Edit tour

Windows Analysis Report
https://uspslkj.top

Overview

General Information

Sample URL:	https://uspslkj.top
Analysis ID:	1297581

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Snort IDS alert for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://uspslkj.top/ MD5: 7BC7B4AEDC055BB02BCB52710132E9E1)

chrome.exe (PID: 3028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1760,i,4877766873380262426,11376438992533033990,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 7BC7B4AEDC055BB02BCB52710132E9E1)

cleanup

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

ET DNS Query to a *.top domain - Likely Hostile - Source IP: 192.168.2.3 - Destination IP: 1.1.1.1

Timestamp:	192.168.2.31.1.1.158078532023883 08/25/23-20:15:41.073041
SID:	2023883
Source Port:	58078
Destination Port:	53
Protocol:	UDP
Classtype:	Potentially Bad Traffic

ET DNS Query to a *.top domain - Likely Hostile - Source IP: 192.168.2.3 - Destination IP: 1.1.1.1

Timestamp:	192.168.2.31.1.1.156051532023883 08/25/23-20:16:50.896707
SID:	2023883
Source Port:	56051
Destination Port:	53
Protocol:	UDP
Classtype:	Potentially Bad Traffic

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2023883 ET DNS Query to a *.top domain - Likely Hostile 192.168.2.3:58078 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2023883 ET DNS Query to a *.top domain - Likely Hostile 192.168.2.3:56051 -> 1.1.1.1:53

Source: unknown

DNS traffic detected: queries for: uspslkj.top

Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: classification engine

Classification label: mal48.win@33/132@18/170

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://uspslkj.top/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1760,i,4877766873380262426,11376438992533033990,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1760,i,4877766873380262426,11376438992533033990,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	2 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://uspslkj.top	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
accounts.google.com	142.250.185.205	true	false	high
fast.fonts.net	104.16.250.67	true	false	unknown
plus.l.google.com	216.58.212.174	true	false	high
www.google.com	172.217.18.4	true	false	high
clients.l.google.com	142.250.186.174	true	false	high
api.ipregistry.co	104.18.26.170	true	false	unknown
uspslkj.top	172.67.129.49	true	false	unknown
clients2.google.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://uspslkj.top/go/TrackConfirmAction	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.195	unknown	United States	15169	GOOGLEUS	false
142.250.185.99	unknown	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
104.16.249.67	unknown	United States	13335	CLOUDFLARENETUS	false
34.104.35.123	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	true
172.67.129.49	uspslkj.top	United States	13335	CLOUDFLARENETUS	false
104.16.250.67	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false
142.250.186.174	clients.l.google.com	United States	15169	GOOGLEUS	false
104.18.26.170	api.ipregistry.co	United States	13335	CLOUDFLARENETUS	false
142.250.185.205	accounts.google.com	United States	15169	GOOGLEUS	false
104.21.1.114	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.35	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.174	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
216.58.212.174	plus.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	38.0.0 Beryl
Analysis ID:	1297581
Start date and time:	2023-08-25 20:15:13 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://uspslkj.top
Analysis system description:	Windows 10 64 bit version 1909 (MS Office 2019, IE 11, Chrome 104, Firefox 88, Adobe Reader DC 21, Java 8 u291, 7-Zip)
Number of analysed new started processes analysed:	4
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@33/132@18/170

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 34.104.35.123
Excluded domains from analysis (whitelisted): edgedl.me.gvt1.com, login.live.com, clientservices.googleapis.com
Not all processes where analyzed, report is missing behavior information

