6aca9e352ba8a3c269be7c185fbafbdf1d9fbf82b2a9be0a269b528a90e534df

Analysis

user interaction
yes
max time kernel
441s
max time network
455s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/10/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
the-ruff-house-stash-kitSK273544.zip
Size 371.8MB
Sample261024-pct5sshx6w
SHA256 6aca9e352ba8a3c269be7c185fbafbdf1d9fbf82b2a9be0a269b528a90e534df
MD5 80e4a89f2ad5807f190e9cfbbee3ed64
SHA1 72eeaf3b27f8f4ff83ed6f7d850ea10a28dec8c5
SHA512 c4d825aacb67df3bdb5bc9461498454d6c5965f8b1a4da0302deaad34b7a898d995e28be9a10acdad3e6bf17695ed53bfffd3e50ce2c1440a21f44f64116fd1b
SSDEEP 6291456:2LtHFrJvdmsfWmNq2JhAq+mwqTEYl3EB2j0fEb0Axf4uOzleM3MEaInQfRkkP5Kx:23rJ1mp12JZESErCmm9xw9zl1nQfRkkY
TLSH
T19A0933E2A55C7056FE9A9A3BEE9A29B2F07B3133671C15C1805C3D5C0925EE1EF02E47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
34	drive.google.com
104	drive.google.com
105	drive.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3008	chrome.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	msinfo32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	msinfo32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	msinfo32.exe

Enumerates system info in registry 2 TTPs 7 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMajorRelease	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMinorRelease	msinfo32.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msinfo32.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1570888168-524493533-3242721904-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1570888168-524493533-3242721904-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1570888168-524493533-3242721904-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1570888168-524493533-3242721904-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\the-ruff-house-stash-kitSK273544.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
1828	chrome.exe
1828	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5672	msinfo32.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe
Token: SeShutdownPrivilege	3572	chrome.exe
Token: SeCreatePagefilePrivilege	3572	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe
3572	chrome.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 3572 wrote to memory of 1960	3572	chrome.exe	89
PID 3572 wrote to memory of 568	3572	chrome.exe	90
PID 3572 wrote to memory of 568	3572	chrome.exe	90
PID 3572 wrote to memory of 3008	3572	chrome.exe	91
PID 3572 wrote to memory of 3484	3572	chrome.exe	92
PID 3572 wrote to memory of 3484	3572	chrome.exe	92
PID 3572 wrote to memory of 2508	3572	chrome.exe	93
PID 3572 wrote to memory of 2508	3572	chrome.exe	93
PID 3572 wrote to memory of 2700	3572	chrome.exe	94
PID 3572 wrote to memory of 2700	3572	chrome.exe	94
PID 3572 wrote to memory of 2512	3572	chrome.exe	97
PID 3572 wrote to memory of 2512	3572	chrome.exe	97
PID 3572 wrote to memory of 2060	3572	chrome.exe	98
PID 3572 wrote to memory of 2060	3572	chrome.exe	98
PID 3572 wrote to memory of 3784	3572	chrome.exe	99
PID 3572 wrote to memory of 4792	3572	chrome.exe	100
PID 3572 wrote to memory of 4792	3572	chrome.exe	100
PID 3572 wrote to memory of 2368	3572	chrome.exe	102
PID 3572 wrote to memory of 2368	3572	chrome.exe	102
PID 3572 wrote to memory of 5040	3572	chrome.exe	103
PID 3572 wrote to memory of 5040	3572	chrome.exe	103
PID 3572 wrote to memory of 476	3572	chrome.exe	104
PID 3572 wrote to memory of 2076	3572	chrome.exe	105
PID 3572 wrote to memory of 476	3572	chrome.exe	104
PID 3572 wrote to memory of 2076	3572	chrome.exe	105
PID 3572 wrote to memory of 5016	3572	chrome.exe	106
PID 3572 wrote to memory of 4280	3572	chrome.exe	107
PID 3572 wrote to memory of 3900	3572	chrome.exe	108
PID 3572 wrote to memory of 4588	3572	chrome.exe	109
PID 3572 wrote to memory of 4588	3572	chrome.exe	109
PID 3572 wrote to memory of 4516	3572	chrome.exe	110
PID 3572 wrote to memory of 4516	3572	chrome.exe	110
PID 3572 wrote to memory of 1756	3572	chrome.exe	111
PID 3572 wrote to memory of 1756	3572	chrome.exe	111
PID 3572 wrote to memory of 1828	3572	chrome.exe	112
PID 3572 wrote to memory of 764	3572	chrome.exe	113
PID 3572 wrote to memory of 764	3572	chrome.exe	113
PID 3572 wrote to memory of 792	3572	chrome.exe	114
PID 3572 wrote to memory of 792	3572	chrome.exe	114
PID 3572 wrote to memory of 4708	3572	chrome.exe	115
PID 3572 wrote to memory of 4708	3572	chrome.exe	115
PID 3572 wrote to memory of 1704	3572	chrome.exe	116
PID 3572 wrote to memory of 1632	3572	chrome.exe	118
PID 3572 wrote to memory of 1632	3572	chrome.exe	118

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\the-ruff-house-stash-kitSK273544.zip
1⤵
PID:5892

