a24c47698cc56877ffebd16a07dc225bf602a902bd33891a99e695d707496747

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/11/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
外贸单证与装柜系统/外贸单证与装柜系统.exe
Size 262KB
Sample261104-wthxesb13y
SHA256 a24c47698cc56877ffebd16a07dc225bf602a902bd33891a99e695d707496747
MD5 b78e4c4311f9a7807031e16a2c7f6844
SHA1 9999e1e4473ffbb587fac18fd2b916c6b9822a20
SHA512 50d38b88eb28e2fa5c38001e299b072265b29beb70006c7b58c24d254c508a0cdeb340109b9a78d662eb6acc289016c324099376c6d3938faeeb1824e1b54806
SSDEEP 3072:5Wd2SIgoo/V1b+J9APRgz9pANx2J4wP4jCyMP0ZJm1s6uiuA40hW8TCyg2Qv8w:5SnIvAw+gz9xJ4wP4jJNA4enTLq8w
TLSH
T137446CC1BB86ACE7C615463589BB43293338F6D11B839B07193872351D27AF4BE8B617
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3608	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
4952	chrome.exe
4952	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe
3396	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe
Token: SeShutdownPrivilege	3396	chrome.exe
Token: SeCreatePagefilePrivilege	3396	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3396	chrome.exe
3396	chrome.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 3748 wrote to memory of 3396	3748	外贸单证与装柜系统.exe	84
PID 3396 wrote to memory of 1728	3396	chrome.exe	85
PID 3396 wrote to memory of 2464	3396	chrome.exe	86
PID 3396 wrote to memory of 2464	3396	chrome.exe	86
PID 3396 wrote to memory of 3608	3396	chrome.exe	87
PID 3396 wrote to memory of 4300	3396	chrome.exe	88
PID 3396 wrote to memory of 4300	3396	chrome.exe	88
PID 3396 wrote to memory of 1252	3396	chrome.exe	89
PID 3396 wrote to memory of 4500	3396	chrome.exe	90
PID 3396 wrote to memory of 1252	3396	chrome.exe	89
PID 3396 wrote to memory of 4500	3396	chrome.exe	90
PID 3396 wrote to memory of 4176	3396	chrome.exe	91
PID 3396 wrote to memory of 4924	3396	chrome.exe	92
PID 3396 wrote to memory of 4176	3396	chrome.exe	91
PID 3396 wrote to memory of 4924	3396	chrome.exe	92
PID 3396 wrote to memory of 3244	3396	chrome.exe	93
PID 3396 wrote to memory of 3244	3396	chrome.exe	93
PID 3396 wrote to memory of 3948	3396	chrome.exe	94
PID 3396 wrote to memory of 3948	3396	chrome.exe	94
PID 3396 wrote to memory of 3936	3396	chrome.exe	98
PID 3396 wrote to memory of 4788	3396	chrome.exe	100
PID 3396 wrote to memory of 3800	3396	chrome.exe	99
PID 3396 wrote to memory of 4788	3396	chrome.exe	100
PID 3396 wrote to memory of 3800	3396	chrome.exe	99
PID 3396 wrote to memory of 2824	3396	chrome.exe	102
PID 3396 wrote to memory of 2824	3396	chrome.exe	102
PID 3396 wrote to memory of 4240	3396	chrome.exe	103
PID 3396 wrote to memory of 4240	3396	chrome.exe	103
PID 3396 wrote to memory of 3432	3396	chrome.exe	104
PID 3396 wrote to memory of 3432	3396	chrome.exe	104
PID 3396 wrote to memory of 3152	3396	chrome.exe	105
PID 3396 wrote to memory of 3152	3396	chrome.exe	105
PID 3396 wrote to memory of 4608	3396	chrome.exe	106
PID 3396 wrote to memory of 4608	3396	chrome.exe	106
PID 3396 wrote to memory of 2064	3396	chrome.exe	107
PID 3396 wrote to memory of 2064	3396	chrome.exe	107
PID 3396 wrote to memory of 3968	3396	chrome.exe	108
PID 3396 wrote to memory of 3968	3396	chrome.exe	108
PID 3396 wrote to memory of 2104	3396	chrome.exe	109
PID 3396 wrote to memory of 2104	3396	chrome.exe	109
PID 3396 wrote to memory of 5036	3396	chrome.exe	112
PID 3396 wrote to memory of 4584	3396	chrome.exe	113
PID 3396 wrote to memory of 5036	3396	chrome.exe	112
PID 3396 wrote to memory of 4584	3396	chrome.exe	113
PID 3396 wrote to memory of 2984	3396	chrome.exe	115
PID 3396 wrote to memory of 2984	3396	chrome.exe	115
PID 3396 wrote to memory of 404	3396	chrome.exe	114
PID 3396 wrote to memory of 404	3396	chrome.exe	114
PID 3396 wrote to memory of 4356	3396	chrome.exe	116
PID 3396 wrote to memory of 4356	3396	chrome.exe	116
PID 3396 wrote to memory of 2064	3396	chrome.exe	117
PID 3396 wrote to memory of 2064	3396	chrome.exe	117
PID 3396 wrote to memory of 2824	3396	chrome.exe	118
PID 3396 wrote to memory of 2824	3396	chrome.exe	118
PID 3396 wrote to memory of 768	3396	chrome.exe	123
PID 3396 wrote to memory of 3936	3396	chrome.exe	124
PID 3396 wrote to memory of 4352	3396	chrome.exe	125
PID 3396 wrote to memory of 4952	3396	chrome.exe	127

