SHA1 08dab7ade96c5de450a66ef7b27a72d46a7cf1c0
SHA512 9fab10305d2d9f9fa3fac10554f1ea030106bbae8023f6e1175487a0e1ceb63987a6c5bd3b47ed513d60d09ddb56fb328cb29e1d9af8188ed2030bfae3f734d1
SSDEEP 192:D1dPd3AljJaJhKOUFoBHQI+l6Zr6maPYQVIKIo2fv7fPfNPRlcvIdYEcEw8bwhKw:D1dPd3AljJaJhKOUFoBHQI+l6Zr6maAy
TLSH
T12632AEF7C7D8822DC81156F49B257E1EDE290E2483183C6AC8D9EE4BA3E2471D25568E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 51bc6c9e0ccf841745ca73b7bed6fa32108ca60dab63d5a4f4cae43992cbef48
MD5 b69618f2cd1dfced5cef7892ebc355f3
SHA1 90421dd1e11e5caf39574f443fc5e88c0c351c86
SHA512 bb4ff6450d2ae6724db4923205a76d8deb6764666625829a2b373d0f45ed85ae588ebefb6a7ce8008fc4f7fcc691deae8d87b926833d5723df0ad993e62a2a99
SSDEEP 384:D1dPd3AljJaJhKOUFoBHkm5qI+l6Zr6madVIKIo2fzf3N5lcvIdkabdCHNHPwmtE:6YNIoVh9s8OyL
TLSH
T10752BEF7C7D8862DC91156F49B257E1ECE290E24832C3C6AC8E5FE4BA3E2471D25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 04b1b0f1df13c2c10a68625253aa90997648f50de1a36f2bc488592bf79568d8
MD5 ac2adf1ca7f009ffce558ae21929cef2
SHA1 de851f1ccc07f5b89aefe72172d43c2921062b58
SHA512 1e87c63f75b9d1a2b307ee58ae24068ddc565fc7704444663650f1fc5152f5b041984755d60133f66b5634ff4140b56229835145f35c9437749117cba2deb571
SSDEEP 192:zR9cBhKa3qpv7MgAPRp2iCaXIE9XxHsb+WNMAwXo4GjYo/2uQ3U6uVyIsnAUgE:zR9mhKtpoRXJfwMWRY62uQoE
TLSH
T1D052D72BB9106E3B6DCBD22DF9617B57D7F6102165D42E84E6FC892C25EB6CC221700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 f0bc87a108db72510dca1e871e4c6c37cc60a85355cc06f32ed7ef8e050db7b8
MD5 b9030175ee6f87e1db28be9bf3f6b2c0
SHA1 1a34eb19cb38aba94960752be5bf4694354f4c1f
SHA512 1737414f1e731e8e86b57d287064fbe65ee4bc0ec05c78a06b132fc765d84cd2d2e0528ef022e9aadf0642a00d67c381f428c5a4693d810bcabe8d94adc17e28
SSDEEP 192:zRBKaPhv7pAPRp2o9XxHsb+WNnXo0n/2uQ3U6uVyIsnAUge:zRBKYxAXjfwY0/2uQMe
TLSH
T19342B82EBD14693B6DCBC22DF9627B53D7F6102135942E84E6FC892C15EB5CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 dd97516b2e3d5902945b1ee13e04d25ce3318b545780e2b592b9e16719a1fe55
MD5 ff5c6789ac4bfa52b8fc5499a632152d
SHA1 b911cf9c6c3300eaa7bbaf7a22a6621f2aaa17b5
SHA512 eab88a6178b6f20db1776eadc8d260344970a461d0ced7f207ec9b11df08b87ecfee249ddd74565b5da1e785ccf69680377de987731ce72e0bd79c78773881b5
SSDEEP 192:zR9cBhKa3qvv7MgSPRpCiCaXIE9XxHsb+WNMAwXo4GjAt/GV23g/2uQ3U6iVyIsv:zR9mhKtnozXtfwMWRAhg23i2uQ0E
TLSH
T17B52D82BB9106E3B6DDBD229F9517B97D7F6102165D02E84E7FC892C25EB6CC221700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9ebde459bcf53bbcc0e3b8e97fd49fa5e3d905cbaf0642793d91878fc85c05b5
MD5 d7b6a8276f2c383a5e4e464420e6cb5f
SHA1 aa0cfaf6073646f0c6c170bd31b1e2a2d455cf98
SHA512 4d5fd231030f9edf20dd40c1e5cf6ee99e6f90b0dacd6944e212df0a39eda0bb9f0438836fcf2653b176c51edb6cdc474d808651a8c97887b9e757b35267649a
SSDEEP 192:zR9cBzKajhv7pAPRp2tUd9XxHsb+WNnXo4hm2l/2uQ3U6uVyIsnAUge:zR9mzKMxAXrfwYN2N2uQMe
