3f857ad1519c57a354ec4bc0eb923fc78fad44a908b4247cf0138b5617b8b38a

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
enlace colombia.txt
Size 31B
Sample260924-e5gp3a1w9l
SHA256 3f857ad1519c57a354ec4bc0eb923fc78fad44a908b4247cf0138b5617b8b38a
MD5 30ea7bc70a7fea9cec932ebd79272b02
SHA1 8be1ca9745a666386e1ab0a63cf744bc65d73dd9
SHA512 bbdeaf16ea7c91f19f0299a6f0e0f50d7d01e12e068bd67d5290b1ddde6259734e8936f6de156a20ccb19fd5a37860533edc0a0cfbc08a1d15b1b76b84a27a57
MD5 SHA1 SHA512

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5252	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134346978976384212"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{18F70B6E-7B45-475D-8CFC-961935180DB3}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
3668	chrome.exe
3668	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe
Token: SeShutdownPrivilege	4672	chrome.exe
Token: SeCreatePagefilePrivilege	4672	chrome.exe

Suspicious use of FindShellTrayWindow 45 IoCs

pid	Process
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe
4672	chrome.exe

Suspicious use of WriteProcessMemory 61 IoCs

description	pid	Process	procid_target
PID 4672 wrote to memory of 5260	4672	chrome.exe	98
PID 4672 wrote to memory of 1100	4672	chrome.exe	99
PID 4672 wrote to memory of 1100	4672	chrome.exe	99
PID 4672 wrote to memory of 5252	4672	chrome.exe	100
PID 4672 wrote to memory of 2616	4672	chrome.exe	101
PID 4672 wrote to memory of 2616	4672	chrome.exe	101
PID 4672 wrote to memory of 4644	4672	chrome.exe	103
PID 4672 wrote to memory of 4380	4672	chrome.exe	104
PID 4672 wrote to memory of 4644	4672	chrome.exe	103
PID 4672 wrote to memory of 4380	4672	chrome.exe	104
PID 4672 wrote to memory of 6056	4672	chrome.exe	105
PID 4672 wrote to memory of 6056	4672	chrome.exe	105
PID 4672 wrote to memory of 6080	4672	chrome.exe	106
PID 4672 wrote to memory of 6080	4672	chrome.exe	106
PID 4672 wrote to memory of 5100	4672	chrome.exe	111
PID 4672 wrote to memory of 3340	4672	chrome.exe	112
PID 4672 wrote to memory of 3340	4672	chrome.exe	112
PID 4672 wrote to memory of 5324	4672	chrome.exe	117
PID 4672 wrote to memory of 5324	4672	chrome.exe	117
PID 4672 wrote to memory of 3980	4672	chrome.exe	118
PID 4672 wrote to memory of 3980	4672	chrome.exe	118
PID 4672 wrote to memory of 4972	4672	chrome.exe	119
PID 4672 wrote to memory of 4972	4672	chrome.exe	119
PID 4672 wrote to memory of 5652	4672	chrome.exe	123
PID 4672 wrote to memory of 5240	4672	chrome.exe	124
PID 4672 wrote to memory of 5660	4672	chrome.exe	125
PID 4672 wrote to memory of 1408	4672	chrome.exe	127
PID 4672 wrote to memory of 1408	4672	chrome.exe	127
PID 4672 wrote to memory of 204	4672	chrome.exe	128
PID 4672 wrote to memory of 204	4672	chrome.exe	128
PID 4672 wrote to memory of 3540	4672	chrome.exe	129
PID 4672 wrote to memory of 3540	4672	chrome.exe	129
PID 4672 wrote to memory of 5436	4672	chrome.exe	130
PID 4672 wrote to memory of 3336	4672	chrome.exe	131
PID 4672 wrote to memory of 3336	4672	chrome.exe	131
PID 4672 wrote to memory of 5688	4672	chrome.exe	132
PID 4672 wrote to memory of 5688	4672	chrome.exe	132
PID 4672 wrote to memory of 3984	4672	chrome.exe	133
PID 4672 wrote to memory of 3984	4672	chrome.exe	133
PID 4672 wrote to memory of 6012	4672	chrome.exe	134
PID 4672 wrote to memory of 6012	4672	chrome.exe	134
PID 4672 wrote to memory of 6728	4672	chrome.exe	135
PID 4672 wrote to memory of 6728	4672	chrome.exe	135
PID 4672 wrote to memory of 6784	4672	chrome.exe	136
PID 4672 wrote to memory of 6784	4672	chrome.exe	136
PID 4672 wrote to memory of 684	4672	chrome.exe	137
PID 4672 wrote to memory of 684	4672	chrome.exe	137
PID 4672 wrote to memory of 768	4672	chrome.exe	138
PID 4672 wrote to memory of 768	4672	chrome.exe	138
PID 4672 wrote to memory of 4680	4672	chrome.exe	140
PID 4672 wrote to memory of 4680	4672	chrome.exe	140
PID 4672 wrote to memory of 6988	4672	chrome.exe	141
PID 4672 wrote to memory of 6988	4672	chrome.exe	141
PID 4672 wrote to memory of 4688	4672	chrome.exe	142
PID 4672 wrote to memory of 4688	4672	chrome.exe	142
PID 4672 wrote to memory of 5704	4672	chrome.exe	143
PID 4672 wrote to memory of 5704	4672	chrome.exe	143
PID 4672 wrote to memory of 3668	4672	chrome.exe	144
PID 4672 wrote to memory of 3516	4672	chrome.exe	150
PID 4672 wrote to memory of 5504	4672	chrome.exe	151
PID 4672 wrote to memory of 5504	4672	chrome.exe	151

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\enlace colombia.txt"
1⤵
PID:1780