C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\外贸单证与装柜系统.exe
"C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\外贸单证与装柜系统.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --app="file:///C:/Users/Admin/AppData/Local/Temp/%E5%A4%96%E8%B4%B8%E5%8D%95%E8%AF%81%E4%B8%8E%E8%A3%85%E6%9F%9C%E7%B3%BB%E7%BB%9F/app.html" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --no-first-run --no-default-browser-check --disable-features=Translate
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3396
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa3f7ac728,0x7ffa3f7ac734,0x7ffa3f7ac740
    3⤵
    PID:1728
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,1374753335471160713,15919446451760501613,262144 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=1820 /prefetch:2
    3⤵
    PID:2464
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=2244,i,4479742935337479732,2772602306581129540,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3608
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,3777629448187265123,15890971898181501402,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
    3⤵
    PID:4300
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,3668874297605927975,13606015167805443426,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=3260 /prefetch:1
    3⤵
    PID:1252
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3252,i,13765727973224437389,13704785308466685942,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=3312 /prefetch:1
    3⤵
    PID:4500
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3900,i,9169206925259468647,441126331579983008,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=3916 /prefetch:1
    3⤵
    PID:4176
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3876,i,631442765586730470,3738633143779212498,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=3220 /prefetch:2
    3⤵
    PID:4924
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4736,i,17298596087009339536,4783493805455949175,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:2
    3⤵
    PID:3244
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=4948,i,1431285815316943239,11940994206150815236,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:8
    3⤵
    PID:3948
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=5504,i,831347086825821870,5312791659309142589,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
    3⤵
    PID:3936
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5604,i,3694897137493694752,3027475004345435166,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
    3⤵
    PID:3800
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5644,i,9870885709706599612,6520854979119338588,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:1
    3⤵
    PID:4788
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5940,i,6449772152770227208,3538107309009552492,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:1
    3⤵
    PID:2824
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,8449579200096466751,905831810833124353,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
    3⤵
    PID:4240
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6200,i,3778366097805009771,13817226510870068714,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
    3⤵
    PID:3432
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=6344,i,1634945551119408152,5790266948467161507,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
    3⤵
    PID:3152
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6060,i,15051364831721567523,5453387394142585996,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
    3⤵
    PID:4608
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6324,i,6893399352150924276,6690194709264524305,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
    3⤵
    PID:2064
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6652,i,923361461916062372,11656891295596665411,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:1
    3⤵
    PID:3968
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6876,i,18368554449949021081,15546126869351921746,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:1
    3⤵
    PID:2104
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=6780,i,621067363295433601,14195072200102158254,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
    3⤵
    PID:5036
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=5504,i,976735980119677103,12234752807840168289,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
    3⤵
    PID:4584
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,16016122699079274473,5358038809251876619,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:8
    3⤵
    PID:404
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=7024,i,1093979828322070551,17530299228061414871,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:8
    3⤵
    PID:2984
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=3864,i,11983110012528347853,8921388859192805193,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:1
    3⤵
    PID:4356
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3928,i,9416029205179459401,11776737397221726219,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:2
    3⤵
    PID:2064
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7020,i,17780083976646907624,4814259858162336271,2097152 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:2
    3⤵
    PID:2824
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=6676,i,9520557788025347801,7510435465046351258,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
    3⤵
    PID:768
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=6724,i,3814782378685920019,17874890809501308887,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
    3⤵
    PID:3936
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --metrics-shmem-handle=6764,i,15769365059455354361,173071302406068803,524288 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
    3⤵
    PID:4352
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6344,i,12565068839355081483,6286492253387109208,262144 --field-trial-handle=2008,i,15383716022434298384,2546961418387645518,262144 --disable-features=Translate --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4952

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

791dbf0e-c1f6-4936-b40b-705ab4dc4dae.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3396_1718965129\791dbf0e-c1f6-4936-b40b-705ab4dc4dae.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3396_1718965129\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3396_1983327277\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

