190d150db3a89c5687c0d4d75cc77aebc3ee2b4499cc92d5bc085326baf9ceab

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
platform_experience_helper.exe
Size 4.3MB
Sample260929-rtl7masblc
SHA256 190d150db3a89c5687c0d4d75cc77aebc3ee2b4499cc92d5bc085326baf9ceab
MD5 704cc73a4edd04f5578b58d00ab97cbf
SHA1 c7c9697a5724d3338c7d9bc2f5136fc77f85310a
SHA512 aa81fa38d43cbcb2f05529464cbc2d4cc17d0d9fd27249f63bbb85963d3c97db83b916a84aac8f2106193014423f234b779e5997aed1cfecf1dbf0aaf4b61ad3
SSDEEP 49152:aCbDF6Gvi5tyz58q345FSrewlc9VkqYR0x51QxuMYmoojyt1f9Y2Z+kTp:DF63e8au9ZxjMrjyD9ZLp
TLSH
T143266B23F68902F5C09AC175D7B74272E625BC2A1F2161EF264CB2141F7AAE047BF359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery persistence privilege_escalation spyware stealer

Malware Config

Signatures

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\scoped_dir4688_901073086\Default\Extension Scripts\000001.dbtmp	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\segmentation_platform\ukm_db-wal	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\GPUCache\index	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\Cache\Cache_Data\f_000001	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\Extension Rules\CURRENT	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\segmentation_platform\ukm_db	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\DawnWebGPUCache\data_1	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\GraphiteDawnCache\data_2	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\Cache\Cache_Data\data_0	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\Web Applications\Temp\scoped_dir2168_1084611490\Icons\256.png	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ko\messages.json	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\5dea14b9816ec6d9_0	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Sessions\Session_13435165761036005	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\Network\c33e641a-a18b-47e5-a129-3be9f9dc008c.tmp	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\DawnGraphiteCache\data_1	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Session Storage\000003.log	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_pressed.png	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\discounts_db\LOG	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\Top Sites-journal	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\Service Worker\Database\LOCK	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\Network Action Predictor	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Temp\scoped_dir3432_344600261\Icons\32.png	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\Web Applications\Temp\scoped_dir2168_1152790529\Icons\64.png	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\Login Data For Account	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\shared_proto_db\000001.dbtmp	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\48.png	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\et\messages.json	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\Extension Scripts\LOCK	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\shared_proto_db\metadata\LOCK	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\DawnGraphiteCache\data_2	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_0	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\LOCK	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Temp\scoped_dir3432_1480072406\Icons\192.png	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Temp\scoped_dir3432_7849157\Icons\256.png	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\data_2	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Extension Scripts\MANIFEST-000001	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\Web Applications\Temp\scoped_dir2168_1152790529\Icons\128.png	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\cab98e71-453f-4448-abfc-5df159161955.tmp	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Code Cache\js\index	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\_metadata\computed_hashes.json	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\Extension State\000003.log	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\GPUCache\data_2	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Code Cache\js\ba678a2fbd8c358c_0	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Extension Scripts\000001.dbtmp	chrome.exe
File created	C:\Program Files\scoped_dir4688_901073086\Default\GCM Store\Encryption\000001.dbtmp	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Temp\scoped_dir3432_2058527642\Icons\48.png	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\cache\index	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\ShaderCache\data_2	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\GrShaderCache\data_2	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Session Storage\LOG	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Session Storage\000001.dbtmp	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\GCM Store\CURRENT	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\sk\messages.json	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0	chrome.exe
File created	C:\Program Files\scoped_dir2372_1721321417\Default\Service Worker\ScriptCache\f1cdccba37924bda_0	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\ClientCertificates\LOCK	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\Network\Reporting and NEL-journal	chrome.exe
File opened for modification	C:\Program Files\scoped_dir2372_1721321417\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT	chrome.exe
File opened for modification	C:\Program Files\scoped_dir4688_901073086\Default\ServerCertificate	chrome.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2572	chrome.exe
4436	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\LocalServer32	platform_experience_helper.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID	platform_experience_helper.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}	platform_experience_helper.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\platform_experience_helper.exe"	platform_experience_helper.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\LocalServer32	platform_experience_helper.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\platform_experience_helper.exe"	platform_experience_helper.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2168	chrome.exe
2168	chrome.exe
3432	chrome.exe
3432	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 34 IoCs

pid	Process
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
3432	chrome.exe
3432	chrome.exe
2168	chrome.exe
2168	chrome.exe
3432	chrome.exe
3432	chrome.exe
2168	chrome.exe
2168	chrome.exe
2168	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe
3432	chrome.exe

Suspicious use of AdjustPrivilegeToken 36 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe
Token: SeShutdownPrivilege	2168	chrome.exe
Token: SeCreatePagefilePrivilege	2168	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe
Token: SeShutdownPrivilege	3432	chrome.exe
Token: SeCreatePagefilePrivilege	3432	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2168	chrome.exe
3432	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4688 wrote to memory of 4984	4688	platform_experience_helper.exe	88
PID 4688 wrote to memory of 2168	4688	platform_experience_helper.exe	89
PID 2168 wrote to memory of 3104	2168	chrome.exe	90
PID 2168 wrote to memory of 1444	2168	chrome.exe	91
PID 2168 wrote to memory of 1444	2168	chrome.exe	91
PID 2168 wrote to memory of 2572	2168	chrome.exe	92
PID 2168 wrote to memory of 4064	2168	chrome.exe	93
PID 2168 wrote to memory of 4064	2168	chrome.exe	93
PID 2168 wrote to memory of 4008	2168	chrome.exe	95
PID 2168 wrote to memory of 4008	2168	chrome.exe	95
PID 2168 wrote to memory of 2060	2168	chrome.exe	109
PID 2168 wrote to memory of 2060	2168	chrome.exe	109
PID 2168 wrote to memory of 2504	2168	chrome.exe	96
PID 2168 wrote to memory of 204	2168	chrome.exe	97
PID 2168 wrote to memory of 2504	2168	chrome.exe	96
PID 2168 wrote to memory of 204	2168	chrome.exe	97
PID 2168 wrote to memory of 1396	2168	chrome.exe	99
PID 2168 wrote to memory of 1396	2168	chrome.exe	99
PID 2168 wrote to memory of 3536	2168	chrome.exe	100
PID 2168 wrote to memory of 3536	2168	chrome.exe	100
PID 2168 wrote to memory of 1844	2168	chrome.exe	101
PID 2168 wrote to memory of 1844	2168	chrome.exe	101
PID 2372 wrote to memory of 5076	2372	platform_experience_helper.exe	103
PID 2372 wrote to memory of 3432	2372	platform_experience_helper.exe	104
PID 3432 wrote to memory of 4320	3432	chrome.exe	105
PID 3432 wrote to memory of 3136	3432	chrome.exe	106
PID 3432 wrote to memory of 3136	3432	chrome.exe	106
PID 3432 wrote to memory of 4436	3432	chrome.exe	107
PID 3432 wrote to memory of 3360	3432	chrome.exe	108
PID 3432 wrote to memory of 3360	3432	chrome.exe	108
PID 3432 wrote to memory of 2060	3432	chrome.exe	109
PID 3432 wrote to memory of 2060	3432	chrome.exe	109
PID 3432 wrote to memory of 1020	3432	chrome.exe	110
PID 3432 wrote to memory of 1020	3432	chrome.exe	110
PID 3432 wrote to memory of 4656	3432	chrome.exe	111
PID 3432 wrote to memory of 3832	3432	chrome.exe	112
PID 3432 wrote to memory of 4656	3432	chrome.exe	111
PID 3432 wrote to memory of 3832	3432	chrome.exe	112
PID 3432 wrote to memory of 4336	3432	chrome.exe	113
PID 3432 wrote to memory of 4336	3432	chrome.exe	113
PID 3432 wrote to memory of 4144	3432	chrome.exe	114
PID 3432 wrote to memory of 4144	3432	chrome.exe	114
PID 3432 wrote to memory of 2000	3432	chrome.exe	115
PID 3432 wrote to memory of 2000	3432	chrome.exe	115
PID 2168 wrote to memory of 5400	2168	chrome.exe	121
PID 2168 wrote to memory of 5476	2168	chrome.exe	138
PID 2168 wrote to memory of 5484	2168	chrome.exe	123
PID 2168 wrote to memory of 5476	2168	chrome.exe	138
PID 2168 wrote to memory of 5484	2168	chrome.exe	123
PID 2168 wrote to memory of 5880	2168	chrome.exe	126
PID 2168 wrote to memory of 5888	2168	chrome.exe	154
PID 2168 wrote to memory of 5888	2168	chrome.exe	154
PID 2168 wrote to memory of 5880	2168	chrome.exe	126
PID 2168 wrote to memory of 5896	2168	chrome.exe	128
PID 2168 wrote to memory of 5896	2168	chrome.exe	128
PID 2168 wrote to memory of 5904	2168	chrome.exe	129
PID 2168 wrote to memory of 5904	2168	chrome.exe	129
PID 2168 wrote to memory of 3776	2168	chrome.exe	131
PID 2168 wrote to memory of 5708	2168	chrome.exe	132
PID 2168 wrote to memory of 3776	2168	chrome.exe	131
PID 2168 wrote to memory of 5696	2168	chrome.exe	133
PID 2168 wrote to memory of 5708	2168	chrome.exe	132
PID 2168 wrote to memory of 5696	2168	chrome.exe	133
PID 2168 wrote to memory of 5716	2168	chrome.exe	134

