Edit tour

Windows Analysis Report
https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92

Overview

General Information

Sample URL:	https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92
Analysis ID:	654713

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

HTML body contains low number of good links

No HTML title found

Classification

Process Tree

System is start

chrome.exe (PID: 576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation --single-argument https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92 MD5: 2A7452F3E3165FECBFCCAD71B04E5C37)

chrome.exe (PID: 2748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1732,10764650729805188149,7614136142965262242,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 /prefetch:8 MD5: 2A7452F3E3165FECBFCCAD71B04E5C37)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
92626.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on favicon image match)

Source: https://pouncing-discreet-floss.glitch.me/

Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish10

Source: Yara match

File source: 92626.3.pages.csv, type: HTML

Source: https://pouncing-discreet-floss.glitch.me/	HTTP Parser: Number of links: 0
Source: https://pouncing-discreet-floss.glitch.me/	HTTP Parser: Number of links: 0

Source: https://pouncing-discreet-floss.glitch.me/	HTTP Parser: HTML title missing
Source: https://pouncing-discreet-floss.glitch.me/	HTTP Parser: HTML title missing

Source: https://pouncing-discreet-floss.glitch.me/	HTTP Parser: No <meta name="author".. found
Source: https://pouncing-discreet-floss.glitch.me/	HTTP Parser: No <meta name="author".. found

Source: https://pouncing-discreet-floss.glitch.me/	HTTP Parser: No <meta name="copyright".. found
Source: https://pouncing-discreet-floss.glitch.me/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\eyup\AppData\Local\Temp\576_1583784604\LICENSE.txt

Source: chrome.exe

Memory has grown: Private usage: 5MB later: 36MB

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65097
Source: unknown	Network traffic detected: HTTP traffic on port 52645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61284
Source: unknown	Network traffic detected: HTTP traffic on port 59067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57292
Source: unknown	Network traffic detected: HTTP traffic on port 58561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54704
Source: unknown	Network traffic detected: HTTP traffic on port 62784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60949
Source: unknown	Network traffic detected: HTTP traffic on port 65097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52645
Source: unknown	Network traffic detected: HTTP traffic on port 54595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56054
Source: unknown	Network traffic detected: HTTP traffic on port 62523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62784
Source: unknown	Network traffic detected: HTTP traffic on port 60493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62523

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66
Source: unknown	TCP traffic detected without corresponding DNS query: 192.185.213.66

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\eyup\AppData\Local\Temp\7a81bb67-9432-4451-8411-1b757f934091.tmp

Source: classification engine

Classification label: mal56.phis.win@26/131@17/329

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation --single-argument https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1732,10764650729805188149,7614136142965262242,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\eyup\AppData\Local\Google\Chrome\User Data\lockfile

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\eyup\AppData\Local\Temp\576_1583784604\LICENSE.txt