d8f790b3-5195-40df-a46b-91fc420a0743.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3396_1983327277\d8f790b3-5195-40df-a46b-91fc420a0743.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23fa46c6-7527-4f96-8b31-b70be1617ea6.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\23fa46c6-7527-4f96-8b31-b70be1617ea6.tmp
Size 144KB
SHA256 4fbcc5e66dd288ab4b24c4347a4862c2746b8d9b7ff98a0644c8b170db387389
MD5 bb06d270eb00414d7a5d80e9c1a2c3c1
SHA1 969f5a699940558bbfeedb2984bff08da8da0c1b
SHA512 316eb38960c4b9c0fb4c21a94c628319a45873b5116326d4367a28af531b3b07e131e0fc63365a982d6096faaf8cd265c52b9eb1c06439c62a6f0972ae026c8b
SSDEEP 3072:CxwqX7DTfpyc9Mtpus0QZWxS71NPgNYluFVdl0Ep9tmwl:CX7DTEmMyUAS71N4NZrQEpnmC
TLSH
T1EEE312527FF9BC06A13D4C5CF0EE620E0D610391A4A98777F9C1434763A79C5B26AA1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Crashpad\settings.dat
Size 40B
SHA256 71b946d74a98491281c53fa34153574a63f3e4d3114f200a2c8ed73eefa556e7
MD5 2d4fab388bd7b4726b52c84add4ac14e
SHA1 bd52bd6a551dea2cdade725b4ce27704b8834753
SHA512 aac3be2425bbd14ebed40b2da7ed790dc32ecc4f2d522bde563b10094089b83de96911e27dc0db65cc9e79f16c44d1f9f61bee4dda7392166ef8abceb667cdcf
MD5 SHA1 SHA512

Submit Download

0fec182b-2df1-49dc-815e-b523f64523c6.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\0fec182b-2df1-49dc-815e-b523f64523c6.tmp
Size 17KB
SHA256 03596c0074464436e9e8a3e333f02e5d80c5cc0f5d04cf279d1b032e466ca9b2
MD5 ee2927ef360411be158d8ddff10d089d
SHA1 2158293d16a39018ad1bcdc3b6ec606f03c5225e
SHA512 d2e4d88f28ae11d591c5d13e1e61cc37ecdbae6f56db0bfd9f699140ec1b2d69c9a5626684ddb88842263346aca760a7be17051c0478398d5019615620cf4060
SSDEEP 384:OQjyp7KxkXqKf/pUZNCgVLH2Hfgsl947pLuLcEWCu0QRXODyB+ErU3toHGplTZFW:OUyp7KxkXqKf/pUZNCgVLH2HfgsP47pb
TLSH
T1C37218A76C48DE370F94C98DDC267A4FECB5024B65E9886493FA982503D4BCF114A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9decd125-2eb2-47c3-b7f4-7fec10cb7059.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\9decd125-2eb2-47c3-b7f4-7fec10cb7059.tmp
Size 9KB
SHA256 4cf19143093d3e13a2c0f895e69ece1af208c46c7baf7c253c82d003c58940a2
MD5 3602b4b3960adc94886056e2fcdeba6d
SHA1 ae798e0c36fe1ade72bc0f173e222dfb4ab9827a
SHA512 f9eca1c6c038c6f987143fb1548e3760e7a4f749e437353e9b5c896624993bffd72ad028b8956285aba494ac5927ed3be56309c52c11a096f256136c0c069e32
SSDEEP 192:zRYjR9Wg5v7t/PRpDHzXsb+WN4vmiyIsnAUgE:zRYjRAgZZX3Xw4nE
TLSH
T10312A569AC64A97BACC7E71AF9657B42E6F4203134902D44E7FC892C19DB6CD212701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 a893acd493bdd74f29d46aa918f96a8d49748eea59cc607f24cfb5537d702aab
MD5 f0b23c1b3a234ae36b60a970ab7d6d8a
SHA1 acf855aa3bc39fde7aa5d0d61e391313f18c1fb9
SHA512 feafe5c5eeee2c5af4e8d72deb7ee32a0d647a506587b439fc94a77a239c94c5e41a29a7599b585e7c97f4b0b3addddba1172dc2e870a28db9512cef0da56a86
TLSH
T193A0022013C92443DEC493B094F14DC12A10D97401515313CFD0418D88532E691462C6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 925bd34e32c274feb20468a1e9ef0d67526cd09539cf816ec734abf077d2a7c5
MD5 1d656b3f583bb7946b24df242e3a563d
SHA1 0a3f82cff303027d89a33b61f74374c3dfc81b69
SHA512 049a8f8f769690a1041ac05caf75ead27110f45450027a83a642b9a6d97693224a1cd50c85b2695114cd2e302d807f268f5a11c69f3df2b6bfdc2d7612fc3a0e
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\DawnGraphiteCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\DawnGraphiteCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\DawnGraphiteCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\service_worker_bin_prod.js
Size 137KB
SHA256 63b3d006783e106d3aacb9cda3224d48a218dd45d50db663d38b45d2d9b2bff0
MD5 97b43ffd3c415ea9887f0113d43f5a2d
SHA1 1afcebee8c88dcc9c3ff7d43ffdc3b00a329f9c0
SHA512 279521e204cebf954dbf991ba66b9d4a30534d77650c898ce2f052034263d9dfd9a1ea122a548f51a061ebee9859fd2e88860ebece906b23b9d6dffdc7d85c97
SSDEEP 3072:cFMbB96nK7qtBnZ8CDPDHbSVh6lGE4C0S1wmF9cWMzK:cFMqMGvSVh6lGE4CymFiWMzK
TLSH
T147D3D9CCF6A5B0124363A5F5402F000BB239B8B9E44C85A8F288D9E97D7556D8277F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4476f1f8-5f93-489f-969c-992d1cd194b7.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Network\4476f1f8-5f93-489f-969c-992d1cd194b7.tmp
Size 1KB
SHA256 a170adb627995ece3b08ea027b925fcd516c8ebe3d216e52ad84d3f3f01c2ebc
MD5 f12f2a3ce298dfbfa04830ee01f95f03
SHA1 96cf112dacc5fa5a9f3c4856d52a7be126e5a63f
SHA512 911405eb07f8cb94d7e085d7b2d1db0db1a17b6a1b92882c1efe9f72b1ca07701cbd276439f8795a2a6152de7b967983aeb06f007fe1d9c7f9cd219af54bef30
TLSH
T19E3178E7C2E8857E891142F4A7156E1FCE6A1E14832D3C96C8E8AF1B93F2871924459E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 f24bce1f776419d84c7bdbc5d8eae11f97541c0f6f6aef3949991c10494e904b
MD5 a0d3f018c0eed5b7fd54d9a40ce8e4a2
SHA1 a5bb569d78c2cc144804edba9d73f9f1ef55eba9
SHA512 1a5496b0f98d9bd1e3cb1ef70763f0636963a689847299d6c9b03de712434a29a0557e960672a7daccf6a16b7a158dc69f4df2d7fb9a0c6e2406d23ee4eba280
TLSH
T1B5B01204814AD744CCC49170510620443290AE259400470287D05D96CC470E143AA349
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e6236f9ea117e4345ce48c409ca8f4341ed0e9feef162df05fdc40e9d07822e3
MD5 4b5b910259cfc45b72e8d2ec0edc155a
SHA1 27f5173c98a400ebc08a642682f6df26928c49c1
SHA512 7f390b540be311b3e402f014e4c12d9afcdac2bd3d97746ef7b42b25a0bac8090cb73715f374e80a5885503f46647736b7ea18a52cf2fe6dbfe1be5d845ec787
TLSH
T187A0021187918110C26202B06C4183881A14BD7AC00003177BD007469C750508931AC4
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 94210aec3ca3fbcdf02962fc9f6142c11ab0b4fc861ffd5d5c0a5ae59a4cfb35
MD5 5fe05cfece7881ff26b25cd5b94fd8d1
SHA1 79454c1d79d714c499a60b48087dcbe3df7f5345
SHA512 40b5a7ba4f8db988a3c188fbcbe8b841f9de6ab0bc49568bb4ce104b2a9ce6de96d7b4bb8716c7296291be9f0e79c9b2a430ab757319dc828a5263ecc18b6678
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 5d0a312f202f21e04d881f6aad1f89bda653fbcc1b07f21dc02716100411cdad
MD5 d2fb926621b672e0ab53d947fc4b5c43
SHA1 2a1b3a7055486a2062d5ad486533039ca8a83f17
SHA512 0ec9275181e3994c96927bc8b6f8e2ed6e4bae287385f75b87f5d4a0670ddc483cc4943284e2a6eebf00bb3006e83c0a252e230baffd44b784bf06ecbf386254
TLSH
T12DA002A28BDC0825CE804370E07245423A9188249B5553075CD30445EC7F9C051127C0
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\index
Size 256KB
SHA256 11b2edacb3817c901ed39b264c1d54c0ae2219965f12e0c70eb6d2cc6eb0a838
MD5 33205d937be6e2d5bf985c6bbab69d51
SHA1 35e5f10b1f8f45101396fffdf1f637544daaaf0a
SHA512 0ffe1dc3f6dd6ea93ff9aab63366ac93ee11946b504f44623cc7531c54ea50dc03f10ed7d8a4bc3a2d75d646a543a1ae2e3a7dda1ba6fce48eaa5aceee18c111
SSDEEP 3:LstlNllkll/l2NX:LsX3lEt2NX
MD5 SHA1 SHA512 SSDEEP