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\platform_experience_helper.exe
"C:\Users\Admin\AppData\Local\Temp\platform_experience_helper.exe"
1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=151.0.7914.0 --initial-client-data=0x244,0x248,0x24c,0x218,0x250,0x7ff7d0a447a8,0x7ff7d0a447b8,0x7ff7d0a447c8
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --headless=new --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --disable-features=LoadLowEngagementPEHFeaturesToPrefs
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2168
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Program Files\scoped_dir4688_901073086" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\scoped_dir4688_901073086\Crashpad" "--metrics-dir=C:\Program Files\scoped_dir4688_901073086" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff86605c728,0x7ff86605c734,0x7ff86605c740
    3⤵
    PID:3104
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --headless=new --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1888 /prefetch:2
    3⤵
    PID:1444
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2104 /prefetch:3
    3⤵
    - Drops file in Program Files directory
    - System Time Discovery
    PID:2572
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2384 /prefetch:8
    3⤵
    PID:4064
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3148 /prefetch:1
    3⤵
    PID:2060
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3168 /prefetch:1
    3⤵
    PID:4008
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3512 /prefetch:1
    3⤵
    PID:2504
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3628 /prefetch:2
    3⤵
    PID:204
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4536 /prefetch:1
    3⤵
    PID:1396
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4688 /prefetch:2
    3⤵
    PID:3536
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4840 /prefetch:8
    3⤵
    PID:1844
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5440 /prefetch:8
    3⤵
    PID:5400
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5556 /prefetch:1
    3⤵
    PID:5476
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5576 /prefetch:1
    3⤵
    PID:5484
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5544 /prefetch:1
    3⤵
    PID:5880
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5832 /prefetch:8
    3⤵
    PID:5888
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5804 /prefetch:8
    3⤵
    PID:5896
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5924 /prefetch:1
    3⤵
    PID:5904
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5868 /prefetch:1
    3⤵
    PID:3776
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6284 /prefetch:1
    3⤵
    PID:5708
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5584 /prefetch:8
    3⤵
    PID:5696
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6336 /prefetch:8
    3⤵
    PID:5716
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6372 /prefetch:1
    3⤵
    PID:5476
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6236 /prefetch:8
    3⤵
    PID:6076
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --force-high-res-timeticks=disabled --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5740 /prefetch:8
    3⤵
    PID:5924
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5896 /prefetch:1
    3⤵
    PID:5944
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6204 /prefetch:2
    3⤵
    PID:5964
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5732 /prefetch:1
    3⤵
    PID:5752
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir4688_901073086" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=1896,i,4618593339583794037,11616853253993242632,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5752 /prefetch:2
    3⤵
    PID:5972

C:\Users\Admin\AppData\Local\Temp\platform_experience_helper.exe
"C:\Users\Admin\AppData\Local\Temp\platform_experience_helper.exe"
1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=151.0.7914.0 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7d0a447a8,0x7ff7d0a447b8,0x7ff7d0a447c8
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --headless=new --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --disable-features=LoadLowEngagementPEHFeaturesToPrefs
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3432
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Program Files\scoped_dir2372_1721321417" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\scoped_dir2372_1721321417\Crashpad" "--metrics-dir=C:\Program Files\scoped_dir2372_1721321417" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff86605c728,0x7ff86605c734,0x7ff86605c740
    3⤵
    PID:4320
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --headless=new --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1896 /prefetch:2
    3⤵
    PID:3136
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2152 /prefetch:3
    3⤵
    - Drops file in Program Files directory
    - System Time Discovery
    PID:4436
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2432 /prefetch:8
    3⤵
    PID:3360
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3144 /prefetch:1
    3⤵
    PID:2060
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3168 /prefetch:1
    3⤵
    PID:1020
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3528 /prefetch:1
    3⤵
    PID:4656
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3576 /prefetch:2
    3⤵
    PID:3832
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3308 /prefetch:2
    3⤵
    PID:4336
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4632 /prefetch:1
    3⤵
    PID:4144
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4816 /prefetch:8
    3⤵
    PID:2000
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5452 /prefetch:8
    3⤵
    PID:6048
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5564 /prefetch:1
    3⤵
    PID:5468
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5584 /prefetch:1
    3⤵
    PID:6128
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5832 /prefetch:1
    3⤵
    PID:5576
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5540 /prefetch:8
    3⤵
    PID:5452
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5848 /prefetch:8
    3⤵
    PID:6044
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5920 /prefetch:1
    3⤵
    PID:5500
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6388 /prefetch:8
    3⤵
    PID:5196
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5860 /prefetch:1
    3⤵
    PID:5968
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5700 /prefetch:8
    3⤵
    PID:5264
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6284 /prefetch:1
    3⤵
    PID:6008
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6600 /prefetch:1
    3⤵
    PID:5448
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6424 /prefetch:8
    3⤵
    PID:5888
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --force-high-res-timeticks=disabled --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6744 /prefetch:8
    3⤵
    PID:900
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5580 /prefetch:1
    3⤵
    PID:5808
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5860 /prefetch:1
    3⤵
    PID:6060
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6388 /prefetch:2
    3⤵
    PID:5656
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Program Files\scoped_dir2372_1721321417" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=1900,i,12767916960176448167,12478527660555715733,262144 --disable-features=LoadLowEngagementPEHFeaturesToPrefs,PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6480 /prefetch:2
    3⤵
    PID:6024