Created / dropped Files

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	5.3650169417698566
Encrypted:	false
SSDEEP:
MD5:	C9001E6CA9CC5BD1436106127D8EC7F9
SHA1:	498B06DBB190A5099D90DB7882F25083DE2305CE
SHA-256:	20DACB9960E8EBC87B2E7886F5843DC633C865B3175A817520F3D0DBF1398D24
SHA-512:	914CD33C7DC9722AD72EA078CF8E943BB8138902F551F1FC1FCA6A44CE6B428C3D84BAF4705441A02F1D26E792252C6FD297626E051FE01733A2ADE3AC65327A
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/blue-spinner-processing-step-02.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st2" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st1" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st1" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st1" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st1" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	5.3650169417698566
Encrypted:	false
SSDEEP:
MD5:	0485289230F9E1DF679771BB182FCD21
SHA1:	AF46FABFE1A9D26F4058F2CE496CA19F889352C4
SHA-256:	5962C8B8356E1DF360D4B491D6B6B46DFFD104A0F78B87A09F85133B8341B802
SHA-512:	4C4A463F2D1A59A0AC26FBC0295E7C23B51375F14F68811826703FAF1A35AF57D712FD99FF8D2CAD5B977794ADED806E0EBFDCB5EC4C82A1D119C87BFBFB17D1
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/blue-spinner-processing-step-10.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st1" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st1" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st1" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st1" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st2" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	5.36861049218169
Encrypted:	false
SSDEEP:
MD5:	57DCC495103DCCAA67B4E9C77FBD989C
SHA1:	08688235E5DA8B342AF5B4407EF161B8373327A9
SHA-256:	F817034090F10A3A636931AA9DAB27B474EFBA1FD5011C61AF0E8A79BA3B2D0C
SHA-512:	10C790A7998793E216DE6FDED8D1CFA3D0F32379E44669EE85F4C878B88CA651DB89012E21BEFECE13616D8AC8A9B884E52DA1B0A7D14B19904C4AF18311D07B
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/blue-spinner-processing-step-06.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st2" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st2" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st2" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st2" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st2" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3
Category:	downloaded
Size (bytes):	1283
Entropy (8bit):	7.479205316722071
Encrypted:	false
SSDEEP:
MD5:	6D89BA21BD6F95ACBA3315D382CAE4EB
SHA1:	5ADD3B1D3FF3E2B54766CA3F35875CA4577D8020
SHA-256:	5F0D07CE637D76509171C76175BB8019225D247731B79798CBE84D94668363DE
SHA-512:	AB5AE44FBB44301B8490CB6D85C5865B0597A0B3FE10367366F224A6D6C5AA9802CBE39292DF33F939CAC941D516FB8D168DC2FBDCDBE1EC70F8C2669B5FDEB7
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTC0acvk6cHJpMpLcTBWamTxPnMj0oTMCpXtIVni58&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......@.@........................................2..........................!..1QUVr.....7A.."%aq...............................!....................Q....13A!..............?..u..8....P..@(......P..@(.......d.Ye.I.L.c.z............+..$.S.U{c%.....N...O.N......;.O.?.;c#..8J...>T......Kvm.?9.C...%.s.2....}.j=H^Y.N..n..;.O.?.;c$.^...,.c..%.Y1.t.(........M~3S...7.o%J._....w(......H.7`.c$b.u..S...p=...W.JP.'z{....H..S.?.6q .f.t..V..C..L........R...s{&z...X..Bk.p.+.T.EV:...')GPj...n..t....V.N.....g.4._.,....T........3.Tq.<..<.=......7.......D..L.!........i..6..t.^.^._..e...,d..;..5.H.....l..9@.Lj!..9.r....e.)..o.8....s>$\|..C.......P.KyS_...{....u...^.u.R.".nSzC..&@......q..q+.<k...n.4M.pB....p.K*g.v...1.`.7(.z.....Sl..S.....1.M....My....=1")..(.3..r"#.k.j.%/...K.m..P3..f.....N15J..r..8i..WF.`.b.T.?MT..... 0.pJ.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	3.7586031096610943
Encrypted:	false
SSDEEP:
MD5:	3F0F72ED57A54B97CDA500BCF0545EFB
SHA1:	2F252619C18E729D98E16B96D37CD7CD567B38EB
SHA-256:	67FBE8EF9020E5C776AADF6801A1FEF8DC563E2E4DC9DDC740AF8010C0C38943
SHA-512:	EA68C54A3CA39A47555A41AE5FC3723F1E7C06B3AD1776EE7082FFBFF48277D2B4EE7CA1753165C2DCCDF7012EB0CBE29CDBDE21DC05373A07CF18E23DE37E54
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/favicon.ico
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@...................e21.f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21.f32Qf32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q...Q.....US.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q.\[Q.............\|z.m<;.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.uGG..................RP.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.xKJ..................vu.k98.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.g43......^].....................{NL.f32.f32.f32Qf32Qf32.f32.f32..\[.............ts..ww...............k98.f32Qf32Qf32.f32.f32...........................................f32Qf32Qf32.f32.g43.....................................rq....f32Qh65Qh65.h65.j87..YY..[[..[[..[[..\[..]]..oo...........vu.f32Q...Q.........................................mk.g43.f32.f32.f32Q...Q........................`^.p?=.f32.f32.f32.f32.f32.f32.f32Q..Q.....ml.rB@.g43.f32.f32.f32.f32.f32.f32.f32.f32.f32.f3

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	888
Entropy (8bit):	5.359937093647311
Encrypted:	false
SSDEEP:
MD5:	69928FD87441DBB531D126EE12275592
SHA1:	F1307EC745D7950DFD6BB06FC134EDFF0BE60910
SHA-256:	34BBE9B7F75FCB8CAA2A12EB8E85FE32ADCFB365ADDEA7BCC584845543C5A2D2
SHA-512:	E2D20B3B43E76BBA1FDCEEED55E16CA61F01DEA7C6EEF4AA53C601313F1AAACDBC2AB051858BAE4661BFB949DC68C37286BD99755A26B59BC876A8FCA8C9AAB7
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/blue-spinner-processing-step-03.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">.....st0{fill:#FFFFFF; height="10px"}...st1{fill:#D8D9D8; height="10px"}...st2{fill:#343466; height="10px"}.</style>.<g>..<g>...<polygon class="st2" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st2" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st1" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st1" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st1" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (341)
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	4.896839795314964
Encrypted:	false
SSDEEP:
MD5:	1688A740A8209E06F9ACD0CF6E56746D
SHA1:	3E5A8DCC16B20769DDFAD853A81D62F481CF832F
SHA-256:	2BA22C0B66D9F4352D6B1B090164312707A68295635AAF66A181FF15EE4D11DD
SHA-512:	04C3E0C3F61EDCE10B04187DD76A87B58A9DA150628A10D01F2942405A2027FF49CD06E622250B9532D5F8389BC3AA5864424AD28FE9818DB2628AAE362FBC48
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=uspslkj&oit=1&cp=7&gs_rn=42&psi=qGgW5TyVe37SNxvk&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["uspslkj",["usps london","usps tracking london","usps london office","usps locations uk"],["","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,551,550],"google:suggestsubtypes":[[546],[546],[546],[649,546]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	144062
Entropy (8bit):	5.434966233139576
Encrypted:	false
SSDEEP:
MD5:	5258745141AA6147E4271B675E6BA8CF
SHA1:	1DEE1A43C30E9B4D86CD0F2360B2126A2EB0AE4F
SHA-256:	696C8CDED0358352F0D575B2FDA45C2C6D93706342DA4521F8D57ABC6D6F3ECA
SHA-512:	9ECD7585C646E56117071ECEBC4B13F21C0498C55EB245775D3F65339BFA7F144EA2C7B4721FEBBADF8A0768D35B5B5A67525774BCC3D8E30DABF75D570DCC4C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-GB","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ha gb_8a gb_Ld gb_ed\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_xd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_id gb_cd gb_od gb_nd\"\u003e\u003cdiv class\u003d\"gb_hd gb_7c\"\u003e\u003cdiv class\u003d\"gb_Ec gb_p\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Ec gb_Ic gb_p\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	898
Entropy (8bit):	5.288156208840584
Encrypted:	false
SSDEEP:
MD5:	378CB82E00DCEF2CD47F0838FE8DDB86
SHA1:	25F74E9805C1444DDE70E3BDCE16C721C5D023D0
SHA-256:	6D1834B084F2DC4C10B75E110B895A25E9FA8D07678A21FC9404971C976211C4
SHA-512:	3A0F44738318B0F944CD12391986E5F2A13C6348554F9016497E5897351C98EBFA61F19FAB70B3861CF677617D75372417A65A8E3CB0FD408B879F19F0AF6436
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=uspsl&oit=1&cp=5&gs_rn=42&psi=qGgW5TyVe37SNxvk&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["uspsl",["usps login","usps liteblue","usps","usps label broker","usps look up","usps label","usps lite","usps logo","usps locations","usps log"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{},{"a":"United States Postal Service \u2014 Mail company","dc":"#302f75","i":"https://encrypted-tbn0.gstatic.com/images?q\u003dtbn:ANd9GcRzViYMlqqT3cA5X_qLSDIzPfH3GRWEoSaeRSTs7Ys\u0026s\u003d10","q":"gs_ssp\u003deJzj4tDP1TdISc4tVmA0YHRg8GIpLS4oBgA3eQVg","t":"USPS","zae":"/m/0dcms"},{},{},{},{},{},{},{}],"google:suggestrelevance":[1252,601,600,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,10],[512,10],[512,199,465,10],[512,10],[512,10],[512,10],[512,10],[512,10],[512,10],[512,10]],"google:suggesttype":["QUERY","QUERY","ENTITY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":1251}]