Submit Download

e97f157c-ec9f-49e2-8b85-72fee7e5022b.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\e97f157c-ec9f-49e2-8b85-72fee7e5022b.tmp
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\128.png
Size 5KB
SHA256 63be4dfbc222f0c026579113af9aa7dea61e78a166ab9af053b46c1e172240ff
MD5 9cafc16ce8040254ec411cc5a8f954f2
SHA1 0d9841be48e134edf43c7ef970d24ddf852d155e
SHA512 aa1e0ac8d0647ee6c0b481e671b20fc68ff253dc72748b2aaf22f15bd8decd2b9723b16f8cd4c19d9a250abaa8d517101bad6ebfed7fd3a90ceefce02c1b3b75
SSDEEP 96:ALdfTPsPOWpgaNHQxO20qtLppvSFLtGaoFuPhQd1YDzpsE60tkuuAaw:m16NHQgoLjvSVtY2h6CDzpsErVu0
TLSH
T119C17E55555D711FD09D157110AF4A0F31A7E2AAC3785720C97E1BD0F88DE4603A3EB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1314346163\Icons\128.png
Size 2KB
SHA256 3a45652c64d2a35cad427fc4541ab36ac42f11425f2d996edc38a6498d98bae8
MD5 306472d164006935bf98edcf0cd28837
SHA1 f2ad2740a46607728c5444ccf2a93a774bb300ea
SHA512 51547f18c6518d60ebb1aeca780bc1b9fa85f444a5abe60ba6b0f34d64f4006ae01c24128284e02e7b9e1d96c7111f3c8c597a1e74f2a29fe4ad6c139f0123de
TLSH
T1FF41C7998B466878F215E305C0493E7E79B2BD1A1C13E05A21B040430DA9BD55FEB61C
MD5 SHA1 SHA512 TLSH