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

index

Path C:\Program Files\scoped_dir2372_1721321417\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\bg\messages.json
Size 796B
SHA256 a114e2783d0e9b12155017323ba70838f0f82a71c7ee8dc1f115ae36991241f8
MD5 6f8e288a9ad5b1ed8633b430e2b4d4ca
SHA1 f671d3d4befa431d1946d706f4192d44e29b6f08
SHA512 0f87f3f0d115b872288949e59acd3cd41b1fbc64a622d8fda6d71fafc5a900d92adfbb0e7eb926f2a8759bbaa0896d48728fb719bbf5ef54ac21027328f7700c
TLSH
T19A01624881A258AF0162E01BB0A13706FCA2027B2790949F386CAC0D3FF9D528159F0D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\ca\messages.json
Size 675B
SHA256 c67898b67f9c9209eafda6532b62d5789863cfb855998dd6a70e7775316cec20
MD5 1fdafc926391bd580b655fbaf46ed260
SHA1 c95743c3f43b2b099febebc5bd850f0c20e820ac
SHA512 39d95d45c5746da3baa7ae6a3344ea17d7a7c3569c2a56959ff119261da08c747a320fcf701ac72b8dbdbf8bf06fd8b239017a282cdda444f3826d4ec672cbb4
TLSH
T11D014949C290BCFF02F2415E77643741F990467A0F41D4ABBA2C980C8FB8C879092F8D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\cs\messages.json
Size 641B
SHA256 32290d69a90e6baac428b10382c99221b12773bb9a184f3b93dfb48a4f6d7a40
MD5 76dec64ed1556180b452a13c83171883
SHA1 cfb1e56fd587bcdc459c1d9a683b71f9849058f9
SHA512 5230a217968d5dc463e2e92d704544311a721e5cef65c3125cbd8deb9c0293d3bfb5c820a6011abf77095fdee7daf67d541dc202b0c9cdb0908cbb85d84885cb
TLSH
T1A5F0FF08C4A2AC9F06B2429B70B47780EE2483770750A8AB3A7CD41C9FF9D439186F4D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\da\messages.json
Size 624B
SHA256 4977d4a053542ff66967faed6b06585dd70e68e20bfeb533b66fe3287f9655d9
MD5 238b97a36e411e42ff37cefaf2927ed1
SHA1 4e47ac90ba24c8f4724d9293fa40cfd4ada66fe0
SHA512 fd0742d47b5f5ab9aad9b4c3d57f63cb693e060eece123a72036c6e92156d099495c7e9e9cc6dc83eebcddcc4b4c81fb47e4c9559da3eba024780fff10c53e0a
TLSH
T16CF0AF88C0706D7F02B2821B70A8B311F96106BB4B10B65F396CE80C8FB29970086F4E
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\de\messages.json
Size 651B
SHA256 a62ffab910e31531758eee48b2cc71a8857bec3021dead50b668cba3c8667053
MD5 6b3e916e8c1991aa0453cba00fedcaaa
SHA1 d6366d15912e40ca107fd42bfe9579c3336a51f9
SHA512 87ea4311b61f29543b13f3e17dfa919d0c320b4fe370cc152e0b1514bca79b0abb526ddcf08621d6ebfa48923ee8fb4c667efb120a72bd9583eebee7bfb80552
TLSH
T181F0F408C8A09C6F03F6435B71B4B704FB91027A4A11A85B7A3CE84D8FB2D6710C2F1D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\el\messages.json
Size 787B
SHA256 a052c32b4fcac61152eb0adb2c260fb6a8256ad104aa0013db93e9798d41a070
MD5 05c437a322c1148b5f78b2f341339147
SHA1 ab53003a678e44a170e73711fbd9949833bbf3aa
SHA512 c36cb9202a34356dd06d377e2a088f428d0b8ebe7d2e54f8380485e9d94a0598d7f651c1e7a2fd55be481d49c02b0812f2ba335e08611ec85ee0bd60784a6b40
TLSH
T1F501F98EE0B0ACEF11B3820671E4B619E781067A7A04DDEA3A2CD8087FF19430142F4F
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\es\messages.json
Size 661B
SHA256 4db9b2721e625c18b9e05c04b31af5d9694712f1caaf6219abe34bb08e5db1c7
MD5 82719bd3999ad66193a9b0bb525f97cd
SHA1 41194d511f1acc16c1ca828ac81c18c8c6b47287
SHA512 d4c49b43427799b6292ceed11cacb1d76f7ce43ebf402b43b638a6eb2b414ed0981e386cb8cdf0b51d1bd9552934fe25b2f6392266bb73d8c9a691f65bce0128
TLSH
T12E01F40EC0A0AD9F03F6012E36B43705F990167B5A40D56B7E6DE80D8FB9D9B1096F9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\es_419\messages.json
Size 637B
SHA256 6659bc3705311d7641a73995dcfea80c7734f2f4ebbc3787b3892a240348324f
MD5 6b2583d8d1c147e36a69a88009cbebc7
SHA1 4d4deeb4be6aa0181825f3371a761abc5b4d5937
SHA512 37f0dbfcc1b5a2b8e4c92c49d2d9deef25616421350324f57e0149a45a6ccb437f5e3cbe97412c4b5dbbf2593783c7df71e9c25a851aeae6e4764c545723fa53
TLSH
T1DDF0D109C4A0AC9F02F6415E37B43705EE50027B4A80D56B7E2DA80C8FB9D925186F5C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\et\messages.json
Size 595B
SHA256 c85800bf45942fcc7fd6b1df929c25f9cc2a977a6678966bd03d4b6b69889afd
MD5 cff6cb76ec724b17c1bc920726cb35a7
SHA1 14ed068251d65a840f00c05409d705259d329ffc
SHA512 53d7d01bb30c0306de65a79fd9551d2e8c1f71f4f45f71906b009071cb3e0f231e6a50fdd78773e9b4de94085bc7b97f829842fa21a89a2080d33458b745c46f
TLSH
T111F0C288E4A1EC1F02B1422A30B57306E928437A1310A8AF7D3CD84C9FF9D6B50C6F8C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\fi\messages.json
Size 647B
SHA256 0bde54b20845124113383b6eb81e43a0f05e4eb0c44bee3c1dfac4cc5fec2836
MD5 3a01fee829445c482d1721ff63153d16
SHA1 f3eaaaddc03f943fc88b30b67f534aa13e3336dd
SHA512 3b92b6c86d30fd36aa3ceff8773ba60c3fc5cc19c693540137044c5838a5503895c770c0336a4d0a3db5e42f3fb36274d8d3f85b9dca2f3ec0e974fddb0bead8
TLSH
T11DF0F408C250E81F16B6461A76A42305FDA5433A0A41D99B3A6CD80C8FF6ABB24C2F1D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\fil\messages.json
Size 658B
SHA256 ec002ed92359f67818b49455dfc579e140368e6a004080af022fd4f57f6b03f2
MD5 57af5b654270a945bda8053a83353a06
SHA1 eeef7a4f869f97cf471a05d345e74f982d15e167
SHA512 5f0ae839fcf3f4ea48ff41a76655ae0f3821564afd5d42fbb9fbb9a38e8d8f7bb5e9b6f71064588cd441261f644095a44a755c134ce546d506d9a21e488baf52
TLSH
T17001D698C1B17C5F4272492D3179B708EBA4027A1B42645F3E3C9D0D5FB2C931081F8D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\fr\messages.json
Size 677B
SHA256 599491f8c52b945c16c441adf45bfd45afae046da07757d97c56af4de75ed3b5
MD5 8d11c90f44a6585b57b933ab38d1fff8
SHA1 3f9d44ea8807069a32aaca2aaad02fd892e6cc90
SHA512 d7ef7f5ad7ef1a1595825d79b69e2b1e988ad3cf1f3881496fccd30f241e4e9c6e457f9f5d0f855de3536db7a40c3e1c55946b50d3f556f4a35285066a0cd6f7
TLSH
T1F301D68CC4706CDF02B7421635A6B751E5A0037A8A50A6AF3A3D940C9FFAD6621C7F8D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\hi\messages.json
Size 835B
SHA256 8106d98c4f8da16db698444409558e29cc96735e188bfa303c333a5d99231c1d
MD5 e376d757c8fd66ac70a7d2d49760b94e
SHA1 1525c5b1312d409604f097768503298ec440cc4d
SHA512 673f3f259af2946e4f49bbed14a2a70d44bf9fda9d7a71dc9172ba9b7b3c7f7062b16d29682b638d485b0520ed6f99e7a735f28c7c719b539559005b69fa7555
TLSH
T1BC01450CC7A9F90F0ABD304A32A92635DAA0127607D0955B7E2CF44D8FF1C671185F48
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\hr\messages.json
Size 618B
SHA256 a2b2ec359a9dd9dccce02859ce1e738bd30faa4a05f1dc522893ffdf722bbc15
MD5 8185d0490c86363602a137f9a261cc50
SHA1 5bd933b874441ceacb9201ccc941ff67baed6dc0
SHA512 d7629978fc031ea5f716f9c1065fb2feab48c15f10cd68830dc966fa1002c03ddc7acde314c7d075f9f3a0a68552a6acbccdee24cf20b6c3dd1bce6562d0396e
TLSH
T19FF0C888D091989F02B5815E7DB57304E6A483BE4644A8BB7D7CA50C8FB5C9B6091F8F
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\hu\messages.json
Size 683B
SHA256 32a249749f12adb6a220bf9adc272c7e5d9ad5497a38b0086d961e3aba17fbc6
MD5 85609cf8623582a8376c206556ed2131
SHA1 1e16eb70db5e59bb684866ff3e3925c2def25a12
SHA512 27883430865d3cfa6edfe8c6ce1442bd96150b5ce520ccf7d556a330caa6392c712b47bd86f7350e174876bc681f6dec94d1312402655b0af90883a2899ec78b
TLSH
T1480178D8C076AC6F01B2062A30B5B725DA5512B78B20989B3B3CDC0C9FF6C575082F4D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\id\messages.json
Size 604B
SHA256 c6e8800450602de0f39fe9f6854472383813fb454b08abae7e25a9167ce004c3
MD5 eab2b946d1232ab98137e760954003aa
SHA1 60bdc2937905b311d2c9844df2d639d7ac9f7f67
SHA512 970fec9a9ef0baf7f693c4c5977f3b47914579c5b5414fce9dbb5e4574659a5bb9ad2de0cc886b368f49c019785af7d2d7fe82f71341f039eadc399ed776ca12
TLSH
T1A0F0C289C0916D6F02B2455771F57748FE5002764A11A9BFBE7C9C0C9FB696B02C6F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\it\messages.json
Size 603B
SHA256 cd891c45f7586fb4a2514205a11f260e4a6d4482fa03d901909dd9f57be0536d
MD5 a328eef5e841e0c72d3cd7366899c5c8
SHA1 2851ed658385804e87911643f5a4200b1fb26e13
SHA512 e47297896e981774ec3b59d41b89d6ba9333f6b4435eb9727d8645a46b10c7d408ade06844871fa757382fbe7e645276449db7b1b23bc59c9a71a5cb5a5ecc57
TLSH
T191F09088C5A19CAF02F2421A72B97750EAA1027A4F54A5AB7A3C984C8FF9C935185F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\ja\messages.json
Size 697B
SHA256 706312a4a2aef3317223f141eb2b82685345b7eed444f16bb4df3a272716da1f
MD5 9b3a5d473c3f2bbfaeece94a07a940b8
SHA1 61baca342cf766bba15c7b4d892a0e7dac9405aa
SHA512 94f6fee9a11bd890ab8211c98d1cc142348961ebcf756f66477a3e3a76519804b70be0ae4e551739f8afe32d7ade6ede04ef6b9b9eed03e3a857e6058eedd4c6
TLSH
T13901F24DC090A81F02B2822630E66381EA214E778641699B393CC80D8FB1D6FD186F7D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\ko\messages.json
Size 631B
SHA256 d1467b8d037114403e8f4efc52e88c4a7feb96126be4cff883feff1084ef7e68
MD5 9f6b4d82a70c74ca751e2eae70fab5cf
SHA1 0534f125ffce8222277cf2be3401c59daf9217f8
SHA512 ed9319830314385d09c06f62ee34186e8ca576c857981205e4468a28b3acd2ab03384e77b866032c324abdd97a56efd08e2d6e0c79d563578b3ec52517819bd8
TLSH