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe5ca6c728,0x7ffe5ca6c734,0x7ffe5ca6c740
  2⤵
  PID:5260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,11578142552160036804,5091423381984886510,262144 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:1100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,2198797865933577391,10428599444755881901,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,10198175746690904910,5609194394883276854,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,10305527236862482534,5935141983425375374,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,10667007222928183693,10237731222888892646,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,10063031641661502712,8179527353767865506,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4488 /prefetch:2
  2⤵
  PID:6056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,17125385854102221044,3863816027612851911,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,7849296244650320359,474186883895061755,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5716,i,11560932227440704969,8682533724501425771,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=6028,i,10524554676572161678,7405868031918778673,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5620,i,13918290588519128594,13362579552224867343,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3376,i,15495577094285015731,4390454526951534909,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3404,i,11631405400598271305,18075841941138664761,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3220 /prefetch:8
  2⤵
  PID:5652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3368,i,13399187628739247135,6354959675624900912,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:5240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3472,i,1455116498882328163,9204761831750472055,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3316 /prefetch:8
  2⤵
  PID:5660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4508,i,17377628249866293900,14660652635118435549,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4488 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4908,i,5391975598072306019,8700165252742899279,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4532,i,3083142275590379441,16965785701533476244,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6276,i,15614883832020500922,11084994867373617833,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:5436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6324,i,6762418440280380265,14042324863983600530,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6312,i,16511096698420317644,13896169580613157900,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4592 /prefetch:8
  2⤵
  PID:5688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6260,i,7325667185614739614,4640656671865667562,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6524,i,15259393217306894043,18020948382833044098,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6528 /prefetch:2
  2⤵
  PID:6012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6232,i,3521494781690034862,349139113734421994,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:6728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6048,i,9573090248567487656,2511752780504536494,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:6784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6728,i,11492442570755919832,3123973367004005713,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6700 /prefetch:1
  2⤵
  PID:684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=868,i,12469583877209350099,18041668517669033796,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6620,i,16790310043084335028,3420192330746756352,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4540 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6736,i,117466225173324513,3152343070032328719,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:6988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6792,i,2499777912387994707,3219243370256541638,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6716,i,9490545623401323234,3435693375860361394,2097152 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6652 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5956,i,16306792621636236506,4168294433720984415,262144 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7040,i,165817254210755922,15491099689599547125,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7064 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7016,i,16099535318598465340,5094470034014776758,524288 --field-trial-handle=2040,i,3040142935001632761,17438777221277911211,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7044 /prefetch:8
  2⤵
  PID:5504

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3980

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 c22a22eb23541e03277dffd5107054e75254653dd4851933d10ab765912875d9
MD5 03811ad865636626a7629b2eef322fe0
SHA1 1e6349cd9ec24afa73663fe143d70a46e3c31e89
SHA512 c173d29992e7887b4b6618916ae782c2a2e62d6535b86d9f047c2311f4d4d64fccaf65d9e9147de027e715a388935bc4424435c1a18c640d935a7e8f4a9c6be3
TLSH
T1A7F0F9B5CD21BC7718FD1B2D50544B4BE74613273641845B3A3D420D8FB8A7B468A81C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007e
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 03af292b74aba0f0f49a5306f66d8eb1973a7ca200bbedf14199bbf443269c9f
MD5 cbf7e25574d6114e21d7364af7d29714
SHA1 a6c582857648114aaa70ae70d6c7d7d929eb0cbc
SHA512 07e7ecdb1121ca2cc7880ddc31f52dc06c06cea4dfb9a7d93e23263f6bbd78816505956567babe3fc6dd64f6dc8ab6e6776f1a39355bf722ffe70d320c8fcecf
TLSH
T10451204520C19F22EF58313808B65D196137262C7E4BEF6B7207483F5A5FEEC8995C9E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9593b2cff9b90a093e37867b24e45e9143cdb77816096e3b3af4dbecfd387b33
MD5 4fe055520a211501d324c8452c763717
SHA1 3eae8cf0977fa202f5c83607718ed061f054c721
SHA512 63e61a4a5df704c7da108699b32b56ee0b3d7d54f2fb8fecb06a210b12b198b2b5033c24af268db00d57ac5223729053a1e8290ad2a9a1521981e1147f4e8c88
TLSH
T1244172521180DC33CF9931340CB5692E523B362C6B0FDF6E935A443F685FAEC488485E
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\ad-blocker\content.js
Size 237KB
SHA256 9db9cdec601b8d5d11a632df5e3f800b215083c7c555b3350627cee06353ff80
MD5 6fe316a3f5ea6e75efd4f3c3907fd3a2
SHA1 37de7a8b8e6aeeb5e8b3d4d1e96cd534c052028b
SHA512 b1f67d295d96e1e75cff93e826d5b655656b77f4d6bdb9fd7970738ecafc8e155085bc0aad9599c52ff49c1368c716c292b15acf2c7dbef2820cc9297e89f2c3
SSDEEP 3072:UDW1c2UuLI5J6rUvvaRpD32GtcxBFjUAqkP6tWOt4Fi5Z/Oi:Z+tuEYcxBFjUAqkP6rOi
TLSH
T1C134096235867C3649AE40DEA0201381BA1C1DEA7805546CF97CEDF73969DC263FDBB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