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65275)
Category:	downloaded
Size (bytes):	310286
Entropy (8bit):	5.440616546531549
Encrypted:	false
SSDEEP:
MD5:	3B8FD6F9A4F47ABCD5587844DD3AEA48
SHA1:	9DFECC12393C9C87C76059A8506F8E073E07CF3D
SHA-256:	5A0D71EAD8B996EFB89A6EC99E93D2A79ED647B890838BBAF890DC238AB87303
SHA-512:	5283972CBAEFC9A8A184509E367B00F78E8918E7A0D294965E1FF7596EBFA4B3FF340EF2BD146009E2D76C80308DEEF50B5AA7457D6DD25BA1E37614766C2A79
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/index.css
Preview:	@import"https://fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0";/!. Bootstrap v3.3.7 (http://getbootstrap.com).* Copyright 2011-2016 Twitter, Inc..* Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).//! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.36796607201254
Encrypted:	false
SSDEEP:
MD5:	CE16FB4D3EA0C6AB3FEF46FF63571BAC
SHA1:	0707C2AF7AD35CBC17754261104C89421718E9FB
SHA-256:	65CD9E5FE4C70407670FF10EC9E4AFA82499D017C996711114F300466F0ED841
SHA-512:	07702407B78D7C09C2CA970712DC8BF9788FC311926E0408F61AA93F0FF29F3D73F897C5C8F6101946D0F62FC4DF42751835AE28EF405B9C56B10EFFF792D960
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st1" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st2" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st2" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st2" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st2" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1008)
Category:	downloaded
Size (bytes):	1015
Entropy (8bit):	5.415418349513229
Encrypted:	false
SSDEEP:
MD5:	DF18E0C56E51BA69912E5B5086D00FB8
SHA1:	99745D2D1A73E2AB828CD68415D861ACA3DA3E31
SHA-256:	8966754B91B1A3E8AE5F14D4C756E9F44F4FAAC2C1B2882B86FF369DD2115DA4
SHA-512:	75D36E193A1C2134909389E32209376C5C3AE90A1F4280B7247611AEE513B8C8807349EB0CD47F30A9A13964EAF9B2B4914A98C500547A0D8FA30D4F1B64BC3B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=uspslk&oit=1&cp=6&gs_rn=42&psi=qGgW5TyVe37SNxvk&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["uspslk",["usps","https://tools.usps.com/","usps","usps tracking","usps international tracking","usps tracking number","usps uk","usps change of address","usps mail forwarding","usps tracking uk"],["","USPS.com. - USPS Tracking.","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{},{"a":"United States Postal Service \u2014 Mail company","dc":"#302f75","i":"https://encrypted-tbn0.gstatic.com/images?q\u003dtbn:ANd9GcRzViYMlqqT3cA5X_qLSDIzPfH3GRWEoSaeRSTs7Ys\u0026s\u003d10","q":"gs_ssp\u003deJzj4tDP1TdISc4tVmA0YHRg8GIpLS4oBgA3eQVg","t":"USPS","zae":"/m/0dcms"},{},{},{},{},{},{},{}],"google:suggestrelevance":[602,601,600,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,433,131,355,10],[],[512,433,131,199,465,10],[512,433,131,10],[512,433,131,10],[512,433,10],[512,10],[512,10],[512,10],[512,10]],"google:suggesttype":["QUERY","NAVIGATION","ENTITY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimre

