Play interactive tour

Edit tour

Analysis Report https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html

Overview

General Information

Sample URL:	https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html
Analysis ID:	433184
Infos:
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish7

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6760 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html' MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 7008 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1548,17066045450230554925,12969004561117471689,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1756 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus / Scanner detection for submitted sample

Show sources

Source: https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html

SlashNext: detection malicious, Label: Fake Login Page type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Show sources

Source: smtpro101.com

Virustotal: Detection: 5%

Perma Link

Phishing:

Phishing site detected (based on favicon image match)

Show sources

Source: https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html

Matcher: Template: onedrive matched with high similarity

Yara detected HtmlPhish7

Show sources

Source: Yara match

File source: 76766.pages.csv, type: HTML

Source: unknown	HTTPS traffic detected: 172.67.194.129:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.194.129:443 -> 192.168.2.4:49759 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud

Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v2?s=WgkK74zAsYgn0ikBitP2OgZwHHWZppespt61o2KelwjuCBOEEWQbvU3zF9w
Source: manifest.json0.0.dr, fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://accounts.google.com
Source: d34a7ddafe08574e_0.0.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
Source: manifest.json0.0.dr, fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://apis.google.com
Source: d34a7ddafe08574e_0.0.dr	String found in binary or memory: https://appdomain.cloud/W
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: manifest.json0.0.dr	String found in binary or memory: https://content.googleapis.com
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external
Source: c5d7b48d-775d-45b2-aad0-ba077f073956.tmp.1.dr, 1860bc56-ebc4-4c83-bf7e-d48ef1d210a8.tmp.1.dr, fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://dns.google
Source: manifest.json0.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: manifest.json0.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: Current Session.0.dr, Favicons.0.dr	String found in binary or memory: https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html
Source: History Provider Cache.0.dr	String found in binary or memory: https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html2
Source: History.0.dr	String found in binary or memory: https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.htmlDocument
Source: History.0.dr	String found in binary or memory: https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.htmlDocument/#
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: Favicons.0.dr	String found in binary or memory: https://p.sfx.ms/images/favicon.ico
Source: manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://play.google.com
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://r5---sn-h0jeln7l.gvt1.com
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://redirector.gvt1.com
Source: manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: manifest.json0.0.dr, fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.google.com;
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://www.gstatic.com;

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 172.67.194.129:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.194.129:443 -> 192.168.2.4:49759 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@28/165@6/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-60C33A54-1A68.pma

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\fcee178f-1175-4cd9-9861-d4896a6f469c.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1548,17066045450230554925,12969004561117471689,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1756 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1548,17066045450230554925,12969004561117471689,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1756 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html	0%	Avira URL Cloud	safe
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
smtpro101.com	6%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://dns.google	0%	URL Reputation	safe
https://dns.google	0%	URL Reputation	safe
https://dns.google	0%	URL Reputation	safe
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.htmlDocument	0%	Avira URL Cloud	safe
https://appdomain.cloud/W	0%	Avira URL Cloud	safe
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html2	0%	Avira URL Cloud	safe
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.htmlDocument/#	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
smtpro101.com	172.67.194.129	true	true	6%, Virustotal, Browse	unknown
s3.eu-de.cloud-object-storage.appdomain.cloud	158.177.118.97	true	false		unknown
googlehosted.l.googleusercontent.com	142.250.180.225	true	false		high
clients2.googleusercontent.com	unknown	unknown	false		high
jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud	unknown	unknown	false		unknown
p.sfx.ms	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v2?s=WgkK74zAsYgn0ikBitP2OgZwHHWZppespt61o2KelwjuCBOEEWQbvU3zF9w	Reporting and NEL.1.dr	false		high
https://dns.google	c5d7b48d-775d-45b2-aad0-ba077f073956.tmp.1.dr, 1860bc56-ebc4-4c83-bf7e-d48ef1d210a8.tmp.1.dr, fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://p.sfx.ms/images/favicon.ico	Favicons.0.dr	false		high
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html	Current Session.0.dr, Favicons.0.dr	true		unknown
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.htmlDocument	History.0.dr	true	Avira URL Cloud: safe	unknown
https://clients2.googleusercontent.com	fb36ddf4-9218-41a4-9778-19476656abb7.tmp.1.dr	false		high
https://appdomain.cloud/W	d34a7ddafe08574e_0.0.dr	false	Avira URL Cloud: safe	unknown
https://feedback.googleusercontent.com	manifest.json0.0.dr	false		high
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html2	History Provider Cache.0.dr	true	Avira URL Cloud: safe	unknown
https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.htmlDocument/#	History.0.dr	true	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.180.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
158.177.118.97	s3.eu-de.cloud-object-storage.appdomain.cloud	United States	36351	SOFTLAYERUS	false
172.67.194.129	smtpro101.com	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	433184
Start date:	11.06.2021
Start time:	12:25:41
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@28/165@6/6
Cookbook Comments:	Adjust boot time Enable AMSI
Warnings:	Show All Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, backgroundTaskHost.exe, svchost.exe TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 52.147.198.201, 92.122.145.220, 13.88.21.125, 104.43.193.48, 172.217.19.109, 142.250.180.238, 172.217.16.110, 172.217.20.10, 95.168.222.145, 142.250.180.202, 172.217.18.67, 142.250.180.195, 13.81.118.91, 172.217.18.74, 172.217.19.106, 142.250.180.234, 142.250.201.202, 216.58.214.202, 216.58.214.234, 172.217.16.106, 20.82.210.154, 104.42.151.234, 2.20.142.209, 2.20.142.210 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, odwebp.trafficmanager.net, au.download.windowsupdate.com.edgesuite.net, store-images.s-microsoft.com-c.edgekey.net, clientservices.googleapis.com, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, arc.msn.com, e12564.dspb.akamaiedge.net, clients2.google.com, r6---sn-n02xgoxufvg3-2gbs.gvt1.com, redirector.gvt1.com, audownload.windowsupdate.nsatc.net, arc.trafficmanager.net, watson.telemetry.microsoft.com, au-bg-shim.trafficmanager.net, r6.sn-n02xgoxufvg3-2gbs.gvt1.com, westeurope0-odwebp.cloudapp.net, fonts.googleapis.com, accounts.google.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, a767.dscg3.akamai.net, www.googleapis.com, skypedataprdcolcus15.cloudapp.net, skypedataprdcoleus16.cloudapp.net, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, clients.l.google.com, skypedataprdcolwus15.cloudapp.net, skypedataprdcolwus16.cloudapp.net Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtOpenFile calls found. Report size getting too big, too many NtQueryVolumeInformationFile calls found. Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Google\Chrome\User Data\310f8e55-a745-4f57-9bd6-1f788dd2077e.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	172529
Entropy (8bit):	6.080256988345605
Encrypted:	false
SSDEEP:	3072:vm+dLgVDqfsAtDzQFU36fdYPL8JPCFcbXafIB0u1GOJmA3iuRi:O+gIRXv6fWPL8VoaqfIlUOoSiuRi
MD5:	61E0C5BDA95138DA4B027C7B23E765A6
SHA1:	D012356A464EF49F497D0A64F21A46E030BB9505
SHA-256:	370A1F18C1FED6240648DAA8D2358749BD86E9F8DA7540B51DF1063093D0B6C7
SHA-512:	D6320105887F2F2F649FE34C1DA8B89EB99BBDB6309A60D1AA6025988C77F3777E2322AE2D594DF38F7E7FD750ADE07B9E9AB95D980D941F9EF38CCC5C0C3644
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en-GB"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.623407191759635e+12,"network":1.623407193e+12,"ticks":303195175.0,"uncertainty":4705458.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABaHlwIoHYlQKZwuwW8V0yxAAAAAAIAAAAAABBmAAAAAQAAIAAAAOT4j8Zm9U1zXX6oEUpPqIYBIjSlOiLGeiMKiIFJZDroAAAAAA6AAAAAAgAAIAAAAFW1OavBhyV7qwszPZbindD+KU2Osh5O7HSmDPpFnuCDMAAAAGEkmqbufgFUSmOzx4cW7Aup7spqps4DvqbPrwRgUGqSpRZvQkbO+yVH56WF9zMTt0AAAAAyRwtYxjf7/AqYrFr0JZ6kbTiUt0/2PKkCw7ntLtbN2qrad7I3MeL4iNGDFgqRlhWgsb/6w0gJzQxAfL6rdzxi"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245922715401452"},"plugins":{"metadata":{"adobe-flash-player":{"d

C:\Users\user\AppData\Local\Google\Chrome\User Data\35b57700-8526-4414-a35b-b05d9cdfbc47.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	92724
Entropy (8bit):	3.7521563659360915
Encrypted:	false
SSDEEP:	384:freBxvkK3bENgN1rmv5D36dvyHjSGGprE3h5xazn3WrEVmEH0Td5teO33BNU11sK:OyNdWDGKoeL9vDkfLKXKVrRFW
MD5:	B73B685E2E6576A5816AC66554E976B9
SHA1:	9B51BEB39EAAF65D7217F3A85AA103296988B026
SHA-256:	AA4479BDD66917D805A3AAEBEE33DEBBDE7D0D4D789944FBC42E84104A0AA844
SHA-512:	47D917E32A2CEAB3BCAB375E229937DA1A7C80034E886C1A10E7CC38619B31FF0957EA7C8A834F8FC0638AC054A2277EE5B807EA0808EA7137B484321E7D85EF
Malicious:	false
Reputation:	low
Preview:	0j.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....<8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.3041625260016576
Encrypted:	false
SSDEEP:	3:FkXwgs0oRL6twgs0oRL6twgs0oRLn:+taRL+taRL+taRLn
MD5:	E6C1693D9F0F6B6E878D098FBFD4C92A
SHA1:	D9D2708143B4A3BA5D14DFED59DCB6B88DF172D9
SHA-256:	E9DA6B8F6549D084D8740EB4C25755989B057EBF4F36B5E526F34DFFAB7500CF
SHA-512:	19B28BFE66708B294AB033C2F87D219E1C29D4F9363AC92E89B9406F6E2ACB13AD5DF73DD7E163D1ADEC0AF89C42DA112AE153EB23378EC29302F91192B7C5A9
Malicious:	false
Reputation:	low
Preview:	sdPC.....................UO..E.D.Q.o....sdPC.....................UO..E.D.Q.o....sdPC.....................UO..E.D.Q.o....

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0068f1a7-0354-4194-8404-f93cc064ce49.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	modified
Size (bytes):	22602
Entropy (8bit):	5.536703667239117
Encrypted:	false
SSDEEP:	384:UEHtHLlUh1Xi1kXqKf/pUZNCgVLH2HfD2rUtHGVnZDZm4G:BLlkRi1kXqKf/pUZNCgVLH2HfyrURGVc
MD5:	6A93CED2F607AD8ACD36A0F81C141794
SHA1:	7AEBBA7359F9A34E81859C44DBDB07CA3BD63373
SHA-256:	8C1238A4B330CB1F72282E62F799A5803D0327C65E3CC01108B032B5FB7DC511
SHA-512:	3D4AE1DE6787FFE44419355300A4B505F4D875B51AFB4E21B8760158B7AE94FB51E3EAAB7CB84290D4E487DB5BED6B78E2F582B1F41A68405B1D651E976EDBBA
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13267880788581669","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\12215608-72f2-406b-9e47-74a2d07c9d85.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	16745
Entropy (8bit):	5.577956863612946
Encrypted:	false
SSDEEP:	384:UEHtGLlUh1Xi1kXqKf/pUZNCgVLH2HfD2rUGPm4XY:ALlkRi1kXqKf/pUZNCgVLH2HfyrUqmX
MD5:	4AF4CA14403429BA0AC76A327AD709EF
SHA1:	EEEFB76BD1BB1F89F40495E451E08887A1458F26
SHA-256:	60BB74C8000FC165D8927DAB8136F8FE7F315C41FD6CCEC4044BA235C383D396
SHA-512:	5843510432E36BF61B5A8EC3B6BBFDB672281A14E36419E7EDB8CA2D8094765A3121AB4CCC5CF319C792651BF51AADB4F3D266320436C476FB2343B02A2B98A5
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13267880788581669","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\752330af-0bf6-4d17-93cf-74841f7d9e2e.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1040
Entropy (8bit):	5.561876601648923
Encrypted:	false
SSDEEP:	24:Ym6H0UhsStG1KUyc7Zzkq/HeUe8zUei7wUycCsRUeiQ:Ym6UUhwKU/7OqPeUekUeMwU/CQUeP
MD5:	141FD21B03F1AF3419DEFB004103FDEB
SHA1:	B9211ECE475DF06D123B091E482A01A19E9FEB08
SHA-256:	0CC51C8173F6DD541B407FD0E44A67F8F78C759C6B009CFAC783223F910575D4
SHA-512:	5C7A10402C4E2102CD7388A03F132D1953E5957EE3458C76C67E4183A9A38DCCFE2ED63C11A1102642ED550B5F4DBF14040CA88B0A12F8C3D19B61419E84A87F
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1632986995.029294,"host":"OuKlWsMW1dkkbI1X/oi6o0Y95ZNSWnSoeaIXAEYPlv4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1601450995.029298},{"expiry":1654943192.932197,"host":"nAuqgR4iEWti7SOdT3UHPl6rmZU/DeaIm38P2O2OkgA=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1623407192.932201},{"expiry":1632987007.31909,"host":"0J7rAWV0ouCFYJ9XrkDiKnAO1SshXJmLJE1SS3V8kDM=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1601451007.319093},{"expiry":1632987013.78633,"host":"5EdUoB7YUY9zZV+2DkgVXgho8WUvp+D+6KpeUOhNQIM=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1601451013.786337},{"expiry":1654943192.19233,"host":"8/RrMmQlCD2Gsp14wUCE1P8r7B2C5+yE0+g79IPyRsc=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1623407192.192333},{"expiry":1632986995.164829,"host":"+ccWXqaoHJ9hfuXbleKV6FQUrBlyXAJ31BdqjNQJpHs=","mode":"force-https","sts_include_subdomains":false,"sts_ob

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\876e4b0d-3196-4dab-bfdc-13040ac470d2.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5780
Entropy (8bit):	5.185881672018952
Encrypted:	false
SSDEEP:	96:nUL6f2RBPCo4vIVT5k0JCKL8hokc1dbOTlVuHn:nULU2RtavIhh4KCokcx
MD5:	E1172D4B69DFBA80987229BD84FBB6F9
SHA1:	9642F9C20C2D2325C1C55267E13BCA24545D4717
SHA-256:	BF16139DC27FBD1194BA8232216C70D0992DFC647FB0DED545FE674B07CE70C9
SHA-512:	DB06AEAA8C478FAD71D9DE6E200512DF9A80C56AC2672F9073787C1BDA5837EFFE3D87D41A9D3A4028D761CC2FE619B3B39171BC61C9C879B5615A434BFFC1D8
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13267880788874869","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245924509391818","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"bookmark_bar":{"show_on_all_tabs":false},"browser":{"default_browser_infobar_last_declined":"13245924607060180","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","2042016"],"daily_recei