Submit Download

192.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1314346163\Icons\192.png
Size 1KB
SHA256 56b7a8100c9fd352d2c25b6a9c9a05b47950cf5f84d07ab014a0b7cd2850e5a5
MD5 51429005fa10fb2c81fe734e74695d0e
SHA1 9dad5c509e3ad1ab8b1d0ff911600a83b62e3aff
SHA512 999fbbfb741ad6499e617e1e637e014099a49e9a5374314e59f6f145cd19f9dcf3e131b4fd6c622f9293033dab91392b0665ca0d567af2c34d20ce255495a04f
TLSH
T1172178BF93B5D1F3DCC2CB03D640509CD80F762B7D6843C5DCA018A986B9D45AAB88A6
MD5 SHA1 SHA512 TLSH

Submit Download

256.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1314346163\Icons\256.png
Size 4KB
SHA256 55d89ccdc27b413cc831f5496b0caf3ec390bc19270ec3294a5d2d38dec42c24
MD5 b3d7fffa6ed9b6dd37f5d2cdb077f22e
SHA1 cb2e013c3d6b7c35eb09170ce884da4fb480e1e6
SHA512 473db4b410a9fd56fa1289ec8314f908ee221977b2d32b5abfe1ad628e60addbc23e3b06f7fdd104d6a2e3076f992c65696ffe1ecc75d553e094a57869df04a8
SSDEEP 96:miJQW62M8GG901ZveUmX2KJ2tra+NO6+K6teIp5f:zJ/901ReUmNJ2tm+NO6ibf
TLSH
T16BA13A8E47A0DC8B8551A3BA1AFAA4E07A30983063F2133576F640EB742D523A309B75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1314346163\Icons\32.png
Size 960B
SHA256 c6fa451ecd1a8a9533801028bc70cf82ef48eba11bb835e53e6c530b43018938
MD5 8fc407c5a96f560cfbb46503741dd11f
SHA1 31eb59362b3c99abd75bdf605bdf46d793ef99b9
SHA512 7ed6d7c679ab5928427095beef9ae476e8bc57a5c81cb633bce1b646a896557b5b49112d489b2112ac2749e1adaf6b1a7544be36c570696fff80725352eac68a
TLSH
T1BC11CC5290BD5338C4D16953E04223E10E566CFCE4EE91366B8FC80D893EA5D9CCC621
MD5 SHA1 SHA512 TLSH

Submit Download

48.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1314346163\Icons\48.png
Size 1KB
SHA256 3fc8b8392989fb26381f0a14bb356cae5f998a4dde004c06a51e974034f9ccfa
MD5 b75ce0c6ffcbdcc1066a2e6c8c3aa5fc
SHA1 2ca49f0080b985a68692eee2582298a9353c7916
SHA512 a3ac3a8cb7de26b7e4fa126497dcc228462b04da9a99a0b4647c1d8f877131f6597af80c3d7e834b50938a6c1349ccb14e9e0dd0b06673fa789d78e3e499bf7d
TLSH
T15C2196C3239DF6E5E54D50A745CF1B12F7BF375829B4A058A08E42C502B77C192CA534
MD5 SHA1 SHA512 TLSH

Submit Download

64.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1314346163\Icons\64.png
Size 1KB
SHA256 f6ff978b0f4c0d28e96b27b6242565480a73615b03a4b95640f8d20136fc2a91
MD5 518326c327ce412aff2d0f63700b372e
SHA1 24b69d3fb978c36bd349b516cbb5720addcac515
SHA512 fa4c22a9c51cb75ef04984ac10ee068fc9d262b7cc2f969f537784bd71240359cb3c34d9789b043f43e7109e7028b17da50074cba2b8759ea31e5ef2898b0707
TLSH
T16E21E79532856E7C8FA21F4BE0642A1DF2761D0423258DA603B12CF10CE040829AD2A1
MD5 SHA1 SHA512 TLSH

Submit Download

96.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1314346163\Icons\96.png
Size 1KB
SHA256 84a6d2571ed487aec05288f204c16ef239a740d2dfb105bf781c6708b938cf00
MD5 f674dfc82d3ab385e234cc05c89081b3
SHA1 dbdeda809b10a5df7da5b2a2dd12acdb7dc7d427
SHA512 56ad6146a5bd339fdcbd4d66cdfa8144c1eccc7db57a4f790e536fc97291ebd6b13dc5bc6b12c114e72054f87f3372e1cd0c4d6f11eec998e7d3fab008613046
TLSH
T1FE31DA5B19CA9ED15BCC933BE32401336A28845C4F1115890CD6B0AA59D5DB5F63C2BB
MD5 SHA1 SHA512 TLSH

