3fe1a0104aa293b49f11cb88d77338e1057f9f6582cd0c065f473366ea0a1168

Resubmissions

20/09/2026, 22:55

260920-2wc2va1y8l3

20/09/2026, 22:47

260920-2qphpafk8v8

Analysis

user interaction
yes
max time kernel
184s
max time network
188s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
20/09/2026, 22:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MarjixTP.exe
Size 291KB
Sample260920-2qphpafk8v
SHA256 3fe1a0104aa293b49f11cb88d77338e1057f9f6582cd0c065f473366ea0a1168
MD5 24ff451f0ec95476dfd781f5f17221d3
SHA1 84d7c555f9242860745aa094d69040a95caeedb7
SHA512 46f4c7748ce43afcc92b1ebbe105f0e9b65348c2478a3c1222150c7c98b9cc5ab70c069b6db4be3f25f955c87fd1728a4c4418b3d759d00fb79d024f36b7bd2e
SSDEEP 384:uOIKbLLauG+t6TLTLdp1y0uIu0Yd33s5YYI57sn64V3tI+MtUVDNFSUAMzTzzeK4:uOvGi6TLv7u0Yd33s8Cj9IGFdAp
TLSH
T13554D8137641E01DCDA5053E485AF1F875ABBD849B308606BEF0FF8F74F1A9480E6A5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence ransomware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
74	5708	chrome.exe

Executes dropped EXE 3 IoCs

pid	Process
5856	MarjixTP.exe
1332	MarjixTP.exe
5756	MarjixTP.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
11	raw.githubusercontent.com
66	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MarjixTP.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MarjixTP.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MarjixTP.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MarjixTP.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5708	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134344181250620993"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2304238888-3968896904-642854331-1000\{C0F9CABF-320C-4C2F-A827-776FF12F3126}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
1272	chrome.exe
1272	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe
Token: SeShutdownPrivilege	4492	chrome.exe
Token: SeCreatePagefilePrivilege	4492	chrome.exe