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4048

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc568bc728,0x7ffc568bc734,0x7ffc568bc740
  2⤵
  PID:1960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1688,i,6616828630069123928,10708184231465199018,262144 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1512,i,852534030086417836,13020269334464142535,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2252 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,16053449256847804238,2932178695447036895,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2584 /prefetch:13
  2⤵
  PID:3484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3284,i,18048533164357262424,5899104777283868577,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:2508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3364,i,6903662728748516283,9639402359291042869,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4568,i,4267625578317610505,6473811796029010542,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4780,i,738908539409493428,13283479164860452277,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3980 /prefetch:14
  2⤵
  PID:2060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,18181306052697848144,13679770484192367214,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:3784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,3165358893376815745,11627176626762877112,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:4792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,18030707002449162837,5287343846815122534,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5324 /prefetch:14
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,9534220421011967516,1653385916764598710,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5752,i,5899998268544410851,6087092368055217528,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4608 /prefetch:1
  2⤵
  PID:476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5780,i,7899449589566662288,285050080705856594,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5788 /prefetch:9
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=212,i,2943245249272627150,15756465524234245296,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5904 /prefetch:14
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,1358084362007238232,9156164613785111904,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5876 /prefetch:14
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,202639835809078115,10946459479717534645,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4944,i,18200447307273473572,8379715879157609251,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3284,i,8623568604952241238,6951539950500738129,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3720,i,4172071992842566689,14261487172583435923,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3692 /prefetch:12
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6032,i,9198932973734054958,9961700594529950821,262144 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4676 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5980,i,10463246905134049204,6623390638964886311,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5732,i,348214556326441334,2434267183274551509,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4620 /prefetch:1
  2⤵
  PID:792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5428,i,16965096299048495937,3819009235334373620,2097152 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4428,i,4633085134797851152,15408713578265350522,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3648 /prefetch:14
  2⤵
  - NTFS ADS
  PID:1704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3292,i,188157512270374006,11346935580946601328,524288 --field-trial-handle=1996,i,16211767453468866971,12419501092408654516,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:1632

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5408

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3532

C:\Windows\system32\msinfo32.exe
"C:\Windows\system32\msinfo32.exe" "C:\Users\Admin\Desktop\a\the-ruff-house-stash-kitSK273544\@omarcameup RUFF HOUSE STASH KIT\FILLS & BREAKS.nfo"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Suspicious behavior: GetForegroundWindowSpam
PID:5672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

34b00918-12e2-4b01-8c0a-e6e8479b8d5e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\34b00918-12e2-4b01-8c0a-e6e8479b8d5e.tmp
Size 130KB
SHA256 6da3c72d28d8527aad639b01e4663bc9f94c7fa2ebfcb6dee3b81603fc2d49da
MD5 465807b3d20496feff37286c394c6d3f
SHA1 2498e2bdfc74f4630fe5983af231c06f26f9df4f
SHA512 0c19496bf90d2ce3923a3750bef344741e2d248b5ba48193a4e5fde5f03cd23877584e065f8babfda63c65a2d4b3dc7f4e8772f0c7ed1e6ecb68dbc236d75895
SSDEEP 3072:FL0hgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xCV:FL0xmX/B5UgKf2ne1utLV
TLSH
T181D302BB9DDDDFE36361F02669A91B6EC9F67FC8A060EA4080F41185005F1FD8399A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49f2fb77-12bc-4f43-99bb-4dd5fc57952f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\49f2fb77-12bc-4f43-99bb-4dd5fc57952f.tmp
Size 270KB
SHA256 4f3b01b96349ef97680ffdcc17ea760a3841c9c7cd21d93b35d60dd34db120fa
MD5 ffa9c405e1d67338d35e50f67b995872
SHA1 7e27b09f4abf7e7f7867a7df21f46fb61a64961c
SHA512 d4295c4a65cc5232d12f8e810857d0b15a130d7bcf4375f81f2bda114b611ec2bbf206b069685a858d09aba0e9060caa260d9f729729406c623da808ce43e12b
SSDEEP 6144:gLAtTOL/ZBkjZDQYYUF4/xXlfxmX/B5UgKf2ne1utL4:gIa/IjVQiF4prOw2npL4
TLSH
T12B4412FEECCE8D675292E136A8292F1B4DB4BFD594B4C44486E430CA01DBAFA8746513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d1b4f32-223e-4fdd-8cde-a46d787dce06.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5d1b4f32-223e-4fdd-8cde-a46d787dce06.tmp
Size 269KB
SHA256 233da5f4b95b343760c4983a0335efa0230993bd3d5a9d1637eb29568a6782a7
MD5 685be08f97f841ff9f0c31591de2efc7
SHA1 5e5aa890a3013c6bfcf4ea4cda38207fc7a5b9a0
SHA512 8ecf8f9e1facbf7e72a28778427e7aece13164891f815c96fe24958afa25e54d9bcfa7cef2d0f33dc43cd45f2cd4fed769c74241eb126d5712dfaaccaa1766a5
SSDEEP 6144:QLKXTOL/ZBkjZDQYYUF4/xXlfxmX/B5UgKf2ne1utL4:QmXa/IjVQiF4prOw2npL4
TLSH
T1FD4412FEECCE8DA75292E136E8291F1B89B4BFD594B0C54486E431CA01DBBFA4346513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b43c762-eee3-4d63-a7ee-5dbf3a923f88.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7b43c762-eee3-4d63-a7ee-5dbf3a923f88.tmp
Size 270KB
SHA256 738cee30e72cfcaa7235531220b016ae5024bb17f1230ea3212d3690b9c0a3c1
MD5 ea1249a5b705ef6653d0f7fe1c9cec7d
SHA1 c38be972f55cd401a83f28f98d8454a0ce1512a1
SHA512 fc6e9030bae273fa4a2c556936d31c944d0f318dbbdc85c136b774eb6ea3b1cf451603077effc58272f673f8376f850fe0c8ddcd6b02d19e9f0bc099e509004e
SSDEEP 6144:QLAtTOL/ZBkjZDQYYUF4/xXlfxmX/B5UgKf2ne1utL4:QIa/IjVQiF4prOw2npL4
TLSH
T1354412FEECCE8D675292E136A8292F1B4DB4BFD594B4C44486E430CA01DBAFA8746513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b4044d1-a8f3-490a-a4cf-afd6e07f98c8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8b4044d1-a8f3-490a-a4cf-afd6e07f98c8.tmp
Size 270KB
SHA256 3adacaeffa6a43c7550931b3445842d7a06f0f7a02697f617994d2a390721c73
MD5 e1c5bae405cc9590dcd7659662938792
SHA1 fa9bba64377e28714e2517dae77e9558d199f865
SHA512 bdb0479a329acdbe1220dc74c42614d23c57247f745989e50620962b8f50afa5e2b75f80d957bf61618c1f30a93850706003cd2f78cd71c04689a4140c973b49
SSDEEP 6144:QLltTOL/ZBkjZDQYYUF4/xXlfxmX/B5UgKf2ne1utL4:QHa/IjVQiF4prOw2npL4
TLSH
T12C4412FEECCE8D675292E136A8292F1B4DB4BFD594B4C44486E430CA01DBBFA8746513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 7cd4d930f4e2895a941e8cd451dfaa5d7afb0a4eab6b2c1ba3c0a9fac276c913
MD5 3d796cb6002d5c2a73ca7eada21b52ff
SHA1 4f1ac5a1096d7182ec9385cf15f3f87647e81045
SHA512 770769671784e35c0e2d505b4daca77224453922a6151b366c7ab39088845eca875538028114eb10cd910a6e5da1441d268d1a3203f2e19f212e1e85f462f587
MD5 SHA1 SHA512