Submit Download

192.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1446786415\Icons\192.png
Size 2KB
SHA256 e401220b69a76a298b2e081a5424af69791a4caa3936af85d8862c05f4ced4a8
MD5 e063d7ac57fed2391e778c3a5817bfed
SHA1 3fddfdcf2917af9ce0e86eddb03725d4a3cdd7cc
SHA512 0de76ca2917cb2162d73a3d61d83dab2795ef1e9ca0f057091cef9eb79c0064dcd13c4749521163e6f77dfe43e0afa68326a32b7c19d8524da509dfbf4f1cb7b
TLSH
T11651060A0759BDB22A31C07991B8D9E7DE0C1003A5BBDD7E19954FF0A913CE43B23681
MD5 SHA1 SHA512 TLSH

Submit Download

256.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1446786415\Icons\256.png
Size 12KB
SHA256 6e8f581f4cee7f8f8af4a9e1059f0d3088b792de7045067d74254e2a6f1f9a6b
MD5 493ff5acf7b11c3f1147a8d9e25e7751
SHA1 6009b5d4c6cf66b4dea48b5c558fb9dfee261c4b
SHA512 684256b0a9d8169eb1c177068c0c04518dc1c1a6c2554c32beedcaf0bb4429902319ecb32d8c97671ba361de6e10e9275e8ef778f61934f38538f35b60a963bb
SSDEEP 192:Hlx0S8vKsNbVmc/vC0+e9JaSyw2X4RTv+ovsCF3vKY8XejYHvhX2kol0f993M:T0vdNbQ72iNXX6rsCFyYAZkh8LM
TLSH
T19A42BFA1B310ED73E30AEF2045FE64B0516C82217FE4A507D331D85ABF0FC9998A95A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1446786415\Icons\32.png
Size 1KB
SHA256 ccefdc2d816137b5954b591e8954c392e0cf27388fef2e437991e3999d9ad3d8
MD5 efa437b6fe5031994d5917a91c19990f
SHA1 d46a1115227ead4e92346b600c28e9ac72cce96f
SHA512 ab52261f15a3f21728b41b4765da5ec6c9e71051b720204ee2decf6f09ac8a0c9a5c12313d921f232f1e698a7425d34415eca8db21a37f423535806bcdf238bb
TLSH
T1F3310AC7644047BA52EDDAF37F6B0C57DC12210107D4A440599F56E17FEEEC86015478
MD5 SHA1 SHA512 TLSH

Submit Download

48.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1446786415\Icons\48.png
Size 2KB
SHA256 bff87e21fa845d8ce3c266db6d904e9c7a3bf9fc2b95a1f1a5ca375f3fdb045a
MD5 097f67b0d583db3f8487ac27379c7eae
SHA1 18acf62fb9bc4e95899c4597cd72de66b6bef763
SHA512 0b6b323fa14e5b0dd6bb87fce791bbd0b7a867988d8332385ba76a35d93d4dd5b67f6be9be5a69fbdcd5da68c30bc840712daa83b9a0187b727d963dc9a9a045
TLSH
T15E514C54BEF34CB2EBC67C7254E65BF5A564C1E62D407A0C86B9CA1245BDD410CCD003
MD5 SHA1 SHA512 TLSH

Submit Download

64.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1446786415\Icons\64.png
Size 3KB
SHA256 abe4eaa1a6fa423bcef61b423dc72386a9cf1968b1041de5270c56a7780254ad
MD5 8e589c60e0ba95ca1b178bad0a8298db
SHA1 d981cd3f9eb63636471e3bd4c0fd7585460ad6fd
SHA512 e8c7b5d340e698f3b1b42d6c3b7653b666e0add095611c00f502782928eb788070ca977b54b42f9515127861e55138a3cc0f02540f0bc2e44694fb0ea595ee34
TLSH
T196517D1B4B8AC56A0E53770E02E57ED454996C569EF383CC2106E7C0081A99F43EBBE7
MD5 SHA1 SHA512 TLSH

Submit Download

96.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1446786415\Icons\96.png
Size 3KB
SHA256 00f563fcf365eb53a4037624ab3783dd6e19d2c6689c9892aa30ad2b16577848
MD5 43400a5061af952e87a0e06e1062b272
SHA1 5b937e80e93bb5f526a964e2a28aa9579e8dccb6
SHA512 8f3f25039af799f055ea81a2008530562b4b24e8afd65b65566b6dd0cdcc66f3735bf0428bb3c4eaf7079ce15499de3846bcdfc1db0707db50e9f3bc2c5e7d6d
TLSH
T14F819F6325E9E9CAAA5ED62071224074845F04EF59313775F07C18BB13CA56DFD70E26
MD5 SHA1 SHA512 TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1831308341\Icons\128.png
Size 3KB
SHA256 e8a4d1e6103287bd80fa5bad0418a550fcda7dc7418e9a2f5b7a8e2cd51ec1d5
MD5 a83d5efcf80aa139c0169d0f5d69d666
SHA1 3573f8df83938438e0c2cad323afff5b939ba848
SHA512 fbcef81e79cb809587e7181ba8ea82dee68c26f457a6a7d8830fd3cf83a0c943198217c7679fd7dfcdbc6b3afdb46e90702ad415ebb661054a57e1f2d4911b38
TLSH
T10A614A69249E6E05DD286210F4DAD04F8BC1632AFE361946945C302FF50F164E8CB28E
MD5 SHA1 SHA512 TLSH