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	4.679961110399252
Encrypted:	false
SSDEEP:
MD5:	282A31D5772C8CF54790C5FE5379336B
SHA1:	E5E25783A3F1BD035539A5C6E1D3F15573028DC3
SHA-256:	35D2F606068C2CF15511CF2F8524B5A69118DA61380C12FD1703824FF642D8DB
SHA-512:	A0FE9BEB8356B1F0C7D59E99E95717DAEE79A4D9CE9D0798E084987E27C6578410AEA55D36DAD4F0E3EF5A7F6772C3E6CFB3976ACC526B433D6C2D32135CAB01
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=uspslkj.&oit=1&cp=8&gs_rn=42&psi=qGgW5TyVe37SNxvk&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["uspslkj.",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 8, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	511
Entropy (8bit):	7.368983158331792
Encrypted:	false
SSDEEP:
MD5:	7C034A481BE83DBE15CB8DD60765664B
SHA1:	5523A0720674653CEB53B39229AF85A728229360
SHA-256:	787541D9D05FED6D168AF21C396A9D0B0F099A052A5986EF98CC7CF2E5357CB0
SHA-512:	3917BBD94DA5B5BD4933A3AEF32149B38376A45CEF3A5F71363A231D027C066EBF28F4D12503C7A866F7142D497762B6622572EB68B27B384B2984CD6540FA59
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRzViYMlqqT3cA5X_qLSDIzPfH3GRWEoSaeRSTs7Ys&s=10
Preview:	.PNG........IHDR...@.........~......lPLTE.....L........P...ww..............N))a.........[..F....WW}..Y...jj.00e.....U...==lHHsBBo\\......Wcc.88j._E....NIDAT(.-.Y.. .D.....E..9......CR...0.........1.....) &.N....z...];......;.....?...wz.3;.4...'..o.L!......$_..R7.}.m...r....r.7.s2...BeA./.-.@./.1X...V ..Dh~'";...Yc6....K....K)..".[lZ.>...A....{2...5..2.b?..j....h.y....~.V...?. ..._iK...j.Q[:3.....?....T.....B[...-.3F5.=8D...!g....D.s.+......L.V....Y....@.\|n...P..@..k....IEND.B`.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15363)
Category:	downloaded
Size (bytes):	15372
Entropy (8bit):	6.063642118713525
Encrypted:	false
SSDEEP:
MD5:	B063B3E31068DCF547364BF6A1DE2EE7
SHA1:	E472A5F9A39242D0B5EB875D476C67F60A8F0BF6
SHA-256:	C67DACE3AA51E2B8401A2107C0CCF0037DEC7BDDBBCFF6E4514601D04B1C1499
SHA-512:	57A5FB2726B98B16CCE0079DF43A37AA22A6E582F95329B1DE0B3B49905AF157DE2E49085F4292F619732572E9992F9FEB05D696740AF6AD0DED7620DFCD4712
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["prince diamonds and pearls album","darren moore","atari 2600+ games","f1 dutch grand prix","altay bay.nd.r","gamescom announcements","isaiah simmons giants","middlesbrough fc"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"pre":0,"tlw":false},"google:headertexts":{"a":{"8":"Trending searches"}},"google:suggestdetail":[{"a":"Studio album by New Power Generation and Prince","dc":"#424242","i":"data:image/jpeg;base64,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

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (983)
Category:	downloaded
Size (bytes):	990
Entropy (8bit):	5.429376966975166
Encrypted:	false
SSDEEP:
MD5:	157B304611B5E02C69CF75AFBD25EB3A
SHA1:	5BB1A449871181DE03BE193D1FD73420318D54A1
SHA-256:	6BC2B5DE14469463808F368AFF7574363D150855C4F93BB751EA7BDE6F8B7E09
SHA-512:	05C9566A2201D6CFD70CF5D34611AEA0D89FA9D5532BC7D71689C3404A15C188B4476BA4BA64E3289C3160A55DAC1A390375A4B655E278314B4F209A735B24EB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usps&oit=1&cp=4&gs_rn=42&psi=qGgW5TyVe37SNxvk&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["usps",["usps","usps","usps tracking","https://tools.usps.com/","usps international tracking","usps tracking number","usps uk","usps change of address","usps mail forwarding","usps tracking uk"],["","","","USPS.com. - USPS Tracking.","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"a":"United States Postal Service \u2014 Mail company","dc":"#302f75","i":"https://encrypted-tbn0.gstatic.com/images?q\u003dtbn:ANd9GcRzViYMlqqT3cA5X_qLSDIzPfH3GRWEoSaeRSTs7Ys\u0026s\u003d10","q":"gs_ssp\u003deJzj4tDP1TdISc4tVmA0YHRg8GIpLS4oBgA3eQVg","t":"USPS","zae":"/m/0dcms"},{},{},{},{},{},{},{},{}],"google:suggestrelevance":[1300,1251,1250,1000,601,600,553,552,551,550],"google:suggestsubtypes":[[512,433,131,355],[512,433,131,199,465],[512,433,131],[],[512,433,131],[512,433],[512],[512],[512],[512]],"google:suggesttype":["QUERY","ENTITY","QUERY","NAVIGATION","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":1300}]

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	131
Entropy (8bit):	4.676932044572525
Encrypted:	false
SSDEEP:
MD5:	10615D8010D6154D4D7B0DEAEFA24B1C
SHA1:	2FBCF03B9BE0640AF28837C9D35BE1D32976B27A
SHA-256:	A21935C6CB2BC0CF9A55A34565F7E5F76F9D50BFECE7343BAEBE2618400F5624
SHA-512:	E3495A0E6E17A61AA7DBD547CF0C569A60307AAA5D42CD6916C6A47212E18CFCDA5687AC2322F65C3D1DA7F1B66ADBD3DF3DA34F89474C4CBA59985665C1B56E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=uspslkj.top&oit=3&cp=11&gs_rn=42&psi=qGgW5TyVe37SNxvk&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["uspslkj.top",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3
Category:	downloaded
Size (bytes):	2021
Entropy (8bit):	7.735252965189186
Encrypted:	false
SSDEEP:
MD5:	9CD7DF9B01A80BC3293B18FD482695E8
SHA1:	C65F27B7B0F157E13F85A284B4AF84CEC0280356
SHA-256:	557E16A45ADEFDD4E4E899706332B9DFE1D90A0F7A33943A65D9B69154B13161
SHA-512:	409BEA8F48FFAA87CEBE57D877997A25C435FA9FCF9CA20FBD79D4D26363F31D660AF58A3F8280BB730E308B3AFF3194A1EAA6EC3064E101FB29629FF7A393B6
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcS6byZGHlRvLuUmMFalEjG51CeILsBGLUEE4fO2hxM&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......@.@.."......................................9.........................!.1.AQ.."a.2bq...#BR...$46t........................................................!A..q1............?..t2[..U...)E..?...'.....F..].DL..L.z..o....{.....(+.[.qJh.#.....c...........{T.._...ch..z%.$=J...Y.A...v.:.M...m$Vi.k-.....42....\./..V.jv......#......'....r.<.D...x[..8...~:.d .`Et.p.[..U.E..u.~..S$....H..@....a....g.?j5....V'...c.)e"N.F..U..w.}s..(.....DS.c.v.<......WS'..<1.zyB.0.....{2.{.E\.'y.....J..Fk!..YL.'B../.F;.P>g.%...o.].f.7.+D.._u.....d.>c..}u.c$.%J.>..>Z.7#..."..Z.i w..A..7*......s.I}.X<z.ii.:OF)R(>........O\|..t.xV..V..{.4L.1p.S..I...h....m...J1vd_ua;I(P..Y[.B.....p..."...d6...KP..ZI0."......@`......S....?!...n..[g..B..lw.`.B..\|.....o@.X.....Bze.\|.C.;.N..8.....WX~...n1.R.5..];.=.`.....[.<.1?....z..P9#.>Z+h..\.d.....9...?._"