Suspicious use of FindShellTrayWindow 51 IoCs

pid	Process
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe
4492	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4492 wrote to memory of 1592	4492	chrome.exe	91
PID 4492 wrote to memory of 6056	4492	chrome.exe	92
PID 4492 wrote to memory of 5708	4492	chrome.exe	93
PID 4492 wrote to memory of 6056	4492	chrome.exe	92
PID 4492 wrote to memory of 1604	4492	chrome.exe	95
PID 4492 wrote to memory of 1604	4492	chrome.exe	95
PID 4492 wrote to memory of 5324	4492	chrome.exe	96
PID 4492 wrote to memory of 5324	4492	chrome.exe	96
PID 4492 wrote to memory of 5528	4492	chrome.exe	97
PID 4492 wrote to memory of 5528	4492	chrome.exe	97
PID 4492 wrote to memory of 4364	4492	chrome.exe	98
PID 4492 wrote to memory of 4364	4492	chrome.exe	98
PID 4492 wrote to memory of 5304	4492	chrome.exe	99
PID 4492 wrote to memory of 5304	4492	chrome.exe	99
PID 4492 wrote to memory of 4488	4492	chrome.exe	100
PID 4492 wrote to memory of 4448	4492	chrome.exe	101
PID 4492 wrote to memory of 4448	4492	chrome.exe	101
PID 4492 wrote to memory of 2788	4492	chrome.exe	102
PID 4492 wrote to memory of 2788	4492	chrome.exe	102
PID 4492 wrote to memory of 1368	4492	chrome.exe	107
PID 4492 wrote to memory of 3160	4492	chrome.exe	106
PID 4492 wrote to memory of 1368	4492	chrome.exe	107
PID 4492 wrote to memory of 3160	4492	chrome.exe	106
PID 4492 wrote to memory of 4444	4492	chrome.exe	108
PID 4492 wrote to memory of 4444	4492	chrome.exe	108
PID 4492 wrote to memory of 3184	4492	chrome.exe	109
PID 4492 wrote to memory of 5396	4492	chrome.exe	110
PID 4492 wrote to memory of 3184	4492	chrome.exe	109
PID 4492 wrote to memory of 5204	4492	chrome.exe	111
PID 4492 wrote to memory of 5396	4492	chrome.exe	110
PID 4492 wrote to memory of 5204	4492	chrome.exe	111
PID 4492 wrote to memory of 3324	4492	chrome.exe	112
PID 4492 wrote to memory of 2064	4492	chrome.exe	113
PID 4492 wrote to memory of 3324	4492	chrome.exe	112
PID 4492 wrote to memory of 4412	4492	chrome.exe	114
PID 4492 wrote to memory of 2064	4492	chrome.exe	113
PID 4492 wrote to memory of 4412	4492	chrome.exe	114
PID 4492 wrote to memory of 3296	4492	chrome.exe	115
PID 4492 wrote to memory of 3296	4492	chrome.exe	115
PID 4492 wrote to memory of 1712	4492	chrome.exe	116
PID 4492 wrote to memory of 1712	4492	chrome.exe	116
PID 4492 wrote to memory of 4644	4492	chrome.exe	117
PID 4492 wrote to memory of 4644	4492	chrome.exe	117
PID 4492 wrote to memory of 2668	4492	chrome.exe	118
PID 4492 wrote to memory of 5828	4492	chrome.exe	119
PID 4492 wrote to memory of 4440	4492	chrome.exe	120
PID 4492 wrote to memory of 4200	4492	chrome.exe	121
PID 4492 wrote to memory of 4200	4492	chrome.exe	121
PID 4492 wrote to memory of 6000	4492	chrome.exe	122
PID 4492 wrote to memory of 6000	4492	chrome.exe	122
PID 4492 wrote to memory of 6064	4492	chrome.exe	123
PID 4492 wrote to memory of 6064	4492	chrome.exe	123
PID 4492 wrote to memory of 1364	4492	chrome.exe	124
PID 4492 wrote to memory of 5380	4492	chrome.exe	130
PID 4492 wrote to memory of 5380	4492	chrome.exe	130
PID 4492 wrote to memory of 2752	4492	chrome.exe	131
PID 4492 wrote to memory of 2752	4492	chrome.exe	131
PID 4492 wrote to memory of 1272	4492	chrome.exe	132
PID 4492 wrote to memory of 3528	4492	chrome.exe	133
PID 4492 wrote to memory of 3528	4492	chrome.exe	133
PID 4492 wrote to memory of 1304	4492	chrome.exe	134
PID 4492 wrote to memory of 1304	4492	chrome.exe	134
PID 4492 wrote to memory of 5328	4492	chrome.exe	135
PID 4492 wrote to memory of 5328	4492	chrome.exe	135

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\MarjixTP.exe
"C:\Users\Admin\AppData\Local\Temp\MarjixTP.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4020