Submit Download

192.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1831308341\Icons\192.png
Size 1KB
SHA256 434382805003287179ce1ced4422245ee09a7ccacbf5920758078614ccd9689a
MD5 0673eec5ec980b9e6b99763a67adfff9
SHA1 029efa7f3af935f5e63461f9d2f50eec3e2dcb25
SHA512 a84e80c0a48fc24f2912fc9e548cc32f03714703251d9fae7affc04d54a54470689cd027aaedd2beb1fe2cce3f27d83845cb87ebab77946ebc2fa870334810bc
TLSH
T1DB3176FEB7ABFC62A498B1BDD80080584945761B3EBA4FDFE236CBAF31587804405498
MD5 SHA1 SHA512 TLSH

Submit Download

256.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1831308341\Icons\256.png
Size 6KB
SHA256 e207a2f9646cce24336294ad74beb9813c42f1ebf8ad6bee7ac6fedaa617ddf9
MD5 0716e7551ac5f7e19c5f46022f995e17
SHA1 bb69866fa17f395500737baef6b3904bb5d1ddba
SHA512 b4bf2a38a5c8c4e12428f0a9225cab0cd01bea2e83244ae252a8ba6123fb7a215f0be170697bb0aca5e4ccaf92c4246452caa1fd15ba9bee304e64ef80dfccc6
SSDEEP 192:XyrswpHURW+QMx50XIZgtyJ9Kaxt6f7E5:CNC5VeoIaxts8
TLSH
T1BED17EA3FB622AFFF37CAEE315CD459479510C20257301A3A0745B065A56792CFB8CD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1831308341\Icons\32.png
Size 1KB
SHA256 06c00fa3cb29713aa4317b352fc1e1e035c0c7720a42f107cf758fbb21eaed0c
MD5 247675501d3cf1f7987fe8e20dc4a994
SHA1 c0630fbc0c9c7c2aec627667b21b5b9add1d7925
SHA512 6b6f5e0feb15ecde82191178df36fcf9cebb762289116b88a466ab31152d6f8e769e97252e3a41f7f538867920866ce12bd60c9c87fbb5019783de0c5158bfd8
TLSH
T1C721DB9786803C5AE71F76BD5402AE9BF92060197254970E1A560A15C93C5D3FD873A0
MD5 SHA1 SHA512 TLSH

Submit Download

48.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1831308341\Icons\48.png
Size 1KB
SHA256 bebe7c8f23573efeedb8259fd9e866662dfad2c8e974d2715bb5aebdac870f6d
MD5 93f26885517b76f003062053ad718275
SHA1 eb97bbd3de38ad8efd87e112ad76d6a6d78ffda9
SHA512 34f8a81113a9ca950a07c5f5c3511e3f11f8f9e9a2a1040872015064e2146154d4eb31b33d8ee291434535881f82685c0e90c52e76ea731ecafde73771595520
TLSH
T10031F95284AF0C128406F5E5CD57910B7F37ACBA9AC2A589023B7E7A105824D7B6C449
MD5 SHA1 SHA512 TLSH

Submit Download

64.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1831308341\Icons\64.png
Size 2KB
SHA256 f5fcedc00655f8a9b63b379feb04ef904a64328e9ef79e7a411de5139d398ebe
MD5 18b13f82a338cf91ce3ec3ad9702622f
SHA1 403a48626de0cb33ddea61e6de7c895eb7482bca
SHA512 08a6fac277ffdbbc18c5166032b426e7d8a7856f7dd03ab01938000b28a869d80476017164a6728643ae8908616c574fddd8fabf946bd66b841ef13f5906969b
TLSH
T1F7413AD73E887CDDACB22A746A6175C1F0E846B24687DF44E60D6918CF61C43001638C
MD5 SHA1 SHA512 TLSH

Submit Download

96.png

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\Web Applications\Temp\scoped_dir3396_1831308341\Icons\96.png
Size 2KB
SHA256 03d15ce246e276c1c2b6dd066cdda74bda3c79b61e5b9e18825d144d9c64c6fe
MD5 b8e4f4de8cd4cc705b04d2b97c7e37d6
SHA1 e9d054abac98c20c760aa8bff73631a6b2456de9
SHA512 98c97cf4ab19d45e598833d796db86af4ea1506951646e0dc177643b47a5794c64e627713df28dfced05809860b32377637a3130acede6b8dea14ffb8929f690
TLSH
T142514AB98DC8A21CC81B0934C49EAEA4807AD12693E61C3E9BB4E87F0540532F7C3D5A
MD5 SHA1 SHA512 TLSH