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (464)
Category:	downloaded
Size (bytes):	1834
Entropy (8bit):	5.081554084169378
Encrypted:	false
SSDEEP:
MD5:	F92CABBF91AB7822DF4149B96385CF19
SHA1:	B918EA71C77C029534ED317A18CFFFF91E89855C
SHA-256:	42C8B466D46CBDECC8A91871254C4C775A8E007A80341ECF3B3978C60B077814
SHA-512:	63BC0C42A8859B4B39A8524A8DDDD5F460C8438FCF6B3E8C5770C4CD0CA27F566B959607D5FD26211E5DF22B3EDF3B35225A8A5122CD73A98674D50B4F79547D
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/go/TrackConfirmAction
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta name="robots" content="noindex, nofollow">. <meta name="googlebot" content="noindex, nofollow">. <meta charset="UTF-8" />. <link rel="icon" href="/favicon.ico" />. <meta name="viewport". content="initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, user-scalable=no">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <title>Loading</title>. <script type="module" crossorigin src="/assets/index.js"></script>. <link rel="stylesheet" href="/assets/index.css">. <script type="module">try{import.meta.url;import("_").catch(()=>1);}catch(e){}window.__vite_is_modern_browser=true;</script>. <script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy build because dynamic import or import.meta.url is unsupported, syntax error above should be ignored");var e=document.getElementById("vite-legacy-polyfill"),n=document.createElement("script");n.src=e.src

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.36796607201254
Encrypted:	false
SSDEEP:
MD5:	7A32DFFE4F4BDE9AC550BDE45D4A4C5A
SHA1:	37BAE927A7B1F48CB149FB650988944DBA3B6664
SHA-256:	B12CBCD1DB5E26E25B2C83F0B67940E9D3BCCC2518EFDA4BDBC4961D733A5CC1
SHA-512:	1C71EDA140B0BA0DAC1E842B966CEB27DCDE078641F961EA9C49957ECF7E8123212A85A7C6AB444EFBFB65FFB54215E39746DA3EDB39A82BCF7E4F8C8A8D01FA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st2" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st2" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st2" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st2" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st1" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.363678843980314
Encrypted:	false
SSDEEP:
MD5:	61D810304390FF8BCDBEFB6DD4ABD865
SHA1:	D3D63114C6113D811B71C1C90998E09757576F33
SHA-256:	1E0F6A7D0A6A793CF750C2368C4E70386CAFFC8CF0861A0ED3188D2B1E9122A0
SHA-512:	07AA256B95DE3D54A820D770586B3634CA8B692691118AE40F35044F58086ABECAB8EFDB3A9C16D21094E0C06579A0A2B66D6ED82C11C0AF3BFC2CBCB2FF3EF6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st1" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st1" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st1" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st1" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st1" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.3661736689534445
Encrypted:	false
SSDEEP:
MD5:	A2171D6842B1A491F0E736A4C19B4B76
SHA1:	777224A21D672678519B3EA8EECD37447BEDE373
SHA-256:	E4ADF0B3B468C545952C8CAE79EAEA033F0E2F124C6C035DC71341A44478DCDD
SHA-512:	30321B852383EBD77D46113412BE529C43DB6EC00F0E9E186E4471F8C4E4FF845259C194015010DE522B6D6651661559EC31678A245B6BA6F79FC2FCEF859749
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st1" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st1" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st1" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st2" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st2" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	5.367155085552885
Encrypted:	false
SSDEEP:
MD5:	EEB6AAB3BA02FBE07E6E3EC7AB07B1B9
SHA1:	CF033B61B1AAB1A313EA2EA5400A189FD9A20E0C
SHA-256:	FCF1211E2DDBC8AC0B4ED85884688A03B99AD6FBBEB344C613D7DE4BA653EAF1
SHA-512:	0C4C9CA1A9EEC15AFCBAC59772D0DBE8DEAF7435237C57623A661E076A8942F1B92C79C33E3728C2DD5E3B24871CCCD9365F92653C08AE63064F586989BCD7B9
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/blue-spinner-processing-step-04.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st2" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st2" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st2" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st1" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st1" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1551)
Category:	downloaded
Size (bytes):	151739
Entropy (8bit):	5.546121315738313
Encrypted:	false
SSDEEP:
MD5:	1EA411A87853BE641B96E583A5DADE14
SHA1:	1731F9BC256D99AC3E9E6E3869F4D20ECD8F6EBA
SHA-256:	FB683D755C8EFA9537FDCE6AA564D8EEEF4101C73E9D7FC4DD64448E67DA16D0
SHA-512:	4D1BA8B6CC1F7BF141EEB27939405E9CBA318797E3CB2A40DEF9DC98791D1FE16DFF73EB7F0F474EEA594005F936192DC8FB434A6A7DD7F2D65A17699F541363
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.HjznsZWpH9Q.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTuRljjav9PO4jItLZcpbpirCqXRbg"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.xj=function(a,b){Object.isFrozen(a)&&(a=_.xa(a));a[_.u]=b;return a};_.yj=function(a,b,c,d){var e=b&2;let f=_.Yb(a,b,c);Array.isArray(f)\|\|(f=_.ab);const g=f[_.u]\|0;g&1\|\|_.za(f);if(e)g&2\|\|(f[_.u]\|=34),d&1\|\|Object.freeze(f);else{e=!(d&2);const h=g&2;d&1\|\|!h?e&&g&32&&!h&&(a=f,a[_.u]&=-33):(f=_.za(_.xa(f)),_.Za(a,b,c,f))}return f};._.zj=function(a,b,c,d,e){var f=!!(b&2),g=_.yj(a,b,d,1);if(g===_.ab\|\|!((g[_.u]\|0)&4)){var h=g;g=!!(b&2);var k=!!((h[_.u]\|0)&2);f=h;!g&&k&&(h=_.xa(h));var m=b\|(k?2:0);k=k\|\|void 0;let n=0,q=0;for(;n<h.length;n++){const v=_.La(h[n],c,m);void 0!==v&&(k=k\|\|v.na[_.u]&2,h[q++]=v)}q<n&&(h.length=q);c=h;h=c[_.u]\|0;m=h\|5;k=k?m&-9:m\|8;h!=k&&(c=_.xj(c,k));h=c;f!==h&&_.Za(a,b,d,h);(g&&2!==e\|\|1===e)&&Object.freeze(h);return h}if(3===e)return g;f?2===e&&(e=g[_.u]\|0,g=_.xa(g),g[_.u]=e,_.Za(a,b,d,g)):(f=Object.isFrozen(g),.1===e?f\|\|Object.freeze(g):(e=g[_.u]\|0,c=e&-35,f&&(g=_.xa(g),e=0,_.Za(a,b,d,g)),e!==c&&(g[_.u]=c))