T10EF02849C096AC6F02B1411A38F4B714DA9052360B50999F3D3CEC0CCFB5CA710C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\lt\messages.json
Size 665B
SHA256 7c311ab751d840d750c11553c083785813e079c1d464fe568a98c9e3ef3db96c
MD5 4ca644f875606986a9898d04bdae3ea5
SHA1 722a10569e93975129d67fbdb75b537d9d622ad1
SHA512 e575e3d0622f5bd4b6c0ee79128a1b1f1882195670139d1983f4377d847141b8fb8ebb8bced82af3a220ed07d3577afbe085badc0e9c7678292b80e3ec5d3444
TLSH
T175012888D9A16C6F07B2421770B57300EAA447720744A49B7E3CD50D9FF5E8B9696F0F
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\lv\messages.json
Size 671B
SHA256 1fa1df2ca8516def490fb8484e9aa498acff80eef5c9258ffe42d3678e6c7ded
MD5 c5ce2c51391eafd3da9e4c71549a3c28
SHA1 1f67ff6ef6e90c0ce3aaf56ed543a3efd381574d
SHA512 c85f6281e682f52bc2147dea7e2f3bb4dc48d98bada8687b05c6c7271c78ea7f5431cd51671a4184c9ae004fc53c016e3c594697f483195ccba08a93821eef70
TLSH
T1F40149C9C591DD6F02B1826A35E47300E6D047B60A00A45F3EBCD51C8FB9C5750C6F5C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\nb\messages.json
Size 624B
SHA256 2cd700aeb57d89c2e73333d0702556ee3ff3863516170f85669bc680fcbdc4e0
MD5 93c459a23bc6953ff744c35920cd2af9
SHA1 162f884972103a08adb616a7eb3598431a2924c5
SHA512 f76e6e8d8499306883c3ec1e774f7e8bb6b601096da5a14d17d3e7d5732829542041e42b7350466589291adcc83fb065fd591b4e20cfcf8edc586e128ecbfcb5
TLSH
T11CF0C848C0606C6F02B1825B74B8A756E654037607A1B64F3D6CE80CCFB6D9710C9F4D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\nl\messages.json
Size 615B
SHA256 92be7c2dc9cfbe5a65e9ce6488d364c8d7ec19e7b67a31e4d43c1cb2b169671c
MD5 7a8f9d0249c680f64dec7650a432bd57
SHA1 53477198aee389f6580921b4876719b400a23ca1
SHA512 969ab979546a741c0f3edbeeb21baba375fa8870d4fb9248cdd4c305736e332e10cab7b64c5c078e60ec0cd73848101b390be8f44b89c310058af4c1ca3c8aa7
TLSH
T1C3F04F5CD4A1AC6F02F1421B71A4B754FA61027A4E50A59FB97CD90D8FB2D931086F4D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\pl\messages.json
Size 636B
SHA256 e2699f98c511b18a2afb82eae9a4804b646c4ff1077d80e77c17a3943a6373c2
MD5 0e6194126afccd1e3098d276a7400175
SHA1 e8127b905a640b1c46362fa6e1127be172f4a40f
SHA512 a71f7c7bfbbf1e37e699601af2e095c56cba91f90cb7556477df31d01b83adfb1271e1775c9ba299ff6875bbfc2b6ab47488cc88e33def2f6f2e0e5ac687b777
TLSH
T1EAF0F488D0909C7F02B1019B36B87700FE52537B47A0B59B7A2C980C8FB6C970081F8C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\pt_BR\messages.json
Size 636B
SHA256 6374880fdd1f8af1ee8aea6a06b73be0ab265afceb4fe6f08bde3b3989264b21
MD5 86a2b91fa18b867209024c522ed665d5
SHA1 63dec245637818c76655e01fcb6d59784bc7184e
SHA512 da6dbde5028756421c2904f605632ee98831a25a1247e6238a931629b94ce8a00fd76f4235f118d2167304bd60f2c06b2ad78e54ff6ce53f8c38df8c7b5afce4
TLSH
T139F0C84DC0606CAF02F6422A76B4B710F95003BA0F80999B793D944C9FB9D571186F4D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\pt_PT\messages.json
Size 622B
SHA256 c1c94f65fabaf17def98a8587711a56d61b1e5607500e9b01f2824db109f9e83
MD5 750a4800edb93fbe56495963f9fb3b94
SHA1 8bfb915488a4eb3cb33d68e2e59f1f8447db7d61
SHA512 2aedef5793406221be76af22031ce8c30ab5faeaed09bb394c153e2ebe990c89c1a2a73b40d8a92842641afca8c77ffd808a2058602d3646fd8dae2844406f24
TLSH
T174F0FC5CC46059EF02F2435A72B47B60FE50027A4E50549B7E3C984C4FFAD471182F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\ro\messages.json
Size 641B
SHA256 113a13900cba62fe8aed06751971c23a80a99b47f9be219cf884d57db19611d9
MD5 98d43e4b1054a65df3fa3cc40ab6fb6d
SHA1 46e0a21c4da2bb5d4d8f837ae211c1b6fa26e7e2
SHA512 a76dc53912a4f46714926b9ea2b22e909540e447f61f6dd72607ab7b3bb5d4a9b39e525b04c33aec53ba813d14ac1fb5827275b2524e52b693e83171e1cd1466
TLSH
T110F0C849C461AC6F01F2426F75B47641FA6503774B51699F7A3DD41C4FB5C8BA082F8C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\ru\messages.json
Size 744B
SHA256 fbaf22ce6e16de174ced8cb5ea3098cca1c3426a2111ff33bd3e64da64ed67ab
MD5 db2edf1465946c06bd95c71a1e13ae64
SHA1 fb4f3ece9ececebbc6ca2a592a15fb9c1fdfb811
SHA512 4e0cf00baef1757548deb17bbe1af55770a0a0f7351779ef55c7defa6d112d0227b8865c2c22e0ec62e6e2f1c8e1632a2d0ce6828d25c5abbf143c990116f632
TLSH
T13201285884816CBF03B2812AB8AABB05F86002BA2F4156DB382CAC1C7FF585200A5F0D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\sk\messages.json
Size 647B
SHA256 7fa16af97e6cfc52ec6008eb679d3f30e7e0c24f9ef2d18a9228eaf4ded9d63b
MD5 8df215d1efbdabb175ccdd68ed8dcb0a
SHA1 2b374462137a38589a73fdd00a84cbdc7e50f9f4
SHA512 c0e623343bdaeb4731800d183b59f2fcfe285f0c7153ec99641fd84f2f2dcfe47d21e73f3d28b1240340453c5668eb0affbe087aab62f1c88cd2a40cc44e599d
TLSH
T187F0A488C0B6AC5F03F2415A71B4B781FE6943760B51A86B7A3DD41C8FF6D965082F4D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\sl\messages.json
Size 617B
SHA256 18aff072ee0df7c3495045435c752a805606e6d5d462ef2321c443f1773f4b3a
MD5 3943fa2a647aecedfd685408b27139ee
SHA1 0129dd19d28373359530b3b477fe8a9279dabb7d
SHA512 42e62b3855611ff2e1d39c11404cb1a09825ee4ca6a8acb3ff538b4574388f549e3bd79137dd4dc128a8dc44dd270d7d878e4aad20da8250a5c25297b0dec09d
TLSH
T1A5F02288D091595F02B5912BB9F87A00FAE5037A0240A87F7E3CD40C8FB5D4202A2F8E
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\sr\messages.json
Size 743B
SHA256 7ffde34c58e7c376c042de64def6481dae32be8b70f0b18edf536290cbe0c818
MD5 d485df17f085b6a37125694f85646fd0
SHA1 24d51d8642cdc6efd5d8d7a4430232d8cde25108
SHA512 0ddecfd860e99290b6c3aaa04f510272ae081cf2d93ed5832d9d6378ec9d36177ffbe213471247fb94721ea34a83e7665669200047091d0fde134e3d763217e7
TLSH
T1FC01D868C5DA785F01B2C11674797348ED5612FE1B44516FB93CA82C6FF59A201C6F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\sv\messages.json
Size 630B
SHA256 b8ba77e0089b0676545ec16d32468b727812b444f90b33a7a5b748e6c36c4388
MD5 d372b8204eb743e16f45c7cbd3caaf37
SHA1 c96c57219d292b01016b37dcf82e7c79ad0dd1e8
SHA512 33640529e0d5dcc5ca4bdb0615a2818e8d26c6fcb7b3474c08ac3eb67b9db40e1f0a79954ed20728cd47a686d2533dcbc76abcbdb917f8530c8de8bba687352e
TLSH
T10AF0F44CC470ACAF12B2415B31B4B314FB2412BA4B40759B7A6CD81C9FB284300D6F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\th\messages.json
Size 945B
SHA256 2feca577f43d97baeea464741d585892103585208fd0a935b810a03bdce83c88
MD5 83e2d1e97791a4b2c5c69926efb629c9
SHA1 429600425cb0f196ddd717f940e94dbd8bff2837
SHA512 60a5928daa8cb4341487f477c56b5a98b83ede50e5f4f55a802e01fddab86f3e795d391953d3d9214552d14d3f58c5a183693c613720fc12fc387d7b8f9b9ab6
TLSH
T10D11E167D090DC6F22A0021B3679B385EA281EB62B10B4F6B92C510D4FF1F27C452F9A
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\tr\messages.json
Size 631B
SHA256 a7cb86f30c9c31fe5540282c308ba96adb4ec16ef98c87129eb88105e5bef5fc
MD5 2ceae0567b6bb1d240bbad690a98ca3b
SHA1 5944346fbd4a0797b13223895995cab58e9ecd23
SHA512 108a07c6d03d7178e8d0ffef5349e0249a898d864964fed8757bd8a08bc1c6d9613f2a6c01aa34a6606127d1c6ce14c229fa02586677dbb060b85e3e845950e1
TLSH
T1CBF0AF48C4E46C1F13B6821B72B57692EA9142B25A10E85B3A3CD91D9FB6E5B00C6F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\uk\messages.json
Size 720B
SHA256 68aba284751eb9c856032062ef9b1651e2a1e5ce5fda0977ffc97d63ba7bed9e
MD5 ab0b56120e6b38c42cc3612be948ef50
SHA1 8b3f520e5713d9f116d68e71daeed1f6e8d74629
SHA512 cd852a58217f739c1cd58567ff432d31a7ad3f68c884abba1da95799bcd1545c6a5d3b06f319681c12b78ad0a709828de4b22736316f148d21f5db76a5bccbef
TLSH
T1DD012B5C8495982F03B3812B78A97305FDA103BA1791979F3ABCB80C5FF5C564192F0D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\vi\messages.json
Size 695B
SHA256 051f96ed874c11c4a13589b5f68964e4f5b03b52dda223d56524f2ca23760c04
MD5 7ebb677fead8557d3676505225a7249a
SHA1 f161b4b6001aeaeab246ff8987f4d992b48d47be
SHA512 74fd267cf7e299fb8e7054605c3f651f057f676ff865082fa24f4916755456768db0da62dbc515d829b48ab1f9cfc8ad3e841dcbf1f194d5cb14c5335a192a0d
TLSH
T114014908C160285F02B6571BB0EC7312FB5806778700DAAB3ABC841E8FB7D931986F0D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\zh_CN\messages.json
Size 595B
SHA256 d804f2a040d21d7511efd5213d8e1721d64964a1a0dbb48e21622ceedc9d967e
MD5 bb73bf561bb79f89d9bf7c67c5ae5c65
SHA1 2fadd3a1959b29c44830033a35c637d0311a8c9c
SHA512 627d44cef1fe5c5abd598bd47ff5e22b9efc1cf98dde3868fa9e5896c134a0c9c055ac34eddadae56b6690e51aea89965d38f770552a85c732cc796795dc68d2
TLSH
T19BF06248C4A0AC9F027A852730B9B369EA54123B05109AEB7EACD90C5FB5D5F2483F4D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\_locales\zh_TW\messages.json
Size 634B
SHA256 c6f8c640f3353a7b9b1432a0c139c1aeec40133800e6c9b467b63991ad660308
MD5 5ff50c673cc0c661d615f0cfd0e6dca0
SHA1 60dff98deab9c4746b288bdd9c94b3bcae5eaa85
SHA512 361d62d91f4931c5f34092c9f2c6a5323d5eeb82a24e7abe11f7817d8d66341c0ecad4dcb4b10873920c8d6a3cc9f5704889e178eb2549001a9f62bedf6c8019
TLSH
T1FAF0C248C4A0AC5F0376854672AD7707EE5002BB0A11A5CBBE2D940C4FB289B9082F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_window.js