Submit Download

a2e035cb-af62-4293-9fe4-a1b37616f4a8.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Default\a2e035cb-af62-4293-9fe4-a1b37616f4a8.tmp
Size 9KB
SHA256 86e19863ab704870f2b43b1315daa5a6927b71c2f71bb5cf9b910eb6881f2319
MD5 d7ef0c1a796684d11f7884deb520c65b
SHA1 3fa9c15925f10d8ea3d02cefa6bffc656433202e
SHA512 6775a316eae526acb1b45ef6cb366b9917980c68059231b714540b0e13f2dc2fe8f01b814becdb782cda86273e438e816843eb78370e335e70cf303a4e0ee264
SSDEEP 192:zRYjR9Wg5v7tAPRp2HzXsb+WN45EiyIsnAUgE:zRYjRAgZcX4Xw4jE
TLSH
T1AE12A42DAC64A97B6CC7E31AF9657B42E6F5202130902D44EBFCC92C19DB6CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\Local State
Size 1KB
SHA256 40e0d71b1d544aa156fde4148aa2da19951427428b3ab98938591fd48332e9c5
MD5 24232074f1a26b81688be5aa737d2b23
SHA1 85d2250cc525708730c06a311d888f90df3d92e1
SHA512 f9c1254d1b4633074089c25ca4bb71ee21f3c5a941795c0e5a2fc078572ac39127efe3c99a10171e2ea0df2e30adb6486f2006a04805472a72fffca470505d24
TLSH
T1041172756C3879255A718A1BBAC6AACF1F70022BD0658F4D6BD93200063B7B83516D30
MD5 SHA1 SHA512 TLSH

Submit Download

b96a8c72-b2cc-459c-859d-61eea8061d22.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\b96a8c72-b2cc-459c-859d-61eea8061d22.tmp
Size 144KB
SHA256 997d89c3225237e07993bab96cf05755d8a340e24b9e13066a44965844782f10
MD5 e02af70d4c7fb97c3753c6e257dc0e65
SHA1 524042640614b6150437b14986f17a74916e4368
SHA512 eaaaae3546167240840a46df5500fe6ba88f8f9e6d1036388fb4113d7da9c7b55c61e2da8b2933a4deede8b39ad0297937029dacc97c7a1d2b2a80bfd0339875
SSDEEP 3072:TxwqX7DTfpyc9Mtpus0QZWxS71NPgNYluFVdl0Ep9tmwl:TX7DTEmMyUAS71N4NZrQEpnmC
TLSH
T163E312527FF9BC06A13D4C5CF0EE720D0D610391A4A98777F9C1434763A39C5B25AA1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6c14315-d095-4de9-a31c-61ad11e6b33a.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\e6c14315-d095-4de9-a31c-61ad11e6b33a.tmp
Size 146KB
SHA256 e4fb43d3219a29efb8ac3e8110d5be0f57feaa5ecdfd5a84324ecc0d50fa54fd
MD5 2dfe16b50b1749eac7e0f4d67d98163f
SHA1 ebab0b53b3f5c25b45f219a548e846363cd70781
SHA512 85a18a4ebbe8b7c468d499f9368cc309385bddbdfa0ec98106fafb4c19b3394967c3b2d61f586d5480283d5907ff326503e5a8b12a7ce4e71dbfe19567c5cd00
SSDEEP 3072:M6xwqX7DTfpyc9Mtpus0QZWxS71NPgNYluFVdl0Ep9tmwl:M6X7DTEmMyUAS71N4NZrQEpnmC
TLSH
T1CCE312727FF5BC02613D5C5CF0AE720E0DA50397A8A8872AF9C1470752A79C5B25AE1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bde2015e-3be0-4cc7-bfc8-c1a8158576d3.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\extensions_crx_cache\bde2015e-3be0-4cc7-bfc8-c1a8158576d3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f7cebf0b-5dbd-4a25-9b5d-ed19a86de573.tmp

Path C:\Users\Admin\AppData\Local\Temp\外贸单证与装柜系统\userdata\f7cebf0b-5dbd-4a25-9b5d-ed19a86de573.tmp
Size 145KB
SHA256 7497a00c32a6744f4c2aea4670a13e21550d587b85569f87a238c6346538c140
MD5 300ed4f0f36e99a8a0062006df6bcb20
SHA1 fb7609499616df0e53435d64ad1701f8cb87d34b
SHA512 889b611c4c6c4c612ad2eb89f61b83b2ca353d8ba6d38eee7b9dfdf0a6836af8108661039a9bfa127543d3b120f44cb9e0eba7e2e6c0af157242ebeef2cad84f
SSDEEP 3072:WwxwqX7DTfpyc9Mtpus0QZWxS71NPgNYluFVdl0Ep9tmwl:WwX7DTEmMyUAS71N4NZrQEpnmC
TLSH
T13BE312727FF4BC06613D5C4CF0EE72090DA54397A8A8C72AF9C1470752A79C5B25AE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3748-0-0x00007FF6F1EA0000-0x00007FF6F1EE4000-memory.dmp

Download