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	2 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92	0%	Virustotal		Browse
https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
services.prod.ims.adobejanus.com	0%	Virustotal	Browse
adobe.com.ssl.d1.sc.omtrdc.net	0%	Virustotal	Browse
auth-cloudfront.prod.ims.adobejanus.com	0%	Virustotal	Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
widget.uservoice.com	104.17.29.92	true	false		high
accounts.google.com	216.58.212.141	true	false		high
mboxedge37-alb.tt.omtrdc.net	52.18.70.44	true	false		unknown
services.prod.ims.adobejanus.com	52.215.98.143	true	false	0%, Virustotal, Browse	unknown
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	52.30.153.205	true	false		high
auth-cloudfront.prod.ims.adobejanus.com	52.222.214.54	true	false	0%, Virustotal, Browse	unknown
sharedcloud-production-us-east-1-data-asset.s3-accelerate.amazonaws.com	108.157.1.220	true	false		high
pouncing-discreet-floss.glitch.me	52.3.67.232	true	false		high
adobe.com.ssl.d1.sc.omtrdc.net	15.188.95.229	true	false	0%, Virustotal, Browse	unknown
rebrand.ly	3.224.10.203	true	false		unknown
www.google.com	142.250.186.68	true	false		high
by2.uservoice.com	104.17.30.92	true	false		high
clients.l.google.com	142.250.185.78	true	false		high
prod.adobeccstatic.com	18.66.112.122	true	false		unknown
cdn.cookielaw.org	104.16.148.64	true	false		high
use.typekit.net	unknown	unknown	false		high
assets.adobedtm.com	unknown	unknown	false		high
cm.everesttech.net	unknown	unknown	false		high
adobemobiledev.demdex.net	unknown	unknown	false		high
clients2.google.com	unknown	unknown	false		high
p.typekit.net	unknown	unknown	false		high
adobe.tt.omtrdc.net	unknown	unknown	false		unknown
dpm.demdex.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pouncing-discreet-floss.glitch.me/	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.78	clients.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.67	unknown	United States	15169	GOOGLEUS	false
142.250.186.170	unknown	United States	15169	GOOGLEUS	false
52.30.153.205	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.217.23.106	unknown	United States	15169	GOOGLEUS	false
52.3.67.232	pouncing-discreet-floss.glitch.me	United States	14618	AMAZON-AESUS	false
142.250.203.195	unknown	United States	15169	GOOGLEUS	false
52.18.70.44	mboxedge37-alb.tt.omtrdc.net	United States	16509	AMAZON-02US	false
15.188.95.229	adobe.com.ssl.d1.sc.omtrdc.net	United States	16509	AMAZON-02US	false
52.222.214.54	auth-cloudfront.prod.ims.adobejanus.com	United States	16509	AMAZON-02US	false
104.16.148.64	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
142.250.185.163	unknown	United States	15169	GOOGLEUS	false
104.17.30.92	by2.uservoice.com	United States	13335	CLOUDFLARENETUS	false
44.198.154.229	unknown	United States	14618	AMAZON-AESUS	false
34.247.9.43	unknown	United States	16509	AMAZON-02US	false
3.230.130.186	unknown	United States	14618	AMAZON-AESUS	false
3.224.10.203	rebrand.ly	United States	14618	AMAZON-AESUS	false
92.123.194.186	unknown	European Union	20940	AKAMAI-ASN1EU	false
92.123.225.32	unknown	European Union	20940	AKAMAI-ASN1EU	false
54.77.129.48	unknown	United States	16509	AMAZON-02US	false
34.202.118.73	unknown	United States	14618	AMAZON-AESUS	false
54.74.179.44	unknown	United States	16509	AMAZON-02US	false
52.215.98.143	services.prod.ims.adobejanus.com	United States	16509	AMAZON-02US	false
74.125.163.202	unknown	United States	15169	GOOGLEUS	false
216.58.212.131	unknown	United States	15169	GOOGLEUS	false
34.199.101.34	unknown	United States	14618	AMAZON-AESUS	false
95.101.77.123	unknown	European Union	20940	AKAMAI-ASN1EU	false
104.89.8.203	unknown	United States	16625	AKAMAI-ASUS	false
92.123.225.51	unknown	European Union	20940	AKAMAI-ASN1EU	false
142.250.185.170	unknown	United States	15169	GOOGLEUS	false
108.157.1.220	sharedcloud-production-us-east-1-data-asset.s3-accelerate.amazonaws.com	United States	16509	AMAZON-02US	false
104.17.29.92	widget.uservoice.com	United States	13335	CLOUDFLARENETUS	false
104.92.83.117	unknown	United States	16625	AKAMAI-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.185.213.66	unknown	United States	46606	UNIFIEDLAYER-AS-1US	false
18.64.119.7	unknown	United States	3	MIT-GATEWAYSUS	false
216.58.215.74	unknown	United States	15169	GOOGLEUS	false
34.193.227.236	unknown	United States	14618	AMAZON-AESUS	false
34.197.224.31	unknown	United States	14618	AMAZON-AESUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
216.58.212.141	accounts.google.com	United States	15169	GOOGLEUS	false
18.66.112.122	prod.adobeccstatic.com	United States	3	MIT-GATEWAYSUS	false
92.123.194.154	unknown	European Union	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	654713
Start date and time: 29/06/202223:20:42	2022-06-29 23:20:42 +02:00
Joe Sandbox Product:	CloudBasic
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@26/131@17/329
Cookbook Comments:	Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): CompPkgSrv.exe
Excluded IPs from analysis (whitelisted): 104.92.92.62
Excluded domains from analysis (whitelisted): fs.microsoft.com, e1723.g.akamaiedge.net, prod.fs.microsoft.com.akadns.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: prod.adobeccstatic.com