Submit Download

08dee424-f165-4c6f-825e-5e44bc3d9611.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\08dee424-f165-4c6f-825e-5e44bc3d9611.tmp
Size 15KB
SHA256 c30504c6a704ca00e1be3d9e852a758146ba63a75c054e6611b84ea0393c002e
MD5 62e12e2bffed8bdba935fb1517b3fc29
SHA1 1bc31ac1e6e2748cee4fd25940df17747b68bf47
SHA512 8566d8efb84943f98a37433eb3adb382d2bfcefff44176ace20242f14d61fd0e023b4c11d1e07836a687f47b19cd504a99a069f1cb78a76b33a8c63bd3d0bdf1
SSDEEP 192:hDROcBz5H34Dqv7qNEwPRpmzaBt8zIJ9fHsb+WNZIIPAe+hc3s+Mg5J+2pz0C8zo:pROmz5X4Km1XtdwuJua2pz0DzrE
TLSH
T1EB62A76ABD20393B5DE6D225F921BB5BE2F2302660C05E84E7FC8D2C24E7ACD2117517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0abca906-1b49-4cce-8791-55932d0d632c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0abca906-1b49-4cce-8791-55932d0d632c.tmp
Size 13KB
SHA256 60b361a20833553f51987bdf19b3eb645252f2e76e58ff0a0b5afa5598c65520
MD5 405cfc36b19b1b3cb08091aded75260f
SHA1 514f71c9cb99108084187380c40a3e60e45b0fd7
SHA512 eea6cb5eaf1608a8d185be84c2801d3fa09e4d13b589e6e354a5dea555715fcd8bffcc9c4f83d71ca1b0e980902b367e71f43b32eba06132d6ee9d93e172ae29
SSDEEP 192:hDR3cBz1H349v7qNEwPRpmQS80lIJ9fHsb+WNZIIpe+hbMg5JF2nW8zcU8t8yIsv:pR3mz1X49m1Xldwb9V2nHzrE
TLSH
T1EB52C86ABD20793B4DE7D229F9617B57E2F2202161D46EC4E6FC8D2C24E7ACC2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f6f79a3-b7a0-442e-8404-9a8551db697e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0f6f79a3-b7a0-442e-8404-9a8551db697e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

