Overview

overview

3

Static

static

3

image.png

windows11-ltsc_2024-x64

3

Resubmissions

29/10/2026, 19:15

261029-xyb54set4v3

29/10/2026, 19:12

261029-xwpy7aet3s3

Analysis

  • geolocation tags

    eueuropelondonukunited-kingdom
  • user interaction
    yes
  • max time kernel
    41s
  • max time network
    140s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 19:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    image.png
  • Size 24KB
  • Sample261029-xyb54set4v
  • SHA256 8354138ef96fe937d00cd482ed246e028a6ab15dafe524d0e30202188b01067b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 8 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 50 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 44 IoCs

Processes

  • C:\Windows\system32\mspaint.exe
    "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\image.png"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5312
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
    1⤵
    • Checks SCSI registry key(s)
    PID:1172
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2772
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ff83401c728,0x7ff83401c734,0x7ff83401c740
      2⤵
        PID:5880
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1616,i,15045912816976534947,11573989670228347239,262144 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=1844 /prefetch:2
        2⤵
          PID:3192
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1492,i,12915462766336528182,17328096827974354195,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:11
          2⤵
          • System Time Discovery
          PID:1208
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2308,i,15827582054422783576,15995787626170551040,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:13
          2⤵
            PID:4508
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3284,i,12868244915463037228,8246212211353664337,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:1
            2⤵
              PID:2864
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3316,i,5079659085921720821,8979046017730747842,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:1
              2⤵
                PID:5956
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4664,i,6750759702436582846,17986690860609354852,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:1
                2⤵
                  PID:3060
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4888,i,144504208206025532,17050492587465035165,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
                  2⤵
                    PID:3012
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4976,i,2388923011611457486,5960297829563540827,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:1
                    2⤵
                      PID:1980
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5192,i,17079334622522951104,768195256644591158,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
                      2⤵
                      • Modifies registry class
                      • Suspicious behavior: GetForegroundWindowSpam
                      • Suspicious use of SetWindowsHookEx
                      PID:4140
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5484,i,15394390980461563164,6452122213448584920,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
                      2⤵
                        PID:5380
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5564,i,10316055541838283396,11494176085282490324,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:1
                        2⤵
                          PID:4304
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5580,i,4881222960824430347,2430726585150100585,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
                          2⤵
                            PID:1948
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5860,i,11646653031567954930,12699523338610938130,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:1
                            2⤵
                              PID:5896
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,15052550454444143963,10855731745193061382,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:14
                              2⤵
                                PID:3340
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5572,i,14339788704161708781,12619439344623206841,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:1
                                2⤵
                                  PID:3752
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6336,i,4773668076854826480,264231426433724733,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:1
                                  2⤵
                                    PID:2880
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6192,i,9559485205368864797,11072696824343102886,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:1
                                    2⤵
                                      PID:2220
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6048,i,11738252075628150744,15704880104631725289,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:1
                                      2⤵
                                        PID:5980
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5756,i,15253644716215688886,17100218468489706053,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
                                        2⤵
                                          PID:2236
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6340,i,6986015834088843509,14855563687696183943,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:1
                                          2⤵
                                            PID:476
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5680,i,14278268763940291208,18139714402461055164,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
                                            2⤵
                                              PID:5080
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4952,i,7390611087681678269,10022060154971207005,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:1
                                              2⤵
                                                PID:2140
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6228,i,8499039280593017775,6739218935454236760,2097152 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:9
                                                2⤵
                                                  PID:6068
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4976,i,1460860371246327931,17072258994289717131,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:14
                                                  2⤵
                                                    PID:4304
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5796,i,12101865012244057682,15422558790089042014,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
                                                    2⤵
                                                      PID:2396
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5844,i,2626736935216981701,5509724615243526011,524288 --field-trial-handle=1852,i,4072499990196840076,15284117217617710025,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
                                                      2⤵
                                                        PID:1060
                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                      1⤵
                                                        PID:2880
                                                      • C:\Windows\system32\svchost.exe
                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                        1⤵
                                                          PID:4156
                                                        • C:\Windows\system32\svchost.exe
                                                          C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                          1⤵
                                                          • Modifies data under HKEY_USERS
                                                          PID:6044

                                                        Network

                                                              MITRE ATT&CK Enterprise v16

                                                              Replay Monitor

                                                              Loading Replay Monitor...

                                                              Downloads

                                                              094be93f-29ff-41bd-bbb3-e25f016f6628.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\094be93f-29ff-41bd-bbb3-e25f016f6628.tmp
                                                              • Size 4KB
                                                              • SHA256 655fc9cb44b001c48d9e087da6dd10c5f70bb6441e80513c6d81317983b7cb30
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                              Submit Download

                                                              63d21187-6525-4a3d-b414-cc8612cb4d53.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\63d21187-6525-4a3d-b414-cc8612cb4d53.tmp
                                                              • Size 144KB
                                                              • SHA256 b70691dac6482d8f9c8e5bc70d722f9ca616916dbad656a7805951250d4f48cc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                              Submit Download