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fffbbd1c728,0x7fffbbd1c734,0x7fffbbd1c740
  2⤵
  PID:1592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1616,i,2151637720317651034,2682295425229540076,262144 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:2
  2⤵
  PID:6056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1408,i,17121624011858055267,6944136016529888185,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:5708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2316,i,8109941784638924040,17487202530275713687,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:13
  2⤵
  PID:1604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,4461857157237480629,11733118579170746268,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3296,i,5455559769886953159,12802737709256056443,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4716,i,8919682615919023139,3611580843468085966,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4872,i,714290322344051152,3327736326626232321,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:14
  2⤵
  PID:5304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,4883784824533510589,3326995887295915859,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5504,i,14941437000734738651,13903473578316331383,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5532,i,13302708750602598703,3304369392791932379,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5788,i,1957127222597010197,4095220944099121632,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5496,i,12442028529377307784,8034864638133815610,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:1368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5972,i,14158527585670449274,12476644805154583437,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6400,i,18427300647061843131,839371973499073586,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6128,i,6098625672437685271,5373366116407955509,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6460,i,7692058397672582736,13549829180102511324,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:5204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6424,i,12673326708182492092,17508264632484335183,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:14
  2⤵
  PID:3324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5484,i,5364744401380414008,8492991826741296626,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6304,i,10624120710797567241,14774721692418055094,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6340,i,4465188833234299687,5243331402207636623,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5768,i,12126546850412698215,855649098769097378,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:9
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4784,i,13166440121954616857,1939967583089875333,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,18214893944102011222,17731666968060226536,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:14
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6524,i,15325827227460711160,2795443266491669287,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
  2⤵
  PID:5828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4748,i,9526618763056362869,15134537735136635786,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:14
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6524,i,1467488873948789567,17675228143127981904,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5536,i,1512473627166815268,10107116864774253122,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6592,i,17488943269955758539,15297023421481419498,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=900 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6724,i,2395738299164886606,15186690713667555864,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:14
  2⤵
  PID:1364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=5936,i,9477315285214954830,4289120507862473022,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3580,i,15292996335261505419,11546105941435915793,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3620,i,8854500464810671068,12541761059942725949,262144 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6956,i,4617636390106715673,9014586306799712111,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:3528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=3600,i,13919167225829759973,18177134201411334635,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:1304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7028,i,17612077818663612112,4376870975468877933,2097152 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6796,i,15455660090742355311,5797679390460676144,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6680,i,173485130742952444,6054499181354230813,524288 --field-trial-handle=1768,i,15702350931505133007,4269572609351730344,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:12
  2⤵
  PID:704

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3352

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5232

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:3988

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5688

C:\Users\Admin\Downloads\MarjixTP.exe
"C:\Users\Admin\Downloads\MarjixTP.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5856

C:\Users\Admin\Downloads\MarjixTP.exe
"C:\Users\Admin\Downloads\MarjixTP.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:1332