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9fd1167a-0aa3-42a8-936c-e8c32be92da5.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	22601
Entropy (8bit):	5.536784275680204
Encrypted:	false
SSDEEP:	384:UEHtHLlUh1Xi1kXqKf/pUZNCgVLH2HfD2rUtHGOnZDcm47:BLlkRi1kXqKf/pUZNCgVLH2HfyrURGOC
MD5:	9701BFF4BF12A4F09CAF869698386001
SHA1:	9D65272487E933082B7B3D379CA8A3B1AFDECBC4
SHA-256:	6D352B051A742BB0E3F4C20F11FF00318C4A24C2707244C447957AB1BA5E87ED
SHA-512:	63BC23487CBE6D41D7E59B2E28301BE41E999499A35A62B2614FD1E931562E5D9EA0F2BBDF98086A5E5A08E63712608A0210045154D6205786426974277717C5
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13267880788581669","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.248299511522719
Encrypted:	false
SSDEEP:	6:mwEp9+q2Pwkn23iKKdK9RXXTZIFUtpDE/JZmwPDEwX9VkwOwkn23iKKdK9RXX5LJ:nvYf5Kk7XT2FUtp0/P/T5Jf5Kk7XVJ
MD5:	861032536FEABE40D65797FD1DF86A48
SHA1:	6A52B849228073E715F2E7BC98B588E5355C979F
SHA-256:	30A2AF4AE2CDADE23BCA5ECE0F695733B990F0069384968FFABEAB46226A9293
SHA-512:	6FFA10E23292BAC5AB248F9797BD51988E9F188A8B6D2AF1E69AE5A322481A5B4D802F809922A7E9F8ADF6DF6B9B99510AD95EC1286272CF9F1B3E7B24B5F955
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:39.573 1b08 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/MANIFEST-000001.2021/06/11-12:26:39.575 1b08 Recovering log #3.2021/06/11-12:26:39.576 1b08 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	318
Entropy (8bit):	5.232078134930225
Encrypted:	false
SSDEEP:	6:mwEsX9+q2Pwkn23iKKdKyDZIFUtpDEyyJZmwPDEpE9VkwOwkn23iKKdKyJLJ:wvYf5Kk02FUtppM/PX5Jf5KkWJ
MD5:	B8EE77EE3EDEB7342B7960A11F956D5A
SHA1:	02E709D9FFD74CFE06243D3E7DB80D78495AE31D
SHA-256:	0E00DFC7DDE6833F303E4FD36A3D84215B20BBA07B2C8D0402A876EFEC6DCDF4
SHA-512:	ECCD5CD185EFAE9A543B01630B001F4F7C27BE223D3D6FFC1B040C9933542F4A8618BB43C5B098071FE2EC2A95A017396E9DBD1479620EF6698269F8AF826484
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:39.558 1b08 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/MANIFEST-000001.2021/06/11-12:26:39.564 1b08 Recovering log #3.2021/06/11-12:26:39.565 1b08 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d34a7ddafe08574e_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.534039731593734
Encrypted:	false
SSDEEP:	3:m+l8xml08RzYRhmHT8NWQA7sxdFvDL85Ka1tc/KvlltlPDhDkcywQPENfx44meNZ:m8VYSHT8NWQAgdSCKH/loFEAePbK6t
MD5:	56421434B99AF3EEF2EDC2598038833A
SHA1:	F6D7593CFFC13D580A268E022887FEEB89B4E4A1
SHA-256:	778F153B792AAED3A45A13F7F5A0E9934EBC7B9090E67B3A1E390FC522189D30
SHA-512:	689D166C1A21F362CB289EFCA1C94FF4F9D3E5F0C7DE96B759337E6124F346D2C7866984FD55333369098F94613C58C234D6C6ABD2230700AA972A3BAEC93E69
Malicious:	false
Reputation:	low
Preview:	0\r..m......^...b. i...._keyhttps://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js .https://appdomain.cloud/W..9.#/.............S........C.c. ..G...I.Fh.B..3Z.0.....=@..A..Eo......B............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	4.805892454227861
Encrypted:	false
SSDEEP:	3:NOQR0/LlHlmt+2lq09/R9Iptlll5/lOptlllKL8ftlll0l0qxzUsR8ftlllwAfvK:NNrtJA0FDcTxzPawAfyDn8e
MD5:	12C58A3A2872919E35B55864AD0916FD
SHA1:	CF0FFCEA480447E488FE01A312491DA1E9BBBF2D
SHA-256:	D06E0793226FE31C9B77A9A19FEDA72AE4823293E8076B78E6B912686C31175E
SHA-512:	DF1DB33F9CC9500F5D3CCB8B00A5972FD315385B98C4D897FCA8BEDBBFF9D6F28CF99343384199E44AD2816CBC1960C8F4982ABFCF0D5424A6D2BEBB18ED78C6
Malicious:	false
Reputation:	low
Preview:	....a\>+oy retne........................NW...}J.@.9.#/..........^}.Np....4&../..........-..0..x..4&../............/...3...&../.........I....uW....&../............Q.i....&../..........6,2.+.g...&../..........D....3...&../.........4T/f.C3....&../...........9.#/.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.6863571317626186
Encrypted:	false
SSDEEP:	12:TLyen4ufFdbXGwcFOaOndOtJRbGMNmt2SH/+eVpUHFxOUwae6:TLyqJLbXaFpEO5bNmISHn06Uwd
MD5:	1C0EAEEE6463CAE33B7A7CD9D9DF4DA5
SHA1:	FBC6A28A1501E40154FDC0A9D0C2F34A5F88AA65
SHA-256:	ED8AE7C5E6885874A39F4E86258F552670352A18D29BE1FF4D372A2F4CD06C8A
SHA-512:	355D19828609971998B09B36E7C7D304B7FB88C7A726670BEBF5CF2E2710F8E71B0F9DEF6FE9712B484C1EB122AEEEFDECF31D13E02C4539C399DFB86EC7619F
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................C....... ..g... .8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	12836
Entropy (8bit):	0.9738356494195884
Encrypted:	false
SSDEEP:	24:Ke9H6pf1H1oNJ0qLbJLbXaFpEO5bNmISHn06UwK8:KbfvoNiq5LLOpEO5J/Kn7Ut8
MD5:	438B7EDA8E01E110CD15B021CF3388B1
SHA1:	D97C916648ED60FEA74449868E441E3E2AED06ED
SHA-256:	7684E8215F64AC5AFEB429C41C42FBF6072BB486635E8885F4DDDE3513E09E8B
SHA-512:	65E2D4FD074BD0D922D68BAE701E0F9C8F521F31B8BBD4A921436F056E280E28E1632E3760BF4CD8F3BF3B24AE6E263BBFE152274418E36615E3CAF5AA3CB9FE
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1146
Entropy (8bit):	3.6702820498276045
Encrypted:	false
SSDEEP:	24:34SlahslJXlAngfKkmMlSLfjszgPngfKkm4lr:34cT6kmMgLrszykmor
MD5:	82EF7CBB7DC4DCD7A4C5AC5D3707661D
SHA1:	48C41ECFA8CECCFBF67D1D3AABB80E16E0AE1C02
SHA-256:	556BB803D60F1715804C04407670694EAC9BE8D13554378C7672168D01CB254C
SHA-512:	48E4E460AB01349668DE3DAF4130DD7D371A1D81050738E78C8B0B6059AB4434FB4E1BB0206C9F7A0F3737F1FA4DEF60647791711AC9F58765B9D7B0A789FE37
Malicious:	false
Reputation:	low
Preview:	SNSS....................................................!.............................................1..,.......$...82cd89d0_e34c_4753_acc5_19397c035413......................6........................................................5..0.......&...{730C75E3-B87A-4292-818B-DC8F984D08AE}.......................................................W...https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html.....................................................h.......`............................... ...........................z.......z...X.......p...................................W...h.t.t.p.s.:././.j.a.q.u.e.l.9.8.8...s.3...e.u.-.d.e...c.l.o.u.d.-.o.b.j.e.c.t.-.s.t.o.r.a.g.e...a.p.p.d.o.m.a.i.n...c.l.o.u.d./.h.o.l.i.s.t.i.c.a.l.l.y./.i.n.d.e.x...h.t.m.l...................................8.......0.......8....................................................................... .......................................................W...https://jaquel988.s3.eu-de.cloud

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	8
Entropy (8bit):	1.8112781244591325
Encrypted:	false
SSDEEP:	3:3Dtn:3h
MD5:	0686D6159557E1162D04C44240103333
SHA1:	053E9DB58E20A67D1E158E407094359BF61D0639
SHA-256:	3303D5EED881951B0BB52CF1C6BFA758770034D0120C197F9F7A3520B92A86FB
SHA-512:	884C0D3594390E2FC0AEAB05460F0783815170C4B57DB749B8AD9CD10741A5604B7A0F979465C4171AD9C14ED56359A4508B4DE58E794550599AAA261120976C
Malicious:	false
Reputation:	low
Preview:	SNSS....

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	164
Entropy (8bit):	4.391736045892206
Encrypted:	false
SSDEEP:	3:FQxlXayz/t2Hmwg0EOZL7Ao4uhFkEuRLKyC5Ei5+Gg:qT5z/t2qoEwhXeLKB
MD5:	0A906A9A542CDF08FF50DAAF1D1E596E
SHA1:	B97D6274196F40874A368C265799F5FA78C52893
SHA-256:	EB9CABBF5FDA1AD535300B0110EAA4068A083248BA928A631C9278545935426D
SHA-512:	8795E905B711ADE6B1C4B402D50AF491B64D157AA738669482DDBFC30E857DF970BFFB774A925F3F4A0802BD27AFAF939CE140894FF09B67FB9C0BB83ED4491A
Malicious:	false
Reputation:	low
Preview:	.f.5................i.Wd...............Sgdaefkejpgkiemlaofpalmlakkmbjdnl.declarative_rules.declarativeContent.onPageChanged.[]..F..................F................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.201500142057556
Encrypted:	false
SSDEEP:	6:mwEQyq2Pwkn23iKKdK8aPrqIFUtpDEy11ZmwPDEyjRkwOwkn23iKKdK8amLJ:wvYf5KkL3FUtp11/PF5Jf5KkQJ
MD5:	4F13E5CCA8CCC622192319CE3FB9AC8A
SHA1:	F697D608790F6C4B685F7FC6434DDE0273C88A6B
SHA-256:	089E361C6DEA39FBE85F73B039B33FF5CC8B3F4FDDAF2A844DDDFE205A65D8CE
SHA-512:	41A8F69BF249A331880FFCBE81A2ED22F1B494BF094C60C73A7099634084AFA73D27F9B58E8DAB7C93BBB306C06C8834DF9731ED59E4C61E08D609469FEB3A0E
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:28.911 1b34 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules/MANIFEST-000001.2021/06/11-12:26:28.913 1b34 Recovering log #3.2021/06/11-12:26:28.913 1b34 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	570
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWW
MD5:	D4BA0AE0BB0B9FAFF3DA6F35FDBC3C8A
SHA1:	FB3E9DEC7F35A9B1D94E54A5659DD0DE484055E7
SHA-256:	99DEF1B557F19F04C1AFFC6F247D0451F33FC10EC42E73792223C3215AC98BE6
SHA-512:	86FD07C34B9ABD4C52BA19EAE291936F92BC6D38A75C021EDC1DEDBC15617669876180CD99F959C62476D82EC6BB9F5FE4C6CB4D82CB037EFB76D99A4D3D9C51
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.146795881879609
Encrypted:	false
SSDEEP:	6:mwET7yq2Pwkn23iKKdK8NIFUtpDET11ZmwPDETUtRkwOwkn23iKKdK8+eLJ:eGvYf5KkpFUtp01/Prr5Jf5KkqJ
MD5:	456002BEE4B9B5FAA5E32BA0F9B36A07
SHA1:	DCEAA58E7CAB824CB712A04545F5D83A9753AF10
SHA-256:	DA3FB7E7B870A5E30E6B0B61D7E6147C9DF2B08239A39555BE92803DE4F7B363
SHA-512:	5D66477F06AFC3745F1AAD772EDA678A7DBE82C3EA78442E73941DD60985F225D2F60ACD22BBEB6AC28CCC9C5817685EBA290A13F716156A04A6B5CB83794E37
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:31.127 1b34 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State/MANIFEST-000001.2021/06/11-12:26:31.130 1b34 Recovering log #3.2021/06/11-12:26:31.131 1b34 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	11217
Entropy (8bit):	6.069602775336632
Encrypted:	false
SSDEEP:	192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
MD5:	90F880064A42B29CCFF51FE5425BF1A3
SHA1:	6A3CAE3996E9FFF653A1DDF731CED32B2BE2ACBF
SHA-256:	965203D541E442C107DBC6D5B395168123D0397559774BEAE4E5B9ABC44EF268
SHA-512:	D9CBFCD865356F19A57954F8FD952CAF3D31B354112766C41892D1EF40BD2533682D4EC3F4DA0E59A5397364F67A484B45091BA94E6C69ED18AB681403DFD3F3
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["A+1PYW3V6CJbBuQ7aqrgYhyH3bT8PKyBXp3hN2slpI0=","WSOpQRkYTHjPSlG9Zif2a7TNhy43NDcG1Zg5Nv0UbH0=","jDctR8ImG5KZrQKm4kDjUB7FokSJfjo/pmvFowRVlaY=","LPxhhJiuU0lprt0T6flpS7TkaDg7MocrbmzO65xH6RI=","nZ9zLb2By96AkKXALRM+C0Eu11XUjPiMXEKjiCPdtHE=","wifibc1QfMBN2jrtUtLgsCefvuceTpAatmLvul11RJA=","dHjWlSIIdjj7MWqg3T8MG58RuuqRXk32vqi/13JqEgA=","zd3DV7dbvfNvx1hdhU01fW5ily52DLN0CFL/ADaEeTI=","DpjXcO85FFFY9KJFPkGNfFUtdQIOsGwO5jUckiUwY14=","gqid6l1+mk/6yWgUECRofI9lMipXgXh2jEN2+CxmPE0=","prDB91X2Mmfg/M/txVMITWBmEGbOGjqBTP7CMjYqdHs=","yLPAqV4gqoyS/zFkEt3Cn2j0q2v9QOSthVFfWn8EzCM=","EPQ3jzdrLkAHyvf3920B5Y3aAkO1IJdn/UtbnAmq6T0=","+oOc6ca+ChKUpTu+oa2ZRxRE+wG3QJmuYWEvYCs40NI=","3mBGNAiRlTANEQkqzU3TEi+5wJ0ubR5uwtS4/9OOM7w=","1A9NNawxuhu95H5eThvf1rewJ4QQWhhPNxJXO1C/n68=","E3vWLQxzmj+e5QxYbUscllJ5n0ITpw5JBHV1Kph3/KM=","i3I8ghdTF9c1ZXNBZmvsID+DV4gxBVN27rj9wsMtRpg=","R8B8qYabnMSlLPhrtu0hGYrHn3llsMHqBbi70gkIjEE=","rhlzuEvv2KRAFMms896xFwkNgPrw6WvmgPn6xrBSa2Y=","LAMXv6sRb0VZrY34aVXF3Fftxs

