hxxps://nigga[.]g-s[.]nu/

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-de
resource tags

arch:x64arch:x86image:win10v2004-20260911-delocale:de-deos:windows10-2004-x64systemwindows
submitted
02/11/2026, 19:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://nigga.g-s.nu/
Sample261102-x3bedacy2t

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5076	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5108	chrome.exe
5108	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe
Token: SeShutdownPrivilege	5216	chrome.exe
Token: SeCreatePagefilePrivilege	5216	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe
5216	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 5216 wrote to memory of 3832	5216	chrome.exe	86
PID 5216 wrote to memory of 5076	5216	chrome.exe	87
PID 5216 wrote to memory of 2444	5216	chrome.exe	88
PID 5216 wrote to memory of 2444	5216	chrome.exe	88
PID 5216 wrote to memory of 2372	5216	chrome.exe	89
PID 5216 wrote to memory of 2372	5216	chrome.exe	89
PID 5216 wrote to memory of 4516	5216	chrome.exe	90
PID 5216 wrote to memory of 4516	5216	chrome.exe	90
PID 5216 wrote to memory of 864	5216	chrome.exe	91
PID 5216 wrote to memory of 864	5216	chrome.exe	91
PID 5216 wrote to memory of 4144	5216	chrome.exe	93
PID 5216 wrote to memory of 4144	5216	chrome.exe	93
PID 5216 wrote to memory of 5312	5216	chrome.exe	95
PID 5216 wrote to memory of 2176	5216	chrome.exe	105
PID 5216 wrote to memory of 5088	5216	chrome.exe	106
PID 5216 wrote to memory of 2428	5216	chrome.exe	107
PID 5216 wrote to memory of 5108	5216	chrome.exe	112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://nigga.g-s.nu/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb16a2c728,0x7ffb16a2c734,0x7ffb16a2c740
  2⤵
  PID:3832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2020,i,13118671113011329112,4132366381570001125,524288 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2132 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,1795883113091381850,16672222995456439717,262144 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:2444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,1513489437972969730,12281139667816215659,524288 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2464 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,17244554958835922387,4460520803329466736,2097152 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3156,i,775588605482734830,98770841955048348,2097152 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4220,i,10627998430503357055,6864183290579714612,2097152 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5700,i,14059952118483418160,1727105141255262728,524288 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:5312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,6004443360990988719,3725161110546091840,524288 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5728,i,3439621280883191272,1370559332483064687,524288 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5800,i,17600487814546881078,15713511459027135386,524288 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5664,i,15144724993055966348,11796969962782455441,262144 --field-trial-handle=2008,i,2704093541311132311,17100489630305940477,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5108

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4024

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

429c0446-eba5-4866-9771-d3db557e31ea.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\429c0446-eba5-4866-9771-d3db557e31ea.tmp
Size 131KB
SHA256 726ab768858d8f078ae12418ce70c11354546084d23724cf3a18a43239168a55
MD5 6061541b7b36439f4e0370ca9b3613f2
SHA1 8e13eb9c9fa58bdf22f56da797350c21dae1aa1c
SHA512 51b719401035ea3a034bdec55125264d428c7af86c421c2e0f1f47f3688aed9261f9f8892fa4d6c39613b76233a5a9e5656dc76df1f3d86983fbd70fab7a7fbb
SSDEEP 3072:/Ju+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+g3:/4+hFD+7t56OD9ZfSAppr3
TLSH
T1FFD31272AA94D8BBCDFD6541F157A300CD6268ED45DE3A0984469F8EA19FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87a7db90-b6b4-4449-b5c7-0fc61ee1a5a2.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\87a7db90-b6b4-4449-b5c7-0fc61ee1a5a2.tmp
Size 131KB
SHA256 87da1993a1747c11df0a9e8c0c549646046aa36275ccb31e8e5f0c042b6b3f9c
MD5 b255d310aae96995c61138b570c23d05
SHA1 652eafc7710a5e63d78a2a877be6a254a1cf59cf
SHA512 306b09f9c580d66a0742783fe63c8cf49cfb6981467f270faf2e2471827d41b54c48ae549caf0c725328575cf4ffaf3c47f661e22277b866958ced9b6a5e7efa
SSDEEP 3072:aJu+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+g3:a4+hFD+7t56OD9ZfSAppr3
TLSH
T116D31272AA94D8BBCDF96541F157A300CD6268ED45DE3A0984469F8EE19FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e73938a-3d11-4248-a591-2600c55fae69.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8e73938a-3d11-4248-a591-2600c55fae69.tmp
Size 183KB
SHA256 44945f250397ab6a8bbcd922d38d419ba16d467191309bff3539fde68aa447cb
MD5 d03e40a0daa59396fa24272951f27aa5
SHA1 01a8f9606a0a88a2ca926ba1a4bdf6143b1de748
SHA512 56346d4c6fbd04554936941b599fcba3f83ca4b76bd9c85cd127f97306f3e3b9f6e563e4b3d440fa80f68c5a55bc2ba841a1af498bd8928209599f0e4d25bddc
SSDEEP 3072:/JV1eAs4U/DwlOtTWeq+Tb3DbMRQ+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCT:/10wCTWeq+TP+hFD+7t56OD9ZfSAppr3
TLSH
T11E041326FA8585BFCA745102F50BA314DEB668FD45ED3A0588994F4EA19FD0C02A2737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