C:\Users\Admin\Downloads\MarjixTP.exe
"C:\Users\Admin\Downloads\MarjixTP.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 345KB
SHA256 af74444f93c1a87703c134e8e3a1762932e8c9ed17b5781360a51435080b8704
MD5 a3b1bd33206689c75f9acfb640a6ef7f
SHA1 88d1a94a23fc0b9702d6857e71038d5c01a0bc27
SHA512 7d2ab5783a9640015ad2215944cf3bff51babf2ca59fa0ee7e2e587c1ef56901b6ddb399c2a435757aa66bd2d5c7933326c606df7942d354ba6493c51c49acfa
SSDEEP 6144:dt6B0ZtO9WZMN5KSdoaPiC1ghYvx4BmlxTbD5FuTbb1cc:dt6B0ZtCWA5KYP8qvx4klZqTec
TLSH
T1927423E3AC113A4A630789E74DC8A1AB7453C5C32A56FF4237467887A6D8D8E365CF13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 98288db9158ace336213504231426bd85f039c00c24813fa433009c74ba20083
MD5 5f3b993b41f3151b2e4829c575156637
SHA1 200a2b87ed6fd556180635daae59321378e38498
SHA512 623605ed269e9c20755e390555adfb5da98d3371e2a7006eea0f642f4129fbe49b4c79f581e90fb9598442b5efb5b6a724a00cc108c914c4ff8536d52c2712e6
TLSH
T17561D9B02972D121EF9D347AA7D0965E7E71388C6E035EDB11878B741692BFD08BA058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 ebd4a7d93a27e373f35b886013513ec9d6d4e122d843bc3751cb0ba74fce2890
MD5 af12bb9d54434158f691c2e0a153f122
SHA1 904e4f555f89772ac321097d9ee5ccbdcf63eaef
SHA512 267638f5947e90be5c327bedf2ec4bfc2a961964423295350cb624659b2017864827cc304b1f90423f07e450dc1a8582eda5739c8d38eac303ba067b87808556
SSDEEP 96:3YU4+5QOITGSa/4FCNqjCO++7oRtvJTcJZRKPfD4ndf8vvQXibRdn:3cqnwzuTcJHWn
TLSH
T10E91FB712A71C523DF9DB9B663E496DD7D73388C6D830EEF11878AB01682BEC44B6004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 ef318f02528bafd21e41e20a2f02034a569542557311e699429a30841aa68855
MD5 663c16c4c7c05a25d1190144a76d9110
SHA1 26bc5bcf124ac404ced635cbcf1d57305177c79c
SHA512 7f92b80340a5d8c99dd7ec07ad0b74b2971541aeef3a6f226326eaf035b5f0dd7730f16a533ca64d1ce10bc9da6a922f0a74f83136abd98a3a75049b9aea75ff
SSDEEP 192:DSUfVujz+Dmhmo8JDJIGJyTel36amDmzmem5mDmt0mKT63BF+Y1IDaPdvc/ofPtC:DSUfVujz+Dmhmo8JDJIGJyTel36amDmD
TLSH
T1BD329EF7C3D8C62D891156F59B15AF1FCE290A28432C3C26C8DDAE4B93E2971D25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 51fbf4dde4825a444bd38ebe7e86e78ae22158790aaf8a6a3023eb4ba6b6dd74
MD5 efd985f1829e15f440ce3d4519f10838
SHA1 52b2f002e4ea8581fd6388d3d6770dc371868a63
SHA512 6d13dec2e191197b4f5449891abbe1c08a42243cfcf802894b680497e45ad3c008d263b011752efccbfcad8341559e5adffd72f9cb57e989fada90cce8ad8224
SSDEEP 192:DSUfVujz+Dmhm/36nBdIe5Z8+OeNPlaPvfPxNmDmzmem5mDmtmgj:DSUfVujz+Dmhm/36nBdIe5Z8+OeNdanc
TLSH
T1C1F1A0F7C3D4862DD91156F4AB15AE2FCE290924832C3C26C8D9BE5BA3E2871D21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 036c05d016cd537b15d1e7f47d615ee3844bf3c2754685fc5cf696d2e3b3cd8f
MD5 7ed2b1cd75f2a3730016a8d44a5f842b
SHA1 516cae55da8c69c5b875b7474b521f84b98c3fbd
SHA512 33b49ebd15ef2bc16ca3612a684df4eacbb2eccdcdd0c5ef27ff03994a68ffbc59c43bc1b17b8221f03d0653da4add600d9dc2af64d9594fdaa7e69450a46f34
TLSH
T1F331ADA796BEB057147E99A71D4478053DB9BC3241A2B8F1EA92C27CF0C64F70F12036
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 33909d51868b564ee031da9b0f0ce92f231883b9aeda3ca0eac5117e5bd102da
MD5 7c5ca13cfde9a3ccb572d4c3b9c34fad
SHA1 e7042cb31f3fa39777bc2e7c8ebc45fca509e72c
SHA512 e7880d4cdb05c433dcd797f57131f088f4a883fcf936cfc914fad6cab2d6fa0668ce88bd524a1cf47fb00718077571e2fcc3613c06db354ab052edba8584bada