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	23474
Entropy (8bit):	6.059847580419268
Encrypted:	false
SSDEEP:	384:7dNc1NC6IcafusK4H1IIGRlhKlkIALQWdynQh2RX4K6M1tVztzr7XSNyzH:7dOscSRKc1nGRSkIhEw6M1tf7SNyb
MD5:	6AE2135EA4583C2F06CDEBEA4AE70FA4
SHA1:	DCEB26C7F02D53B5F214305F4C75B4A33A79CDC2
SHA-256:	03AA1944CB3C4F39E20B6361571BC45DFBEBD3FFDA3D8F148CC6ECB29958F903
SHA-512:	B5945E67D9F73DD1982D687E5C6D9B5D6B3886C8050363A259755C76AC0F93651F3425FA7C21AA6A13977AC1C8C9322F998F131648CB8909096058D4F0D23312
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["DOZdV3jFvk12AM2JNDYKo3KZrIVRprmJ+sVGWkqqE4Q=","rVElW3Hu3T52SzDDUqGT5YiJTBGUv2h3pNuBKFlhZ1U=","X/3fg4KZxgQ1jBr5QGq0F5JnflgE27UErd88mrxTcxs=","VibLbpy0ig+5INMOU71fTYN76iaka2XVpmm1qAKYsX8=","EChCwCbQHbHQ7oDdGT2qNyiRJ0yck2YC2emNGq4whtE="],"block_size":4096,"path":"_locales/iw/messages.json"},{"block_hashes":["xklkoZ7iSU1+7cd6DAtEmUC5lPFd+EgcbnzxkOiFwlk=","3KbsvoxKY/3AwqgF2aAdVQRpMhsNVRkQ3rx2A6Z2Z+Y=","o9+tsohquaCMj+70zeinRG/hBhA2uLoDl/WoC1uokME=","xV/K8xucyWJELVT8Cqn+ugFjobBVmg8pnmACF+2PP4Y=","p/mvJm2wuCl32Rx3it654MljKAsMe3S9IDEabc1A8mE=","j8mPrTb5oOsBTj2Fer78JE6xG6+kR64Cvu2SW8d3j/k=","nqSRpGQ3USU2bZJsZ+AzBmFOyann8omwJrhEWFZDTXc=","eTcQyJUuNuF9yCga/fXGyFCj/pysSceanhBzksdx23s=","Wj7faqnspelXKMvnduxHn1XUBG8TEOqyns7/oUihekM=","VtBwXoadI3EP336rAiL33Gz19KGqtN+RYdKnMKAXoLw=","iDgLXQqXJp8nCZxgLuC9LXM45DGfufvGnXvmHsn18wc=","g+RfdDfrWTUK0Pkcsbot7NJ4SC9wVRV/dVVMuHAtEj8=","2oC4HcCuXu3VjFf6wnKlznt9uqQNaebcuWpm/mWj69U=","aMUIpuFqPMiieSaWhIktCK62v2P3OZQAWupWsYzCnvk=","L

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	1.701153897680548
Encrypted:	false
SSDEEP:	48:tBmw6fUVkeCtHqbwdS9a1/A3MCF0d2kJv:tBCKkvtHqu8wgMrckJv
MD5:	2D2C455929402050836918B272F38C11
SHA1:	F70525AB079EED84D53F57114E846294F3436F2C
SHA-256:	ED5AAFA4752C4997E6ACA9AF239B6CBABCCBD8AAD16992E66093B8436A7E8DAE
SHA-512:	FE6C95139969D2564B2CB39BCD9CC6F434F4B76B2CF81572E99AB131285D544D7B6541F80D1D3BF70E2C09DB7CF84604C501B75B23BFFEFADEE19434EA81B0ED
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................C..........g....._.c...~.2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s...;+...indexfavicon_bitmaps_icon_idfavico

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	16972
Entropy (8bit):	0.8122654751250673
Encrypted:	false
SSDEEP:	24:tFj7lCHQJYoyLjtVxh0GY/l1rWR1PmCx9fZjsBX+T6Uwy3n:JKuvCBmw6fUZ3n
MD5:	4DBCF21A7E9C9472B46ECBF014ACD027
SHA1:	E55CE953BA37AD51FE9FB38D356F4E166AD06C06
SHA-256:	B6E8A071B843D00C2B0491E5A360294A5EA710B0883D65313A91AFE7FCADB609
SHA-512:	317CA64AA19A647D12E3C05D6F3A0B906FB31E9081F017E6FC451AA28B205CDEE5B7FD1E951579CA91F2AE2370396664A95C8A40DD0CC593412E89BEE4693D32
Malicious:	false
Reputation:	low
Preview:	.............p..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	19
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlX:qT
MD5:	0407B455F23E3655661BA46A574CFCA4
SHA1:	855CB7CC8EAC30458B4207614D046CB09EE3A591
SHA-256:	AB5C71347D95F319781DF230012713C7819AC0D69373E8C9A7302CAE3F9A04B7
SHA-512:	3020F7C87DC5201589FA43E03B1591ED8BEB64523B37EB3736557F3AB7D654980FB42284115A69D91DE44204CEFAB751B60466C0EF677608467DE43D41BFB939
Malicious:	false
Reputation:	low
Preview:	.f.5...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	372
Entropy (8bit):	5.243885632719893
Encrypted:	false
SSDEEP:	6:mwEtE9+q2Pwkn23iKKdK25+Xqx8chI+IFUtpDEGJZmwPDEgy9VkwOwkn23iKKdKI:4zvYf5KkTXfchI3FUtpt/P45Jf5KkTXc
MD5:	275A3A473A320D51907A3CD5F440F559
SHA1:	750C7D5732D67557784F9FCEC903FB8FA1A4A33F
SHA-256:	96E18D7DBA8486880620F316B5B893C6157179D174E285F43E6E2EB3A0CB94FA
SHA-512:	7E85B3491C96FA0C0DD79D3A01D4209A70D4C693DABDFB165B405AA27BC8C26A6F5BA36B610CF19FCE555A08423E2ECCCED9D553E6776445D9DCB03F27B5C5CA
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:39.503 1b08 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2021/06/11-12:26:39.521 1b08 Recovering log #3.2021/06/11-12:26:39.522 1b08 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	358
Entropy (8bit):	5.242053099231011
Encrypted:	false
SSDEEP:	6:mwEtd9+q2Pwkn23iKKdK25+XuoIFUtpDEoFEJZmwPDEuFeVX9VkwOwkn23iKKdKl:VvYf5KkTXYFUtpxm/PNIVT5Jf5KkTXHJ
MD5:	0254EA5355BA26F40528A618556E9D39
SHA1:	23535D14EA6C35D406A13EDF9E375C2FBC04849E
SHA-256:	AF6F15D72D6F20CB1B1BD7A531ABFE688BCCF379E8EF2CDE4E86B723E6E602C8
SHA-512:	1334F20D1A3FE55789147F5CA97DEA145C09138A3ACF14322A6F1E79800BA1EE4659FC6DECD3AD6DAA66952F6BE09E36CD8987B9E2FFABC92FD6AD5156B77181
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:39.342 1b08 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB/MANIFEST-000001.2021/06/11-12:26:39.373 1b08 Recovering log #3.2021/06/11-12:26:39.375 1b08 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	5.221949726562647
Encrypted:	false
SSDEEP:	6:mwEtOVq2Pwkn23iKKdKWT5g1IdqIFUtpDEhgZmwPDE3YIkwOwkn23iKKdKWT5g1L:wqvYf5Kkg5gSRFUtpb/PY5Jf5Kkg5gSu
MD5:	182CEAB0D352347A4D5A34216DF875BC
SHA1:	FE210CAFADC125B33CA383A795FE765542256578
SHA-256:	EC42B3681A3E81557D0F8424AC1BC2F94F2654F0376190430F577B2EF2D5DA44
SHA-512:	38B76E63CD000CB53A18361B375481EF6847DACBC5571E9D0BCACC9055A33A26352F7222EDC2813F5BC3B2D479B4E54967AE6FA45DDC045A512048EF95893FE9
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:38.814 1d50 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption/MANIFEST-000001.2021/06/11-12:26:38.820 1d50 Recovering log #3.2021/06/11-12:26:38.825 1d50 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.13915078984129436
Encrypted:	false
SSDEEP:	12:TL+A/Qwy6fvgfUr9kYNuQolqGI/SWlWgfUr9kG:TLxDyagfKkcufu8gfKkG
MD5:	5087D0712C23A46894793F3AE0C2A20E
SHA1:	328A112FD20F3FA93F47554AF82261751855880A
SHA-256:	9194803515C97EAA95298CCFB2F20AD5343380D2D4EEA2C090C4DEFA3B9507BB
SHA-512:	7DE1172DEF54F4A7418BF9C00002B72AF9CDB965D017CDC2BC187347C9CCD4FDBE2D1597482D5996701F5C12ED75B176EE26FBC02F6F9787CFFDC8279C9272C4
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	830
Entropy (8bit):	5.335082492503569
Encrypted:	false
SSDEEP:	24:Cw8ef7nGrVi7cfqN1dzjH32Tp9yjDY78BJgskfa9yBDOOCgfKk0fAM:q4nGAdX3ozyjHUSkKAM
MD5:	6E8E6438EFC42C6CD23E2F2123C4C696
SHA1:	25435F2E8369B52EF790380572577369D1E770B9
SHA-256:	2A12660BC79E43454FF9EBF1E9FF4723082B9E42BA7F73756DA76824E6E61A48
SHA-512:	E34D2D27644CDA0054B3BFD083F70071983A2E9AD309BFE03FA4EEC204B80C561E2E6893552ED8252933ED3DFEB4A3565B321B780B1A13A7F7B3B016FA75DF87
Malicious:	false
Reputation:	low
Preview:	..........."h....appdomain..cloud..de..document..eu..holistically..html..https..index..jaquel988..object..s3..storage........appdomain......cloud......de......document......eu......holistically......html......https......index......jaquel988......object......s3......storage..2.........3........8........9........a...........b........c...........d............e..............g........h..........i..........j.........l...........m..........n..........o.............p.........q........r........s...........t.............u...........x........y...:w.......................................................................................................................B............. .......Whttps://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html2.Document:...............J...............!(0:@MS...

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	33356
Entropy (8bit):	0.04747596494984344
Encrypted:	false
SSDEEP:	12:NDtqiDt+llDtVDtzDtOXzDtlDt4DtnqLBj/Zt3n:Nhfh+llhVhzhODhlh4hnqLBX3n
MD5:	4F370A7BD1E6031EC7B529369795FAE0
SHA1:	BB404DDA20474611424A76604CEDC3027AB74997
SHA-256:	A40214B70CED85D52BA674BAC6ACB669CC1055ADC7C97850D0F3797793BFA0FE
SHA-512:	5365ABB10D2D15610890C527EC088F69F405F9ED1C10F16F596F77E11541F03A223CDF0C6F977D4BAC80B709442E2CB6BE819850F2BBD5240D764EEE0267D908
Malicious:	false
Reputation:	low
Preview:	.............5..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	2955
Entropy (8bit):	5.474919377593085
Encrypted:	false
SSDEEP:	48:b+DrG2ja7IMr8dbGl1VbQSefgG08NrS0U9RdiN9z:6a7IM4dbGl1VbQ5fgG0crS01
MD5:	3A5D5B73485195E76AB97CA18ADC729D
SHA1:	1DC394071986E4CAD5D1C30480346092188659C0
SHA-256:	0FCC5B130C7059B1D07CCFF68BF31D71EF152D3C233F227A1EF172E9F5435A3A
SHA-512:	245CCC8C9C6683300F24E2BD5567FE8D433F23068D9E1B869E63EA17533C6E96C11C33F5B8224434B51D04A08D275A1F005B758F7D1A0AA5CCBB5BA56E461FC7
Malicious:	false
Reputation:	low
Preview:	..l#...*............8META:chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm.............Y_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.HangoutSinkDiscoveryService;.{"cache":{"sinks":{},"g":{},"h":null},"manualHangouts":{}}.a_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.IdGenerator.cast.RequestIdGenerator..832704000.H_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.LogManager...["[2021-06-11 12:26:40.58][INFO][mr.Init] MR instance ID: bf358312-b9c8-4bb6-a4c7-0e7e95b7e3d2\n","[2021-06-11 12:26:40.58][INFO][mr.Init] Native Cast MRP is disabled.\n","[2021-06-11 12:26:40.58][INFO][mr.Init] Native Mirroring Service is enabled.\n","[2021-06-11 12:26:40.58][INFO][mr.PersistentDataManager] removeTemporary_: 163 chars used\n","[2021-06-11 12:26:40.58][INFO][mr.PersistentDataManager] initialize: 163 chars used, 67 other chars\n","[2021-06-11 12:26:40.58][INFO][mr.CastProvider] Query enabled: true\n","[2021-06-11 12:26:40.58][INFO][mr.CloudProvider]