                                                              settings.dat
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                              • Size 40B
                                                              • SHA256 d8b9f6b3b9a215f0ce7a911dc243e42c4a408cef8396b955f5429a76fbc6a1ab
                                                              • MD5 SHA1 SHA512
                                                              Submit Download

                                                              5154f7ba-64bf-46b0-9d08-867349eb44eb.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5154f7ba-64bf-46b0-9d08-867349eb44eb.tmp
                                                              • Size 13KB
                                                              • SHA256 fb49b6b3d3f3f20315096fe08f43116d0c604e427724a3ebd69d8f315763d59a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                              Submit Download

                                                              messages.json
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                              • Size 593B
                                                              • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                              • MD5 SHA1 SHA512 TLSH
                                                              Submit Download

                                                              craw_background.js
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                              • Size 531KB
                                                              • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                              Submit Download

                                                              CURRENT
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT
                                                              • Size 16B
                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                              • MD5 SHA1 SHA512
                                                              Submit Download

                                                              MANIFEST-000001
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001
                                                              • Size 41B
                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                              • MD5 SHA1 SHA512
                                                              Submit Download

                                                              20c7cccb-4783-4144-917a-c0ae80a7c3f8.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\20c7cccb-4783-4144-917a-c0ae80a7c3f8.tmp
                                                              • Size 523B
                                                              • SHA256 ab715fbce2828aa8da19f17bb1695e8951eb946db09e901aa001ce3b79580c1c
                                                              • MD5 SHA1 SHA512 TLSH
                                                              Submit Download

                                                              e60cc3f1-0212-46da-b6c5-ebeb7c95b961.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e60cc3f1-0212-46da-b6c5-ebeb7c95b961.tmp
                                                              • Size 2KB
                                                              • SHA256 1ac5b6da5cfcc9b49da923a8f7c6e7c9ef5ba697af3bc8a31a3372faef6541af
                                                              • MD5 SHA1 SHA512 TLSH
                                                              Submit Download

                                                              f02a86f7-920f-4b82-9986-930ca302c74b.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f02a86f7-920f-4b82-9986-930ca302c74b.tmp
                                                              • Size 2B
                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                              • MD5 SHA1 SHA512
                                                              Submit Download

                                                              temp-index
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
                                                              • Size 72B
                                                              • SHA256 7343a82c083b35c7a55352f770b8e3ef1eb6eabc4d7a1ae6276b67fbfe77b7cc
                                                              • MD5 SHA1 SHA512 TLSH
                                                              Submit Download

                                                              temp-index
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\wasm\index-dir\temp-index
                                                              • Size 48B
                                                              • SHA256 a847e21ded755f702e7b1136ec8fade72e627715420ccae2060dbce5b0d82330
                                                              • MD5 SHA1 SHA512
                                                              Submit Download

                                                              data_0
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
                                                              • Size 8KB
                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                              • MD5 SHA1 SHA512 SSDEEP
                                                              Submit Download

                                                              data_1
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
                                                              • Size 264KB
                                                              • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                              • MD5 SHA1 SHA512 SSDEEP
                                                              Submit Download

                                                              data_2
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                              • Size 8KB
                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                              • MD5 SHA1 SHA512 SSDEEP
                                                              Submit Download

                                                              data_3
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
                                                              • Size 8KB
                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                              • MD5 SHA1 SHA512 SSDEEP
                                                              Submit Download

                                                              354ecb7c-bead-46bc-bff1-2b73843b7ff2.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\354ecb7c-bead-46bc-bff1-2b73843b7ff2.tmp
                                                              • Size 111B
                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                              • MD5 SHA1 SHA512 TLSH
                                                              Submit Download

                                                              Network Persistent State
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
                                                              • Size 59B
                                                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                              • MD5 SHA1 SHA512 TLSH
                                                              Submit Download

                                                              bf910ece-aff8-421f-a6d2-9d70eeb9be08.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\bf910ece-aff8-421f-a6d2-9d70eeb9be08.tmp
                                                              • Size 11KB
                                                              • SHA256 92dd80e86f4d2a76146577e8d688910d7366541b3e23029e3799bdd51acc2211
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                              Submit Download

                                                              d154e29f-032d-4aaa-90ad-d99414bc5b5b.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d154e29f-032d-4aaa-90ad-d99414bc5b5b.tmp
                                                              • Size 6B
                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                              • MD5 SHA1 SHA512
                                                              Submit Download

                                                              db7c9447-efd2-4993-b4e2-76c513526ac8.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\db7c9447-efd2-4993-b4e2-76c513526ac8.tmp
                                                              • Size 144KB
                                                              • SHA256 a05bc4fe4990bde33c0fa1fa2ae0ae44c735991057414fc9b282fab88f214022
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                              Submit Download

                                                              da764c78-79d1-4b50-83de-5f8cb72dfa33.tmp
                                                              • Path C:\Users\Admin\AppData\Local\Temp\da764c78-79d1-4b50-83de-5f8cb72dfa33.tmp
                                                              • Size 242KB
                                                              • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                              Submit Download

                                                              messages.json
                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2772_1847564137\CRX_INSTALL\_locales\en\messages.json
                                                              • Size 450B
                                                              • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                              • MD5 SHA1 SHA512 TLSH
                                                              Submit Download