SSDEEP 192:URQcBziD+BKv7DHAPRp26udfn9KHsb+WN4MEzvKp+MrefdZAwEkwNVyIsnAUgvU:URQmziiBGHCXaowmsJefoD7vU
TLSH
T19852A42EAD24353B5CDBD26AF9627B56E3F5202161D41F84EAFD8A2C20E75CC321B403
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 2d9053e630334f82e0462a4621f38924d4cceb6fa9b40a301487952bd60a37f9
MD5 970a18c8feea08907305c12480942262
SHA1 a09510bd834c2dc3400e1c0001fa73cc231a8bb6
SHA512 c91cf8a8288e2dbe9795882c0b0555da4c1cdead92355422ceaf96ce2ea6fbd4b84e4bb62135086cc9b90aab5c820852edcbd096524ae4987367a0656004952b
SSDEEP 192:UR4eD+vKv7DvAPRp2F9KHsb+WNnEz0f0ZAwEkwRVyIsnAUge:UR4eivGH6XOowg0f1DXe
TLSH
T10132952EAD18753B5CDBD36AFA627743E7F5102521D42F84EAF88A2C11EB5CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 284e5dfb7ac10ccaa2ee4322dd81b4ceda7e37cb78e6d0722f2f3f9c40b44bd9
MD5 e9d5bdc4a101e55ea25d545ddd2bd4b6
SHA1 9d99a39c986de0e09be5c1634fa40b0a023a4fae
SHA512 40c22b1543e6eb87a7265f79839f7f27b38841ed65d9f42896e78b65c2cabff8ba143ebda24634007a13c88228cce33ffd54f8e3f5fee10e3f7e4e0416a50960
SSDEEP 192:5RQcBziD+uKv7DHwPRpu6uvfF9KHsb+WN4iEL1n8+Kp+2XEfEZAwEkwRVyIsnAUD:5RQmziiuGHyX2oway5rEfFDXvU
TLSH
T17152B62EAD24397B5CE7D26AF9627B56E3F1202161D41F84EAFD8A2D10E75CC3217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e46ae939b0b27296166d60788856198fe1c03513546165761e1117f0c109fcf5
MD5 bf34f98487973dfe1b5ca02f05f35285
SHA1 cfce0721d6ed73e0407189c7e2979fe386fe3c65
SHA512 0cc8887c8506f64efef89152df8a9406c664c5a1ed03f7a90a365e9427ecfb48250adc11ddeef42a8da4623b59c0ebd981cc7533e725212944c4a5554f862a3f
SSDEEP 192:5RQcBziD+uKv7KHwPRpu6uvfF9KHsb+WN4iEL1n8+Kp+2XEfEZAwEkwRVyIsnAUD:5RQmziiuGGyX2oway5rEfFDXvU
TLSH
T10B52B62EAD24397B5CE7D26AF9627B56E3F1202161D41F84EAFD8A2D10E76CC3217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 6c1edca074d3e1aa7ee9072579f37ba5ed9219a57ccac6219042c66b6cc90495
MD5 45959ad7b5b3af4f1b759b8d633eecd6
SHA1 7a2e0664a3192bd5538cb1fd904b02aa242495a8
SHA512 9899fcc0cf0efa00c1ffcf1424805d94f52630d97f04e05c590ebcd651c892fddf77e8200b3cd50e014fb49d56a43ed8dfc899097b2636d9b2bddf19bc47e9c9
SSDEEP 192:UR4eD+BKv7DHAPRp2mcn9KHsb+WNnEz4/c2f1ZAwEkwRVyIsnAUge:UR4eiBGHCXmowgL2fwDXe
TLSH
T14942842EAE24753B5CDBC36AF9627A57E7F5102521D41F84EAFC8A2C10E75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 efb424f7779fb6c4e078f802f084399491ce2e7ded51464c97639fa34ebd38c8
MD5 094c9b6335c06913971ec8e95cf7b46a
SHA1 1a5ad3b3f6c66dff31680898ca74bcd85e21a962
SHA512 494e10d3208835344db1a4f86f8c99b5016f79f3607deb1c3cdd43f8f9dc3bd00b4007a29af1dbec3b545dde7f1573449ee0f137575437a6cd221826bfbe7888
SSDEEP 192:URQcBzeD+BKv7DHAPRp26udfn9KHsb+WN4MEz4MrefbZAwEkwNVyIsnAUgvU:URQmzeiBGHCXaowmLefWD7vU
TLSH
T13F42A42EAD24353B6CDBD26AF9627B57E3F5202161D41F84EAFC8A2C11E75DC221B407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4d384ded0d3ecf3fd71008bc9b24525e8ffe949a798afdcd43ab369c39fb0404
MD5 30b1884598f1a2ef6e6607b2cce0668a
SHA1 6ac0aba95d0a783c84518c50e0c1ef3c0a5481c8
SHA512 cc91d53e42d9f683f46a925c747a728f669661f40ad33d4e5496bc808a3d8cc0cd2c4fd0bdbd954e1da189012d3ced96255c38c1229e63ce6dc84be5f237ed56
SSDEEP 192:URBcBziD+BKv7DHwPRpu6udfn9KHsb+WN4iEL1EzvKp+Mref9ZAwEkwRVyIsnAUD:URBmziiBGHyXiowaesJefIDXvU
TLSH