348d441f-b173-4642-a828-0f6696caf4bc.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\348d441f-b173-4642-a828-0f6696caf4bc.tmp
Size 11KB
SHA256 199edf4b07d75e8748b5fa2ec86c1599c0cdbef7f712f762663f29ac292b977c
MD5 2fe4ca38c65c292ee513e93e8995f568
SHA1 257e96c16d73075d993eb74f09aa73c70b331db2
SHA512 21ae0caefc9604f1b169e166e9f437bee5ee598b29aece496d3ea7ef6430c4a7e0e3ba4ebd6bc98f7d18ffe849fe13c5f68437dcc29917e4adfc3a36980b8f18
SSDEEP 192:hDRL1Hs1v7qNHAPRp2H9fHsb+WNnlhdg8zcU8fVyIsnAUge:pRL1MFmCXEdwXdBzke
TLSH
T1DD32B62EBE14753B5CEBD219FA617B57E6F6202120D52E84E6FC8C2C24E76CC212751B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43451947-629b-4c97-a9aa-a24bffe84e03.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\43451947-629b-4c97-a9aa-a24bffe84e03.tmp
Size 15KB
SHA256 164ab77501f6cfacd6531e055eb33be38fe2745f128987591bedc7dadd47d19d
MD5 30920055a4654d586390980a4a52408c
SHA1 d547b8fb0480abe54ff5ff8b9e368ed0d9fb85f3
SHA512 aeaf89521b5287144f864bcaebf3a653713e9830b301512ebb4bbe4218a6a452378e3fe08bc61d80c75476c8efa13b8912c0666cd6aaf5ff6de71f65a74c1f5d
SSDEEP 192:hDR6cBz1H34Dqv7qNEwPRpmzaBt8zIJ9fHsb+WNZIIPAe+hc3s+Mg5J+2pz0C8zo:pR6mz1X4Km1XtdwuJua2pz0DzrE
TLSH
T14B62A75ABD20393B5DF6D225F921BB5BE2B2302660C05E84E7FC8D2C24E7ADD2117517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d046b4e-8b91-4735-af0a-1b6426ae89d8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4d046b4e-8b91-4735-af0a-1b6426ae89d8.tmp
Size 13KB
SHA256 58968ac57f16dcfd3f8a805a33a64f1f819ff76ea54ec24b13909167cb9f984e
MD5 95a7f66bf3123ff9e99ade23cce7949c
SHA1 98e10ba04a7dd23f032ac7d647fe765c9232db67
SHA512 94197aea36efdbe9efb770a029a8ebf0bfc56954902989d051abc3c83ed8d1020bd7fcbe6af3dfeb62a9d7ee11ad321d7f0f36099faa1585b0d696b7ff9cc3a0
SSDEEP 192:hDR3cBz1H345v7qNEwPRpmQS80lIJ9fHsb+WNZIIpe+hbMg2eW8zcU8tVyIsnAU3:pR3mz1X4Zm1Xldwb92eHz8E
TLSH
T1FD52B76ABD20793B5DE7D229F9627B57E2F2202261D42E84E6FC8D2C24E76CC2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56d43524-0915-4c33-a51f-e60cbeb79cf7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\56d43524-0915-4c33-a51f-e60cbeb79cf7.tmp
Size 13KB
SHA256 87c10397a8cd8664220f93b7769905fd58b35726758564bf2ec624988f56ce40
MD5 41872569fa5447bcd09258ccb14a3a13
SHA1 5e0ad57a596aaa57c92f22f9552a0a11f88f9cdc
SHA512 db8685478fd719035966f59812f9ae3823c2ed18b2c797b31355ce6d05ad2ea84c8a34f74b6d0b39989135df0313be4a441b3c1a3f26141f4a88fc866cdeb17a
SSDEEP 384:Dtjnu7KxkXqKf/pUZNCgVLH2HfgslFEXODnK+ErU3Z6HG8Z8x67WY:Dtnu7KxkXqKf/pUZNCgVLH2HfgsDWOri
TLSH
T1E2520A67648DAA3F0FD8D54CDC267F4F6CB5025661744D2496FB9C1803A5BCA110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e51d6d2-f853-4938-a27a-8bfaab4aa368.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9e51d6d2-f853-4938-a27a-8bfaab4aa368.tmp
Size 14KB
SHA256 f133a92a44693b64c723685bee1ec327ed29c763366d40e0846d32c74b2f9e9f
MD5 43add656f2cde260654d25d9b6169066
SHA1 7242bd21ef5b90cee56dd271d85b15c67565f0cb
SHA512 363a885061e875716358650ed944f508f5999e12522b624fa456f0d13690b55280306a58081fa0522eb5f29346d86499ab2b1095033efcfbe9f30149c86a83c4
SSDEEP 192:hDR3cBz1H34Rv7qNEwPRpmzaBt8zIJ9fHsb+WNZIIPAe+hbMg5J+2LW8zcU8t8yN:pR3mz1X4Bm1Xtdwu9a2LHzrE
TLSH
T18162A76AB920397B4DF6D229F961BB5BE2F2302161D45E84E7FC8D2C14E7ACC2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 91KB
SHA256 c9cdba467ea80770df0b7e40144345b532ba3d0e1a87fd439a0439620d63ce02
MD5 9ee60c048965422f6b9bbc0ac807d933
SHA1 3cfcfbcf4a58060dcda9756131052c28fa98d0cb
SHA512 10ce86c7c91abe821fd7b7c1ebacafda21498189acf25a37bb94fc4cbaccdfcb4523efcbef8b2a52890111c10dfa6a0cfabcf862540f6e71dea783257035ca46
SSDEEP 1536:GvHmkJt9VsXYCN2hXWECMTZUC/jAnPDLIbdYGRZMDUAn2ihAGmMz15tLtd6:GfjJCYCYpsMNU4APgprZCJ2o/15F+
TLSH
T1A59312F9779AD648C56856853BF8BD2151B84F95FC833F04DEB5881CEA4F26EC881001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
Size 683KB
SHA256 0f752ada60b8da585f25d210deda7ef106fb95c5e6850f9f0b242f399b69b30f
MD5 b8befc604c76d7f8e0329e602ddd2d8b
SHA1 aba6ae1e30742458e9a9f9329a25dffe38532dd2
SHA512 4c9138b379172882e186eb3bcbad48a2cdff852fc52bf26d32cb41f46bd9712cdcba0e5a94bf405755f9d7a3350d45e43fa5b37b10bdbf50fa07c596299b94bf
SSDEEP 12288:2CYBr+4mEFyfRmLtNPnyMHXeQ2NGPpph1uuiHJLVgudSXpgwbYuaL+yrO06G9K+n:PQwEFy4JNvyIXdkGbbpiHd2ud/wtm+yL
TLSH
T1A0E423DCB37E99DBE1382434B509A8A5DB138428061CE86AA1FBBF7570D0F2E5E60754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000035