build.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\content\anti-male-ware-notification\build.js
Size 3.7MB
SHA256 b44b03e42b8b818694139816e9236e2d9137873fbc8400d4dc37e6f826250335
MD5 6b24e62747ab6101f0cf3f2379cc2e20
SHA1 c1a6f1905e66ca1875e706acd4c59abf55b27578
SHA512 8d12920bbb2fe47ea656c62b3f075d03374e2e72a6e8d2e483a667dc480efbbbbd2b29adfdce570868d3b3034e2a1f424502d641e319e522dc6ef92a4ddff529
SSDEEP 49152:rCYhYUrzJjpD/FjlBIc3ZVP3u26lmiELCj76r15Cntw/uY0tF2:x
TLSH
T10206E9D42730A3BC598EC7DDDF7FB8D8110B70EDAA3A41C860594AA4A192FC9FA15DC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\content\content.js
Size 148KB
SHA256 c3d98bfb23ce96b2d4dd1d11eee996e8e553a1d8388b29dee8bbe468bd806657
MD5 fb0207b86c289e5c28c7f178bc69d7a2
SHA1 adeb79e8cf8dc51c1c9cfcf17c039bb4c48902af
SHA512 2c6d28af3d5388a1159283de1061cfe9d275953a126282bbfaebdb98b7a679bb9517d5a08d38cd66f2e28f4fde68d9c51f72a2798728a584d0a1f2e3406d05ea
SSDEEP 3072:tsrnajtXmLNCi2Fa4Y/aUjfYaYP6xB4QfcU0lOiONFrK:trgNCi2u/G0qQJK
TLSH
T11BE3D9CA3295F0B513D7A1F684770002F23A2464780E5054B7EDF8EA787A9DA9637F39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

location.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\content\location\location.js
Size 6KB
SHA256 d148f1fd1bec6aa57e30ae0906aba41cd273767e7db8293fa545d57e31dafb05
MD5 4c2bd60635814dcedaf028e85ec799fb
SHA1 8b1c3e01c5b80c52f6e54cdbbce5528dc0f16d88
SHA512 ecfa45031b9be6066528d227b79d0a9e752f8623bcc937d7b3ee1b02e49d403e5eb3385fe99ca89ab5f43ea3dc99dfffb76bb5e9a83cf4a6711e32ff1544e908
SSDEEP 192:xfIl4RKyjkyk/fyhrhKOWr/hsXNNOEJHXyEaq7Mm5i:xY4gTp7OWryHOqHXMq7Mm5i
TLSH
T18DD195E6979B9C9407D9E185FD373601523275DF300AA048BA8C78DF252AE49D22BF74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

101.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\executors\101.js
Size 3KB
SHA256 554ca4bfd26ce29ad2d163843555cca916184b7788d25da3a2c31f72eed6c43c
MD5 5d853bf4c1fb498c052df705f124b732
SHA1 907f3ae586f928b9c35d7d36275b517b3d63005f
SHA512 97a830ea856bd3cda7edb52fedab31f097071358ffa65384c394239810df804b59597a8a64e9d425e539962ddee92cd38b04c72f2e531f84e8ad378d98e1fde1
TLSH
T1517187353691373679A70BDEA1F4E18C7A2C6564B03240D1B2CDEC172B56D917931F0D
MD5 SHA1 SHA512 TLSH

Submit Download

200.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\executors\200.js
Size 2KB
SHA256 da45f38f5b46032e0e965e0560317992f6115dacb9790ce0dd82dcfdf71e689a
MD5 ae7589af3c8475dcb0600e48d73a2663
SHA1 ff0d51e4e3335575d5d1ef541449cf742797fb2b
SHA512 e1285194822147f595bbe98010771d2b1d4aba449b404730620fce0e1b4e96fe83736b1d260ec51886513c08651e7c6c1fe4fc2fde48566c23f26569318e7094
TLSH
T1F65186A2B5A625758BA154F4CC7AA10D790E58AC744580B3F28C2DC23CAA18F6C73F7D
MD5 SHA1 SHA512 TLSH

Submit Download

309.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\executors\309.js
Size 9KB
SHA256 db03111a952bd452862c0973a1fc1f1e2d48dd218bfcdea397453f06bd295448
MD5 f15d14393bc48c5ead416190d07370b3
SHA1 80606b860dd6e29abb5ff16332d0be6761aaf65d
SHA512 ed5602da363cc77830d418d8f898a12fdde8f06f2b86ddca61f47577885ea29e08490f11193389acadfd0ab14a205e698a3b7bc8be2afa6eebdd127f0adb8fd3
SSDEEP 192:ihPfEuJQZ4cmyOhFirE8RR3A6hH1GygdcCw9jrns3ZR2JX/SBxu:MPfEuJ4WfFirtRdAc1GygdcCw9jrns3S
TLSH
T12012859539F3E454DA7108E590B43116F82E4D7A7179E8C4E2AC9D7728A30CBE5E8B1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

animation-frame-1.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\icons\animation-frame-1.png
Size 716B
SHA256 810aa9171c756107eeeda7dc29e938fe8c0b95d2e12dde026d3ea39ab781fce0
MD5 8dd52ef0a22cf1792ab7756b8a91c3c5
SHA1 9c9f2595b15942ffa5ce9c73871904dc223ace0a
SHA512 201b9e84e504089db89fdbacf552e9f4b4da04791a392793e750b4360f9999970d1aab7641148ada001c0e1beffa37424fafca6265c115139054428ba1e0c7ce
TLSH
T1520194A1EA0B9CEEC84989993D6187435FFE991C7852ACEC3BE803154131DA04A44733
MD5 SHA1 SHA512 TLSH

Submit Download

icon-blue-16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\icons\icon-blue-16.png
Size 731B
SHA256 011420d8f89c28cf36f93280d0fa4f23de1be983470b681035dd221de8ef6721
MD5 933043787d25442c884dbe7bb66dbf78
SHA1 ac53d8fff9e1c2109cfc2e792c757d6c97b33191
SHA512 fdab09d14238f6b8e2c467451b4d3d8585446ce210d89f7155f15f1c4a9a0f88e35931394b82c592b3a9c704d06c50d002b1ab2ba04d5a83fb1395ab1f5069df
TLSH
T1C401B5CAA50FA8CF42B2D6122B29C032A873203F42D82488E673C2F800D0E801D7C5B0
MD5 SHA1 SHA512 TLSH