T11052A42EAD24397B6CD7D26AF9627B56E3F1202161D41F84EAFD8A2D10E75CC2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 048f342953617da16d26a92922830b261eee31c30adbbc68b08d084abcd3e08b
MD5 6279a6420ccb1d76992b058be157ea87
SHA1 973d77abdddf312c9ba6ea754a7540c25407e842
SHA512 027a44d5a53e87310052b99b53ad0b9c4adfc874ee1d88c15a7224953e0c344e2e72701a693a6041b69df1b071e3c8098156babca021d016857574c19d623a0a
SSDEEP 384:IyjE37KxkXqKf/pUZNCgVLH2HfgslWzXODE7+ErU3eGH1Ekw7vQ2xYw:ISE37KxkXqKf/pUZNCgVLH2HfgsYbOQt
TLSH
T122521A67688C9A3F0FD8D68CDC276F4FACF5025662680D2853FA9C0503A57CB124A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 7496c387e3458952737179de4eca5d407de71914fbe8bfdb9f81ddc1c5c5c5ac
MD5 9cc3558a4aab5265f557f6557bedf6d4
SHA1 b3ebc99cab32485a95e3834ae1e25a9c4d64c761
SHA512 27a5b178010a65ab391ef6394b662260ac678fc88a7dac6226062b4e3e5a9dc7efe4028e4afa5c0afbef36b1c7b7a45e11fa10f4766d163ee3fd721f5cf3e169
TLSH
T1BDB012549C805E01DC4101F073C0F241932039210241A94360B2138674722C600C9100
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 0b3a624c1e78afe03ff21ba56010952b553e8310cf438b4e87b6d652976df606
MD5 76142d75b87f07d7817a2f4350698c48
SHA1 fcd80a5720a2e1deea3ff250af81c493a9ad8535
SHA512 ccd9134117203c8ae6b8529f6a50a2e95c4d0ad8a86ba1f14713bf70bfe5ae4002f738ef350c1e4d128c07ea6148efd04388f3d5456d6ab1b762ef5ac444a9a5
TLSH
T1D6A0022593D40895DE0452F462720A822652792C99615757A5D64458CADB1D94112500
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1e76.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe5a1e76.TMP
Size 48B
SHA256 39b4281af8217a5f2414996f03a9fb52b27b95094eda092bbd752390c071c85b
MD5 967b0c6d292b9d24a967c2dcd0894bc5
SHA1 c77891f8f57f63283a68888c73f69401ed13f036
SHA512 8009385e60ebd824575bfda1a2f297dca93e4562db35212ba6b8aff391e3b8c91a05e02ce206398e80d8177e487a46b1433a1717cf2071474ddbf11561eacda8
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 66b47e05fdfd024cd4a4ea70af3c7ca62358732808a49fabb5a03c4a25af9cf6
MD5 6e8c3f28a38037d3da1fde1e986c098a
SHA1 4c301c721ccfb9c7b9dee5acb50e7b782e96b34b
SHA512 a8fac01cdb7a094df190e5c8f9c415ee8b9296f1090e83365bbffe2871e6d0929481724861be69c1f97ae4b981f9510d6c0c2a01ef52157be6930093d6e6efa8
TLSH
T19AC04CF3291086CB8A34D9E92429751DE51B824C8CC4DDEC944855469078937844267A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5bc65a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5bc65a.TMP
Size 157B
SHA256 d3f6322a23629bc536d2c4602bbc232b5a6ed7a0ecce4172c1f7d7d8a07965e3
MD5 3ddfd7991eaa6844be88c56a35843835
SHA1 b6df1cd0343f818de0dce41abeec1ba2e08f5540
SHA512 e5b68710e932f209896dfb4f997f37c499173ea4c695167e8d3f686e52c3e48a2c6fb9b397ec44eb896dbc270f27653caa00fb9575c4dadd69c0e4cb9daa239b
TLSH
T1CAC04CE3191085978B3095E66438755DE51B8E8D8CC4DDEC944975466078937850167A
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 136KB
SHA256 778b5b9699725839d485c8609f557ea43528e5f2177c47498d8f1ec908b30409
MD5 2a1dabbf49b84d26e0d3a4319ad0c79c
SHA1 2bf52d789840498864abfc47c47d7086779e34e3
SHA512 fe240361214a28572cb3b1fa50d4ab5db19212751d9d04a4746ffab6a564024468dfc77a3ac25e567eef5b157a4faa4f18021d78f26dab09dc01399ad407a281
SSDEEP 3072:dQuFMePRVsKm259w5v+JnxawKah65L2ua9hzeKkSK5AD:d5FMcnNmiwZK2V5L2LhSdY
TLSH