646ea5b6-b010-4183-acad-a0eb96823858.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\646ea5b6-b010-4183-acad-a0eb96823858.tmp
Size 12KB
SHA256 5107027dca9df103868415e0d93f2346bf30ca957b47982aa3828bf4e06e7cf5
MD5 2e10fa31a4e6bd4cf60667212181e098
SHA1 5e3936a40d5aae8b1a99ab1962c156ad27cecde4
SHA512 7812fd09b5e82d825dd2f992cddcf07c56a2f770cd5acc5b4b873d9c7338432a205a2e5ee3d5f9746e96e673cb79765f12c6ea364a87dacbc27da92086544cba
SSDEEP 192:4R2/FVDKK7n6iv7VJpAPRp2PI9fHsb+WNnOGZiiA2cbGTa/9ZEVyIsnAUg5U:4R29FIuvUXNhwDk2c2aM5U
TLSH
T1BF429429FA10393FACEBD32AFA257667D7F6102121942E84EAF8C93C25D75CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e167743-e0e4-4d05-b48d-07d80996e256.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6e167743-e0e4-4d05-b48d-07d80996e256.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

85ca07f9-ab06-41b8-abb5-c2f8c3d22643.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\85ca07f9-ab06-41b8-abb5-c2f8c3d22643.tmp
Size 12KB
SHA256 d09c272e215933f8068f1ae5fdea2b1c9ee0b6e8dce07d0736e6e128571ee425
MD5 0a416539071c3768c406bb0c1fff3474
SHA1 bb92d44919de68b2ebabbe05530b179078038502
SHA512 1fd10b5421a4f7302c939fa8758b3b8435bc867d9527bbf73019299bee089c34577967f485396d162e575ab680c72688c04649cc6c6b1cd0123a055c03494f10
SSDEEP 192:4R2/FVDKK7n6L4v7VJpAPRp2PI9fHsb+WNnOGZipHec0GTa/9ZEVyIsnAUg5U:4R29FIYvUXNhwDUecRaM5U
TLSH
T12F429329B910393FACEBD32AFA257667D7F6102121942E84EAF8C93C25E75CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99d37639-8f1d-4cb3-9748-35f4b55f3c7d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\99d37639-8f1d-4cb3-9748-35f4b55f3c7d.tmp
Size 17KB
SHA256 f9646124b164c746916c0af6d789115723e5be8fbfd5851c9d85f858dc450f31
MD5 3e3e5a186abfc8b856e4da91054eb98d
SHA1 b06f5906778bc7ed976bcf1e29d56751c8660556
SHA512 b8f26e8851b96e9bdeb44732686fb85ac5f0df510169be0ac0dce52d888dc402c7b27ebe7d338cedd6cdf2c9c16dd0df5d7e4dbfcb5ec57f3fbec246be2d76de
SSDEEP 384:JvjFE7KxkXqKf/pUZNCgVLH2HfgslsS7pLkdLceSbWXODFs+ErU3kAHwD1Wrrga3:JbFE7KxkXqKf/pUZNCgVLH2HfgsKS7pX
TLSH
T134722A67AC4C9E3B4FD4C6CDD8167B4FACB5024B65E9886483FA982503D5ACB110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 a7f4c33b19aaa879b2d7f7b16267c458be9d6a4c25cd704235cf4422a035cfc4
MD5 4630a61d2a2511582239cb2c827fdbb2
SHA1 7c39f8a277eb698e394c964aa7ee93e93d7f3797
SHA512 2d77da98dad1c862620297ed504421ff55522e3d2e9c0663de287a0bdbca0ababdd2aa3a21d689ca970e4391c932fa2a84b722039642eb1204695a1fa292b50f
TLSH
T18EB0118222C0A00BEB0022B208C208A22BA88A0203220203A0E0E8B888333F022A2082
MD5 SHA1 SHA512 TLSH

Submit Download

3584e94b-4253-4ba9-bf6c-d0b666362691.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3584e94b-4253-4ba9-bf6c-d0b666362691.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