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2354
Entropy (8bit):	5.048597697499678
Encrypted:	false
SSDEEP:
MD5:	FCE9E7D57DE225E4B1EEA0B6F80377F9
SHA1:	5400973DA624F1AF0E69E93CD15E7B82C8750951
SHA-256:	92D97716A28909CA2A58A4C6804224CEFD4CFC9A311D2C469EE1049A53F8067B
SHA-512:	8078A12CA97137F2C41C1525DDA4592B4B4871309768998EC6EE76C0D5599067A1121FE06021D6EF61509075113A7B8BE08E215AB005ECE76876E92A9DFACC89
Malicious:	false
Reputation:	low
URL:	https://api.ipregistry.co/?key=mmxu2sqi3cgm4c0s
Preview:	{"ip":"102.129.143.89","type":"IPv4","hostname":null,"carrier":{"name":null,"mcc":null,"mnc":null},"company":{"domain":"host1plus.com","name":"Det Africa (pty) LTD","type":"business"},"connection":{"asn":212238,"domain":"datacamp.co.uk","organization":"Datacamp Limited","route":"102.129.143.0/24","type":"hosting"},"currency":{"code":"CHF","name":"Swiss Franc","name_native":"Schweizer Franken","plural":"Swiss francs","plural_native":"Schweizer Franken","symbol":"CHF","symbol_native":"CHF","format":{"negative":{"prefix":"CHF-","suffix":""},"positive":{"prefix":"CHF.","suffix":""}}},"location":{"continent":{"code":"EU","name":"Europe"},"country":{"area":41290,"borders":["AT","DE","FR","IT","LI"],"calling_code":"41","capital":"Bern","code":"CH","name":"Switzerland","population":8769741,"population_density":212.39,"flag":{"emoji":"\uD83C\uDDE8\uD83C\uDDED","emoji_unicode":"U+1F1E8 U+1F1ED","emojitwo":"https://cdn.ipregistry.co/flags/emojitwo/ch.svg","noto":"https://cdn.ipregistry.co/flags/

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1739)
Category:	downloaded
Size (bytes):	1746
Entropy (8bit):	5.663515227650667
Encrypted:	false
SSDEEP:
MD5:	980380D03A4223A26B739BDF02592148
SHA1:	8FF40BF010A73A3A78F674BAE0D4AA57D4E7FA71
SHA-256:	F5CB9B3A5F5D29DCBB8E2833C2166D59BB7054664DD0865B32A7F5A61CB3F849
SHA-512:	296D587DA892BC92E3D929634F117F99F19C78E88FEBA6A9588E9F93AE5AB10D4F0111CA12BB37A53C7D39FC28A770E8BBB4790B22B52A55A2879D0D100BDC1E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usp&oit=1&cp=3&gs_rn=42&psi=qGgW5TyVe37SNxvk&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["usp",["usps","usps","usps tracking","uspga","https://tools.usps.com/","usp college","uspto","usp meaning","uspga tour","unsplash"],["","","","","USPS.com. - USPS Tracking.","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"a":"United States Postal Service \u2014 Mail company","dc":"#302f75","i":"https://encrypted-tbn0.gstatic.com/images?q\u003dtbn:ANd9GcRzViYMlqqT3cA5X_qLSDIzPfH3GRWEoSaeRSTs7Ys\u0026s\u003d10","q":"gs_ssp\u003deJzj4tDP1TdISc4tVmA0YHRg8GIpLS4oBgA3eQVg","t":"USPS","zae":"/m/0dcms"},{},{"a":"PGA Championship","dc":"#92713a","i":"https://encrypted-tbn0.gstatic.com/images?q\u003dtbn:ANd9GcS6byZGHlRvLuUmMFalEjG51CeILsBGLUEE4fO2hxM\u0026s\u003d10","q":"gs_ssp\u003deJzj4tTP1TcwTC_MqTBg9GItLS5ITwQAMssFnA","t":"uspga","zae":"/m/01gqlx"},{},{"a":"Further education in South Benfleet, England","dc":"#1a4375","i":"https://encrypted-tbn0.gstatic.com/images?q\u003dtbn:ANd9GcSa4iOIsL-QPthx2YJJ6sqUb92KuAM95ZG-Dzdcu1Q\u0026s\u003d10",