T193D3123B3DE3DC8B2C79451CB45097538CB295932423ADB34BCE5EC8AB9739D6B42858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 136KB
SHA256 dd523c30833babf9216117850965d1ce04c0fb680be0a3fc6d27b7763911ffd0
MD5 49389ae559c7af182254a037492ed292
SHA1 bb6364a4453043933bc4a33d79a0648d634d3cfb
SHA512 02a51a70810721fec0874d552f1e8ab6db6924e567ac5b2a0b821cd1f6674d0fc7899f7909896693fdb317ecd2a0f6c16d75e828a566c521da6f8d4a03045d7e
SSDEEP 3072:dQsfXMePRVsKm259w5v+JnxawKah65L2ua9hzeKkSK5AD:dhfXMcnNmiwZK2V5L2LhSdY
TLSH
T190D3123B3DE3DC8B2C79451CB45097538CB295932423ADB34BCE5EC9AB9739D2B418A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 136KB
SHA256 915bb7db2ee89aad0ee6e55a864f2dddff930d42dbee786ce0736cc11085d590
MD5 b4e54afb25f76dad033a566446ca5def
SHA1 9f10d1d0b88c8a5c857f996084bf033928d87e8f
SHA512 f368d01b8dc1093b7a6f6ac5c3db533572866ff4251d024cd24acb3fb2eb0fc47a32dba4e4a7d106ee1549ecc56ea59e42eeef01835d351d5c692d1c7b91ce0e
SSDEEP 3072:dQ5FMePRVsKm259w5v+JnxawKah65L2ua9hzeKkSK5AD:d+FMcnNmiwZK2V5L2LhSdY
TLSH
T178D3123B3DE3DC8B2C79451CB45097538CB295932423ADB34BCE5EC8AB9739D6B42858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 135KB
SHA256 7a11a035b8962d9012ea1ef67be40d8427e75f9119e3b3bec354ec5bc49e44ba
MD5 621901a34c2dd17e56584700f16604cc
SHA1 265766d9f30bf5d11fbd0ef1a4821c65d71a90de
SHA512 f82c918cadf6420edb09ec0011814df75239ad8057c161c0280f1352506b009a08cea1b3f4351650c81a81d8dbd953b7a64c653aa11d7869877bb36fa5acee51
SSDEEP 3072:dQmtMePRVsKm259w5v+JnxawKah65L2ua9hzeKkSK5AD:d3tMcnNmiwZK2V5L2LhSdY
TLSH
T137D3120B3DE3DC4B2C7D452CF454965398A2599110239DF34BCE5ECD6FD73AA27418A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 136KB
SHA256 5735a20bf5b405120e3be6acccb08da3e58c21c6b2b4fc40841713e9b872548f
MD5 5e43890969803fad66fa9fd24ed4cba2
SHA1 aa6e8058482b5920baad4e8426422cf77f7b617b
SHA512 ab4a8e5070ac50cc30b1ed3e78f2ef2cb7e695d3c6458f0621e95bac3e9e7b90e755e8f96f924c19e656c5799ae7d2884932d4847ab7d82ded04980d5a7f3924
SSDEEP 3072:dQeuMePRVsKm259w5v+JnxawKah65L2ua9hzeKkSK5AD:dbuMcnNmiwZK2V5L2LhSdY
TLSH
T1FDD3123B3DE3DC4B2C79451CB45097538CB295A32063ADB34BCE5EC8AB9739D5B42868
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 729479f0595c56d9f7b853a6d2a3b2f47df8b7b85d75f05334a80cda3741cdd0
MD5 0fa57359d0c618dd4789c93ad738b840
SHA1 0ea65711a1098637c980e17c3290d555aa350ee2
SHA512 c9a924089e596906a35b20413757311084f36c9802d26b9ccd295ff090bc2a73fb882cbb0a54e46546e7f9a359e2864bb8042d907a4de56fd897b0354bb95926
SSDEEP 96:mC0d+ePqUvKD1H31Luf6NQi4DpniRDotok5PCDtB6bdGyvC74Majb2Hv4a:mC0VPHKDFQvSDUDczUwl4Majb2D
TLSH
T1CCA12931B87898B755B6D986B4823A43CFB4A277E561AF44C9DD4F0C11FB0EC1341623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 135KB
SHA256 133b8d6a3ee106988ac765c421bbc6bd3423c58982b5af4c836fdb6e97ac6907
MD5 af98122a8481a266c764f3ca57877263
SHA1 f8b222272a81a17249412588bd9a43671945c474
SHA512 5c1173114e01814c1281833cf34caf293a9734bd6860082c20b7c512e8c221846c2f4f792e87f579828d32f48c983267010f75d50954b9b4e6460ca7954a152f
SSDEEP 3072:IQmtMePRVsKm259w5v+JnxawKah65L2ua9hzeKkSK5AD:I3tMcnNmiwZK2V5L2LhSdY
TLSH
T118D3120B3DE3DC8B2C79452CF464969398A2599110239DF34BCE5ECD6BD73AA27418A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4492_2056309142\CRX_INSTALL\_locales\en_GB\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