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035
Size 346KB
SHA256 0f8a0722302d1b8e1050f1c7882af2c0feb056752c3feddcc0b4316891d60d44
MD5 cffe89fe76f974f10f591767becdc8ea
SHA1 63d099b0fca6062bb726f3c8bbbc704a1611182d
SHA512 69a6672dde71770eef237d7bedfb1a82317a68339abd399505acf995dc2132b0ef4e4fbd36b8453c8b9556877ba778722662b901166c77ef2c38a8d88a0a8a3d
SSDEEP 6144:kEen5NJZWrGd8LABzhu4/tZvMBhSoAxh/u0jd33ScBSNFWMI+t4A9AdHgndKrRqL:ktLWrGDdlMBhSoAxU033ScoNFWMmgnEa
TLSH
T1E774230B2E1DCA322357475B503E382845454A294BCF27921B689BE8853C9FBBEF51DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003c
Size 190KB
SHA256 251ce6e5be1124e0e07490c23abb6c78898f887a3777d33d104d347e13f278af
MD5 d64c5679ed4646019ffda9c4c9ffec33
SHA1 5622aba38fe80843f7d8b0e89bab839e380ff40b
SHA512 efcca65a1d8c90533b3d5be2f9988d5d8d57f2a73f1aa8e6430f9c0fa96c511de13727a7c162998e694ed75555c7c29ecc50b1a3900e75048580b6975503ae55
SSDEEP 3072:HsPfGjf3jKqiDqeTGpmsh0PIzQnhJbT8w1j4vHTE9eTVRoWtPA4N8gagyMKRJYDw:HsPfGjf32bD4dEhlTvSTE9enoWtPFzMp
TLSH
T16B141252C7784C40D9898036891B273219B375BBF6A5E6D8C642BE9F09B43E3BF44ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d
Size 1024KB
SHA256 3daa6d6a0aba0ddb7d09c74b83f92a077dde6bc8fb9a1e4e11a6c469faca49fa
MD5 f6c2a5d95a02aa35a2f85ed2fa388064
SHA1 5143b21e5c22e10022fc9e3026f4d987d289e703
SHA512 950df84ef8e38cd5d2e578037b89b5dc28409bf61a9421a8acdc54ff79f3599e6856b854522f8ed1f226896fe241768363c5c2315cfaf5ceb5b01a4784d01e4c
SSDEEP 24576:yFgR8PkLem6KWoDPiaPEnH1QfL18+a/KN0S2GSCuWYHD9:vMm6horiL128A0S2GvpYj9
TLSH
T12025336CCB9372ABF5059C373BC473A2AFC6A8B46AC70F5309C127685D25D46364BB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
Size 983KB
SHA256 b73c37c1d986aba5ba3d1382b043705c298ca0b5a2163a10dc015494ee2fbc2e
MD5 917ece8ef59f74946f99ce2f6435d368
SHA1 8f4c0da042545fa7b3ce72fa6713da395095a408
SHA512 85f27e76ed2c0a36525d4dc1fd9787d8dd62c6b061feeffe7fae090aae15a5e92f907b225101f2d8793e48a749da8684aba38cb71d8c45a79bc74c8ae05de535
SSDEEP 24576:aSaVr3q/mcIdJG7OHqWXgEA04/yOEUZfOsxuoVNpicZ:TWOucIdJG7kqWzA04/fdOsMoxt
TLSH
T18D253385A5D78C67CF9BDA3CB320E9C81BCFF271B2A1D92F978A590D55B5324AF01801
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000043

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043
Size 1024KB
SHA256 ca5177c966e3716e2d972d1a76512b131ce5de8b8e1e7fb5082006f545a933fc
MD5 4de5dd4e6caa3c1818d458808f99097a
SHA1 fb59493e4a021a6a302cfabe4d5c2c3ac65fc164
SHA512 a0db4dfcfe80c810028f34b006795b4728e152932710959b359c76b3cbd3cc3e1fb7429e27959924b2d586f0f6c6f60a1f8a574d94be62207bff48a628fd587c
SSDEEP 24576:5K1Di/Xg2HpSjAOp2ugB81cnzNX9GG/MXuFVDcEBn2XhIbzT6MroX3S:5K10xJy25z3h/Sm2XCbarS
TLSH
T1482533109F490321C66238F56599A310DF06779E3876936698A0AFF28EFD637CD2F1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
Size 1024KB
SHA256 b9ed0207aad3a259dd53e11053403c6d799357f4c660057bb445867622ab7724
MD5 56bcd1a4e3a8ca21c2046f634d391998
SHA1 8e57c080406901e9adc40e9ea1d25aac7cf045d6
SHA512 e3d302fce7fef7fe191056b85d7b484d415ef6b25ba91c0964a93e9db0bc23e0a5d5598c89756d0e60d36d9c855d49dc787dc278315c3bdf1052b7a1d9fec027
SSDEEP 24576:+O9HSPJU77GdCCmc9NukFhMl5cfPJnAGMkrFT4cc2dC2rQsVP7pKSP:nyPJUurL8YhMbCPJGyFT4Y42rQsVPtZ
TLSH
T1892533BC8B110B39DED340B968CAF68E9941D1184BF7339779389B17178A7CA286B171
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000064
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000065
Size 53KB
SHA256 351ba345250baf98ce325b4017ac9b96c9498f6644937ef558dc5993af676f2a
MD5 1e2d4737305eea41ee9198e3fd3f59c2
SHA1 abff05d701173ab7eae355be60ad30cf7f63536b
SHA512 469723131222dec7ea745b528fe62586da62d02505b6904a4b97157259dd37c26bf0d7012538ec6ab999c4a82d44f97ad7a1bc526cea9e8ee1cd30ff218fbce8
SSDEEP 768:aE9HsQuRLPPTiTRi06pYSINz9AdaTV7n5qAsVUdRwRuIDzjYTXqq2emOr8d/cNPk:aE9HsHPPR06bIhedCaAb+u2veJ8KNad
TLSH
T1354302A0446EF3CA3E6FFD7D9F225D5124E22A354838CAF6103721793F58B959CC1A88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 bc9f99f56807fde906c465c2b0ce8bce6a917d18f8ccc0c8eab9618f2f88fd4b
MD5 9d09b40ed6bedb161b8417d6b775d969
SHA1 4994681ff5b91b4d9645d0f77ed00f590ffffaab
SHA512 e3116bf1965d2262d2fe99b57a4408de6ae3d530e0d110cb625f946ce06357b075698e38b1a75f35c231af3380206b550a9376602357d69873b404ae6795a63a
TLSH
T14E219539F9F35916FF64CCBF8F74AE0C783429199F1A1E0A77D8A67835B23A20085080
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