TLSH
T1EF42A72EBD10693B6DCBC22DF9627B57D7F6102165942E84E7FC892C25EB5CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1a9e4e477f0a5ed8b06f6dfafcd6721c7841c416aea4b0b81e29aff46040481b
MD5 ffb31beb53b9d963cbba72bdab14d0ba
SHA1 314eb266e1ea9748648a59c7f1cc5af203bb5ab6
SHA512 6a7ee1579c294fe23807d9ec027432ca58e47a5e1021aaa268aabd71157397ee62e309d7e019e4d0521d90bcae713a3c6df773394884d56005c04f8d2ca52487
SSDEEP 192:zR9cBhKajhv7pAPRp2t5l9XxHsb+WNnXo4c1ea/2uQ3U6uVyIsnAUgE:zR9mhKMxAXEfwYVes2uQoE
TLSH
T18942A72EBD106D3B6DCBC22DF9617B57D7F6102265942E84E6FC8A2C25E75CC2227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 85e93e7c7421935f0911b856282522aa7697c7f7f3e4e91fe9b68bdb1dee2254
MD5 17b14bf97159ca9e7782c9d7e031bfcd
SHA1 5412ddbb770ca1e448ec81ffd24d22720b4873e0
SHA512 fa87b1df3588a9d8536d2ca0322b2c03b19cf27561fcd164ff9c5ff208fc0e27dc790a5315f566f02886adf9352dd827c1148a40ca6a9d5dc8c58be7d73dfc76
SSDEEP 192:e294K6vX7KxkXqK4I40pUZNCgVLHrKHfFKslEClTXzKD/cb+ErUkKN9G6jBTK8/T:/9j0X7KxkXqKf/pUZNCgVLH2HfgslNT+
TLSH
T1B332D827A48D9A3F4FD8D519DC036F8B6DF5019272780C24A7FF5D0403A978E115A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\3d16a97a-d65a-4e79-a720-dcbf8b42c8b4\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bffde6dc-e2d1-4454-9297-c6e7f6299517\index-dir\the-real-index
Size 2KB
SHA256 07503166fc41bb5b1cd6103f6a4f5b26084e94a3a33965dbfe21f82b0d274edc
MD5 064c2f62591027ca44fbc6dd193d73da
SHA1 59a885a0bf1b34eb53cf09667d0f355cf10e0227
SHA512 5908c32427a5ba6919bdfe273d2e3db915db14babb9c97c6384285c1ebd6c5bdb1edce5d1e13553727f96a672fadaec632da77b5e482f7e026456a1be1ee5531
TLSH
T125514F4CC8C05BEDD87661BA2C9021B197B52834FC58C791D0A4F5A23842A692B476FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ab21b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bffde6dc-e2d1-4454-9297-c6e7f6299517\index-dir\the-real-index~RFe5ab21b.TMP
Size 48B
SHA256 502cde4305ce0668159e9a30358998dc8ad70abd079e7af069ddbcfd98dc427c
MD5 528c269d0171b6ad355e2bf1dcd01b35
SHA1 f2a04a09a11100d1dbd41dd181565a241268b2d6
SHA512 7058255d15db2705185575d5792df5d2e2873cacccf180305a3c6a9c3a75a4268c85535738af9e0e2dde1e3b27d214522f71e2c1bc4999b39f48719aa157f3f9
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 0aab245e6925cdc504fab04bca97b20435bca7b14b4755bc0c1727e455c3f327
MD5 b716a0f95405bdd7face5a97cf04284d
SHA1 c254812b9c84f5f4f222a48c6b53eab949c2852e
SHA512 dc2c2e520661c8664fb2c8a312074c9639d8a3f23dc026adeaf6721c39ee3581a58aa24e9b6f77b2b0effab14b24e2ae4ed08fe8421d6827218f66da6e1e344b
TLSH
T1D1C09BD65410458B4E749AC830347B7D954BC549D5C9DCE495045086707A9138446D75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 eb5ee13371aba953e1be2c31ffeae9b3daa52aea84de6caf10a2d55696643e39
MD5 2f51bb90ec5d31fb94909ec9a9a6093e
SHA1 38e9402c1cf0db221016fb275be8c7ddeb4bf045