Submit Download

icon-pink-16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\icons\icon-pink-16.png
Size 11KB
SHA256 8eea3702ca940e8b1dd5733a5adb9cd73924c9afd32f23fecce462065c90da16
MD5 0cc8c4310deaab0801eb8613f8aeb222
SHA1 6170d8b72f89ad7447dd4bf4503557fd8829c8c4
SHA512 d75fb8eece01fdf2cf5458356d487ab7e67dd241e0d2f0204eb40b5f5325ff985eaf86f84905eced5316ab97d323ba33eae79fc0ba0aa7b1c3ffd543b8434697
SSDEEP 192:toN+lSlnfhDixGdexkmKkDQ3V9ihbhKuthsmECut899jwvChrWhztd3wrXLnawPG:+ln1iHxNq9ihbcunsguO99AcWhpqawPG
TLSH
T1BE32C0CAD4610BE972605F45278B81D4F82191FE588742D6A73EF83C6896DFF82533D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extend-native-history-api.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\libs\extend-native-history-api.js
Size 2KB
SHA256 5de667e055625f09281426d6fcb739b63e937ff6b0684209d29bc872246918a1
MD5 458ef5a44262ed0ad2e76aad4a34d133
SHA1 1801d9e5fd5cda17cbe89806f9f62065f8cc5462
SHA512 17433f4f9441a4258a5e8767c86315ed260954d7a65a3f5f57de3ce855ab520934552e22b26d3f7a33980da810db7401d881137b66f2f07e53a22282810f623d
TLSH
T10B4131D735D2C8EC25869499A476680D7A451DAC32697080F3CE8DCF8F2B542E527BB3
MD5 SHA1 SHA512 TLSH

Submit Download

processor.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\libs\processor.js
Size 223KB
SHA256 a258d6f3b23cee41c63e111b61170f1b74b9569292d935257fcd2df63672e4db
MD5 33f4498d59372ead47e970cbed6f456f
SHA1 ec83562c547b0a03a87ca9b3de0e386f74bc8f86
SHA512 6b2859c10886e72eafe294ec7704a5143391fec74e2f474a0c005eb3ecc5b7a3ae33b73524c9aa8d5294163a7025469bd951fc520e73fdafd0547f22fb0f4fe7
SSDEEP 3072:J6NEmAmNyh/vjfYQJdTYmcdB/CyrDOcOo/9ZVQFF:J6NfAIyh5f5OBd3VQFF
TLSH
T11624C5D97192F0F543E391EA4873400BF2352974741E5084B76CE9EEBC6E9C99632B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

requests.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\libs\requests.js
Size 5KB
SHA256 f4164dd17afd2e5f0df0a8eff9bf1fec3551003e1e97c6f0ebcca92f72f487bd
MD5 c3414d61533aa4b871f04f56831d60d3
SHA1 f5024ec0c17c00cadc9763476da8ac70855cb789
SHA512 683238564af33e26271c048cdeb2fc89f074b322a26d023020642b690b92a247876ac5af7b40ff2c47761eb61904f8149bcab409460b86956dd6934951f49f87
SSDEEP 96:shbL0CLxZN46Yh0KAKLc/epddDniXizAAxFWWsBtrIxkg84d1MvOvK2:sV0CLxZN46mMizAALGT7g8ea2K2
TLSH
T175B1A6C2BC86C9B88746C5D7F861D50EA2412D593A1390B67BDD0ECD9A8FC85B4E5333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\popup\index.html
Size 148B
SHA256 8f0d068dced3b1ab09d0189a57ce569054a96fdaf2136b5271f8c618392e448e
MD5 c06b864d796c6d4fd891deb32047c29b
SHA1 04c1036ad9cf70dfa3d4ebaf34fed4851163f96c
SHA512 f2d5a026379340b5650aab61153abc2c9d0c6eed3b9308c75c7ace0a996fe87b93ec051e20a7752724433e7a1c76b5028b9a34e38603a6d078883b23d6a3e758
TLSH
T18CC02B8B7C01800080509A843CE0F30C0043FB5CB0C2CC0005E2F43109C93ADCC074DC
MD5 SHA1 SHA512 TLSH

Submit Download

co.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\public\sprites\flags\svg\co.svg
Size 292B
SHA256 a6794e186bfb19d896047f64f878519dd75592adada8c47afd34cf4339bd4cac
MD5 0ebe070b3e842310dd4b06f003ec7cb7
SHA1 2f09ad709b438bb618c13b52d6a172f56e5cc10a
SHA512 58f7c52bc73adde3050fb60c8a69bd9900f4105c4e7bd25ae9a14f2380522215b39100b0926277de6fb369fc8893e4a7e2f8c1b3e85453e6f3c621c6d304d86e
TLSH
T1EAE05BF8D3BCBC18D519C2308B2D76D6D56A608F624421D7FD7118A5260D99B9CD358C
MD5 SHA1 SHA512 TLSH

Submit Download

gp.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\public\sprites\flags\svg\gp.svg
Size 301B
SHA256 5b6655c0f9c946f1e248a40762ec9594cd899be8888314cf6e820001148fff17
MD5 24841de9d5ad4cebb1be5c4dc19fc89f
SHA1 8d38104779eb959d9aeae111193e798a95664178
SHA512 cb022be7eba50aa2f5d583e14b2304b0c4fa99d1c4def703cdce6d7a4e64376dfff9be19e8f503ce2bc7b1afaa8c0188bb5828c3d15bedfe8086f3364a4fd720
TLSH
T148E02BF493BCB818871883359B3C36D66966508A629621C1FC941894660C59B5CD39CE
MD5 SHA1 SHA512 TLSH