19eb308f-64a3-4a8e-bf59-b107af3302cb.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\19eb308f-64a3-4a8e-bf59-b107af3302cb.tmp
Size 2KB
SHA256 1630a27a40673f2d2978643c9a850115b0024b39d018aa34cd4b4034804698eb
MD5 11947ddcea3e564f5e1b9d2741e1d410
SHA1 65588fbecd336f9cfd8441d9f2f270952fbf0461
SHA512 f8476137a28855d7ff7205de3b84e419fb9c5ca1b0222bed5d6fb621f2ffd2b09358d17f72bd6613f51b3d8080e525d8bd40e6025cd7618f9768a173d4d495c7
TLSH
T16C51BAF7C3E48A7D881156F49B217E2FCE7D0A18021D3C2289D9AE5B43F2872D20178E
MD5 SHA1 SHA512 TLSH

Submit Download

b7c88f6a-e630-48eb-9df5-54d6a0f32a2a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b7c88f6a-e630-48eb-9df5-54d6a0f32a2a.tmp
Size 1KB
SHA256 1796d4673de7d3eae6e336c75787f1ecaf96f57aa6505086897e0862e8888f1d
MD5 5032abede5d869f710e3e1748e76455b
SHA1 c22133691e79748a797a1240d4d478ae934b52fd
SHA512 bc809f6941549d86bbbef2302aec489ee0abe25466f1730e82d1e0084dc095698f95297a5506aef7ca7c587cec64228f6135b505695d7a8038a9059183e2459c
TLSH
T1A1417F53D6FFB86B503948771D09FC091A7E94310251A4F8DF9BC2AC7085AF71A42877
MD5 SHA1 SHA512 TLSH

Submit Download

bfafd82a-0fbd-4304-a7f1-888efc327a8e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\bfafd82a-0fbd-4304-a7f1-888efc327a8e.tmp
Size 16KB
SHA256 fe63b902212aa5e99d610fa0535654c7fef5f62bf8ac92348761e5fb81cb831d
MD5 b40ad3e417ffe05e638c1d32bc5c861c
SHA1 5dc2256eff5fd486e875a9d90246922350ec31e1
SHA512 776b5ea3e4a278bc697293d9b140d71aecdc34862d02e4d6da9eff4f7137d30fa9ef61bdabe90cdd4e6910d3b5befb8e85d29c8492266ce9e06cb04a453c1802
SSDEEP 384:DepILF3CNYs2Xa+abRq6hqujrJcpp9IiA/cSIuzcqBiLHe6JUhuSESv7e0O80HlD:p7l
TLSH
T1E472ABF7C7D8862EC91116F09715BE2ECE5D0A18432C3C26C9E5BE8B93E2531E251B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cabb9d63-b775-4655-976d-773678e3a944.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\cabb9d63-b775-4655-976d-773678e3a944.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 99f633ce4990c970b4e583daa00b6de408387d0546033c8e0d83505d1efe73df
MD5 4fed26ff1a175ecb1719bedc38c76cb1
SHA1 885bcaad5bf97145081674c69887ec42d5427bf7
SHA512 36ba108b7f8785ccd17ad23ee33cf10cbd3884a80a3adb20f8a49ebbb64d383e010d9266adce83d4b10188137e7c0e42b082e82af0c89d9343b06ebbf1dc07c9
TLSH
T1C9B01200804FD694C80196F2230570C722004F31821023029BD065EEC8530F21111101
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 120B
SHA256 73d30f10439ad0c3b7b53d8c1cb8050821b33584cb41243cc91e5e1459a40ca1
MD5 f1c057fd814f15ea12971545f1ca93ef
SHA1 24e46061596aaa691fd5e5e1ff27eb8140376af5
SHA512 4ac7521e01624dc7de52592098a31882af738fd260e3d2911e6c4a7314b7dfafc65ffa15c2e53937b47da075e7682c33450596566bcca4293359ce13341cb1c3
TLSH
T15BB0127020F43F45C855D67263C300E0D3006A701302461304C00140D50715F0138200
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 c971c671ead54c1a0419c257c2c0459cc6ad4f71fc5480ed6a85a19b0254cf21
MD5 a1b54d63a9abbdb553e8d34920857efb
SHA1 69bb90becf2ea45364ac1a5d5bea0117d4adacde
SHA512 15748df81411eddb27bc5459046e61a8cbdacb2ceb74f490e4a2db4358c30e40c4124404e8281954f6f3c39ea3e802627d17f4dfa8d2e539da6e2a31495a0c5d
TLSH
T1F5B0124B60B00067F60483F110701450F3B018081D02030DB0DD443088271C61304204
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 2b020a09944c3b637c53d96c079fcf8122f735421ba19fa30ebfe0e978792ac6
MD5 bd8a10663dff8e58da3f1a673de9b506
SHA1 69e390a0091e9c9134eca942c23ebab69ea2714e
SHA512 635551f8e4a30a02ec02836ecf6b0fd1c7eb0e7b7df3b253aa0938c9e5d92bf849b71d021dfa583f2173769d977be9fee8759404d6fb97487869d82f6514a8cd
TLSH
T170A00216824000A6F70847B4A1E61252B77198243E971A47549184A48C7A2D18602D40
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