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.16078371418217
Encrypted:	false
SSDEEP:	6:mwE4a+q2Pwkn23iKKdK8a2jMGIFUtpDECkZmwPDECzVkwOwkn23iKKdK8a2jMmLJ:n7vYf5Kk8EFUtpg/Pl5Jf5Kk8bJ
MD5:	F59475923C04BA91C745A288208EB255
SHA1:	D001E44728252BB461F90CFAA1AF5E264F6EC8CC
SHA-256:	F5EF70EC1A386872934B987E8CC2F9C4026BAA5D33A12FA49E6030A38F3AE77C
SHA-512:	A4D81E2371FE9B162B52EBBAB090B60686966C4CADA0F81962F16ADB53985CF69559A91C79DB098607F81B55F834922E4135C8F03277746DA95A41451A0B42F0
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:28.608 1b78 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2021/06/11-12:26:28.611 1b78 Recovering log #3.2021/06/11-12:26:28.614 1b78 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.202914592059073
Encrypted:	false
SSDEEP:	6:mwEhMMM+q2Pwkn23iKKdKgXz4rRIFUtpDEEmZmwPDEEpMVkwOwkn23iKKdKgXz4n:NMM+vYf5KkgXiuFUtp7m/P7pMV5Jf5K2
MD5:	498B1CA9816D1BAA291B1CFB4E395E83
SHA1:	C0BDBA78B489840601086997C3AA12AA77299D36
SHA-256:	8A04CFC3F033B5613C3102F89AA239B15474C7B82CBC517E42A5F02FFF0316A7
SHA-512:	C07C71AF8D3D23D88339367A1A00D81E595CB051F35FF5E486C53A8173CC1AA4D0ABF286BD1754FD678F54C243C4044CC9FEB8AC0C9CE765C943C6DC646A6CC6
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:28.928 1b8c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications/MANIFEST-000001.2021/06/11-12:26:28.930 1b8c Recovering log #3.2021/06/11-12:26:28.930 1b8c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001
Category:	modified
Size (bytes):	28672
Entropy (8bit):	0.9871162322511206
Encrypted:	false
SSDEEP:	48:TUIopK2rJNVr1GJmm8pF82phrJNVrdHX/cjrJN2yJ1n4n1GmhGUHMf688koTRsm4:wIElwQF8mpcSY8PI8VM421
MD5:	5E3FA09837330B118E6E40FC7357378A
SHA1:	5CB93544310672C6FD1F66F808D157477CA602FC
SHA-256:	9EC877EE7949BCB8AA7BCD2BF4232AEC3A97DA33B6FDBB89F281E8C7251FC72A
SHA-512:	FFF2412CAD9B05219C06DEA16A33EB042085A806BEA34D317B47969F6F668D70BF7C81252077DD48BD14512D4BD1141D063BF9ADF47F4FABAB61A1466E48DCAB
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................C..........g...^.........j............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	29252
Entropy (8bit):	0.6279366037249263
Encrypted:	false
SSDEEP:	48:H4qkIopK2rJNVr1GJmm8pF82phrJNVrdHX/cjrJN2yJ1n4n1GmhGU54:H4hIElwQF8mpcSa
MD5:	0AD6D0EC70954AB9F11169A685DCDBBE
SHA1:	581A6B32A588882FDC38ABFB0CC231566AB16960
SHA-256:	74EE6E124A298B7F17664A05D1E0625FA1121365EE831C366006D3F79A310AB0
SHA-512:	DCB8C3A528A8DF3F2285CCC4B4125546021D70FEA587DD3D6E066161F86CCA6DAC7ABD2037FF04010FA390B1CF499A37DE7CA883427325F6F812E61EC1F2F7D3
Malicious:	false
Reputation:	low
Preview:	..............U........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	1.9837406708828553
Encrypted:	false
SSDEEP:	3:5ljljljljljl:5ljljljljljl
MD5:	1B4FA89099996CE3C9E5A0A9768230E8
SHA1:	9026E1E0906E3B3FE0E414EE814CC5A042807A04
SHA-256:	537818AAFD0902A8B2D58B483674391E33E762B5E1E8CD226D873098CCE9C8F9
SHA-512:	4279C9380ACC5AB329EC6BCDA10CCF0A7437CEF63845B63E741CE517042CFE83340D2D362DD6B9E039BF55E61F484CCF72B8FD8477D1D0292E0B879CB949461B
Malicious:	false
Reputation:	low
Preview:	..&f.................&f.................&f.................&f.................&f.................&f...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.153360879802692
Encrypted:	false
SSDEEP:	6:mwEI/Q+q2Pwkn23iKKdKrQMxIFUtpDEgdSgZmwPDEgdSQVkwOwkn23iKKdKrQMFd:F/VvYf5KkCFUtpAg/PAI5Jf5KktJ
MD5:	903A6E527EBB0E74885AD1F22F4B3566
SHA1:	D280CFF81D7AB9F9D1ACA7120ED69BA90560EB5B
SHA-256:	AEA9E56F9EDCAACD25ECE09E4AAAD798FBCA831870F784CB768AF9757C1E92F3
SHA-512:	0C9D6C8976614DEC3FAD26DA176B0A8575CA3F5C969C2446BDCD9621E9802CBD6BBAB0EA6641E48EE74B4AED1A94E846E144B9BAA931D1636BF1E8185006FF1A
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:28.859 1b38 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage/MANIFEST-000001.2021/06/11-12:26:28.861 1b38 Recovering log #3.2021/06/11-12:26:28.861 1b38 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	348
Entropy (8bit):	5.202819071735649
Encrypted:	false
SSDEEP:	6:mwEIWjyq2Pwkn23iKKdK7Uh2ghZIFUtpDEo/1ZmwPDE1pRkwOwkn23iKKdK7Uh2w:9WOvYf5KkIhHh2FUtpv/1/P6P5Jf5Kks
MD5:	152E355FC921AE9C147BC5ADDA33967E
SHA1:	A6BEFEC4B04F27E4984413CB41E0E15B92B02031
SHA-256:	935C92911CA1828FC7849193F1BD5D1267BE75D2421197D517B595EAA3FAFAF6
SHA-512:	17F7A64FADF4E3ED53C7FD13FD0B1110DDFA3BAA13B330396B82EBFBC5C507C14395B2858EEB7DA9E4224290E7716736C9B29FFBBACD0CA5296E7C1C40E13F99
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:28.567 1b34 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database/MANIFEST-000001.2021/06/11-12:26:28.568 1b34 Recovering log #3.2021/06/11-12:26:28.569 1b34 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	296
Entropy (8bit):	0.19535324365485862
Encrypted:	false
SSDEEP:	3:8E:8
MD5:	C4DF0FB10C4332150B2C336396CE1B66
SHA1:	780A76E101DE3DE2E68D23E64AB1A44D47A73207
SHA-256:	18FAB4D13CDA7E1DEE12DC091019A110A7304B6A65FC9A1F3E6173046BA38EF6
SHA-512:	51F0B463E97063A2357285D684FF159FDF6099E57C46F13C83E9D3F09D7A7CF03C1BA684BCCF36232FC50834F95953C3C68675C7B05AB4F84DEF1C566A5F3F5E
Malicious:	false
Reputation:	low
Preview:	.'..(...................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	430
Entropy (8bit):	5.252550061286027
Encrypted:	false
SSDEEP:	6:mwEEQCq2Pwkn23iKKdKusNpV/2jMGIFUtpDEE2bXZmwPDEEd/kwOwkn23iKKdKux:JRvYf5KkFFUtpZ2L/PZd/5Jf5KkOJ
MD5:	AB5BB135D7C7F369BEFC33DDC2BFB4B3
SHA1:	632E51E7A3B88DB6FC19AF8F302BB6C7DB83B42A
SHA-256:	141233E902579C7EF31F9A8D1B89D7D616BDBBD0B21C50433B79F429E155AE76
SHA-512:	734AE2F49339EAEB88D48A26B514362EEBAF02F4D68F16E592A813D914E3A0038AE491B8A0946CA1A2161742679DBBF7DD93E92B365CB3C05D20681E24D845A9
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:28.895 1b30 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb/MANIFEST-000001.2021/06/11-12:26:28.897 1b30 Recovering log #3.2021/06/11-12:26:28.898 1b30 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.27201116801416
Encrypted:	false
SSDEEP:	6:mwE7Fq2Pwkn23iKKdKusNpqz4rRIFUtpDERXZmwPDE9YkwOwkn23iKKdKusNpqzW:QFvYf5KkmiuFUtpQ/Pp5Jf5Kkm2J
MD5:	632484E97C076EC678D6F73FB68F7046
SHA1:	13905EF16D59056F8AFBAD84B6C1C3AC5E2367F0
SHA-256:	BC9A80C264C8E413BE27C60DF89F2963228F7D340EF96CDE3B525523B6E58092
SHA-512:	CE6B714E5FF9BEE05194FD886F9115435960257F5FD2BD6757A614D082FCFA07AA059596497EA18BE6969867FDB61F706E2BFCCB602C81B5C1E4B47DC6535A3F
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:28.923 1b40 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications/MANIFEST-000001.2021/06/11-12:26:28.924 1b40 Recovering log #3.2021/06/11-12:26:28.925 1b40 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	19
Entropy (8bit):	1.9837406708828553
Encrypted:	false
SSDEEP:	3:5l:5l
MD5:	E556F26DF3E95C19DBAECA8F5DF0C341
SHA1:	247A89F0557FC3666B5173833DB198B188F3AA2E
SHA-256:	B0A7B19404285905663876774A2176939A6ED75EF3904E44283A125824BD0BF3
SHA-512:	055BC4AB12FEEDF3245EAAF0A0109036909C44E3B69916F8A01E6C8459785317FE75CA6B28F8B339316FC2310D3E5392CD15DBDB0F84016667F304D377444E2E
Malicious:	false
Reputation:	low
Preview:	..&f...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	418
Entropy (8bit):	5.232796198153874
Encrypted:	false
SSDEEP:	6:mwEjQQ+q2Pwkn23iKKdKusNpZQMxIFUtpDEf2QgZmwPDEttQVkwOwkn23iKKdKuG:UQVvYf5KkMFUtpRQg/PEI5Jf5KkTJ
MD5:	B6D7CC01AD3769C12BC1F846A5ED2C2C
SHA1:	35012D515C4ABA2DECABBB8270155DF4FF7206CF
SHA-256:	D2E3CBDE2A5BBEADD98EABA9F293D59760397B5ECF37A2BEE3406ECFC76A176D
SHA-512:	7C44DA19B301CDD7C0746EB7F1931798849FFFBA605655334C2B8BA72CF1A8B62AED344D497B087EAD98D92F30A7987A234BFD55D81CB0FB417137A5B74A1DFB
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:46.008 1b38 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage/MANIFEST-000001.2021/06/11-12:26:46.009 1b38 Recovering log #3.2021/06/11-12:26:46.010 1b38 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\c5d7b48d-775d-45b2-aad0-ba077f073956.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	325
Entropy (8bit):	4.971623449303805
Encrypted:	false
SSDEEP:	6:YHpoNXR8+eq7JdV5p7DHJShsDHF4R8HLJ2AVQBR70S7PMVKJw1K3KnMRK3VY:YHO8sdHfHYhsBdLJlyH7E4f3K33y
MD5:	8CA9278965B437DFC789E755E4C61B82
SHA1:	5776B6C90CA1D2DDC765ED673B5E6DC8E167F0D6
SHA-256:	A57D9231244C1FBDE58A1BF50CAD3A1E3EA28D042BFA272782B65139446E7C51
SHA-512:	3065FE0743AD88E02F8C8FF6CF03B832B616DD08061EAE25A5106422228D45EB999EE2CBE4E9C96D5FFC108CB817766240E27BF97E3E5C2A58081D369E2968F8
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248516514667526","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\1860bc56-ebc4-4c83-bf7e-d48ef1d210a8.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	325
Entropy (8bit):	4.9616384877719995
Encrypted:	false
SSDEEP:	6:YHpoNXR8+eq7JdV5pirhsDHF4R8HLJ2AVQBR70S7PMVKJw1K3KnMRK3VY:YHO8sdHirhsBdLJlyH7E4f3K33y
MD5:	B0429187E1BE99DE4D548DC5B2EDEA0A
SHA1:	B3E07BEE5D753BF1B613BD2DE665C7C21E8184F6
SHA-256:	D8DABBF936DAB4F17437ECA255020EA847D76D6B789F9486010C95E995CFED03
SHA-512:	233F7BDAA848A295E9F58CA52761829FE1044DA1DE1FBCAC407FADC8C7ABA1E4FFD7CA7A4FBE649E83FD1815DC2E3619ACB2A22CE5B2C7241E474CDB9AF2F7ED
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248516523181804","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	296
Entropy (8bit):	0.19535324365485862
Encrypted:	false
SSDEEP:	3:8E:8
MD5:	C4DF0FB10C4332150B2C336396CE1B66
SHA1:	780A76E101DE3DE2E68D23E64AB1A44D47A73207
SHA-256:	18FAB4D13CDA7E1DEE12DC091019A110A7304B6A65FC9A1F3E6173046BA38EF6
SHA-512:	51F0B463E97063A2357285D684FF159FDF6099E57C46F13C83E9D3F09D7A7CF03C1BA684BCCF36232FC50834F95953C3C68675C7B05AB4F84DEF1C566A5F3F5E
Malicious:	false
Reputation:	low
Preview:	.'..(...................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	430
Entropy (8bit):	5.225587260439761
Encrypted:	false
SSDEEP:	12:0FvYf5KkkGHArBFUtpETMi/PETH5Jf5KkkGHAryJ:0JYf5KkkGgPgaEtJf5KkkGga
MD5:	DDB8D894B2A391FC71FBE90CA00D0812
SHA1:	086B7109269C0B194379BC13AB559F46F1023F8F
SHA-256:	89D1DFD96C0BC6974130CAC0A7B7BBFD3681E0D9793D1563716C914CD2BA2C59
SHA-512:	DBD0ADBA19F675DE38AF4BACC4A4D8384E17BF8B148ECB93A204BD80456E3591A803F43CA777FBAF22E6E69C1E7D04E093937697BE1F6D1E6E1A52BFE49DAF84
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:39.254 1b74 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb/MANIFEST-000001.2021/06/11-12:26:39.260 1b74 Recovering log #3.2021/06/11-12:26:39.262 1b74 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.234693603584247
Encrypted:	false
SSDEEP:	12:0j3+vYf5KkkGHArqiuFUtpETMh/PET6V5Jf5KkkGHArq2J:0wYf5KkkGgCgaLYJf5KkkGg7
MD5:	4E78C100887C97CD09F7FB87D642BE28
SHA1:	9A2751ABE31EABFBCC1810B64DB1168F2A3AFCFC
SHA-256:	F10CC599101F9B46F5D74361AA1103A0387B4D7D45EF24BC6543BFA94D839E82
SHA-512:	F666AFB82503B137F568DA087E431CF22BC223C7C2EB64BF418044C0B1C7A7A756B2B9C9EEEAC5EC2481CB3BDE51572409B5DA5DE8D48AE1805FD0E1C3D0B22C
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:39.254 1b7c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications/MANIFEST-000001.2021/06/11-12:26:39.260 1b7c Recovering log #3.2021/06/11-12:26:39.262 1b7c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	19
Entropy (8bit):	1.9837406708828553
Encrypted:	false
SSDEEP:	3:5l:5l
MD5:	E556F26DF3E95C19DBAECA8F5DF0C341
SHA1:	247A89F0557FC3666B5173833DB198B188F3AA2E
SHA-256:	B0A7B19404285905663876774A2176939A6ED75EF3904E44283A125824BD0BF3
SHA-512:	055BC4AB12FEEDF3245EAAF0A0109036909C44E3B69916F8A01E6C8459785317FE75CA6B28F8B339316FC2310D3E5392CD15DBDB0F84016667F304D377444E2E
Malicious:	false
Reputation:	low
Preview:	..&f...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	418
Entropy (8bit):	5.239280362194265
Encrypted:	false
SSDEEP:	12:0vYf5KkkGHArAFUtpr/Ph5Jf5KkkGHArfJ:+Yf5KkkGgkg5Jf5KkkGgV
MD5:	37411859B2E6622D51B8DBCEA93634A7
SHA1:	FE1FADE87EB141BC15EED84ECDF11B0FCFF9DBD0
SHA-256:	9A7BD2AC9A9CE3762AB04651FC4F5CC8C798D4DCB6C9FDF48E8917561E7E7D9C
SHA-512:	A5BA65F58FA9355BA242D8F040E355F8B418726E334A0E797CF14C2B109A942D7465379C5CAF733B925E5477F697A9D0AE10B858EF36EBC394E51CCB1D18448A
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:54.590 1b74 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/MANIFEST-000001.2021/06/11-12:26:54.592 1b74 Recovering log #3.2021/06/11-12:26:54.592 1b74 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	38
Entropy (8bit):	1.9837406708828553
Encrypted:	false
SSDEEP:	3:sgGg:st
MD5:	45A8ECA4E5C4A6B1395080C1B728B6C9
SHA1:	8A97BB0E599775D9A10C0FC53C4EDB29AA4CEB4E
SHA-256:	DB320AB28DFF27CDA0A7F87B82F2F8E61B3178A6DE8503753D76F1172D32E08E
SHA-512:	8EE91A3A1E77459273553F6A776C423A8EE95DB9DCFA897771814B7AD13FD84F06BB2B859F22B6DDA384B39EAA91F1819F170BABED6DA16BDBCF5BCB06CF2124
Malicious:	false
Reputation:	low
Preview:	..F..................F................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.276048371787623
Encrypted:	false
SSDEEP:	6:mwElyq2Pwkn23iKKdKpIFUtpDE5/1ZmwPDE5pRkwOwkn23iKKdKa/WLJ:tvYf5KkmFUtpU1/P25Jf5KkaUJ
MD5:	9F164A57943189E18CDD1D21874BC1ED
SHA1:	1A3C6EE77ACCB5DCA6A77E22DC48E524A8592F9A
SHA-256:	82C4F8F512E6EBD439426A57C24A4DD521A0E491C612F35B36E155A7436242DE
SHA-512:	3C878510DC48D5CEB256EFE2BDB4507DA27C15D577F0624FFDFD2F59A82F45CF8319C4AF6611EC98D45A63C015EFC8F3D87AA27FBDD404CB8756726B7CDBC4EC
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:28.585 1b34 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2021/06/11-12:26:28.587 1b34 Recovering log #3.2021/06/11-12:26:28.587 1b34 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	402
Entropy (8bit):	5.3203949143776965
Encrypted:	false
SSDEEP:	12:/iOvYf5KkkOrsFUtp59/PhyP5Jf5KkkOrzJ:/iMYf5Kk+gDcJf5Kkn
MD5:	8CC2342B836CCC6D2C370EA9E8416BA7
SHA1:	9F073BA08A512D73EC155F68CC5C1FE2C4120CDF
SHA-256:	9BF87EF074E71117EEDA2C0BC5D23124D598BF1CF6FB90C9209FB34B837C9A80
SHA-512:	D219C20D752AABC7ABA4F1B308ED2876B9AD6134FBE1FBA2BC59C22756DE23479DA6F400F9378BBBD3F3D46C575B0B411324995C3709C09561AFBE582756FF08
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:40.567 1b74 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/MANIFEST-000001.2021/06/11-12:26:40.568 1b74 Recovering log #3.2021/06/11-12:26:40.569 1b74 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.188721875540867
Encrypted:	false
SSDEEP:	3:7qrhJ:7qrf
MD5:	F072725D53610ACA5070415BF4C011C9
SHA1:	EACA2E19B0A2A3D014112F40314A503A23F32036
SHA-256:	C5F7BDE7B4F8B2EAD029726468A156C388420F4E9C779AF5F1F92E84DC9936E4
SHA-512:	5D60C27A50B9E614F1D0DA84E1F78ECF5E6AA259464A6D8E97EA60970690D97C08961727CBD9B1038AB52B5D9D0A63990684B2D687E09716EC99CD994597C2CF
Malicious:	false
Reputation:	low
Preview:	......NO)9.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c0279c08-457c-44c9-8356-69bc6a3e8a6b.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5184
Entropy (8bit):	4.972762909727434
Encrypted:	false
SSDEEP:	48:YcckKSChkliVqAwbqTlYGlQuoTw0DFrf4MqM8C1Nfct/9BhUJo3KhmeSnph0nkU3:nULWf2pIVT5k0JCKL8hokc1dbOTlVuHn
MD5:	2C529CD9E88E2FCF9B8A48895A2F2CB1
SHA1:	75F7D88D8D5030C9690441BB682B2354B195D43C
SHA-256:	6AEF0BD9E2FF5762D421721A2FC4E1426F0E03AEE3B4A7AD52B080B1116F2493
SHA-512:	DE60413F0996F48824A9637C334E45AD818D847BD9F1E730553F01435D1D50CC5366B015ACAE277E53E0CF953C0D3968607FD697FC89508D9201279417401FE6
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13267880788874869","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245924509391818","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"bookmark_bar":{"show_on_all_tabs":false},"browser":{"default_browser_infobar_last_declined":"13245924607060180","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","2042016"],"daily_recei