Submit Download

nc.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\public\sprites\flags\svg\nc.svg
Size 317B
SHA256 a60c2ad6aaa047ab4aa814c5b6c3a7b0aa2fd1a681cb40082f10eb556f3bc9aa
MD5 89fc0beb619a912876928692a9c117ee
SHA1 f2ef5484cfb9f1a5c384609e08180b3bd17a032d
SHA512 46ac9b633259e838c9183b2d7338405593d1d036f43a23fa35a841c2592746a54a7df53da85573c8169885e49cd08e4973d6e41a581d323a806a77d145f0205e
TLSH
T1A9E0EBF893BC28089400C3308B3C38D279B2D09AB2AA00C1F0841890230E587ACE36DE
MD5 SHA1 SHA512 TLSH

Submit Download

no.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\public\sprites\flags\svg\no.svg
Size 324B
SHA256 9e20e66618f7c13cc2029c23a7d0b0d2b94e3f950daaedf0d2305bd3a45234b1
MD5 902a33d0a0399c05142f0f551e9eaaf8
SHA1 f884c6d0b79721442c011faa6e26fb20c3e43f50
SHA512 0a2064cff629033f7fd04f30ec8a4c515cac0ba2cdbaae764277c762c2110c4952d5c67a477fdf5e6633c43198a850c51b97388714b43293188f0894b8d731d7
TLSH
T10FE012EDE37CF818CB1483100F2D72E290A5F4CEA18522D7FC5159A8669E696DEC3AC5
MD5 SHA1 SHA512 TLSH