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\craw_window.js
Size 255KB
SHA256 5721a4b3f8e09c869a629effd350b51c9d46f0ac136717d4db6265c0ee6f9ac8
MD5 1709b6f00a136241185161aa3df46a06
SHA1 33da7d262ffed1a5c2d85b7390e9dbc830cbe494
SHA512 26835b4c050f53ad2ddb84469df9a84bbb2786a655ab52dfc20b54bedcb81d1ecd789198d5b7d8b940242e5ceac818a177444d402397ae82c203438c4b1d19cb
SSDEEP 3072:I5vU7I6s2M9duIWFCbmYJ4tnFWdqpMad2vywhIp81QFv9F9nNsZgiDdOFlV/mZmc:I5vqFCb2p8Gx9FNNsZ9Dd/ceR
TLSH
T13E44A58D75A66551A797B2A890BF014BF27B1885F84C0EE8F5ACCCD03A799894037F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

craw_window.css

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\css\craw_window.css
Size 1KB
SHA256 10dfbd2d98950b79ee12f6b8e3885aabe31543048de56ad4fc0a5e34d0d9d4ec
MD5 67bf9aabe17541852f9ddff8245096cd
SHA1 a4ac74dd258e8e0689034faa1b15a5c7c56dc3bb
SHA512 298fa132c6f122798fdb9bc6de8024915147adc20355b56a92f0ed9acce4549be6e7f42212e07dca166e31624d4e66e299565845d4ba1c51ca935050641b61fe
TLSH
T1D831AFAE07A52718755BE4E43BDBE72073355043E51FD84C6BEE6989CF82B098123792
MD5 SHA1 SHA512 TLSH

Submit Download

craw_window.html

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\html\craw_window.html
Size 810B
SHA256 bb8742615e4cd996ae5d0200e443ae6a6f0b473255f03affdb8fb4660de4554d
MD5 34a839bc40debc746bbd181d9ef9310c
SHA1 8b4eaa74d31eed5b0baba3ca5460201f6b10da46
SHA512 ee81e5509cbc2cb2b6c834224688c1e1b1aa9aa3866c52f8eaed040d5c390653c52d8d681e2e2cf62906643962abac823d5b622385b983b21e0dccafdf281eff
TLSH
T13C01689280F952CA41A224D43FE7590B7F81E287C332590837AE0A9B6FD778AC80B495
MD5 SHA1 SHA512 TLSH