4285f8e3-14e0-48e5-9635-d5edb50e1d88.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\4285f8e3-14e0-48e5-9635-d5edb50e1d88.tmp
Size 2KB
SHA256 a6153e1a133ee5b507bb37e9c2b68fee7f3af5a4ebe58d6884fd413069ac312c
MD5 a00f6a803af46ae562b3fcf1bfb6c675
SHA1 64309bdc525a6fa43881551bba3bb42cc05a324b
SHA512 34dea92fb4b60bf6fea4dc4f2d6a6a95c7084b150b45bf0de472d04e1d4695cf1eca7a1f4aaae5cfa9f6b927faaca1ff41c674aa167161ced3b1ef7bb2609e66
TLSH
T1B3417BB3C7D88A3DC901A6F4A7152E2ACE7A0A14532C3C56C8D4AE1F53E28F1D35055E
MD5 SHA1 SHA512 TLSH

Submit Download

5c45f07a-45c4-497d-921f-dade2a936323.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\5c45f07a-45c4-497d-921f-dade2a936323.tmp
Size 2KB
SHA256 de2420950078eed164d15d2426d94e5bd0e51beca456bfd44d2584894119284d
MD5 87eabe87c1ecb4d4f3539e9232fc7456
SHA1 75cbcf98a4556f86a06ecf130e44c023b12f5227
SHA512 6739ed7806ca332f845a7978f3edad89c088a4cc8beccf5c6c3c56e3f589a2688d7944d818015d15cfca037dc8c98facb839f8796cb3f9ee192f36cc75c76b37
TLSH
T14E51B0F383F8862D890196F4EB147E2FDE2D0525432C3C5689E49E5B93F2571D24078E
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 e053c8f6dc307933963a3082b18783d234b3fb4367209f0d2b7dbb595f970795
MD5 ee22f176d2ee8b8806032d2068a8181b
SHA1 de88a8f7c55d745d6cd4fafdeefad0c05997c20e
SHA512 92368e8126697fdb21cb586e12091a154df942e9a05d73a781ee28a44a367327308ed6ed274bc2fc9a57ba2590437688fde6d2ab21a359beb67f36ace0e8ab94
TLSH
T1FDB0124480416343C01203F4215158EC3254DF14E6051B0141F40E12883F6E0D02B054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 b8495d5bef0b21540cc501f63a540ace0c019499b1c201f8ef98c17e53294795
MD5 5974de6ed34d2b400a16995bd36b35a1
SHA1 98140714e7de65cfdd5c8a1373900910c846b504
SHA512 064b58f8cb0f6da221061aee4c8cf47d65a311bedcd881007730dec3988a639c5c6ab8c6f0acd67130aba0fe0ea1b1340b8b717c5c23f8d3070517d1933eec60
TLSH
T1DDB00265C102B627C44307B429D595E87260EF35C743122696E15A7EDC27AA25925EA0
MD5 SHA1 SHA512 TLSH

Submit Download

a4b87c94-a3f6-45ef-805d-f319f5d4e18f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a4b87c94-a3f6-45ef-805d-f319f5d4e18f.tmp
Size 414B
SHA256 e333b77b91d2ac6a88f34fa84fa112b8d7c2513b60f3fd0db35a905db83219bf
MD5 70a525abf0bbb420b64ef97df08887ca
SHA1 5b4ceeccbc0a16ed38d931d213b38f07bbe38020
SHA512 e96b6fe07437623aab1730ce65fa350c4c2c7fb8da1bc90bb8f82a1b855e2f4269641141ac84b0eaae2cb9a041c4e8a66f2884c652df9a3d6015dad9118113e2
TLSH
T1D8E0E5AADC20AC375CF8076960940A4AE76213661651950BB73C810D8FB152B428595C
MD5 SHA1 SHA512 TLSH

Submit Download

a68cdbae-1887-4fd7-b5da-557b48efd1fe.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a68cdbae-1887-4fd7-b5da-557b48efd1fe.tmp
Size 130KB
SHA256 f833927c3df651e18c8f994f7724d4caa321a2fa8b9b4da6e58948ef6068b7a9
MD5 4b86de528ceeb9c777d999ff58b5e3d1
SHA1 3021e5b56f0709598df19f886bcd019fbbc1e422
SHA512 7cd5ffe6970c658968a8b4f9b663bf098f615fbb336b073dd9ac5eb9ee92791027cdd25f98deb64e30b8020c12fff1c5b77df7dd224044e8c341426a6e08bb0f
SSDEEP 3072:wJ1+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+g3:wP+hFD+7t56OD9ZfSAppr3
TLSH
T127D31232AA95C8BBC9BD5541F257A300CD626CED45DE7A09444A9F8EE09FC5C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download