Sin confirmar 556587.crdownload

Path C:\Users\Admin\Downloads\Sin confirmar 556587.crdownload
Size 291KB
SHA256 3fe1a0104aa293b49f11cb88d77338e1057f9f6582cd0c065f473366ea0a1168
MD5 24ff451f0ec95476dfd781f5f17221d3
SHA1 84d7c555f9242860745aa094d69040a95caeedb7
SHA512 46f4c7748ce43afcc92b1ebbe105f0e9b65348c2478a3c1222150c7c98b9cc5ab70c069b6db4be3f25f955c87fd1728a4c4418b3d759d00fb79d024f36b7bd2e
SSDEEP 384:uOIKbLLauG+t6TLTLdp1y0uIu0Yd33s5YYI57sn64V3tI+MtUVDNFSUAMzTzzeK4:uOvGi6TLv7u0Yd33s8Cj9IGFdAp
TLSH
T13554D8137641E01DCDA5053E485AF1F875ABBD849B308606BEF0FF8F74F1A9480E6A5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4020-3-0x00000000059D0000-0x0000000005A62000-memory.dmp

Download

memory/4020-2-0x0000000005EF0000-0x00000000064AA000-memory.dmp

Download

memory/4020-0-0x0000000074722000-0x0000000074723000-memory.dmp

Download

memory/4020-1-0x0000000000E80000-0x0000000000ED0000-memory.dmp

Download