Submit Download

flapper.gif

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\images\flapper.gif
Size 68KB
SHA256 2b73533f47a99ffea9cc405ffafa9c4c53623f62487aebfba415945120b22040
MD5 398abb308eebc355da70bce907b22e29
SHA1 cffb77b8a1724b8f81d98c6d6ad0071d10162252
SHA512 fc7a56fc8a61a582161874b54adbad30a84840190008edb0b6fbf84f91393ca58e988e3fe446f11a0c3c691c18249b93aec2904b3d0c4f0857d79034f662385a
SSDEEP 768:g5TXOSBAqNIPmA8NcjCWdM0VFMJEwavTeElfWupav5TXg7wV+irIPny9MTVQHydi:g5KSmiIPmAhZWiMsDfWug7DmqM6HybkF
TLSH
T1AD631870DCEA65C3FC3171B845EFA6DA74312039E88A843C65B0A41CB568D7AB3C3769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

topbar_floating_button.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\images\topbar_floating_button.png
Size 160B
SHA256 d5f9234dc36e7ffa85f35b2359a4f82276f8395efa76e4553507ea990b27fc6c
MD5 8803665a6328d23cc1014a7b0e9be295
SHA1 9da6ee729d5a6e9f30658b8ec954710f107a641f
SHA512 ecd9e71b8ba1ed8bd4ca5a0936cb66a83611c4abcbda76c250f4cdf4ad80320212e8f5eeb79a38910718f8346ecc1ad580a3fa835ec2b22be497f36899fb5930
TLSH
T1B8C08CC3B21C8C99C591133380424050D8A78A928E22C1D82B8384693B3050050B8627
MD5 SHA1 SHA512 TLSH

Submit Download

topbar_floating_button_close.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\images\topbar_floating_button_close.png
Size 252B
SHA256 131817cd9311c03df22d769dd2ad7fa2e6e9558863a89f7e5e1657424031a937
MD5 0599dfd9107c7647f27e69331b0a7d75
SHA1 3198c0a5f34db67f91a0035dbc297354cbc95525
SHA512 0076acb9d6a886bd987876e49495038f9388b292a9efe5c9093cca64ca3692e3a5d24e35172c7697f6aae34b86ca217ee59c003423e46d9499bd27ec7d77a649
TLSH
T178D097C1A380C9FAD91C03B230427870ECD3B9D44B3B829C1026B88446BCF40E0E5712
MD5 SHA1 SHA512 TLSH

Submit Download

topbar_floating_button_hover.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\images\topbar_floating_button_hover.png
Size 160B
SHA256 721b7aaa9a42a54a349881615a12e3a26983aca48e173fd2f66e66aa0d725735
MD5 7cb6b9dc1a30f63b8bd976924b75ad96
SHA1 0c40b0c496d2f2b5f2021c117ec8610ac03ab469
SHA512 4764937364e355956b242b84010ac56102536d2aacbe4227f0e88e4de7ab468571957ea6c33012539156e5349ae4f777115615ae3361f60addf9cd227424f76a
TLSH
T181C08CC1728068A4C0A92233A0105010A8E3895249A1D3998589C4283730E09A0D8A07
MD5 SHA1 SHA512 TLSH

Submit Download

topbar_floating_button_maximize.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\images\topbar_floating_button_maximize.png
Size 166B
SHA256 afa4ea944cbdec8543242e627ef46d5bfd3766dcac664e7e50cdeef2b352740c
MD5 232ce72808b60cbe0f4fa788a76523df
SHA1 721a9c98c835d2cd734153bbe07833c6637ecd68
SHA512 4048eea5a78dd569521c488c4ce4f7b77ac0454c92ee9107a81a1b3af91a4ee036039ac1a0a6b8dd26b12e7f1595db80b7faa7b6a25d9032bf385528a81a8654
TLSH
T13DC080C171518DA4C77113A1150B445598F78DC50121196C49014062067DB0495F465E
MD5 SHA1 SHA512 TLSH

Submit Download

topbar_floating_button_pressed.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\Temp\scoped_dir3432_677649289\CRX_INSTALL\images\topbar_floating_button_pressed.png
Size 160B
SHA256 5c10ce0589eb115600f77381130b70ae0b7b3752614d86d4c89e857658aa222b
MD5 e0862317407f2d54c85e12945799413b
SHA1 fa557f8f761a04c41c9a4ba81994e43c6c275dbb
SHA512 07cb69327961fd0019bef8ef7590b5524905ac373a815f73f6d9e0b26840929f919a96caa977d4b5656704dacd0f352d568fb3997f80ee6bb94c95b58839dbfe
TLSH
T14DC08CD261846894C2A9117220114010A8A38D828623D3AD4A9AC0352730A04A1E9A47
MD5 SHA1 SHA512 TLSH

Submit Download

128.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png
Size 4KB
SHA256 41b21cd721317759a1391ec66ec4606b1f1b0a66fc6542ec3e69f9a6ba9a60d3
MD5 a6e517fba00c44d26f516d2bc473042f
SHA1 bcedbf549056bfacff8820cac38713a1eacd95b9
SHA512 8c58b58a05b60420ff187c2dc8b71e019fc36cd6bcec050257b5532f131ba50ecd00fe2ca734805753a39f6911125d2d8684286207b1d1d039e862904279a145
SSDEEP 96:4niq7dWteEb8MsIhE+bf+rgEPQCGJxc4bOdpI0xeblJpzSkLqdsQ4pXnW3P:e97kteEnJEu+rxoi4b3RJpfhQ45nGP
TLSH
T14AA1AFFA12E3DA94303E91711B20659B4D7909385624364DDBB2AC7140C7A0D9B7CF63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\_locales\en_US\messages.json
Size 1KB
SHA256 102b586b197ea7d6edfeb874b97f95b05d229ea6a92780ea8544c4ff1e6bc5b1
MD5 578215fbb8c12cb7e6cd73fbd16ec994
SHA1 9471d71fa6d82ce1863b74e24237ad4fd9477187
SHA512 e698b1a6a6ed6963182f7d25ac12c6de06c45d14499ddc91e81bdb35474e7ec9071cfebd869b7d129cb2cd127bc1442c75e408e21eb8e5e6906a607a3982b212
TLSH
T161210707DA04AB37827A6136BC656685F33007EE2201E86F7DBCD50C5F229A791A7798
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\manifest.json
Size 2KB
SHA256 53a059109164ed146b01edd2a08b7db1a2b6e5212c66cf4fb81e7cec5b89c8a9
MD5 7c261db4c97929e38831ac8ea05fb1a4
SHA1 1d05dae7554d16cff6a300923b2e44a78d661e30
SHA512 f77ae54451ceed99d70080f10e61cf54e25560aa0dd6af9a9d77f9974240851de999208c26a0432216fb4e897c4fce20817926ccb0dd443b20e911f9267f8eee
TLSH
T1CA516DFBBC10AC6347B08594991A710EF729735E45CFC4DBB2BC60734BE4CAA1D60598
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Program Files\scoped_dir2372_1721321417\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
Size 10KB
SHA256 965203d541e442c107dbc6d5b395168123d0397559774beae4e5b9abc44ef268
MD5 90f880064a42b29ccff51fe5425bf1a3
SHA1 6a3cae3996e9fff653a1ddf731ced32b2be2acbf
SHA512 d9cbfcd865356f19a57954f8fd952caf3d31b354112766c41892d1ef40bd2533682d4ec3f4da0e59a5397364f67a484b45091ba94e6c69ed18ab681403dfd3f3
SSDEEP 192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
TLSH
T13B327DA05F9EF1DB9F9873F82F132C12A8564B518A95E9647F90DBC5B38D20F520243E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\32.png
Size 952B
SHA256 e566796c18517e7084e3a892b3291cc189b85e7830800503c256998ab697a507
MD5 bf7aa030f9cbc7aba123d10adb3ab321
SHA1 d210f3194a494a65d1e32ade703e24fbbef7b444
SHA512 3be8123811222e1d5aa92e7144d41a8ace20ea1d5b082aa51d11df8f573c17f294ead72ee9e94b31259035ebd0eecb904686cf4bb22f0e5313a02756e210b8a6
TLSH
T1E311889E6EAA8CBDD1C3AE4FBD2D22904F13CE54C534BA1B4C4759573A26E54704B501
MD5 SHA1 SHA512 TLSH