Submit Download

us.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\public\sprites\flags\svg\us.svg
Size 6KB
SHA256 180a3c64dedfdc37d87005d573284cce93e1a72022dcc48f0d939d83d6c0a63b
MD5 2382ea7ec7cc55bfe1cc7a3ea8326989
SHA1 1a49c5d5e01842b530203e700fa8de89cda57573
SHA512 05dca9e2fbc90446f772a8dbe861b0fd3fa62c03399377716a1fe19bbfbf6c6378be13f5913633ea2d7cc21c1cb4fa61f4792ea8972be703ad4a60b629fa1d04
SSDEEP 24:t4obKtc6M2IQKKKKK+5LKKKK+MG/+rBkmAqkmEkevNknkm6nkjA+voLiFXVhxVaB:622BhK
TLSH
T115D1EFFAB7F0B0857B4F8A269733D71FAD0B145C1576D606B012A69D83AE631C44BA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon\5.14.4_0\service-worker\index.js
Size 2.0MB
SHA256 66bdf15ce82bef48ae058c6335a1deee636fce47bf293da2a5b8fe2f18318f9e
MD5 7ca7a8873400511d104b433f1e5d12f6
SHA1 74ce5ba8aaf406f9b95d787d40419a470cff1e7c
SHA512 6f852562ad000bcaeeb27d557ba162c8ebd618dfab6491765feaf597e0b77a4d72123ab11f94f41a11a5cda81db79138558a627446784f4bd9d865ec363a186f
SSDEEP 24576:GFuSF+raLU+DNsYEzaQiWNLpXfhy9QV+ZuHNG4:GFuSYADNsYEBiWNLpQZ8f
TLSH
T1D4A5300A76F66030428BF0B95A2FCC01B230541B294DED553E5C92E69F4C67CEBB5FA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_eppiocemhmnlbhjplcgkofciiegomcon_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.urban-vpn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 f3ae6da3a54d0231c799230cd59748729a8acbf9228655d1386ab5ddc63dab89
MD5 c115f70119d4f0b4c48b2a5077e721f0
SHA1 1a2363bec635c75f842ab723e817195fbe4501f5
SHA512 dbe556d48e06570b1a4fbaa2e6be727c28cf0b27e120867a30e77ae1a84e68bc9821834e8e7f3fc0c442ece6220a09a4e97ffc5561422e295683780bfcc9eeb9
SSDEEP 384:Dm94i3Plvf3gf9n1+Pxljei+vts3f7EBZJO1x+TtKzR6xaNUaofkfLQVCpBsEuB8:iQCbsHXcHxnczzE1ak
TLSH
T1BAA2EFF7C3D8C62DD81256F49B157E1BCE690A18432C3D2AC8D8AF4B57E28B1E24175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a306e07a3c6423bf70933738de9b0f0cdbb33c511f52235dc20108d245a90ed3
MD5 a3e7806e97bb770b015a4d7fba6717a5
SHA1 f7c07e4db0e79a0c1e74ff7444fd1500f795eb3f
SHA512 b6492a441ad7504f5f6fae40dbf89ccb27115fc7f775980de240cc5cbafd7ebc0cbec0c372841860d20d4f9ea8c0b66e9b076ec0f31f30a145c44033b84afcb8
SSDEEP 192:WRQxfu2bYqfOv7GpAPRp2DiL96Hsb+WNnsb4vM2lm2OekwdVyIsnAUgtaJ:WRQxfr5fqCUXlswkz202dL8
TLSH
T13F42B42EBD10757B5DCBC329EA117B57D7F6102631942E84EAF88A3C25E7ACC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4acb7b39492215e0a355921162b59a5693469985714adbf9a921da515269bdaf
MD5 81e3b5d9dc26f1ad54f873b640444b9d
SHA1 674818d61b7ad00417593fec9afd11d5a9a3ac6d
SHA512 07baaf6ce6c7ddf15fa378dd948d205c1f641366114cab6294b006a3dfa55d9d79d79598a8398504db36d2ecf7aed52d89a2348d08676c3a30327b62b17a2bef
SSDEEP 192:WRQtcBzfu2bYqfOv7GpAPRp2DXHa96Hsb+WNsC9sb4vM2NjTm2OekwdVyIsnAUg8:WRQtmzfr5fqCUX1swmz2Y2dL8
TLSH
T16952932EBD20757B4DD7C329FA117B57D7F6102625942E84EAF88A3C24E7ACC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 66dc3c4d034504e4bfd205e6dca5f78135ae73d134bca435bf75fc920a32de96
MD5 b4b84b7b29634c7f293969a9153c5d68
SHA1 8910b1744e0d24238344336c08341f8161a35143
SHA512 2ceede0d798e7b042fb288653034f6fc0cb01f277b1881a05dd165ef13435a71fc359ec24085d1abf70c394a75962cebd207d9bddf2a53fc0dd6e7835dbb6165
SSDEEP 192:WRQtcBzf6prk0qfOv7GpAPRp2EflXva96Hsb+WNsC9sb4vMgUb2Nj8m2OekwFVyr:WRQtmzf/fqCUX2swmzX2x2dTe
TLSH
T1F252B62EBD20797B5DD7C669FA217B17D3F6102625C42E84E6F88A3C24E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 9041dc210fb386fc26c407d5f21f7ddd046defa9686fd35c43275bf62f7e7216
MD5 9313ad2d4b918abf698d7aa330c87505
SHA1 b6e38ea27028196512b1824a1e4e010e2bae32c3
SHA512 84559d0ba09e4a2544770a3e3decc0d5bad2f5910f993eb832971460db03aab39897b638b56a3ece43fe1ce8ef7345807f010a4e32763f8a65298caa02d20974
SSDEEP 192:WRQtcBzf6prk0qyLv7Gp3PRpyEflXklPD96Hsb+WNsMu9sbQpm+vMgUb2Njlm2OE:WRQtmzf/yzCRXIswPjhX2W2dee
TLSH
T1A462B42EBC2069BB5DD7C669F911BF17D3F6202566902E84E6FC8A3C24D7ACD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 886bf6e0e33d2939606f38dafe67b02f29b3a7d24edfeb520a041796272d3292
MD5 aeda29ce32630ca7eae78a924d139185
SHA1 e19ff3e8445a434db8fd80a1eb78be5a7547ec5d
SHA512 c72febff2073a974e4362f598986267026c6dfe1dc763bbf9514c59ccaee0547a8b303c33d15c54af38ac4c46ed64aaac89143b8ae239402582f76c57983a0d4
SSDEEP 192:WRQtcBzf6prk0qy9v7tp3PRpyEflXklFD96Hsb+WNsMu9sbQKhAFvMgUb2Njum2+:WRQtmzf/y95RXSswPrAyX2/2devN
TLSH
T10462B52EBD20697B4DD7C669F911BF17D3F6202525942E84EAFC8A3C24D7ACD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 358f1389374ce856891cce50fd556213c6bcfc34e2545d94656ae33460b493f0
MD5 7e5ec30dcab250f45de391ae85e31467
SHA1 0b9c07220d062e01b16851832c224aa04592638e
SHA512 124e3809560c2a8943ae897aff4dcc72944af529d0f29dca2ba6826c951b718a8c7cf5fc8701bc5fc08ea6c05d6f98f42f7417a7ff19c1a747c75e1a6a0a88c8
SSDEEP 192:WRQtcBzfu2b0qfOv7GpAPRp2DXHa96Hsb+WNsC9sb4vM2Njjm2OekwFVyIsnAUge:WRQtmzfrdfqCUX1swmz2U2dTe
TLSH
T16352B42EBD20797B5DCBD369FA117B57D3F6102625842E84EAF88A3C11E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 2402969cd2ec72ea72b513389c43205a9ee2bceca1c456ef576613e3544e19a0
MD5 ef2f6beced6ed991eb5f4b124485b70c
SHA1 13ae98461b417e18835295fc68f98db326a5bad0
SHA512 5adbe06b2aba408c8975b2dfc7f1c8c160dc3367ebb5f8a049421cc510b871c0310b3c4cd24506c3615f6972ff559c98cb7cd22bc47816248c6501f19779082b
SSDEEP 384:tyjCjRyjH7KxkXqKf/pUZNCgVLH2Hfgslqq7pLuLceSzyjDXODRyjr+ErU3J6HG2:Ie0r7KxkXqKf/pUZNCgVLH2HfgsMq7pw
TLSH
T1A0720A77BC0C9A7B0F94C68CD8167E4FEDB5024B65D9886443FA983503D5BDA110A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 21KB
SHA256 0a7f578b1bb54192ef3146c74af8f9913d5b52e3a071e4514e5ddebecd2ac9dc
MD5 b570684c6016f0dbfaf4a2235fed1010
SHA1 57e3b15d77f7bad5714daa9dbe457e5b97b431cf
SHA512 b955f01eb28ababcc7aa5fc41b35adee7fce4ba7c7417cc61479d115dbf849d7578fdcf2640546ea283a0758c519ee036b37c9a0dbe8fb22adf11554715a9c4c
SSDEEP 384:tyjCjAaH0Zn8FO0c8EayjH7KxkXqKf/pUZNCgVLH2Hfgslqq7pLuLceSzyjDXODB:IeAaH0Z6Od8Er7KxkXqKf/pUZNCgVLH6
TLSH
T1A4A20A776C0C9A370F94CACDCD26BF4FADB6014A65D9C86583F6882903D17DA150B2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 4dd1b6b7b837ea29e2bfde2e09cc3681ea6afe00fda5ce8b032b4c5c596c7d16
MD5 549fcf83a92436c6e1d2360f0632efff
SHA1 717646a4c97db432e43a3f9dfb873b880aa89576
SHA512 377033ee837e7ec1601d53874adc2e9daba8c77c8fa36d70a3b157e6e0882d3d1d754fc163be04825a34602d7ee087267f82af5befd804e14de7bb151085b184
TLSH
T164B01245C1422301C10103B01950A8583A60CF39E113138542F08D529C321605017158
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 d9d9be7c75e900f264275c2f213c95d4ebd64f12250f5820f00ccba551c1fa6a
MD5 a216633810baa3d75fb8306aae7609a7
SHA1 f8061fb9d7bf690c695e12876532707b268ca3d1