SHA512 a85b02a06854fc5877f109c397df1c9763a1c97f6c8fb2a00347739558247e3c9fd95597c553cef0846a3bb7c0e5612295e8a7d5f26f71799ff58e65c4ac57a7
TLSH
T1FAD0A9DA8130898B1A389AC530383A5E504B5D4AE982C8D49A48B083347A503D805A71
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 d83efe6c2a2ce7263277c0aea6560a6e26c01e85adb007719a7334b6090c6356
MD5 9bcf893fb0073839cbf8f574e30b65ba
SHA1 85eab6a28aa8d00c19c800604db592063769d918
SHA512 c39281214582270dfacde7c4e7e848053203d6af7c89140ee57fc5fdf2e7e3e83893133ae5b0d3298bf3c223ec11028869dffe1f9faf8bcb6594718c8875f994
TLSH
T1ABC09BD68410458F4E749BC830387B6D954F4549D5C5CCE49504508674369139405D75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a4632.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5a4632.TMP
Size 137B
SHA256 793864ed1c695000c77197b67aa602a4cfad90867eb37d2feac2b7c63bb46c01
MD5 c6e6232dddf1f28ec95d87de7ceb0693
SHA1 c2a6d6fa15c130849ad9adffa3c9e0f299d75dc6
SHA512 00e42cef8b552db87c49372ee029412190b30067e5d11381538707db7abfca9309a7fd9a782998483a0d89f1e733110b3be1db671c4239f8c42537b3e990a50a
TLSH
T1DAC09BD64410468B4F7459C530387B5D955B4D4DD9C5CCE4950570867036513C505D75
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8a25d89271219ef76064d4f9e7e4535e7292f57be778425fae8e66400d512520
MD5 222eb7a572ade5a90f24507e8bc63419
SHA1 706068e117a827ac7bfa3f5cd0703c5287695df5
SHA512 b2392122a14a054c46078bd707cf280c7ad197ee19eb67c7f85592420fc3daff41c4a274533b90fc80bba593a204f0b391570c62dfb20ef7c007c59e40605831
TLSH
T11EB01205804A9600CC0045F0260C505A21107E218010020396D0D6C9B85B0E05154200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 c4fbd0e359c08bc883b27993ab87bc717c141938397d0c11df1317060afe8239
MD5 decce118d8b3904a3669f55c85e3fd87
SHA1 842492db4d18f2601c92bd36161423923adf9602
SHA512 51755b68b988ec1575dfac932fb602b51d3deeb5051599c7a66ed1981613864a303d3b997d6558ea507e905b619d7911025926a12fbfdc1a610aeb5605a89ad5
TLSH
T15FB012F462000401C65113F040E2CC80371118026A47013320E09358641122101115C1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 c6b8d66ce05c0b2c626253bb4bc4a1eec8aaf11e41e25614dbd8503cb0f3abac
MD5 4de472e2949241d04f5bc744cde21223
SHA1 7c39dea82918778bd25c173370d23cc25f898d75
SHA512 29a41ba786dcbd4c2ff6f573a292bfc3980f0c32f4b1e8c2ba33c2ffc27cfcca821123c16c0919ddfeb733ef1c8644a47e1deca9a6108a901365ae9d3be5d490
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 fa2933c0f4fcd3a6122e803fa36e83cf8c4870c52de2068f20c61ed9ad08630b
MD5 7a39dd070c852328bed1e1ffd29f6ea3
SHA1 91aedcc50e986bdac92a47af5399d7c7dca4839f
SHA512 02509f62d50d5b337e050eb09c5735c7e065fa9b3634ea3cefd199dfdfcf8bb83d96107cbf7eb79f8b9edab07ae444b0dbe9c46a466f084aa258d5994e6648ee
TLSH
T1E1A0025145C10421DD406374A166054633534C68BB51A703AD97C6DDBD5B1D14155734