9b9edb30-33d6-4384-9271-e9ec5dc3d840.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\9b9edb30-33d6-4384-9271-e9ec5dc3d840.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c08135ce-3457-4258-b96f-6abe08e6ad6d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c08135ce-3457-4258-b96f-6abe08e6ad6d.tmp
Size 414B
SHA256 bb75f582973d90bf3dd29c05b60991b43dd5d49df9157278b20dc61d1ce1db80
MD5 56bebc62b459f5695f74d21654837e6a
SHA1 ed52bb6ebca3635f094334da6d63caf4c5fea47d
SHA512 e2c626d0840f763bb81f4083b209afed8897b591565425ddd1d98985cf9d0ea51882423dacfad7f0c39adbe95f9c5647c48f1ad834415e98045691068743ad44
TLSH
T131E02B69C911EC3715F81B3D60504B46E710135B2A81C94B3A3D910C8FB163A418E82C
MD5 SHA1 SHA512 TLSH

Submit Download

c8aa038f-13d2-402a-95dd-6f401c92b76f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c8aa038f-13d2-402a-95dd-6f401c92b76f.tmp
Size 12KB
SHA256 341b8977627d18f4ee6f7c6479cc753057ea823acaa301c785ccb21cff59806e
MD5 e7243aa9bd70ca59128c9fd0e69baf8f
SHA1 1e70c29f503edc713473b75c960367b20841dfc3
SHA512 f46a3b9d98caba9143b8f7ab091baab1af7b10043263a57e1bcd1a21061fc6a8f8f62e9b91b96df5387171e236b01ef777a6c334ccc0866d239fae0681f47a14
SSDEEP 192:hDRL1HT1v7qNEAPRp2H9fHsb+WNnv352N8zcU83VyIsnAUgE:pRL1zFmVXEdw/52CzYE
TLSH
T1F142C72EBE14753B5CEBD219FA617B57E6F2202160C42E84E6FC8D2C25E76CC211751B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d038a01c-27e1-4402-a8c6-60eddf57f6ed.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d038a01c-27e1-4402-a8c6-60eddf57f6ed.tmp
Size 12KB
SHA256 cacdc52158b98c32801db658db79731fed43954af7f7318e8dafa072e807b2ed
MD5 d996a99afbec930533486c686989af0c
SHA1 e7cd71946aec994b2086bbd4d1b76ec9aedc0156
SHA512 c2d63c7f1ad6eab4a490e5b3dca7151b69ce1fbe7bfac58f094dbdbb7cefe312f009ed6e1d73805e3ff0240217c731c229e2a53c8a8da18a30e22781dbbaa4db
SSDEEP 192:hDRL1HV5v7qNEwPRpmH9fHsb+WNnme7wW8zcU8tVyIsnAUgE:pRL11Zm1XUdw37wHz8E
TLSH
T19642C72EBD14793B9CEBE219F9617B57E6F6202161D02E84E6FC8D2C25E76CC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e502f657-668b-43e4-9d45-ab7625dbb251.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e502f657-668b-43e4-9d45-ab7625dbb251.tmp
Size 11KB
SHA256 69a83598476271c443c44a160a347746e413bf4b43643a8d98ba0c1ffa6da9cf
MD5 0bcc24bb196daa2f255d9b375a6024c2
SHA1 6f6405609176d2712e4b5dfa48a9ab692033ff97
SHA512 cedc911e7a82560742f70ecefad466e0dc4b283ad702e24601d818c8fce6bbe319e85d2b756bdf4d0b6fe35f84f271c96c8ccb0a2283a5f9bffe8c0218cd78df
SSDEEP 192:hDRL1Hs1v7qNEAPRp2H9fHsb+WNnB1lwN8zcU83VyIsnAUgE:pRL1MFmVXEdwPlwCzYE
TLSH
T1F442B62EBE14753B9CEBD219FA617B57E6F2202120D42E84E6FC8D2C25E76CC211751B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb7cdd03-a010-4fd6-be61-866e6672565e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fb7cdd03-a010-4fd6-be61-866e6672565e.tmp
Size 12KB
SHA256 5a98373e9a1bd300f4892431e155cd175a425e8f2e89ef9707bbd981e54bd831
MD5 be24305c383ce08904eff08512d43837
SHA1 47207117a618221389e6ec37b6323b686ab2b964
SHA512 17f56b734425adb92e500dafe5485e95c7a8437634db3cb36fdb3435c23e169e2c40b371f8a1a56b3c9ac5323aec3504b06e1a118c526faf9ed1078e8f42a29d
SSDEEP 192:hDRL1Ho5v7qNEwPRpmH9fHsb+WNne+h94W8zcU8tVyIsnAUgE:pRL1IZm1XUdwzz4Hz8E
TLSH
T1E842C72EBD14793B5CEBE219F9617B57E6F6202261D02E84E6FC8D2C25E76CC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb9410a0-799f-4e2b-9a1f-4edb88f75637.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fb9410a0-799f-4e2b-9a1f-4edb88f75637.tmp