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Rv:1qIFJ
MD5:	6752A1D65B201C13B62EA44016EB221F
SHA1:	58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
SHA-256:	0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
SHA-512:	9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000004.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	139
Entropy (8bit):	4.481418885700997
Encrypted:	false
SSDEEP:	3:tUKUUE/scXAgZmwv3GUE/vQ5s01V8sGUE/vQ5s01WGv:mwEagZmwPDEUVvDEUtv
MD5:	BE9537FA57A8FB4A7187DFD656DE0A3D
SHA1:	AC38F703DFE2B4D1ECC1F59C621A64EBE21D5A0E
SHA-256:	ACE1DA9B9C3F951C3D5EFCCCD91519E095F2127E8519DACCE1C495B89744B8C1
SHA-512:	2E6F180245571BAF49ECE07AAA1580FF871EA41AEF6CA95F3B497FA4697E6DED60E24B0B438B7923B05F2940C0288422B27A127639837ECACBB0BDD17F2957A8
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:37.389 1d50 Recovering log #3.2021/06/11-12:26:38.156 1d50 Delete type=0 #3.2021/06/11-12:26:38.156 1d50 Delete type=3 #2.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG-4 LOAS
Category:	dropped
Size (bytes):	50
Entropy (8bit):	5.028758439731456
Encrypted:	false
SSDEEP:	3:Ukk/vxQRDKIVmt+8jzn:oO7t8n
MD5:	031D6D1E28FE41A9BDCBD8A21DA92DF1
SHA1:	38CEE81CB035A60A23D6E045E5D72116F2A58683
SHA-256:	B51BC53F3C43A5B800A723623C4E56A836367D6E2787C57D71184DF5D24151DA
SHA-512:	E994CD3A8EE3E3CF6304C33DF5B7D6CC8207E0C08D568925AFA9D46D42F6F1A5BDD7261F0FD1FCDF4DF1A173EF4E159EE1DE8125E54EFEE488A1220CE85AF904
Malicious:	false
Reputation:	low
Preview:	V........leveldb.BytewiseComparator...#...........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f74ebc09-8af2-48ef-8307-8103d21dd4f3.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fb36ddf4-9218-41a4-9778-19476656abb7.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	3473
Entropy (8bit):	4.884843136744451
Encrypted:	false
SSDEEP:	96:6FGX0G70GhIGpyGzRDYLiEHYDBKGzUGaCGjHGESHG/OG6mhM:6Fe0i0sIIyGzRDYLiEHYDBKSUpCQHrSP
MD5:	494384A177157C36E9017D1FFB39F0BF
SHA1:	CE5D9754A70CD84CEE77C9180DB92C69715BE105
SHA-256:	07CF0A5189FAD30A4AA721F4F6DA1B15100991115833EACFA1E2DC84A1B54337
SHA-512:	BFB80EEC0C0B5D9E487047703BE49826321A4D249422E0C81E978E6C8A310F41C7B4B8F849229BA87484FDF4831DD6A98FF994D0FDA5CE3D341CE615C15F2F1C
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248516607497410","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":27387},"server":"https://www.gstatic.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248516607334226","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":34287},"server":"https://ssl.gstatic.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248516607463627","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31787},"server":"https://fonts.gstatic.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248516607318875","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":23359},"server":"https://apis.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.250733355401428
Encrypted:	false
SSDEEP:	6:mwEQq2Pwkn23iKKdKfrzAdIFUtpDE8ZmwPDEThkwOwkn23iKKdKfrzILJ:NvYf5Kk9FUtp9/Pu5Jf5Kk2J
MD5:	75F3B973D3342A04A91B1A55053409CB
SHA1:	47C94AA3596CCCFB9A7DFECF87ED3A2ACD8DCB24
SHA-256:	E7DADA3FD3DB3F984AFF6CD83D1DDDA97FF87B8E564287E8E40E5FCBAA26E9B6
SHA-512:	44462EA8E2356A1F19CD51077B3847FF69C5E366DE142FB975A16FCB8A8A6F2CB6FB54509C01B338E71276BAC274B6358E76242673CFFBE2D4FB9354686114D4
Malicious:	false
Reputation:	low
Preview:	2021/06/11-12:26:39.755 1b04 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2021/06/11-12:26:39.756 1b04 Recovering log #3.2021/06/11-12:26:39.757 1b04 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	106
Entropy (8bit):	3.138546519832722
Encrypted:	false
SSDEEP:	3:tbloIlrJ5ldQxl7aXVdJiG6R0RlAl:tbdlrnQxZaHIGi0R6l
MD5:	DE9EF0C5BCC012A3A1131988DEE272D8
SHA1:	FA9CCBDC969AC9E1474FCE773234B28D50951CD8
SHA-256:	3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
SHA-512:	CEA946EBEADFE6BE65E33EDFF6C68953A84EC2E2410884E12F406CAC1E6C8A0793180433A7EF7CE097B24EA78A1FDBB4E3B3D9CDF1A827AB6FF5605DA3691724
Malicious:	false
Reputation:	low
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.8150724101159437
Encrypted:	false
SSDEEP:	3:Yx7:4
MD5:	C422F72BA41F662A919ED0B70E5C3289
SHA1:	AAD27C14B27F56B6E7C744A8EC5B1A7D767D7632
SHA-256:	02E71EB4C587FEB7EE00CE8600F97411C2774C2FC34CB95B92D5538E7F30DA59
SHA-512:	86010ED2B2EEBDCC5A8A076B37703669C294C6D1BFAAEA963E26A9C94B81B4C53EC765D9425E5B616159C43923F800A891F9B903659575DF02F8845521F8DC46
Malicious:	false
Reputation:	low
Preview:	85.0.4183.121

C:\Users\user\AppData\Local\Google\Chrome\User Data\b62aa1b9-0530-482f-8942-40bafe6c7dcc.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	172529
Entropy (8bit):	6.080256213656424
Encrypted:	false
SSDEEP:	3072:vIudLgVDqfsAtDzQFU36fdYPL8JPCFcbXafIB0u1GOJmA3iuRi:QOgIRXv6fWPL8VoaqfIlUOoSiuRi
MD5:	D1778A894BA385DA75ACA96FE949C22C
SHA1:	1D711F1F8ACD9D9625C82ECD3305BBF9ECBFAA5B
SHA-256:	822ABE9CC43DE54FB75F5163F58FB93F2E6D94B7AACE4E880EEA624E96975EA4
SHA-512:	5FC5F6C44BA7B7C9ED99739076FE9D17186B6A5DF8402B3ADAE84440FC97951CFCB04245F15449901DE485EB77FFCF3E02C1F9113CD9E5B74E79E9596037AAF9
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en-GB"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.623407191759635e+12,"network":1.623407193e+12,"ticks":303195175.0,"uncertainty":4705458.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABaHlwIoHYlQKZwuwW8V0yxAAAAAAIAAAAAABBmAAAAAQAAIAAAAOT4j8Zm9U1zXX6oEUpPqIYBIjSlOiLGeiMKiIFJZDroAAAAAA6AAAAAAgAAIAAAAFW1OavBhyV7qwszPZbindD+KU2Osh5O7HSmDPpFnuCDMAAAAGEkmqbufgFUSmOzx4cW7Aup7spqps4DvqbPrwRgUGqSpRZvQkbO+yVH56WF9zMTt0AAAAAyRwtYxjf7/AqYrFr0JZ6kbTiUt0/2PKkCw7ntLtbN2qrad7I3MeL4iNGDFgqRlhWgsb/6w0gJzQxAfL6rdzxi"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245922715401452"},"plugins":{"metadata":{"adobe-flash-player":{"d

C:\Users\user\AppData\Local\Temp\4e57a236-dd8f-444f-9a3b-2bdeda44446a.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Temp\6098aff8-307d-4a8d-8bec-32229e24ec98.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Temp\browser-sslkeys.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9688
Entropy (8bit):	4.643126475353902
Encrypted:	false
SSDEEP:	192:8446Au9wdWpW91ePNnZWq1P9ZGzcdrrZl+22:84Uu9psDKNn8wPCgdrT+22
MD5:	5ABE5C94D086348C7439E452342EAD4B
SHA1:	D97FC1018D7B11D5769C599C140EB3F0DE20A2CF
SHA-256:	F6E20BF8466EF74E1D59A82A812745249D85F0EDFF839FDBE391AD6CB37BEE13
SHA-512:	DAB2539D72B74494EBDAE0C2306A0453A2E5E15E5E4104789FB21B543DB632210CF155D86933B0A4149931FCBCA258A441C209891C812EA9CF459B36113A5A15
Malicious:	false
Reputation:	low
Preview:	CLIENT_HANDSHAKE_TRAFFIC_SECRET e9a381b92469e0b6f224ad139742ba3edd51b190ca4d81dfdbca1df1705588c0 b2fb2e9f014795d5792621fc39a8f3206fdb81925a9bacb93f0e3e9ce0451e30.SERVER_HANDSHAKE_TRAFFIC_SECRET e9a381b92469e0b6f224ad139742ba3edd51b190ca4d81dfdbca1df1705588c0 18de6bfbdcb9eed4102d38ed807f4ea0c0a79fa479c644d4c4156849f61707fb.CLIENT_HANDSHAKE_TRAFFIC_SECRET 0353de075a96735d3605acac13cff47ea1e202ad43296e541b81af8098493939 773019d9b849b0b751d51ff29bc4957813af23f1c5c832a5a0f4ac488272798d.SERVER_HANDSHAKE_TRAFFIC_SECRET 0353de075a96735d3605acac13cff47ea1e202ad43296e541b81af8098493939 8f2f31bf63d38ebe7656792d750e4278f1e52ea489fc7cd082d405a8ee25e610.CLIENT_RANDOM ebb51f5a17afa71bc7af971ffacb3dd4fbb3edd792c74b0ce65a223ef6bf2d35 61ac8e2ea92c883c525849c5bb1d66de175f4a6205dd0486e526704178ff693e7360ad8a75ccf598d756cc3ff9328ac7.CLIENT_TRAFFIC_SECRET_0 0353de075a96735d3605acac13cff47ea1e202ad43296e541b81af8098493939 74d50459ed324f2cc861d77a0d97bb92ab37fae450736c445eaa73126b7ddc8e.SERVER_TRAFFIC_SECRET_

C:\Users\user\AppData\Local\Temp\ddad3d19-619f-4016-b718-bcfb32682b40.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	768843
Entropy (8bit):	7.992932603402907
Encrypted:	true
SSDEEP:	12288:cK2ED9wjXNC1Gse83ru82/u0eKhgxuPFrDXgtbPz54Pm1D0fBmfH1sBrJ9mTiDga:cK2ED9I48seur0/uZKCuPNbgtbz6m1ob
MD5:	A11D5CAF6BF849AEB84B0C95B1C3B7CF
SHA1:	27F410CCBD75852C01C7464A1FD7EF8C29BE3916
SHA-256:	D0E62ACE64AFC334330A7AC3A2CC657914FEB321F1F89AEE11D2A6D0E7D81C31
SHA-512:	086C124DE3A01BE467647F3BCB4EA05105F690AB45417A0E3D38935ABA9E2381DF59AF98D0FFF7823CEFD5390B48807352E135AC70977AED7B413A8CC48FB590
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b.........6W..>Nuw9..R{c...Nq.H.K..A!....`v.k+..?.5.>v.....;.._~....tp....x.q.V...7.m.O.~.{!.o/q.'..BK..4./?'.....L..fH&.._<..&.p.k^..\s...:1y..F.N.+...X.PO@Mo....X.G1:..Y.@;..j..........=ae...0.......DU....n...n.;.Ipr..Q....:... <.....a.Y....{ei........0..0....H............0.......Mbh=.[O}.+..U.KHF(n3.\"...,g.c...6)..(.E...U...#.i.a..:...N.....P...x.O...(mC;\|.5.S.{m.aEx...[..fP.i`.y..5..R....v.$......l-m.............m....ni...`..W.....R.p.b.+...+.\k.R$e~.J\.&c%.d...M..j..V.%...+1F....D....X\.1ct.<........E.B.+.i@...8..^...&YR...I.o...,.....[0Y0....H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. D.'.N@.(..GK....m...A.0.."