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64697)
Category:	downloaded
Size (bytes):	349547
Entropy (8bit):	5.427679924672518
Encrypted:	false
SSDEEP:
MD5:	C2F4FBDD0067399C92B856D46475C4EB
SHA1:	208B6A21FFB4E06016A9A8F7160FE3A478608249
SHA-256:	42F42604B84E7FE94778EF7B038B66F045EFB7402B2B6C3349D000CAF9DD6D9B
SHA-512:	C6D2A7F62CEFD87F92DD4FFFD10F8135F222512B53D23849265ED7A6F673C28AD18F0DE622353E42C6360393BA9DE50A8D0146F8961354E144F06F826EAA34F9
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/index.js
Preview:	function MP(){import("data:text/javascript,")}(function(){const r=document.createElement("link").relList;if(r&&r.supports&&r.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))o(s);new MutationObserver(s=>{for(const f of s)if(f.type==="childList")for(const l of f.addedNodes)l.tagName==="LINK"&&l.rel==="modulepreload"&&o(l)}).observe(document,{childList:!0,subtree:!0});function i(s){const f={};return s.integrity&&(f.integrity=s.integrity),s.referrerpolicy&&(f.referrerPolicy=s.referrerpolicy),s.crossorigin==="use-credentials"?f.credentials="include":s.crossorigin==="anonymous"?f.credentials="omit":f.credentials="same-origin",f}function o(s){if(s.ep)return;s.ep=!0;const f=i(s);fetch(s.href,f)}})();/!. Vue.js v2.7.14. * (c) 2014-2022 Evan You. * Released under the MIT License.. */var Tt=Object.freeze({}),xe=Array.isArray;function de(e){return e==null}function D(e){return e!=null}function Xe(e){return e===!0}function PS(e){return e===!1

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	843
Entropy (8bit):	5.367155085552885
Encrypted:	false
SSDEEP:
MD5:	A578608EF88C6857B3FFB24E2A1351C1
SHA1:	C072088D314DE83D904F5F65C80A6F0367F747E5
SHA-256:	6BD678E65FFED479873E83942AB143120D7D342740C0D18A7492DFD267CD1132
SHA-512:	FBE3A19FFD0911389C90160EDD5ABF18611DF92CD087024EA2D8DA8AB33C7255742BB4A1CE5B2518F37A0462E7A62F15180362360A8CE4A27ADF4D45AB190705
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/blue-spinner-processing-step-08.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 201.8 9" style="enable-background:new 0 0 201.8 9;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#D8D9D8;}...st2{fill:#343466;}.</style>.<g>..<g>...<polygon class="st1" points="36.3,9 38.2,0 1.9,0 0,9 .."/>..</g>..<g>...<polygon class="st1" points="77.2,9 79.1,0 42.8,0 40.9,9 .."/>..</g>..<g>...<polygon class="st2" points="118.1,9 120,0 83.7,0 81.8,9 .."/>..</g>..<g>...<polygon class="st2" points="159,9 160.9,0 124.6,0 122.7,9 .."/>..</g>..<g>...<polygon class="st2" points="199.9,9 201.8,0 165.5,0 163.6,9 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1368)
Category:	downloaded
Size (bytes):	121030
Entropy (8bit):	5.5034765873013125
Encrypted:	false
SSDEEP:
MD5:	12ADB4A03BBD7FA8E144748C6E4EB302
SHA1:	BC657CCD7A87D483C2357FDB34CD5C0FB80B5651
SHA-256:	D973CC0F5E02B5E5B73D9F1E3474B79843FEBB64FED861B5B51508B1938F87BF
SHA-512:	FCD0373462F01B18ED430874FED56741C95EF26AFCDC98F2AF94B36746EE0C8CA17B08D472FEDEB47AD32DD133D864EE1D8B9A4AEC3F545203439E0D5B4C3F07
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.hh2Jqle7bK0.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-jeiq7uVLkyqJvSohFtUkaGjEuyg/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;.var ha,ja,ka,na,qa,va,ya,Aa,Ga;_.da=function(a){return function(){return _.ca[a].apply(this,arguments)}};_.ca=[];ha=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ja="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ka=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};na=ka(this);qa=function(a,b){if(b)a:{var c=na;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ja(c,a,{configurable:!0,writable:!0,value:b})}};.qa("Symbol",function(a){if(a)return a;var b=function(f,h){this.HV=f;ja(this,"description",{configurable:!0,writable:!0,value:h}

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 58690, version 1.0
Category:	downloaded
Size (bytes):	58690
Entropy (8bit):	7.990300789788035
Encrypted:	true
SSDEEP:
MD5:	A6E2D3921C9EA0FD81897D9AE7A33BA4
SHA1:	BC31969F2FB1926A15CD678B3E573C37A44E5421
SHA-256:	F2E2EF638DD9AAC863F0F6027CEB784CD4C5A14A676BED909C8F2AC4B088D510
SHA-512:	3F8D647F4F157FE0A3D6BDCC4CB8330BB9A8559DD927C073E9C55C36A7F8847B57DCDAB80A310B1A3ADBD07A70FEBB478868E4D5B59EEF1EC192A05269EF94C1
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff
Preview:	wOFF.......B...............@.......+........OS/2...X...V...`..+.cmap...........t.8..cvt .......H...H.C..fpgm.......8........gasp...8............glyf...H........}..nhead.......6...6.Z1yhhea...0...!...$.^..hmtx...T........ .8.kern...,............loca...,............maxp...,... ... ....name...L...)...~\|hN.post...x....... ...2prep............I..x.c`f.c..........................X.@....a}.......x...)..LL_..0.`>.p..g..1.2.bP.B..@..`..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....K.2.7.o.X...D.h.U.7.o...D.2.Z.K.....:.......J....................."..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.6818808028034042
Encrypted:	false
SSDEEP:
MD5:	9FAE2B6737B98261777262B14B586F28
SHA1:	79C894898B2CED39335EB0003C18B27AA8C6DDCD
SHA-256:	F55F6B26E77DF6647E544AE5B45892DCEA380B7A6D2BFAA1E023EA112CE81E73
SHA-512:	29CB8E5462B15488B0C6D5FC1673E273FB47841E9C76A4AA5415CA93CEA31B87052BBA511680F2BC9E6543A29F1BBFBA9D06FCC08F5C65BEB115EE7A9E5EFF36
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/ddljson?async=ntp:2
Preview:	)]}'.{"ddljson":{}}