Created / dropped Files

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\1a6ccf4c-7dea-44a6-993d-3a656d5a6e49.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	104388
Entropy (8bit):	3.764074799512096
Encrypted:	false
SSDEEP:
MD5:	62B6F9478C33D4C2E6E94BFF2EC47AA6
SHA1:	523F7E46BE2C54EB53A6FBE44E9263615E617668
SHA-256:	79589D4DD9AD1B493C27DA9D2D8AEB7B42600C81B5E46C5E7D56651FDDCB6C5E
SHA-512:	7D5A633BD14F2CD9D314A2FDA7A1198276C7A377C815E5040D65ED8B9288B9B33BBF9B14415579410BF469ABDDA8FC625A8EB495017231F7F7ACEBC570F350FD
Malicious:	false
Reputation:	low
Preview:	................T...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.F.i.l.e.S.y.n.c.S.h.e.l.l.6.4...d.l.l.......puA...c.:.\.p.r.o.g.r.a.m. .f.i.l.e.s. .(.x.8.6.).\.m.i.c.r.o.s.o.f.t. .o.n.e.d.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.......f.i.l.e.s.y.n.c.s.h.e.l.l.6.4...d.l.l.......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e."...M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n.....2.1...0.8.3...0.4.2.5...0.0.0.3.....T...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.F.i.l.e.S.y.n.c.S.h.e.l.l.6.4...d.l.l.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....`8. ...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.7.-.Z.i.p.\.7.-.z.i.p...d.l.l.......n\....%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.7.-.z.i.p.\.......7.-.z.i.p...d.l.l.......7.-.Z.i.p.......7.-.Z.i.p. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n.......1.9...0.0................`8.....