C:\Users\user\AppData\Local\Temp\fcee178f-1175-4cd9-9861-d4896a6f469c.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	248531
Entropy (8bit):	7.963657412635355
Encrypted:	false
SSDEEP:	3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
MD5:	541F52E24FE1EF9F8E12377A6CCAE0C0
SHA1:	189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6
SHA-256:	81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
SHA-512:	D779D78A15C5EFCA51EBD6B96A7CCB6D718741BDF7D9A37F53B2EB4B98AA1A78BC4CFA57D6E763AAB97276C8F9088940AC0476690D4D46023FF4BF52F3326C88
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b.........\..F!...b...l5....zJ.q.......L].....w[T0.6....E.....r..%Z.vFm.9..5!,.~g5...;.t...']....+A.....u....k...e..&..l.6r[yU...%..f.......N..V.....<+.....l..}.{...z...)y.n..'..).....,.b....5.08K%..O.g..D.S.F5o..<(....>....\f..X..I..2."l...w....7f\|.~.c.4.E.......0..0....H............0.......).'..b.$w\$.q&.]zF_2..;...?.U,...W..L1.2...R..#....W.....c1k.$W..$.J....+M!.Hz.n`U.I)N.\|b.l....{.K@]6.LlP/....](.A..................I...).H....IQ.y.;MG.d..ix..#f.Z$\|..\|.?...0K...t"i..s...Y..%.Ky....0...{.!+.~v.;....J.....Z....).(6..@?v.;~..2..c....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. .0...\|!..A..L.+.=...kP.!.1..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\bg\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	796
Entropy (8bit):	4.864931792423268
Encrypted:	false
SSDEEP:	12:1HEJMLkSlwZGGMLkSlwZ+WYpU34f145Gb+dgoxTyO8ZpU34f1L0frhmJ03OyZnLt:1HE7n4gn8WYpYrbhz8ZpotHOGAOf6aD
MD5:	6F8E288A9AD5B1ED8633B430E2B4D4CA
SHA1:	F671D3D4BEFA431D1946D706F4192D44E29B6F08
SHA-256:	A114E2783D0E9B12155017323BA70838F0F82A71C7EE8DC1F115AE36991241F8
SHA-512:	0F87F3F0D115B872288949E59ACD3CD41B1FBC64A622D8FDA6D71FAFC5A900D92ADFBB0E7EB926F2A8759BBAA0896D48728FB719BBF5EF54AC21027328F7700C
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "........ . ... ........ .. Chrome".. },.. "app_name": {.. "message": "........ . ... ........ .. Chrome".. },.. "craw_app_unavailable": {.. "message": "........... .... ...... .. .............".. },.. "craw_connect_to_network": {.. "message": "...., ........ .. . ......".. },.. "iap_unavailable": {.. "message": "........... .... ...... .. .......... ....... .. .........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "...., ...... . Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\ca\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	675
Entropy (8bit):	4.536753193530313
Encrypted:	false
SSDEEP:	12:1HEJ0gbbGG0gbb+WYpU34g3YbiLO+dgyGFoO8ZpU34+puiPmb03OyZnLAOfTYABk:1HE5baib6WYpm31Lt0Z8Zp8pxOGAOfKD
MD5:	1FDAFC926391BD580B655FBAF46ED260
SHA1:	C95743C3F43B2B099FEBEBC5BD850F0C20E820AC
SHA-256:	C67898B67F9C9209EAFDA6532B62D5789863CFB855998DD6A70E7775316CEC20
SHA-512:	39D95D45C5746DA3BAA7AE6A3344EA17D7A7C3569C2A56959FF119261DA08C747A320FCF701AC72B8DBDBF8BF06FD8B239017A282CDDA444F3826D4EC672CBB4
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Sistema de pagaments de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagaments de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Ara mateix aquesta aplicaci. no est. disponible.".. },.. "craw_connect_to_network": {.. "message": "Connecteu-vos a una xarxa.".. },.. "iap_unavailable": {.. "message": "La funci. Pagaments a l'aplicaci. no est. disponible actualment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicieu la sessi. a Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\cs\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	641
Entropy (8bit):	4.698608127109193
Encrypted:	false
SSDEEP:	12:1HEJfZGGfZ+WYpU34OBh+dgN/O8ZpU34j05U03OyZnLAOfTYWc:1HEl4G8WYpdt8Zpq5TOGAOfW
MD5:	76DEC64ED1556180B452A13C83171883
SHA1:	CFB1E56FD587BCDC459C1D9A683B71F9849058F9
SHA-256:	32290D69A90E6BAAC428B10382C99221B12773BB9A184F3B93DFB48A4F6D7A40
SHA-512:	5230A217968D5DC463E2E92D704544311A721E5CEF65C3125CBD8DEB9C0293D3BFB5C820A6011ABF77095FDEE7DAF67D541DC202B0C9CDB0908CBB85D84885CB
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "app_name": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikace v sou.asn. dob. nen. dostupn..".. },.. "craw_connect_to_network": {.. "message": "P.ipojte se pros.m k s.ti.".. },.. "iap_unavailable": {.. "message": "Platby v aplikaci aktu.ln. nejsou k dispozici.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "P.ihlaste se do Chromu.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\da\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	624
Entropy (8bit):	4.5289746475384565
Encrypted:	false
SSDEEP:	12:1HEJJMKKFZGGJMKKFZ+WYpU34OHu+dgxlCZO8ZpU34J4Wu03OyZnLAOfTYzD:1HErMKfqMKVWYpM6lL8ZpDNOGAOfiD
MD5:	238B97A36E411E42FF37CEFAF2927ED1
SHA1:	4E47AC90BA24C8F4724D9293FA40CFD4ADA66FE0
SHA-256:	4977D4A053542FF66967FAED6B06585DD70E68E20BFEB533B66FE3287F9655D9
SHA-512:	FD0742D47B5F5AB9AAD9B4C3D57F63CB693E060EECE123A72036C6E92156D099495C7E9E9CC6DC83EEBCDDCC4B4C81FB47E4C9559DA3EBA024780FFF10C53E0A
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Betalinger i Chrome Webshop".. },.. "app_name": {.. "message": "Betalinger i Chrome Webshop".. },.. "craw_app_unavailable": {.. "message": "Appen er ikke tilg.ngelig i .jeblikket.".. },.. "craw_connect_to_network": {.. "message": "Opret forbindelse til et netv.rk.".. },.. "iap_unavailable": {.. "message": "Betaling i appen er ikke tilg.ngelig i .jeblikket.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Log ind p. Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\de\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.583694000020627
Encrypted:	false
SSDEEP:	12:1HEJQ1ZGGQ1Z+WYpU34pCEMT+dgJMlCTO8ZpU34p6FK603OyZnLAOfTYJ6K:1HEzWWYp3Bewv8Zp7k4OGAOfQj
MD5:	6B3E916E8C1991AA0453CBA00FEDCAAA
SHA1:	D6366D15912E40CA107FD42BFE9579C3336A51F9
SHA-256:	A62FFAB910E31531758EEE48B2CC71A8857BEC3021DEAD50B668CBA3C8667053
SHA-512:	87EA4311B61F29543B13F3E17DFA919D0C320B4FE370CC152E0B1514BCA79B0ABB526DDCF08621D6EBFA48923EE8FB4C667EFB120A72BD9583EEBEE7BFB80552
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Store-Zahlungen".. },.. "app_name": {.. "message": "Chrome Web Store-Zahlungen".. },.. "craw_app_unavailable": {.. "message": "Die App ist momentan nicht verf.gbar.".. },.. "craw_connect_to_network": {.. "message": "Bitte stellen Sie eine Verbindung zu einem Netzwerk her.".. },.. "iap_unavailable": {.. "message": "In-App-Zahlungen sind momentan nicht m.glich.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Bitte melden Sie sich in Chrome an.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\el\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	787
Entropy (8bit):	4.973349962793468
Encrypted:	false
SSDEEP:	24:1HEw+aZ+6WYpbWZe80A08ZpCGyDVWlOGAOf+XD:WguYpCZnpEZbGoD
MD5:	05C437A322C1148B5F78B2F341339147
SHA1:	AB53003A678E44A170E73711FBD9949833BBF3AA
SHA-256:	A052C32B4FCAC61152EB0ADB2C260FB6A8256AD104AA0013DB93E9798D41A070
SHA-512:	C36CB9202A34356DD06D377E2A088F428D0B8EBE7D2E54F8380485E9D94A0598D7F651C1E7A2FD55BE481D49C02B0812F2BA335E08611EC85EE0BD60784A6B40
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "........ ... Chrome Web Store".. },.. "app_name": {.. "message": "........ ... Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": ". ........ .... .. ..... ... ..... ..........".. },.. "craw_connect_to_network": {.. "message": ".......... .. ... .......".. },.. "iap_unavailable": {.. "message": ".. ........ ..... ......... ... ..... ..... .. ...... ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": ".......... ... Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\en\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	593
Entropy (8bit):	4.483686991119526
Encrypted:	false
SSDEEP:	12:1HEJ6GG6+WYpU34OuFpR+dgGfFZO8ZpU34aEGFpR03OyZnLAOfTYdD:1HEVSWYpVp0JS8Zp5KpaOGAOfuD
MD5:	91F5BC87FD478A007EC68C4E8ADF11AC
SHA1:	D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6
SHA-256:	92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
SHA-512:	FDC2A29B04E67DDBBD8FB6E8D2443E46BADCB2B2FB3A850BBD6198CDCCC32EE0BD8A9769D929FEEFE84D1015145E6664AB5FEA114DF5A864CF963BF98A65FFD9
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Store Payments".. },.. "app_name": {.. "message": "Chrome Web Store Payments".. },.. "craw_app_unavailable": {.. "message": "App currently unavailable.".. },.. "craw_connect_to_network": {.. "message": "Please connect to a network.".. },.. "iap_unavailable": {.. "message": "In-App Payments is currently unavailable.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Please sign into Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\en_GB\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	593
Entropy (8bit):	4.483686991119526
Encrypted:	false
SSDEEP:	12:1HEJ6GG6+WYpU34OuFpR+dgGfFZO8ZpU34aEGFpR03OyZnLAOfTYdD:1HEVSWYpVp0JS8Zp5KpaOGAOfuD
MD5:	91F5BC87FD478A007EC68C4E8ADF11AC
SHA1:	D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6
SHA-256:	92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
SHA-512:	FDC2A29B04E67DDBBD8FB6E8D2443E46BADCB2B2FB3A850BBD6198CDCCC32EE0BD8A9769D929FEEFE84D1015145E6664AB5FEA114DF5A864CF963BF98A65FFD9
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Store Payments".. },.. "app_name": {.. "message": "Chrome Web Store Payments".. },.. "craw_app_unavailable": {.. "message": "App currently unavailable.".. },.. "craw_connect_to_network": {.. "message": "Please connect to a network.".. },.. "iap_unavailable": {.. "message": "In-App Payments is currently unavailable.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Please sign into Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\es\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	661
Entropy (8bit):	4.450938335136508
Encrypted:	false
SSDEEP:	12:1HEJHlbGGHlb+WYpU34ubdDH+dgxbFxTO8ZpU34lPbdlVo03OyZnLAOfTY6xjD:1HEvaC6WYpcDeEFxq8ZpNl5OGAOffD
MD5:	82719BD3999AD66193A9B0BB525F97CD
SHA1:	41194D511F1ACC16C1CA828AC81C18C8C6B47287
SHA-256:	4DB9B2721E625C18B9E05C04B31AF5D9694712F1CAAF6219ABE34BB08E5DB1C7
SHA-512:	D4C49B43427799B6292CEED11CACB1D76F7CE43EBF402B43B638A6EB2B414ED0981E386CB8CDF0B51D1BD9552934FE25B2F6392266BB73D8C9A691F65BCE0128
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "Los pagos en la aplicaci.n no est.n disponibles en este momento.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicia sesi.n en Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\es_419\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	637
Entropy (8bit):	4.47253983486615
Encrypted:	false
SSDEEP:	12:1HEJHlbGGHlb+WYpU34ubdDH+dgxbFxTO8ZpU34GLO03OyZnLAOfTYiJD:1HEvaC6WYpcDeEFxq8Zp4LlOGAOfvD
MD5:	6B2583D8D1C147E36A69A88009CBEBC7
SHA1:	4D4DEEB4BE6AA0181825F3371A761ABC5B4D5937
SHA-256:	6659BC3705311D7641A73995DCFEA80C7734F2F4EBBC3787B3892A240348324F
SHA-512:	37F0DBFCC1B5A2B8E4C92C49D2D9DEEF25616421350324F57E0149A45A6CCB437F5E3CBE97412C4B5DBBF2593783C7DF71E9C25A851AEAE6E4764C545723FA53
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "En este momento, Pagos En-Apps no est. disponible.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Accede a Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\et\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	595
Entropy (8bit):	4.467205425399467
Encrypted:	false
SSDEEP:	12:1HEJfPGGGfPG+WYpU34Ze7z+dgrW9O8ZpU34ZwZz03OyZnLAOfTYgoLIR:1HEdvqlWYpTeObk8ZpT/OGAOfuLIR
MD5:	CFF6CB76EC724B17C1BC920726CB35A7
SHA1:	14ED068251D65A840F00C05409D705259D329FFC
SHA-256:	C85800BF45942FCC7FD6B1DF929C25F9CC2A977A6678966BD03D4B6B69889AFD
SHA-512:	53D7D01BB30C0306DE65A79FD9551D2E8C1F71F4F45F71906B009071CB3E0F231E6A50FDD78773E9B4DE94085BC7B97F829842FA21A89A2080D33458B745C46F
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome'i veebipoe maksed".. },.. "app_name": {.. "message": "Chrome'i veebipoe maksed".. },.. "craw_app_unavailable": {.. "message": "Rakendus pole praegu saadaval.".. },.. "craw_connect_to_network": {.. "message": "Looge .hendus v.rguga.".. },.. "iap_unavailable": {.. "message": "Rakendusesisesed maksed ei ole praegu saadaval.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Logige Chrome'i sisse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\fi\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	647
Entropy (8bit):	4.595421267152647
Encrypted:	false
SSDEEP:	12:1HEJRuzGGRuz+WYpU34ujSBu+dgYO8ZpU34J+Bu03OyZnLAOfTY5HN:1HEFcWYpPNa8ZpD+FOGAOfEHN
MD5:	3A01FEE829445C482D1721FF63153D16
SHA1:	F3EAAADDC03F943FC88B30B67F534AA13E3336DD
SHA-256:	0BDE54B20845124113383B6EB81E43A0F05E4EB0C44BEE3C1DFAC4CC5FEC2836
SHA-512:	3B92B6C86D30FD36AA3CEFF8773BA60C3FC5CC19C693540137044C5838A5503895C770C0336A4D0A3DB5E42F3FB36274D8D3F85B9DCA2F3EC0E974FDDB0BEAD8
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Storen maksut".. },.. "app_name": {.. "message": "Chrome Web Storen maksut".. },.. "craw_app_unavailable": {.. "message": "Sovellus ei ole t.ll. hetkell. k.ytett.viss..".. },.. "craw_connect_to_network": {.. "message": "Muodosta verkkoyhteys.".. },.. "iap_unavailable": {.. "message": "Sovelluksen sis.iset maksut eiv.t ole t.ll. hetkell. k.ytett.viss..".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Kirjaudu sis..n Chromeen.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\fil\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	658
Entropy (8bit):	4.5231229502550745
Encrypted:	false
SSDEEP:	12:1HEJADlbGGADlb+WYpU34hTUT+dgHfZAFFZO8ZpU34hTjzeT03OyZnLAOfTYHfvF:1HEYah6WYp7TUSoxOS8Zp7TOsOGAOfqV
MD5:	57AF5B654270A945BDA8053A83353A06
SHA1:	EEEF7A4F869F97CF471A05D345E74F982D15E167
SHA-256:	EC002ED92359F67818B49455DFC579E140368E6A004080AF022FD4F57F6B03F2
SHA-512:	5F0AE839FCF3F4EA48FF41A76655AE0F3821564AFD5D42FBB9FBB9A38E8D8F7BB5E9B6F71064588CD441261F644095A44A755C134CE546D506D9A21E488BAF52
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "app_name": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Kasalukuyang hindi available ang app.".. },.. "craw_connect_to_network": {.. "message": "Mangyaring kumonekta sa isang network.".. },.. "iap_unavailable": {.. "message": "Kasalukuyang hindi available ang Mga Pagbabayad na In-App.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Mangyaring mag-sign in sa Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\fr\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	677
Entropy (8bit):	4.552569602149629
Encrypted:	false
SSDEEP:	12:1HEJALf/nbGGALf/nb+WYpU34Owdgbyb+dgdQjO8ZpU34ITQpGnbyb03OyZnLAO8:1HE4Hna1Hn6WYpNdgpY8ZpSTQwnBOGAh
MD5:	8D11C90F44A6585B57B933AB38D1FFF8
SHA1:	3F9D44EA8807069A32AACA2AAAD02FD892E6CC90
SHA-256:	599491F8C52B945C16C441ADF45BFD45AFAE046DA07757D97C56AF4DE75ED3B5
SHA-512:	D7EF7F5AD7EF1A1595825D79B69E2B1E988AD3CF1F3881496FCCD30F241E4E9C6E457F9F5D0F855DE3536DB7A40C3E1C55946B50D3F556F4A35285066A0CD6F7
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "app_name": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "craw_app_unavailable": {.. "message": "Application indisponible pour le moment.".. },.. "craw_connect_to_network": {.. "message": "Veuillez vous connecter . un r.seau.".. },.. "iap_unavailable": {.. "message": "Les paiements via l'application ne sont pas disponibles pour le moment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Veuillez vous connecter . Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\hi\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	835
Entropy (8bit):	4.791154467711985
Encrypted:	false
SSDEEP:	24:1HEs07J0JWYp9vnCSVLP8Zp6CsOGAOf8SLm:Wh7qgYp1CMLUph1GiSLm
MD5:	E376D757C8FD66AC70A7D2D49760B94E
SHA1:	1525C5B1312D409604F097768503298EC440CC4D
SHA-256:	8106D98C4F8DA16DB698444409558E29CC96735E188BFA303C333A5D99231C1D
SHA-512:	673F3F259AF2946E4F49BBED14A2A70D44BF9FDA9D7A71DC9172BA9B7B3C7F7062B16D29682B638D485B0520ED6F99E7A735F28C7C719B539559005B69FA7555