Submit Download

48.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\48.png
Size 1KB
SHA256 6a379d8e9545ee7885dcff4c53f1ca553dc9fb0cbaa18a0c71c0b75c8883d044
MD5 c053b2219c4c9e7e7080cbe4e6e3981e
SHA1 0470cf45babbbe1fad32b4dec3593e8ab7a8ac39
SHA512 1271ac3ef670f3b7104c3f4e678ef4bc9990d9427826b104bfa8d31f904895da50ed0f1b673727d39355428f6270d015c0953521b26d8f10f842854b79ec5525
TLSH
T1E021B7BE5B25DE1B97EEA61F72DA9900D89221E27183A6052ECFCB6057145A33C24172
MD5 SHA1 SHA512 TLSH

Submit Download

64.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\64.png
Size 1KB
SHA256 3772d9c9a6fabba60ac0c7b9c93bf230e3c99ebac9af480efc6c778d9881dd85
MD5 cf9a569f60db18903e86e6612cf90efc
SHA1 379dccdc92399b0e4e658ad8f04276bf99501836
SHA512 58f0b5130318069511452b11b1fbdfd898577c714150f5f88a4a4ff80320b33c287c103e464ef24c8543d90de71713f2ee293f538fb078ec2099f9871cef2caa
TLSH
T132210853AFCF4AAE5834129F565C460FFBA3623E2952D409DB2A41AB08CDC14E8462C3
MD5 SHA1 SHA512 TLSH

Submit Download

128.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Temp\scoped_dir3432_2016931628\Icons\128.png
Size 1KB
SHA256 a57ffe3b3cd0a1bafe37e36daa89d2f9afb9446423cba25df883ab0f9aa8293a
MD5 9295ccfcfaab83ea13efa316c38b3a93
SHA1 17685f106ff0100d023aa04523b224b41d97150a
SHA512 632817c62a660870d45d0012c942526fc70652ea56b2e1246a5b19ada4a8c9731be2c3de0764889a3e70580e5da8419eb80659e0aaa31ba5491e76adf652f320
TLSH
T1E241C8E18519C1BCC22496B59954928F173A441A7F514F9D6CA524AA30A0E239ACCF9D
MD5 SHA1 SHA512 TLSH

Submit Download

192.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Temp\scoped_dir3432_2016931628\Icons\192.png
Size 1KB
SHA256 f25ab19c435c2cb43e7d86b9bf58f46ec8af6228bc4511d4c5cb9d23e1cc4c04
MD5 0d530f9a7987017eb38f626e93a0f482
SHA1 9d71c8ed3fa5a183988c5409fa2c27369d1c25b9
SHA512 a7c4c250acafc1fa7ec5f972c9165bb3b1ba8ea30f28a5a0c0d313005656dd8f35b2ffc518f13bc08bd263bfb6c08a57e86c5f01fffdae6b1490ab6c8e57c3b9
TLSH
T19B2195438636D5F3DDC7C32BD110519CCC1E871F1D522795ACF0AAA211F9E48667E6C1
MD5 SHA1 SHA512 TLSH

Submit Download

256.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Temp\scoped_dir3432_2016931628\Icons\256.png
Size 4KB
SHA256 dee5357bd2992efefb04ed8bbb64dbf7becd768d75dff17dcb2b335c4fd2a903
MD5 b0fd3fdd04e2a0768a1278a5f85bc70e
SHA1 9fa05567b006c633b5da7d55229cdf0d8649989d
SHA512 7e29a0e2539057198cf9ed3cff1518def95fdf3a43abffc36095536817f78ebd6196880070583fe07528d9d2086312df6b83d8f9ef128c7377fdf00ee9bad4d8
SSDEEP 96:YSMrDxFxPilv8S5q770AP5lTj7777BPI87777720B48BEj:Er9720Uq770w5l37777tI8777772pj
TLSH
T1F091D8DF09360B63C55897B5AED15CE98B105EAE4BB5638A4024833EDFFD33623191E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96.png

Path C:\Program Files\scoped_dir2372_1721321417\Default\Web Applications\Temp\scoped_dir3432_2016931628\Icons\96.png
Size 1KB
SHA256 f2b25026f9dde3d50479d07494efff95f79c2bfa6c7eff6867051a951d38f9e0
MD5 b8080cb107baa272639829bb131c18c0
SHA1 4126cef1b64088813838b1b626685e0eac4a3bdf
SHA512 090b5d55ef62b163728e7d1e494ef2eaf41a26eb6d95cf2357eae2d99c4661137fd5a5c1fa55fd648e5aaac43e591a2ec0123aad256f5bbe94e398b3520e6f65
TLSH
T129310C6E56F8CB20D0BA95D5C65756B1495032F83B3CA4F10309284FC96C385155D9D3
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Program Files\scoped_dir2372_1721321417\Local State
Size 262KB
SHA256 b34bc6f8ab1bd79d91b62479973332b1bcfb8906d673808e72387ce25edc6c5a
MD5 92db719b9db10b8d656af3805427fb02
SHA1 f368b0ffb0f139f78ddf499b6b68204d1840a5ba
SHA512 5cb7e9a05ff6af25e9cc6848ba54728ae847ed4bb3b039ffe673875ddc4436dcc61b43ef846cbb47f075c4f0d8adf3c0a841b09941939bcff3cfd46c784405ef
SSDEEP 6144:rTD3xL6ERFS9w1hrL6UsBXVa4+hFD+7t56OD9ZfSApprP:rTR/a9w/3a04yFSXD9ZfS4d
TLSH
T1A54423A3A765ED6F987EB14094039312CE516CED43EFCF0B849D9E8E819F84C0656A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Program Files\scoped_dir4688_901073086\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Program Files\scoped_dir4688_901073086\Crashpad\settings.dat
Size 40B
SHA256 7a42e360c924ac73dc48897c6cb5f0959a2683ffee01c65bb6215f02cda6b568
MD5 9a76a76201196db0bd6b9637f92c7b33
SHA1 ac41112c4fdd0a4c909a8cc6482871c3a9ee1526
SHA512 30b1f47f0fdefe2a7aa8815c21b3d2bb7cd7402a583652e378844057635ad4a24702524b345a6888a177af6f9bd6ba30116fa894b29474a0923f6e60f9e63ca4
MD5 SHA1 SHA512

Submit Download

Account Web Data

Path C:\Program Files\scoped_dir4688_901073086\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Program Files\scoped_dir4688_901073086\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Program Files\scoped_dir4688_901073086\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Program Files\scoped_dir4688_901073086\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Program Files\scoped_dir4688_901073086\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Program Files\scoped_dir4688_901073086\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js
Size 136KB
SHA256 3d98261dc84b114d5b0f29f2c47fc08ae9ba13b177f100d740e413d5716f5c1e
MD5 9d82da2d26e815161b54d9e21e5448c2
SHA1 8a00f666e1baffdeb5ce0fde0e109bcf111ff724
SHA512 5520ab30df09a3582e7d3ac3fd756b257d0dcc75bf4007b28151f063883046caa4f459125106d46ad99f5bb7f0bfc557affa5750aa51b5d99e43e73cd11c5926
SSDEEP 3072:eR3MbbdKe2KTOtBth8CyOMGL2y6GDiwYxyrxygCpYK:eR3MLRRA2y6GDiwJxlCpYK
TLSH
T1DBD3D9CCF6A5B0124363A5F5402F000BB23AB8B9E44C85A8F288D9E97D7556D8277F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Program Files\scoped_dir4688_901073086\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Program Files\scoped_dir4688_901073086\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Program Files\scoped_dir4688_901073086\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Program Files\scoped_dir4688_901073086\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Program Files\scoped_dir4688_901073086\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Program Files\scoped_dir4688_901073086\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Program Files\scoped_dir4688_901073086\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Program Files\scoped_dir4688_901073086\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Program Files\scoped_dir4688_901073086\Local State
Size 130KB
SHA256 4464819ce0b3aabff08d20d95687bc76c58c50f011157bbd7079e73b5b471998
MD5 460de132aead2e12d8d1776c7743330c
SHA1 5e3c6910893667eb604398f79022f93a83b46c97
SHA512 720cd30683118e36f6578f63a1ee2ee72c70ba2302dd809ea1f3620975c79eac4a7947e8d7a66411024b72a5cf2737d7b7f95bdab2ab86b966e6b407dce960b4
SSDEEP 3072:13B+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:dB+hFD+7t56OD9ZfSApprr
TLSH
T107D31232AA95D8BBC9FC6541B157A300DE7668ED41DE2A09444A9F8EE09FC4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Program Files\scoped_dir4688_901073086\Local State
Size 262KB
SHA256 f48db9d9070b94566824cf16618cec40de27c9eb781172854f0e1698e1e7d38d
MD5 92b64d136078f2d17a7aae5dd9564cf4
SHA1 a22df23e1bbd78bf63c3a55bcfdb497c537358a2
SHA512 8815714bb76dbb4a740e7db78c4b2a4f2903fb6f64df13514454949aeba423623667314b0b6f42220e5a6c930a1f3aa1fb807208042a3366c0c6845c8be71027
SSDEEP 6144:c+D3xL6ERFS9w1hrL6UsBXVaj+hFD+7t56OD9ZfSApprr:c+R/a9w/3a0jyFSXD9ZfS4d
TLSH
T1994423A3B765ED6F947EA14094039312CE516CED43EFCF0B849DDE8E819F8480656A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 4d0c5fbc12a875642429b0dd2daa46ea463d1c2b1482abf3f14cd122bba54191
MD5 d588345da3672470b53c54f52ba4c7ae
SHA1 a4a09d4dfe1f7232a6aee942ed8ba9fafacc4c81
SHA512 8fdce53fcf159847b327d3aea853aff1923b0786fdc362c79ba5e9c4a508f118e8dd193e48658133923b5b97a69d4cf2f94ecc2a52de56b372a393039e32aff8
MD5 SHA1 SHA512