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 46657, version 1.0
Category:	downloaded
Size (bytes):	46657
Entropy (8bit):	7.988657559309873
Encrypted:	false
SSDEEP:
MD5:	3BEB1CF49DC702CD4DE8618EEB344DD4
SHA1:	080E1B4DC8B43DDB06961A3490857CDB936A8C2A
SHA-256:	FFD7AF6177837790E2620C429DCE0DA6DC7D18BBDCF87A7ED2C033A03513E947
SHA-512:	008EE624857F9F7DA939719B44E9146177471A9861BEA10C1065C134A2AF888C5D2E151E04EA0A8949738E2F0901EAB33AA5746207F52E6399119E69F4744D63
Malicious:	false
Reputation:	low
URL:	https://uspslkj.top/assets/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff
Preview:	wOFF.......A...............@...............OS/2...X...V...`..-.cmap...........t.8..cvt .......@...@....fpgm.......8........gasp...0............glyf...@......Ih.{4.head.......6...6.\2.hhea.......!...$.o..hmtx...(........I.-.kern...........L....loca...,......... ..maxp...H... ... ....name...h...%...r..j-post........... ...2prep................x.c`f.d.........................9X.@....a}.......x...)..LL...3.`..p..g..1.2.bP.B..L.....x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....k.u.H.A.P.4.....Z...4.k.....J.......S....................."..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x....*o..

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 55, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1370
Entropy (8bit):	7.79058147133596
Encrypted:	false
SSDEEP:
MD5:	98CB336001F64E101749B219934E087F
SHA1:	7B28419433030181248CC76D29F49D2803C70ED8
SHA-256:	836F7E709AFE63FB6A8CE48B8320C29109E056443F917754B63EA150185A0394
SHA-512:	16B6110BE5F6FA14C096CD9B44F86274C83BB17FBA42CFA444D2C9A7718815BD601F09F4D040C92203A23356CE8DE50F5BECE4FF19A646998C5E43E207B806DC
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSa4iOIsL-QPthx2YJJ6sqUb92KuAM95ZG-Dzdcu1Q&s=10
Preview:	.PNG........IHDR...@...7.............PLTE....7_K...3]..RQb}.....P..N..$T.S".[0.W)....(V.i.....Miv.+Cg..K..A..Z..;.........{....G......BUt.............w....2Ik...........wZ.......$]\|...G..=..1z..A..N....5..g..]k..nM......[IDATH..i{.H...ffh....-..L2Yw......F...^o....<....U.U..),.kY9+N."97u.6b..0.......]y.R..j<..(....c.........,j.t..$/.I..3...`...7.2.Z....\|........V.......p.g.:...g..... .....{I.....h.......,H.....#......tg....E... ...g)........;...>O..^...x.f.A....Md.x.!~.r.o.X........0..........p./Z.d.Yx..^.D..pkM...KC$.pK.h...l.B.a.........9..6.V.....~........m9."u.n..B..S,_.fo.E..l..!h....&.G.].f....'Sk...gh..%.8.8.....y.<AB)..i.e\|...`.I....G.C.._g.T(.8+....w... ....0iM.'\. .x.lo;qb......~.hau...mh..`w...n._B......B.:........k.{../.3(..>....5....@T...b....nA..u.6..?7.......I..1..f..:\+\|...8........X..@...<......$.MS.dw.6N.c.{...j.rk=.....B...7....Aj...Zn.o?.....).....!...=.>.>.......-..R.&.;....t.2.."......t..d~...../....`....WQ...h...

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3572), with no line terminators
Category:	downloaded
Size (bytes):	3572
Entropy (8bit):	5.153712864485526
Encrypted:	false
SSDEEP:
MD5:	430CC7D3AE0A8506AACB5B8D0BF6AE75
SHA1:	3CA91BBACC9C3071B1B9BF8CFAFF86F66AF02899
SHA-256:	80E4235CB874C52E1687D1F055C60A67F001459098F1278725180DCA157DD26E
SHA-512:	DA0395846B8ADA27E7F73214AB366CD9841E243AA7D5BF6AB8538564F06182D879C41B7D5C1A1C83ADB107891699E4B9B2F317D403C15C0081C49F8561AE7FB0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.mNMC8NRqvPE.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTsed-50j0St7CQTv9Qxl5UE1cD77w"
Preview:	.gb_Se{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_wc{text-align:left}.gb_wc>*{color:#bdc1c6;line-height:16px}.gb_wc div:first-child{color:white}.gb_ga{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_ga:hover{background-color:rgba(68,71,70,.08)}.gb_ga:focus,.gb_ga:active{background-color:rgba(68,71,70,.12)}.gb_ga:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_j .gb_ga:hover,.gb_j .gb_ga:focus,.gb_j .gb_ga:active{background-color:rgba(227,227,227,.08)}.gb_j .gb_ga:focus-visible{border-color:#a8c7fa}.gb_ha{-webkit-box

Static File Info

⊘No static file info

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://uspslkj.top

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Created / dropped Files

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 162

Chrome Cache Entry: 165

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Static File Info

Windows Analysis Report
https://uspslkj.top