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome ... ..... ......".. },.. "app_name": {.. "message": "Chrome ... ..... ......".. },.. "craw_app_unavailable": {.. "message": "......... .. ... ...... .... ...".. },.. "craw_connect_to_network": {.. "message": "..... ....... .. ...... .....".. },.. "iap_unavailable": {.. "message": "..-.. ...... ... ...... .... ...".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "..... Chrome ... .... .. .....".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\hr\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	618
Entropy (8bit):	4.56999230891419
Encrypted:	false
SSDEEP:	12:1HEJGiimxmbZGGGiimxmbZ+WYpU34OBOEuhopIO+dgcapZO8ZpU34GiiZrMrQphK:1HE4H4TH8WYpNjTta28ZpQVLP0SOGAOK
MD5:	8185D0490C86363602A137F9A261CC50
SHA1:	5BD933B874441CEACB9201CCC941FF67BAED6DC0
SHA-256:	A2B2EC359A9DD9DCCCE02859CE1E738BD30FAA4A05F1DC522893FFDF722BBC15
SHA-512:	D7629978FC031EA5F716F9C1065FB2FEAB48C15F10CD68830DC966FA1002C03DDC7ACDE314C7D075F9F3A0A68552A6ACBCCDEE24CF20B6C3DD1BCE6562D0396E
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "app_name": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikacija trenuta.no nije dostupna.".. },.. "craw_connect_to_network": {.. "message": "Pove.ite se s mre.om.".. },.. "iap_unavailable": {.. "message": "Pla.anje u aplikaciji trenuta.no nije dostupno.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prijavite se na Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\hu\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	683
Entropy (8bit):	4.675370843321512
Encrypted:	false
SSDEEP:	12:1HEJVJiGGVJi+WYpU34Hpo9O+dgMmfgijO8ZpU34Huo9O03OyZnLAOfTYBIAYm:1HEVrk5WYpQzTUg/8ZpwoXOGAOfYIAd
MD5:	85609CF8623582A8376C206556ED2131
SHA1:	1E16EB70DB5E59BB684866FF3E3925C2DEF25A12
SHA-256:	32A249749F12ADB6A220BF9ADC272C7E5D9AD5497A38B0086D961E3ABA17FBC6
SHA-512:	27883430865D3CFA6EDFE8C6CE1442BD96150B5CE520CCF7D556A330CAA6392C712B47BD86F7350E174876BC681F6DEC94D1312402655B0AF90883A2899EC78B
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Internetes .ruh.z Fizet.si rendszere".. },.. "app_name": {.. "message": "Chrome Internetes .ruh.z Fizet.si rendszere".. },.. "craw_app_unavailable": {.. "message": "Az alkalmaz.s jelenleg nem .rhet. el.".. },.. "craw_connect_to_network": {.. "message": "K.rj.k, csatlakozzon egy h.l.zathoz.".. },.. "iap_unavailable": {.. "message": "Az alkalmaz.son bel.li fizet.s jelenleg nem .rhet. el.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Jelentkezzen be a Chrome-ba.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\id\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	604
Entropy (8bit):	4.465685261172395
Encrypted:	false
SSDEEP:	12:1HEJs25bGGs25b+WYpU34ORBHAeSJ+dgkmO8ZpU34s22C/SzFAs03OyZnLAOfTYR:1HEBaA6WYpaHFH8ZptOYOGAOf2D
MD5:	EAB2B946D1232AB98137E760954003AA
SHA1:	60BDC2937905B311D2C9844DF2D639D7AC9F7F67
SHA-256:	C6E8800450602DE0F39FE9F6854472383813FB454B08ABAE7E25A9167CE004C3
SHA-512:	970FEC9A9EF0BAF7F693C4C5977F3B47914579C5B5414FCE9DBB5E4574659A5BB9AD2DE0CC886B368F49C019785AF7D2D7FE82F71341F039EADC399ED776CA12
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pembayaran Chrome Webstore".. },.. "app_name": {.. "message": "Pembayaran Chrome Webstore".. },.. "craw_app_unavailable": {.. "message": "Aplikasi tidak tersedia saat ini.".. },.. "craw_connect_to_network": {.. "message": "Sambungkan ke jaringan.".. },.. "iap_unavailable": {.. "message": "Pembayaran Dalam Aplikasi saat ini tidak tersedia.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Harap masuk ke Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\it\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	603
Entropy (8bit):	4.479418964635223
Encrypted:	false
SSDEEP:	12:1HEJsqd/bGGsqd/b+WYpU34OcX4+dgUvIO8ZpU34vq703OyZnLAOfTYsD:1HEXd/aKd/6WYpZrv58ZpskOGAOfzD
MD5:	A328EEF5E841E0C72D3CD7366899C5C8
SHA1:	2851ED658385804E87911643F5A4200B1FB26E13
SHA-256:	CD891C45F7586FB4A2514205A11F260E4A6D4482FA03D901909DD9F57BE0536D
SHA-512:	E47297896E981774EC3B59D41B89D6BA9333F6B4435EB9727D8645A46B10C7D408ADE06844871FA757382FBE7E645276449DB7B1B23BC59C9A71A5CB5A5ECC57
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamenti Chrome Web Store".. },.. "app_name": {.. "message": "Pagamenti Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "App al momento non disponibile.".. },.. "craw_connect_to_network": {.. "message": "Collegati a una rete.".. },.. "iap_unavailable": {.. "message": "La funzione Pagamenti In-App non . al momento disponibile.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Accedi a Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\ja\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	697
Entropy (8bit):	5.20469020877498
Encrypted:	false
SSDEEP:	12:1HEJ07uGG07u+WYpU34DB+dgnsVztO8ZpU34MwiB03OyZnLAOfTYmSH:1HEcnDNWYp1kxU8Zp2wiqOGAOfpSH
MD5:	9B3A5D473C3F2BBFAEECE94A07A940B8
SHA1:	61BACA342CF766BBA15C7B4D892A0E7DAC9405AA
SHA-256:	706312A4A2AEF3317223F141EB2B82685345B7EED444F16BB4DF3A272716DA1F
SHA-512:	94F6FEE9A11BD890AB8211C98D1CC142348961EBCF756F66477A3E3A76519804B70BE0AE4E551739F8AFE32D7ADE6EDE04EF6B9B9EED03E3A857E6058EEDD4C6
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome ........".. },.. "app_name": {.. "message": "Chrome ........".. },.. "craw_app_unavailable": {.. "message": ".................".. },.. "craw_connect_to_network": {.. "message": "................".. },.. "iap_unavailable": {.. "message": ".......................".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Chrome ............".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\ko\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	631
Entropy (8bit):	5.160315577642469
Encrypted:	false
SSDEEP:	12:1HEJ1GG1+WYpU34K3aT+dgh8d0HTO8ZpU34KaNkaT03OyZnLAOfTY/YeHx:1HEajWYpc3aSl0Hq8Zpc6kasOGAOfyYA
MD5:	9F6B4D82A70C74CA751E2EAE70FAB5CF
SHA1:	0534F125FFCE8222277CF2BE3401C59DAF9217F8
SHA-256:	D1467B8D037114403E8F4EFC52E88C4A7FEB96126BE4CFF883FEFF1084EF7E68
SHA-512:	ED9319830314385D09C06F62EE34186E8CA576C857981205E4468A28B3ACD2AB03384E77B866032C324ABDD97A56EFD08E2D6E0C79D563578B3EC52517819BD8
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome . ... ..".. },.. "app_name": {.. "message": "Chrome . ... ..".. },.. "craw_app_unavailable": {.. "message": ".. .. ... . .....".. },.. "craw_connect_to_network": {.. "message": "..... ......".. },.. "iap_unavailable": {.. "message": ".. .. ... ... . .....".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Chrome. .......".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\lt\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	665
Entropy (8bit):	4.66839186029557
Encrypted:	false
SSDEEP:	12:1HEJpqHnkGGpqHnk+WYpU346M+dgV6O8ZpU34WzSWz03OyZnLAOfTYx:1HELqHtKqHPWYpM3A8ZpwGzOGAOfg
MD5:	4CA644F875606986A9898D04BDAE3EA5
SHA1:	722A10569E93975129D67FBDB75B537D9D622AD1
SHA-256:	7C311AB751D840D750C11553C083785813E079C1D464FE568A98C9E3EF3DB96C
SHA-512:	E575E3D0622F5BD4B6C0EE79128A1B1F1882195670139D1983F4377D847141B8FB8EBB8BCED82AF3A220ED07D3577AFBE085BADC0E9C7678292B80E3EC5D3444
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": ".Chrome. internetin.s parduotuv.s mok.jimo sistema".. },.. "app_name": {.. "message": ".Chrome. internetin.s parduotuv.s mok.jimo sistema".. },.. "craw_app_unavailable": {.. "message": "Programa .iuo metu negalima.".. },.. "craw_connect_to_network": {.. "message": "Prisijunkite prie tinklo.".. },.. "iap_unavailable": {.. "message": "Mok.jimai programoje .iuo metu negalimi.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prisijunkite prie .Chrome..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\lv\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	671
Entropy (8bit):	4.631774066483956
Encrypted:	false
SSDEEP:	12:1HEJFhVbGGFhVb+WYpU34wDoz+dgGedBO8ZpU34wF03OyZnLAOfTYGYID:1HENQKkWYp2Doy/em8Zp2WOGAOfRYID
MD5:	C5CE2C51391EAFD3DA9E4C71549A3C28
SHA1:	1F67FF6EF6E90C0CE3AAF56ED543A3EFD381574D
SHA-256:	1FA1DF2CA8516DEF490FB8484E9AA498ACFF80EEF5C9258FFE42D3678E6C7DED
SHA-512:	C85F6281E682F52BC2147DEA7E2F3BB4DC48D98BADA8687B05C6C7271C78EA7F5431CD51671A4184C9AE004FC53C016E3C594697F483195CCBA08A93821EEF70
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome interneta veikala maks.jumu sist.ma".. },.. "app_name": {.. "message": "Chrome interneta veikala maks.jumu sist.ma".. },.. "craw_app_unavailable": {.. "message": "Lietotne pagaid.m nav pieejama.".. },.. "craw_connect_to_network": {.. "message": "L.dzu, izveidojiet savienojumu ar t.klu.".. },.. "iap_unavailable": {.. "message": "Maks.jumi lietotn.s pa.laik nav pieejami.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "L.dzu, pierakstieties p.rl.k. Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\nb\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	624
Entropy (8bit):	4.555032032637389
Encrypted:	false
SSDEEP:	12:1HEJhiOGGhiO+WYpU34OHSN+dgFjdGFZO8ZpU34JgdN03OyZnLAOfTYiD:1HEDiHIitWYpCYJ8ZpD1OGAOfRD
MD5:	93C459A23BC6953FF744C35920CD2AF9
SHA1:	162F884972103A08ADB616A7EB3598431A2924C5
SHA-256:	2CD700AEB57D89C2E73333D0702556EE3FF3863516170F85669BC680FCBDC4E0
SHA-512:	F76E6E8D8499306883C3EC1E774F7E8BB6B601096DA5A14D17D3E7D5732829542041E42B7350466589291ADCC83FB065FD591B4E20CFCF8EDC586E128ECBFCB5
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Nettmarked-betalinger".. },.. "app_name": {.. "message": "Chrome Nettmarked-betalinger".. },.. "craw_app_unavailable": {.. "message": "Appen er utilgjengelig for .yeblikket.".. },.. "craw_connect_to_network": {.. "message": "Du m. koble til et nettverk.".. },.. "iap_unavailable": {.. "message": "Betaling i app er ikke tilgjengelig for .yeblikket.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Du m. logge p. Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\nl\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	615
Entropy (8bit):	4.4715318546237315
Encrypted:	false
SSDEEP:	12:1HEJJQGkbGGJQGkb+WYpU34OQKJT+dgiXUmvFZO8ZpU34g7JT03OyZnLAOfTYMD:1HErxkaqxk6WYptndXI8ZpTOGAOfbD
MD5:	7A8F9D0249C680F64DEC7650A432BD57
SHA1:	53477198AEE389F6580921B4876719B400A23CA1
SHA-256:	92BE7C2DC9CFBE5A65E9CE6488D364C8D7EC19E7B67A31E4D43C1CB2B169671C
SHA-512:	969AB979546A741C0F3EDBEEB21BABA375FA8870D4FB9248CDD4C305736E332E10CAB7B64C5C078E60EC0CD73848101B390BE8F44B89C310058AF4C1CA3C8AA7
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Betalingen via Chrome Web Store".. },.. "app_name": {.. "message": "Betalingen via Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "App momenteel niet beschikbaar.".. },.. "craw_connect_to_network": {.. "message": "Maak verbinding met een netwerk.".. },.. "iap_unavailable": {.. "message": "In-app-betalingen is momenteel niet beschikbaar.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Log in bij Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\pl\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	636
Entropy (8bit):	4.646901997539488
Encrypted:	false
SSDEEP:	12:1HEJbiVbGGbiVb+WYpU34OBHlBi9+dgQUg6O8ZpU34bdbfiIu03OyZnLAOfTYR5k:1HE5iVauiV6WYpIAYr8ZpxFiaOGAOfIC
MD5:	0E6194126AFCCD1E3098D276A7400175
SHA1:	E8127B905A640B1C46362FA6E1127BE172F4A40F
SHA-256:	E2699F98C511B18A2AFB82EAE9A4804B646C4FF1077D80E77C17A3943A6373C2
SHA-512:	A71F7C7BFBBF1E37E699601AF2E095C56CBA91F90CB7556477DF31D01B83ADFB1271E1775C9BA299FF6875BBFC2B6AB47488CC88E33DEF2F6F2E0E5AC687B777
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "P.atno.ci w sklepie Chrome Web Store".. },.. "app_name": {.. "message": "P.atno.ci w sklepie Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplikacja jest obecnie niedost.pna.".. },.. "craw_connect_to_network": {.. "message": "Po..cz si. z sieci..".. },.. "iap_unavailable": {.. "message": "P.atno.ci w ramach aplikacji s. teraz niedost.pne.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Zaloguj si. w Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\pt_BR\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	636
Entropy (8bit):	4.515158874306633
Encrypted:	false
SSDEEP:	12:1HEJsc/bGGsc/b+WYpU34OLw+dgn/KzO8ZpU34FjIBMwGRO03OyZnLAOfTYN+KcY:1HEb/a8/6WYp4mZ8Zp7cKlOGAOf2tD
MD5:	86A2B91FA18B867209024C522ED665D5
SHA1:	63DEC245637818C76655E01FCB6D59784BC7184E
SHA-256:	6374880FDD1F8AF1EE8AEA6A06B73BE0AB265AFCEB4FE6F08BDE3B3989264B21
SHA-512:	DA6DBDE5028756421C2904F605632EE98831A25A1247E6238A931629B94CE8A00FD76F4235F118D2167304BD60F2C06B2AD78E54FF6CE53F8C38DF8C7B5AFCE4
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamentos da Chrome Web Store".. },.. "app_name": {.. "message": "Pagamentos da Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplicativo indispon.vel no momento.".. },.. "craw_connect_to_network": {.. "message": "Conecte-se a uma rede.".. },.. "iap_unavailable": {.. "message": "No momento, os Pagamentos no aplicativo n.o est.o dispon.veis.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Fa.a login no Google Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\pt_PT\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	622
Entropy (8bit):	4.526171498622949
Encrypted:	false
SSDEEP:	12:1HEJsZUkbGGsZUkb+WYpU34OAE+dgqxKzO8ZpU34rEpBfvPO03OyZnLAOfTYLD:1HEmUka5Uk6WYpFvdxZ8ZpSTnPlOGAOS
MD5:	750A4800EDB93FBE56495963F9FB3B94
SHA1:	8BFB915488A4EB3CB33D68E2E59F1F8447DB7D61
SHA-256:	C1C94F65FABAF17DEF98A8587711A56D61B1E5607500E9B01F2824DB109F9E83
SHA-512:	2AEDEF5793406221BE76AF22031CE8C30AB5FAEAED09BB394C153E2EBE990C89C1A2A73B40D8A92842641AFCA8C77FFD808A2058602D3646FD8DAE2844406F24
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamentos via Chrome Web Store".. },.. "app_name": {.. "message": "Pagamentos via Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplica..o atualmente indispon.vel.".. },.. "craw_connect_to_network": {.. "message": "Ligue-se a uma rede.".. },.. "iap_unavailable": {.. "message": "Os Pagamentos na app est.o atualmente indispon.veis.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicie sess.o no Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\ro\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	641
Entropy (8bit):	4.61125938671415
Encrypted:	false
SSDEEP:	12:1HEJqJrJZGGqJrJZ+WYpU344HIx2Z+dgrVPlZO8ZpU34qT7hI3O03OyZnLAOfTYU:1HEC4D8WYpKow8WV68ZpKhoOGAOfoVGD
MD5:	98D43E4B1054A65DF3FA3CC40AB6FB6D
SHA1:	46E0A21C4DA2BB5D4D8F837AE211C1B6FA26E7E2
SHA-256:	113A13900CBA62FE8AED06751971C23A80A99B47F9BE219CF884D57DB19611D9
SHA-512:	A76DC53912A4F46714926B9EA2B22E909540E447F61F6DD72607AB7B3BB5D4A9B39E525B04C33AEC53BA813D14AC1FB5827275B2524E52B693E83171E1CD1466
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pl..i prin Magazinul web Chrome".. },.. "app_name": {.. "message": "Pl..i prin Magazinul web Chrome".. },.. "craw_app_unavailable": {.. "message": ".n prezent, aplica.ia nu este disponibil..".. },.. "craw_connect_to_network": {.. "message": "Conecteaz.-te la o re.ea.".. },.. "iap_unavailable": {.. "message": "Pl..ile .n aplica.ie nu sunt disponibile momentan.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Conecteaz.-te la Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir6760_1786172503\CRX_INSTALL\_locales\ru\messages.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	744
Entropy (8bit):	4.918620852166656
Encrypted:	false
SSDEEP:	12:1HEJ7OJHZMSl3ZGG7OJHZMSl3Z+WYpU34zWJ2F+dgVtLSv/TO8ZpU347NWjT03On:1HElOJHZMq4uOJHZMq8WYpdWJ/YGHq8m
MD5:	DB2EDF1465946C06BD95C71A1E13AE64
SHA1:	FB4F3ECE9ECECEBBC6CA2A592A15FB9C1FDFB811
SHA-256:	FBAF22CE6E16DE174CED8CB5EA3098CCA1C3426A2111FF33BD3E64DA64ED67AB
SHA-512:	4E0CF00BAEF1757548DEB17BBE1AF55770A0A0F7351779EF55C7DEFA6D112D0227B8865C2C22E0EC62E6E2F1C8E1632A2D0CE6828D25C5ABBF143C990116F632
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "......... ....... ........-........ Chrome".. },.. "app_name": {.. "message": "......... ....... ........-........ Chrome".. },.. "craw_app_unavailable": {.. "message": ".......... ...........".. },.. "craw_connect_to_network": {.. "message": "............ . .....".. },.. "iap_unavailable": {.. "message": "....... ..... .......... ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "....... . Chrome.".. }..}..