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\1fc66c70-a542-4e55-8b8a-2f6fbfdba610.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	119284
Entropy (8bit):	6.063453989023273
Encrypted:	false
SSDEEP:
MD5:	96ED1167CD59B95A72846FA9D1409CB0
SHA1:	9D4478ED1BA00AA56B0938259BBA5A78363F641C
SHA-256:	E96ACA7D0453324EA15039304761E81D3B5952C05752D10DF0FC1F7E27670984
SHA-512:	C6A62389E90D9430CDDC0AEBB5F471B618805C87FBA638FF972AF561758A7F75665E75E15FDA8B6D08C35D90D766489A6DD0BACD20C1FE105B2EA463F0B48EDA
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.656570085208188e+12,"network":1.656537685e+12,"ticks":159119520.0,"uncertainty":3139791.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAACanWu3FyjzSb22qOd7JcKxAAAAAAIAAAAAABBmAAAAAQAAIAAAAOvzHMHSfF9+m4oxy+22fHMcQg44kCf1BXy1OZZbdvKzAAAAAA6AAAAAAgAAIAAAAPTENVQ24xIsJc/ZQEp5QqLyGws8rV509kXnSOO5wySTMAAAAH5bXPykNQD+rPcaJzuKSNgUUlUVuRFSP9klMm9IrmEdAB20jsgAMb2dc/upU0MueUAAAAChrUBvSOw+ZaWzDX+CTHaJdop4I956Us1Y1/MTm0kr4uGgJ1iujCKCl39idN0Kk67uULB9hxw0UYLGUi8ZC41p"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13266608258956374"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\310c0c51-a425-4e90-9151-bc48c0aaaab4.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	119299
Entropy (8bit):	6.06360852979422
Encrypted:	false
SSDEEP:
MD5:	DE1B670213CE387312C566989E777605
SHA1:	D86026775727400BF9107E5E4AB6A082BAF07CFE
SHA-256:	9BFB498EE15FB4087196A521EEEA1EE56E543C575716567C8192FA4228562F61
SHA-512:	BC1F157A27974EE22E3EF7F92DB1A945503460034C80A6D63CDA53152B0DCA0BF07833A168F9B646C6868D457D5010D828EDDE18E2CD350E1ACBEC4B70C08749
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.656570085208188e+12,"network":1.656537685e+12,"ticks":159119520.0,"uncertainty":3139791.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAACanWu3FyjzSb22qOd7JcKxAAAAAAIAAAAAABBmAAAAAQAAIAAAAOvzHMHSfF9+m4oxy+22fHMcQg44kCf1BXy1OZZbdvKzAAAAAA6AAAAAAgAAIAAAAPTENVQ24xIsJc/ZQEp5QqLyGws8rV509kXnSOO5wySTMAAAAH5bXPykNQD+rPcaJzuKSNgUUlUVuRFSP9klMm9IrmEdAB20jsgAMb2dc/upU0MueUAAAAChrUBvSOw+ZaWzDX+CTHaJdop4I956Us1Y1/MTm0kr4uGgJ1iujCKCl39idN0Kk67uULB9hxw0UYLGUi8ZC41p"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13301043723749221"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\74504a49-972d-41ae-9a71-723dd303b3db.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	119284
Entropy (8bit):	6.063453214909564
Encrypted:	false
SSDEEP:
MD5:	86FE7BC117DF77C5DA0AC24ABE1DA7EF
SHA1:	719E5F3F8834A777847456ECFDE0984DFEF92647
SHA-256:	D5FF72C2501735D5EF8F35693541F27F54AB90446DE49FEA95014E1BCAE5BC9E
SHA-512:	ADE6D192D6D083515F23C922C7A872A8E69DEB6BDC6BFD0D7E0FC6B866582E501F0AE00EA7E5D17647F082F8C7A161B71B119EC3D4836AF4CC063A5FE22D4346
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.656570085208188e+12,"network":1.656537685e+12,"ticks":159119520.0,"uncertainty":3139791.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAACanWu3FyjzSb22qOd7JcKxAAAAAAIAAAAAABBmAAAAAQAAIAAAAOvzHMHSfF9+m4oxy+22fHMcQg44kCf1BXy1OZZbdvKzAAAAAA6AAAAAAgAAIAAAAPTENVQ24xIsJc/ZQEp5QqLyGws8rV509kXnSOO5wySTMAAAAH5bXPykNQD+rPcaJzuKSNgUUlUVuRFSP9klMm9IrmEdAB20jsgAMb2dc/upU0MueUAAAAChrUBvSOw+ZaWzDX+CTHaJdop4I956Us1Y1/MTm0kr4uGgJ1iujCKCl39idN0Kk67uULB9hxw0UYLGUi8ZC41p"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13266608258956374"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\938a696a-4539-4b6a-a2c5-ee120d168e07.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	119284
Entropy (8bit):	6.063452090495517
Encrypted:	false
SSDEEP:
MD5:	35D0F44287F7D433C3C98A32BF9845E0
SHA1:	EA1EAF316DACEE936769E6238A23B26B5C53141D
SHA-256:	D5AF849095FDAC7D9FF57C68D5F93DC3B60FE47BCBD7078ED814ADB079590B34
SHA-512:	6F7EBABE6BA73EF784BF337E690CA62398BDDBC7050C83623D3B393E8CA81C2B5D5075FC206707D21224E747985829697DA452A2740947F61E383493ED3C69C2
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.656570085208188e+12,"network":1.656537685e+12,"ticks":159119520.0,"uncertainty":3139791.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAACanWu3FyjzSb22qOd7JcKxAAAAAAIAAAAAABBmAAAAAQAAIAAAAOvzHMHSfF9+m4oxy+22fHMcQg44kCf1BXy1OZZbdvKzAAAAAA6AAAAAAgAAIAAAAPTENVQ24xIsJc/ZQEp5QqLyGws8rV509kXnSOO5wySTMAAAAH5bXPykNQD+rPcaJzuKSNgUUlUVuRFSP9klMm9IrmEdAB20jsgAMb2dc/upU0MueUAAAAChrUBvSOw+ZaWzDX+CTHaJdop4I956Us1Y1/MTm0kr4uGgJ1iujCKCl39idN0Kk67uULB9hxw0UYLGUi8ZC41p"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13301043723749221"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	modified
Size (bytes):	40
Entropy (8bit):	3.254162526001658
Encrypted:	false
SSDEEP:
MD5:	F11D60E0949BD6C7B005E067ABC8B546
SHA1:	755490A3E89E6A6FAAD8A0065644A14CD117E73C
SHA-256:	C880A789C9A30D2382324595DCB404A27C8DA2FE1BF7BB663FFA3B29C4224C03
SHA-512:	94BA7668814D9E0B728ACB2EB3FF59F228540A65ADE83230975861E90BE830C8C3FD1CB12E646851B2BDD7EBFB24397BD5FE43D61E6F7C135B38BC8EBAEF6AD7
Malicious:	false
Reputation:	low
Preview:	sdPC.....................^"/...B.$.J.\|.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\017f4cc8-d382-4951-bb08-8a5681b45de4.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4632
Entropy (8bit):	5.072331584333613
Encrypted:	false
SSDEEP:
MD5:	DAD465D4A190421A74A304DD32850E84
SHA1:	87D62A9ADB42CE9C60C886B3176551ADBEA61AE1
SHA-256:	650F5C634A67CB4F0846F224AC16EE1F165D9095C7B40E57C3130D396DDC7E31
SHA-512:	2A3DA841519848B8A530CB75EC8BDCB07040AF8ACA1600CCC208AFD9B5EFD8D737CDBB1DE08A1AAC783F6B8963B35E5DAF30A550C8DE3ADBF21BB30C1D041F6F
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13301043684070586","alternate_error_pages":{"backup":true},"autocomplete":{"retention_policy_last_version":91},"autofill":{"orphan_rows_removed":true},"browser":{"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"this_week_number":2739,"this_week_services_downstream_foreground_kb":{"112189210":16,"115188287":59,"21145003":243,"35565745":2,"5151071":2,"6019475":81,"8561691":1}},"default_apps_install_state":2,"domain_diversity":{"last_reporting_timestamp":"13301043684071922"},"extensions":{"alerts":{"initialized":true},"chrome_url_overrides":{},"last_chrome_version":"91.0.4472.77"},"federated_learning":{"floc_id":{"compute_time":"13301043684284162","finch_config_version":"1","history_begin_time":"0","history_end_time":"0","sorting_lsh_version":"0"}},"gaia_c