SHA512 7f1f052e4b07f97d20a9fa85d86dad67a791f8d898c99e6d8394f364bffdac5e4488f2e424fe89c06b6e95f3a03a97005352243cc6073bcdbcdd0d89e993ee40
TLSH
T12CC09B15D1451333C1010371157194D433B06F7DC116074551E42E575D7516481B6345
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 240B
SHA256 b693368a8edfa1320e1ef91eaf17dba59985491661c194599842090276655036
MD5 78d2355724114c041f6da654a53409b4
SHA1 5c9aba6d1fd1a617343c9a4b6b296ca7e578ec75
SHA512 416fc1979077ebd5c58b0225999c259bb19b7309db751b3cf9c45701406d0a2af30339b078a6b5b709cb68b082d333b4dbfe6d4d252a3cdaa25ff35a6b68f334
TLSH
T1B6D080138982174BD11143B2117255D47375DB65C64B238449F07E3B5DB6131C3762CA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e2d9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e2d9.TMP
Size 96B
SHA256 5490134bce966cec50d57e8c3ad8a899e3f8a3d9e793ba1f9d722d9d8e75c284
MD5 852e432c718f46ac1dcfd0e4d170b42e
SHA1 26dffe7e53527c6c609ea7183973d3f062480e1f
SHA512 c2e85cd3cd3c4ccee469acc3a9164ea4f52c171976dda72a4502aefd80b3eb78c734e0a412708c59ff6dcf2656b8ec5a2175626c73a69dbf848c8948b08b5ecd
TLSH
T1A1B00255D20262D3C08203B06D9596D97274DF3DDE17135693E01E67EC7DAA04925970
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 9932f06a51a4526bade2ec58d47a942594fba0b2dc5bf528b86f2e791837ffe8
MD5 a282e80133a842e2fb03e42cd4859940
SHA1 7ff573acb0bdc567deafdbfac095489da316bc80
SHA512 c5336436f79c475e268a68ab12799af3d3af3282bb2101276737fc5b21fd0cdad3a217f97f458575abe4b5434cf66ae451b02b93e45157f85aa3bbb9e77550c2
TLSH
T17EB0220000C033ABC382CB3082E00AC0B3B08C0C0383C00228A0A88CC20B3C20E083A3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 161B
SHA256 14471a9b6713b8340d14878d1c6af58e0c59a21a09502705863042e176aec00c
MD5 2a8525f81a111ffd2495004ad1ffae27
SHA1 13691bb31871a5efe0624b8476e3aeaac2d06a0c
SHA512 243d2399fc5104edbe155e2832a60c2da717c6a7b0d342a736c629091218af2fd0713b13c26ff8a436e1737039b42c5c06ac5e593dc8d56523e0f8c2cc4156d9
TLSH
T16FC08CD31C10479B0BB0AACA20A0732CE51B808CCCD2CCECA50C600B18B85372803524
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5abc8b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe5abc8b.TMP
Size 168B
SHA256 0df5cd3b70885b59507238975e39a5dd706b97595c7c10ff34eee55aa9d00fb9
MD5 af4bdea969d47cde6d1d58a275887a57
SHA1 573aafeeffbaa0c088d8bcf23dafefbdae46089f
SHA512 9c6b8d1eb86ed9492d1de0151446d5cbc773dc71c6da86b759e108dd6d1aa48f5e25f215e0f577c72be2d509919bd18cedca839766ffb3a8dc924b132ca1dc23
TLSH
T143C08CD30C2407970BB0AACA20A0B31CE52B8C9DCCC2CCE8A50D700B28B85376802524
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 263KB
SHA256 3afdd5771718828eabac2826bfac59cf5168496032cdd4eea934f7637fbf6bcf
MD5 ca130b4aae35b75c4f8905595d8bf45c
SHA1 ca1f1b918838ac1283307f26395c13d66b38057c
SHA512 7be71c85e43078e8ebe488bc07ebe71c456e044a747eb55f822d34e8036071ec530c3383657598af1e9ee78e0d6754c206db739accbc1e003aa6191cee810551
SSDEEP 6144:wIjeoHzTsc8pfDh5V6aI9vhyK+hFD+7t56OD9ZfSApprN:LCMTs/pB6x0KyFSXD9ZfS47
TLSH
T1EF4422267D9DFC33C9FC1942604B6229CDE176D980DA62D584A26FC9F16F48C0333A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 3bc47dd7b263cc8f0a1b74984a8d5a02e5f7ba9469cfa597d8c37987c4e0787d
MD5 9db7b0b26ce6925524faad41717272cc
SHA1 7f041c8745134dc30e213bc17f889ebfac0b6b7a
SHA512 adf456dce21ab46213d93151f57be752b3f512b2ce32d532203d9725ecedbb961b073dfb3a873ad63a6106dbaafc66aa1bdbf91cc348efa00371d2d32775cbad
SSDEEP 3072:Un+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:Un+hFD+7t56OD9ZfSApprB
TLSH
T1BDD31232AA91D8BBC9BC6541B157A300CD76ACED45DE3A09444A5F8EE09FD4C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 264KB
SHA256 2ebf9397ab83824143864a381bf48170388f313b5bfa32a9805fb592e7b18edc
MD5 8078edd72da24487694aaca966985edc
SHA1 c4eae5a9434c464eee97cb81847d498d9ede2348
SHA512 64ab74e7def6e140d3ed9741d7cb4b2c4fe623c31fe24d1504df058339ff837870c7cd3d0676f8abbb785ca39a293c07cb90ded271be5834ccaba3af327e3b99
SSDEEP 6144:wedjeoHzTsc8pfDh5V6aI9vhyK+hFD+7t56OD9ZfSApprN:nCMTs/pB6x0KyFSXD9ZfS47
TLSH
T1884412337D99FC73D6FC1882604B62198DE1B6DE84CAA69944926FC9F06F44C0733A36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 263KB
SHA256 716988b3d04d23decdab03e66c0f6f2f032f2ced575d263bb5468943d723fba8
MD5 eddcb6a895149764c3ebcc300745d948
SHA1 eea1f331a9ea3fb23e9ed3d0277fe23856fb8a8c
SHA512 5053de4c99e33155f93df407be90536fe2a8ddc78bcceac9d136eaec2d65dc5fa6d4f3dcd16422fc345604700e7f205815895ef207710ecde739a14a1136fd39
SSDEEP 6144:w1jeoHzTsc8pfDh5V6aI9vhyK+hFD+7t56OD9ZfSApprN:SCMTs/pB6x0KyFSXD9ZfS47
TLSH
T1934422267D9DFC33C9FC1942604B6229CDE176D980DA62D584A26FC9F16F48C0333A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 263KB
SHA256 2fdabbc135917dd6e3e84afcd3614de2e35b5d9f788005a9eb6dcda4efc67c11
MD5 70c3e652feeae5c02213b75e4c53f3af
SHA1 857404ac3a05ef1e1c6b6269cb54ebbee580d64c
SHA512 e31c60892166f54093a5cf93408ccd15ff3680624e276cd28ac04310ae74a294a5900c3d20b2493d20794e83ef1656f2e0d360cf542e18f41eba0c1080cdbe65
SSDEEP 6144:FIjeoHzTsc8pfDh5V6aI9vhyK+hFD+7t56OD9ZfSApprN:GCMTs/pB6x0KyFSXD9ZfS47
TLSH
T1DA4422267D9DFC37D9FC1942604B6229CDE176D980DA62D584A26FC9F16F48C0333A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 264KB
SHA256 bba9075607bce243a9212453e7aabbe79cb095eee8a9460fac60c8644d5461aa
MD5 7f5c8ed0cc1f4fbfc3a13742ebc4d9ca
SHA1 400cf83ce392503d72661c6f031020b9c191f68b
SHA512 0117ef44100374a1ef57a98ffe7a449cc517a7ed3b351167c024131cd0b914952e833676c17af0874fe6e03f2e4a2114696f878155b2ed13da70142d45fa5c75
SSDEEP 6144:wILjeoHzTsc8pfDh5V6aI9vhyK+hFD+7t56OD9ZfSApprN:bCMTs/pB6x0KyFSXD9ZfS47
TLSH
T1E44413377D99FC73D6FC1982604B62198CE1B6DE80DAA69944926FC9F06F44C0733A36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4672_1427508210\CRX_INSTALL\_locales\id\messages.json
Size 181B
SHA256 e1adfed5eb11047aa24d8653968f673fb2c70c13311a1893140f622ca9039ca1
MD5 b02adafef1002122064eae049c863517
SHA1 3dfa22e8538604daa17a1fcd457e4405862abfec
SHA512 198acfd5e7187830ae147c65534e356c4d87f05fb89672799dad74dec8066bcea12533332f2cd2f936f74999be39e40cfc58c9cc24b6e417f929bbf9908cb245
TLSH
T1BAC01212D2702D17078D45172958B1C072A60AB652A8195FD5CD743D534981A406B396
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4672_1427508210\CRX_INSTALL\_locales\id\messages.json
Size 197B
SHA256 aa7877cbc92e6a9c70f59357c49c73b45c5944dd9d1ff4eea0243f7838195143
MD5 6ffc1a5f762da489fe82859666cc3e61
SHA1 e417d46782764a518b8acf6af8e9eee202339974
SHA512 6e411426ad89ed0c515dc73ddff125e94b701c698129678cfc3fa05bb0d609ddf99c96c55ad9cf42b375fd5ee24bea428464d4da594a6741c5ce32eefebfd6e5
TLSH
T1D8D01206C2602E1707B4465739A8B3D0F2A607755264518FF98CA53D4BB681B4087B5A
MD5 SHA1 SHA512 TLSH