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2676_546780121\Shortcuts Menu Icons\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2676_546780121\Shortcuts Menu Icons\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2676_546780121\Shortcuts Menu Icons\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 38273c5af0433f5d1d2d7752743a53512efe8992aad36be4db700e5e17273f9b
MD5 628ad28dc0f3cf6344bce243b8f20986
SHA1 2d3b5102cb713422708d5796abf7ecee879c78a9
SHA512 b3cca92e618ce13142aa58045a6d55227506225a02674d955ca46f3ccb305d94dff7ae252f61d1e94f2a99b1dd23b5485624cb23d338cade04bab6799e6fb16d
SSDEEP 3072:XZCju75BdurCz++A6CNGEhVgjdVI/+Zn26YqxNjbtc:pgyHdua++A6CsEoU/+Zn26tbtc
TLSH
T154D312F39C880C16A51A95EC350E9285CEC120D3FE8C71F895519D8AB7EBDDA241BE73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 129KB
SHA256 6a8d820d8bfff630a2a63e208ea5bdfa8c7e269b374782d95a2c61b56ed13cfb
MD5 1c0ecacc361cae8ff98ebf4269f4312e
SHA1 d250e9dda1c869fd591d5664d00acbcf2078a583
SHA512 a599e6544e09712eb2c6137724c0dd9f0779176a6977255b1678b3342e9cfbead30404d95a6b0ba1bc27c86431f5208159ef88ee8fbed6a8f4f6cd4ccb863626
SSDEEP 3072:/UZCju75BdurCz++A6CNGEhVgjdVI/+Zn26YqxNjbtc:/cgyHdua++A6CsEoU/+Zn26tbtc
TLSH
T1D2D312D3DC880C16A50E92ED351E9185CAD120D3FA8C71F49662988DF7FBDDA211AE73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 bf6168cc5ca153278753784b8dcbd15c49e7329435932dba666507856fa8c601
MD5 4db7e0a57ae8a39c2b6351ddf1d75a5a
SHA1 7513c413b2007bc605062ac8bd06fbd4dbd26c80
SHA512 8f319691a172170d32a16759e7abe6bd5dbba476492fe6eb9c3b16d8506a8ce82765e24259f887b8d65e024773ef17f8b798e88d610ed16ed33a3b7c50fa30ad
SSDEEP 3072:nZCju75BdurCz++A6CNGEhVgjdVI/+Zn26YqxNjbtc:ZgyHdua++A6CsEoU/+Zn26tbtc
TLSH
T1FCD312F39C480C16A51A95EC350E9285CDC120D3FE8C71F895519D8AB7EBDDA241BE73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 2578ff12d1af84688be25bc186a817135744dc086dd31a465e182e66d830a8b7
MD5 8283a02965070ddcd4d46f8c7bff74c5
SHA1 20ba385b2767235154a41e4ecc104c24a3752646
SHA512 620b2fb35c41e2514bcb5480d29bf9502a9002c36953b2a57800ec65843221c3aee010fd180274638c29c565f09f57bcf38e2f86b3e98592b6a70974896a5a59
SSDEEP 96:xC0d+r2io+TJ/E0f6m934zM4RDotok5amDsB6nGyvn0b4T8hybJv4a:xC0ITo+TQ0InDUDxgPPb4T8hybl
TLSH
T13EA10935A0284D774476D44AF1622A43CFB97067E9B2AF90EAED0E0D24F70EC1341A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 44ef4c8692b97d5c237f6ad6410f2f922f69c5f0b2a8f28eacbe9923a67937d5
MD5 94e69a84fdec29aea7e487b34a56c757
SHA1 f73408f665e6fb6d6e5d413a5c2a09ed34cc8818
SHA512 fd7252b704ba9fb0db33ed8b02d62774df35bfdfdd89e74792f336b1fd00227abe71cd7058ec1f08c1ac7f6388203bb9afdf05301bfa4fcd00e8f2ef29c544d8
SSDEEP 96:rC0d+r2io+TJ/E0f6m934DM0Sl8h4otop5aicDsB6MGyvn0SvQxwzQo1hjm+9hKM:rC0ITo+TQ0IriU2UgwPSIxUhjm+9hKUL
TLSH
T1E9C11831A46C5C7B06A7A546F0123A57CEB4606BD951AF60EAEA0F1D15EB0EC2382527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2676_548619841\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download