Submit Download

b9c594d9-d216-42ee-ad0e-b1f54c1101c7.tmp

Path C:\Users\Admin\AppData\Local\Temp\b9c594d9-d216-42ee-ad0e-b1f54c1101c7.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4aa4e829-e5f6-4bcd-8d53-3e31beacec5b.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2168_1213884713\4aa4e829-e5f6-4bcd-8d53-3e31beacec5b.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2168_1213884713\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_1172261509\CRX_INSTALL\128.png
Size 4KB
SHA256 ff702ca753a7e3b75f9d9850cc9343e28e8d60f8005a2c955c8ac2105532b2c9
MD5 d056cec3b05d6a863ddfa7ee4c1c9f0c
SHA1 dcd15b46dea9d234f13d7f04c739a2c516c973f1
SHA512 751274949b04c7cdc5e8f5f20fd062bfe130f1415eee524d9d83bcf1a448fbfb4b82dff8bbf7495250a852779c3d11ac87e33275508a4064f9d52417f4ca230f
SSDEEP 96:YpjISYK9mvKBG4+43tmidWQX3DJQoWQpzYKL:Yp7nG4j3tRWQX314QpzzL
TLSH
T1EDA16DDEF15935355323E89B282AC458C69F5302D282D6AF940DD4C572C3DBE68B2DC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_1172261509\CRX_INSTALL\_locales\en\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_1172261509\CRX_INSTALL\_locales\en\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_1172261509\CRX_INSTALL\_locales\en_US\messages.json
Size 1KB
SHA256 4f70eca8e28541855a11ec7a4e6b3bc6dd16c672ff9b596ecfb7715bb3b5898c
MD5 64eaeb92cb15bf128429c2354ef22977
SHA1 45ec549acaa1fda7c664d3906835ced6295ee752
SHA512 f63ee02159812146eee84c4eb2034edfc2858a287119cc34a8b38c309c1b98953e14ca1ca6304d6b32b715754b15ba1b3aa4b46976631b5944d50581b2f49def
TLSH
T153213806EA14BB37825F6036BC657585A3300ADB2600FC3D7EDC941C1B059AA91BB3D4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_1172261509\CRX_INSTALL\manifest.json
Size 1KB
SHA256 3e33f70e46bf4a180963564c1d2da64483caf49536ffbe2a20b20bc4b041d551
MD5 13afa01dc9dd8b9ddfc3a9d93d6a050f
SHA1 9292d71adbb5aa177b2e3d28719ab365396d7bd8
SHA512 80693798628e64b90db2d8db659eaf17a3371712af054bedd9ac9b8b1877cac79ead9e4ff2394cfff903098371e48a6d206f06cb0c5da76b32bfd2983beb068c
TLSH
T1F54169F7BC00AD634BB49898AA1E714EFB69B24D55CFD4DB8298107302CCDAE1D601E5
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_965119111\CRX_INSTALL\_metadata\verified_contents.json
Size 7KB
SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
MD5 0834821960cb5c6e9d477aef649cb2e4
SHA1 7d25f027d7cee9e94e9cbdee1f9220c8d20a1588
SHA512 9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4
SSDEEP 192:RktDNJ2UzsL5KcASyoH+CouKP/iNGRo/oRHMIT:AZQflcsU
TLSH
T1EBF1A568CC5D758CFC56B77987AA36768B48C5C9E14D3E2E12C30CA178F6A4888B30DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon_128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_965119111\CRX_INSTALL\images\icon_128.png
Size 3KB
SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
MD5 30899b6c4e4a757b8ec6dd2208acdfb4
SHA1 f2c5880a724c6d75cce1b5191e0d82c3bc7de768
SHA512 58539e3f0ad7fef30792efcdbbd955599e11e4261c9946e7c3dff6267e01747354ea3b901c46fc8329f81c68afbeb2d05fe3fcb266bc5948de8befa5b8d040ee
TLSH
T1B3617D3A733F1E1EA655403843096A51F0C1A62454A9C0C56BE3FCF90D02E086C29B28
MD5 SHA1 SHA512 TLSH

Submit Download

icon_128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_965119111\CRX_INSTALL\images\icon_128.png
Size 4KB
SHA256 149fc2270389655ee20da9cebb31ffde75e16e3ad371b9b907f62013ed45e705
MD5 7424a1046f7a440dc5e43b9a3c5d791e
SHA1 0672cf5b67820e81beb23010f62123e0b362e3ab
SHA512 2836cb5b4d682bc70e74c88af21e0ce972679eb07e88aa0b80db5990a68453e1c9580e530eede390c743d7377ea8ff3df7b78a7c5ddbde124d7782c63cf329bb
SSDEEP 96:jzliICMC5QmAjL7eTu3Ay1Hnn5IlQRU19x0tfo4CPmukC0:jzQzAjLiTK1H5IlQW1Xbm7
TLSH
T1AF916BA01EB4FABCD449F179A423BA2CD4049904D83583278E1DBF7626247A633C94AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon_16.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_965119111\CRX_INSTALL\images\icon_16.png
Size 531B
SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
MD5 344554d96e418120bd80ef5de5194697
SHA1 23e141c3a6ce368acc1c299f062ab85914bcb17e
SHA512 7ae38853e5acca479d7fd81d48bb88c671cf4dce63342209bcff045ac581a04b7b0ed48f6c58253db950935c0522caaa4fbc6cf5a25151a8960ba56fc804569e
TLSH
T171F075CE17705C76514D0763D5E535B278614AC642C76AA1500F1A54793BC1D8DC13B2
MD5 SHA1 SHA512 TLSH

Submit Download

icon_16.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_965119111\CRX_INSTALL\images\icon_16.png
Size 582B
SHA256 15b1cc630202324ad6b3b142a22cb1a55de8d6d9a0bcab78d5b14cd997a5ddd5
MD5 b323815b176657da3933a39e5658177e
SHA1 27e230c6d7b1774a9cfdebd6271e781619e797eb
SHA512 c049c8c8ad36fef941ef3917fee911d632923f41e8d2b3caea8938c87dda229c0d632f8f07aa3334fe79a31de87e75bb73d45d4811f9e81e0f261238bc41014b
TLSH
T105F0E1E29628FDD8C20AC13E4619AD21BDB258D85BA04B380553ECB13DA9AA9C065195
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3432_965119111\CRX_INSTALL\manifest.json
Size 1KB
SHA256 f52714812d68c577a445169d11e84df6751c2d6886bc429643072bb5d61c6c27
MD5 01334fb9d092af2aa46c4185e405c627
SHA1 47ad3c0e82362ffe5b881df8d71d6f79ab7f5796
SHA512 888d96adb7a847abe472145258c8c46950eb2fa3ba7d596c2e90a17c8fb06fd0155c56cc8aba5d076d89368417464bcb2d236f9e40e53241950a01f9f8ed548f
TLSH
T1F721CAE72455C0BB16B0DBD9B8A8620BF733130E8490C6CF793C404DCFBA8E2524A668
MD5 SHA1 SHA512 TLSH

Submit Download