Submit Download

icon-pink-16.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4672_1427508210\CRX_INSTALL\icons\icon-pink-16.png
Size 11KB
SHA256 6c7cb7c2c40bf2e6940ca5318695dfb65bb48ec23add041cf3fdbd11c06861ab
MD5 b8d97dd53d4523f63eb5140cd4166635
SHA1 2b78ec54a9e92990fcc71c965933474a4b2a3b33
SHA512 3bb853620a1e094d1f2a8d862534da08ef9bcec0a5be5e8c440b0d6cae5a6d995bb81cce7ca62e43c8c9add3bcb77903e10e53fe94b17edd540540e3c9a63210
SSDEEP 192:WSQ6Tlax957U1/SrIVOIsslGsbf/xscWGCE4wYtP8WANKch2p8lCPWwll8/yBi4j:5FQz5o00kI4csPEvYtP8fN92p8lCPZlv
TLSH
T1C932D03574049FDD32E9823BA355BF7EAE1243A976B426FB19184C0C7483F2443A5A9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eppiocemhmnlbhjplcgkofciiegomcon_62561.crx

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4672_1427508210\eppiocemhmnlbhjplcgkofciiegomcon_62561.crx
Size 9.7MB
SHA256 4d680b06ae22c29d09b2cad179f1f2c3b9311191b2b7768289db0f31d0ca6fb0
MD5 991e8c049a6eb084fc09d04c629127e8
SHA1 00aa3c1dd032cb719ef1d2aa73b53ef517bad31b
SHA512 57ce356fe273852e785c5631b37da787dfaa977cf970506b60fb9742327b01f447e163b365dde41337064918d0ac230868ffed8d09b340230ef87a15e675441f
SSDEEP 196608:kGIHC9AeB6epYVnDxiqc+16EBdx5Co//DVeylfVUAIiZTvBKqEZv:It5epYQaZMQDHltRw1Zv
TLSH
T1F8A6337F3B199709F05A2C75E5B4E6C38EC74355E078219FBAA8C45A89649D00B3C8FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download