Static File Info

No static file info

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/11/21-12:26:32.992266	TCP	2515	WEB-MISC PCT Client_Hello overflow attempt	49740	443	192.168.2.4	172.67.194.129

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 11, 2021 12:26:31.826633930 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:31.877979040 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:31.878129959 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:31.879822969 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:31.979512930 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:31.979552984 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:31.979597092 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:31.979701042 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:31.989147902 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:31.989181995 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:31.989310026 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.105384111 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.650165081 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.660442114 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.706260920 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714160919 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714185953 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714207888 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714221954 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.714232922 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714257956 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714262962 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.714282036 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714292049 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.714342117 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714365959 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714389086 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714391947 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.714412928 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714436054 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714457989 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.714457989 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714477062 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.714479923 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.714519978 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764349937 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764389038 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764410973 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764435053 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764457941 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764472961 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764482975 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764508963 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764512062 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764532089 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764539003 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764555931 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764576912 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764579058 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764601946 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764616013 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764625072 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764643908 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764664888 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764672995 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764689922 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764700890 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764713049 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764735937 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764744997 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764759064 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764780045 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764802933 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764811039 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764827013 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764846087 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764853954 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764877081 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764899969 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764909029 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764925003 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764946938 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.764946938 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764966965 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.764990091 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.814979076 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815013885 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815040112 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815054893 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.815066099 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815079927 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.815092087 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815126896 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815149069 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.815160990 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815184116 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815201998 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.815206051 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815233946 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815246105 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.815257072 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815279007 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815296888 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815298080 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.815320015 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815336943 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.815341949 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815366030 CEST	443	49733	158.177.118.97	192.168.2.4
Jun 11, 2021 12:26:32.815387011 CEST	49733	443	192.168.2.4	158.177.118.97
Jun 11, 2021 12:26:32.815387964 CEST	443	49733	158.177.118.97	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 11, 2021 12:26:21.921058893 CEST	59123	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:21.973052979 CEST	53	59123	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:22.749532938 CEST	54531	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:22.799998999 CEST	53	54531	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:23.537225008 CEST	49714	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:23.589135885 CEST	53	49714	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:23.828388929 CEST	58028	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:23.887077093 CEST	53	58028	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:24.362345934 CEST	53097	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:24.421894073 CEST	53	53097	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:25.790939093 CEST	49257	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:25.843873024 CEST	53	49257	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:27.209791899 CEST	62389	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:27.262156963 CEST	53	62389	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:29.036569118 CEST	49910	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:29.089855909 CEST	53	49910	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:31.401406050 CEST	63153	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:31.453453064 CEST	53	63153	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:31.745719910 CEST	52991	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:31.749591112 CEST	53700	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:31.759131908 CEST	51726	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:31.812381029 CEST	53	52991	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:31.816303015 CEST	53	53700	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:31.823040009 CEST	53	51726	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:32.844801903 CEST	56534	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:32.879807949 CEST	56627	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:32.885163069 CEST	56621	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:32.912391901 CEST	53	56534	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:32.943885088 CEST	53	56627	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:32.946022034 CEST	53	56621	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:33.048547983 CEST	63116	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:33.116322041 CEST	53	63116	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:33.184678078 CEST	64078	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:33.234638929 CEST	53	64078	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:33.500262976 CEST	64801	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:33.560136080 CEST	53	64801	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:33.652527094 CEST	61721	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:33.714029074 CEST	53	61721	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:33.861752033 CEST	51255	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:33.935780048 CEST	53	51255	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:35.303553104 CEST	61522	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:35.367613077 CEST	53	61522	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:35.458266020 CEST	52337	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:35.520227909 CEST	53	52337	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:39.232675076 CEST	50601	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:39.302131891 CEST	53	50601	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:40.172205925 CEST	59172	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:40.225578070 CEST	53	59172	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:40.955198050 CEST	62420	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:41.037755966 CEST	53	62420	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:42.024751902 CEST	50183	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:42.074800014 CEST	53	50183	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:49.349617958 CEST	61531	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:49.400152922 CEST	53	61531	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:54.035995960 CEST	49228	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:54.087605953 CEST	53	49228	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:55.285168886 CEST	59794	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:55.338514090 CEST	53	59794	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:55.938420057 CEST	55916	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:55.998339891 CEST	53	55916	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:56.457031965 CEST	52752	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:56.509691000 CEST	53	52752	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:58.001494884 CEST	60542	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:58.051521063 CEST	53	60542	8.8.8.8	192.168.2.4
Jun 11, 2021 12:26:59.748473883 CEST	60689	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:26:59.798482895 CEST	53	60689	8.8.8.8	192.168.2.4
Jun 11, 2021 12:27:01.338546038 CEST	64206	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:27:01.400954008 CEST	53	64206	8.8.8.8	192.168.2.4
Jun 11, 2021 12:27:02.610033035 CEST	50904	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:27:02.668271065 CEST	53	50904	8.8.8.8	192.168.2.4
Jun 11, 2021 12:27:03.886085033 CEST	57525	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:27:03.942003012 CEST	53	57525	8.8.8.8	192.168.2.4
Jun 11, 2021 12:27:05.440197945 CEST	53814	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:27:05.490700006 CEST	53	53814	8.8.8.8	192.168.2.4
Jun 11, 2021 12:27:16.649266958 CEST	53418	53	192.168.2.4	8.8.8.8
Jun 11, 2021 12:27:16.721155882 CEST	53	53418	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jun 11, 2021 12:26:31.759131908 CEST	192.168.2.4	8.8.8.8	0xae71	Standard query (0)	jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:32.879807949 CEST	192.168.2.4	8.8.8.8	0x7891	Standard query (0)	smtpro101.com	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:33.861752033 CEST	192.168.2.4	8.8.8.8	0xcaf9	Standard query (0)	p.sfx.ms	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:35.303553104 CEST	192.168.2.4	8.8.8.8	0x4ccd	Standard query (0)	p.sfx.ms	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:35.458266020 CEST	192.168.2.4	8.8.8.8	0x63b8	Standard query (0)	smtpro101.com	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:39.232675076 CEST	192.168.2.4	8.8.8.8	0xb4ee	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jun 11, 2021 12:26:31.823040009 CEST	8.8.8.8	192.168.2.4	0xae71	No error (0)	jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud	s3.eu-de.cloud-object-storage.appdomain.cloud		CNAME (Canonical name)	IN (0x0001)
Jun 11, 2021 12:26:31.823040009 CEST	8.8.8.8	192.168.2.4	0xae71	No error (0)	s3.eu-de.cloud-object-storage.appdomain.cloud		158.177.118.97	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:32.943885088 CEST	8.8.8.8	192.168.2.4	0x7891	No error (0)	smtpro101.com		172.67.194.129	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:32.943885088 CEST	8.8.8.8	192.168.2.4	0x7891	No error (0)	smtpro101.com		104.21.20.217	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:33.935780048 CEST	8.8.8.8	192.168.2.4	0xcaf9	No error (0)	p.sfx.ms	odwebp.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Jun 11, 2021 12:26:35.367613077 CEST	8.8.8.8	192.168.2.4	0x4ccd	No error (0)	p.sfx.ms	odwebp.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Jun 11, 2021 12:26:35.520227909 CEST	8.8.8.8	192.168.2.4	0x63b8	No error (0)	smtpro101.com		172.67.194.129	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:35.520227909 CEST	8.8.8.8	192.168.2.4	0x63b8	No error (0)	smtpro101.com		104.21.20.217	A (IP address)	IN (0x0001)
Jun 11, 2021 12:26:39.302131891 CEST	8.8.8.8	192.168.2.4	0xb4ee	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Jun 11, 2021 12:26:39.302131891 CEST	8.8.8.8	192.168.2.4	0xb4ee	No error (0)	googlehosted.l.googleusercontent.com		142.250.180.225	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jun 11, 2021 12:26:35.614346027 CEST	172.67.194.129	443	192.168.2.4	49758	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Fri Apr 23 02:00:00 CEST 2021 Mon Jan 27 13:48:08 CET 2020	Sat Apr 23 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Jun 11, 2021 12:26:35.614346027 CEST	172.67.194.129	443	192.168.2.4	49758	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		37f463bf4616ecd445d4a1937da06e19
Jun 11, 2021 12:26:35.616408110 CEST	172.67.194.129	443	192.168.2.4	49759	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Fri Apr 23 02:00:00 CEST 2021 Mon Jan 27 13:48:08 CET 2020	Sat Apr 23 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Jun 11, 2021 12:26:35.616408110 CEST	172.67.194.129	443	192.168.2.4	49759	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		37f463bf4616ecd445d4a1937da06e19

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exe PID: 6760 Parent PID: 1256

General

Start time:	12:26:27
Start date:	11/06/2021
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html'
Imagebase:	0x7ff609c80000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: chrome.exe PID: 7008 Parent PID: 6760

General

Start time:	12:26:29
Start date:	11/06/2021
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1548,17066045450230554925,12969004561117471689,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1756 /prefetch:8
Imagebase:	0x7ff609c80000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://jaquel988.s3.eu-de.cloud-object-storage.appdomain.cloud/holistically/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

AV Detection:

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: chrome.exe PID: 6760 Parent PID: 1256

General

Analysis Process: chrome.exe PID: 7008 Parent PID: 6760

General

Disassembly