Size 12KB
SHA256 b365752f9af45238eca3d0e7d6da81f284e9df57a2fc0a8051d678836c6f937d
MD5 f03bf7d376264a8423686bd316bb6903
SHA1 54dc57013c720836f8d0683b492b3641f00bb360
SHA512 d4f20fb31b03a7da86ea128c2d27aa9f47f705fe691ea822833d92ec862fc7a1c3cf2d9652d99b9c512349b18612ba3cfc4566b5f4303341ab67eff84443d889
SSDEEP 192:hDRL1H61v7qNEwPRpmH9fHsb+WNn9JpjW8zcU8tVyIsnAUgE:pRL1aFm1XUdwnpjHz8E
TLSH
T1EF42B62EBD24753B5CEBE219FA617B57E6F6202520D02E84E6FC8D2C25E76CC211711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e61ff129-8746-4d94-9b2e-f153daa445de.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\e61ff129-8746-4d94-9b2e-f153daa445de.tmp
Size 269KB
SHA256 fd7c4c6e19fdf236d41687a7c0b3e335cb82dfc59d3efe36d57de16cf063c810
MD5 463e3099278e8ae31bd41786b7a6db4d
SHA1 cf980a2b6dd40a712499aec8e107ff20f8b77d9a
SHA512 a07647dfa5d7d72c5ed7540a4c9a4840467cb14f57a95d23dce4dcf2ac587e4080e6387bbf852824f495285fdfa96fcf9dfb343d87737c55f856f63b1148bf98
SSDEEP 6144:FLKXTOL/ZBkjZDQYYUF4/xXlfxmX/B5UgKf2ne1utL4:FmXa/IjVQiF4prOw2npL4
TLSH
T1C74412FEECCE8DA75292E136E8291F1B89B4BFD594B0C54486E431CA01D7BFA4346513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3ddca5e-0280-476f-804e-f6ade67e2e78.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f3ddca5e-0280-476f-804e-f6ade67e2e78.tmp
Size 270KB
SHA256 5d155346a80e4ea9bc5e3d9fbb21dabe716173d4b2e9ba4bb8f22326795f2701
MD5 56fd3c1c3ca8f0236ea4e3cb8b73cdcd
SHA1 efe90a37011efa28de0d2b4be5b5abe28041b66c
SHA512 154231255a8c457248bdecb38547635ade93136d1c4411a5141767896e48bc7491303f570a7c6478c86a7cf2076ff2099899bbd13926a9bcab08a2b94aa4276f
SSDEEP 6144:gLkzTOL/ZBkjZDQYYUF4/xXlfxmX/B5UgKf2ne1utL4:gaa/IjVQiF4prOw2npL4
TLSH
T1E24412FEECCE8D675292E135A8292F1B4DF4BFD594B4C44486E430CA01DBAF98746513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0645f17a-aea3-43e1-993a-d698f38d2096.tmp

Path C:\Users\Admin\AppData\Local\Temp\0645f17a-aea3-43e1-993a-d698f38d2096.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3572_1294723507\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ac80d8ae-9c24-4db8-ba02-f1e67153ff51.tmp

Path C:\Users\Admin\Downloads\ac80d8ae-9c24-4db8-ba02-f1e67153ff51.tmp
Size 6KB
SHA256 b296fea68b4e10d98940796af807e14fb21998d44a2622f7388a9fd8e9588f7c
MD5 337f92fdf68f712de8325d474bfaac19
SHA1 428db6e230f358a32a21ef022627c90f57c00a6f
SHA512 be5ed6081c359840d8ae01c6afa9af34cfae2dec10313424c33a4e068c59e5473a7566ff32031b89fa2e1d0bb781787b851d7cb9b2dbe7f012ab7ee7437da3b2
SSDEEP 192:BtBfwlDzxQVwYYli3eo1hq5GreckGKDCH7DJDqE0TypYb:TtwRzKPYlb8VrItmbDJqE0upC
TLSH
T166E19E27D94198ECCC1C0BFD79ADB2FB1E5979133340662AE354A602B5094D4F8AD7A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-ruff-house-stash-kitSK273544.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\the-ruff-house-stash-kitSK273544.zip:Zone.Identifier
Size 186B
SHA256 3650da3c219c14e4bf732be37216002a046e73490514417450e665cc81b525d3
MD5 d6454f10e7302f34444c29ae2a9703a6
SHA1 1954928210a9e417d9e597d0f3b2fc8d4eabbcf3
SHA512 6f5b6644d7c784685cba170f082fb16b3423181b9bc4e5c2f9faf8c82ef464ea5c14194628b57a3180a4d2e624c9c57cd4ea539bf3274d719d0e69fe1cd32127
TLSH
T13AC022BF6848CC20A45445081AAEE01C680FA263C48BC9809D3481BA60E021D4462423
MD5 SHA1 SHA512 TLSH

Submit Download