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\0ba72f6e-cf19-4734-87c6-1e06a9b6e43a.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	18562
Entropy (8bit):	5.558399625885204
Encrypted:	false
SSDEEP:
MD5:	9DD10E10C7514E50507555257DC7FC03
SHA1:	82246B7EC499376BF93FA83D1AB923049AACFB4D
SHA-256:	50C6E9C9874C41233D6428EAFAE7D76850E902D707AD11C4F0DA7B849D19F11F
SHA-512:	2FF7928FCB67850AC07919A892BBFB318915F97BDCF135428451FCD19C9D740945EC0483D2418C0182C22BE793888FFC4A835B1D8C99CD42135DCEC9D985DF7C
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13301043682713834","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\4504651f-5913-4952-b2c7-619ae854c2b5.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5309
Entropy (8bit):	5.094718511935941
Encrypted:	false
SSDEEP:
MD5:	1D6875008091AEC806EEB2CB8924E698
SHA1:	4C87C43029E4937C48F92708F0B0023AAD831C2B
SHA-256:	EE37BBDB7C5F157D851CE5F454B55A2800E110146ED0CE24FF02F20EA9108BF3
SHA-512:	E8E201CA4538F493C088BFE9C2C9090E6C0AB1EB5A78F8F8386BF1528B211F3A25158956E16C632E8FC276CCD73ADFA8CAEA9059477887F33B52C84B627F00CA
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13301043684070586","alternate_error_pages":{"backup":true},"autocomplete":{"retention_policy_last_version":91},"autofill":{"orphan_rows_removed":true},"browser":{"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"this_week_number":2739,"this_week_services_downstream_foreground_kb":{"112189210":41,"115188287":59,"130931413":0,"21145003":243,"35565745":2,"47815025":1,"49601082":3,"5151071":2,"54845618":20,"6019475":81,"82509217":10446,"8561691":1,"88863520":1}},"default_apps_install_state":2,"domain_diversity":{"last_reporting_timestamp":"13301043684071922"},"extensions":{"alerts":{"initialized":true},"chrome_url_overrides":{},"last_chrome_version":"91.0.4472.77"},"federated_learning":{"floc_id":{"compute_time":"13301043684284162","finch_config_version":"1"

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\57d805eb-f3a4-4c5b-86ca-fde2c0d21a4d.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\7e108add-4da9-4798-a394-83485b966f4c.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	3461
Entropy (8bit):	4.959107789253435
Encrypted:	false
SSDEEP:
MD5:	91F2E092E23180DD5055A2B32A42B0DB
SHA1:	561B168ED63F9FF20D4252356B2848EF9746D34F
SHA-256:	1E227CEE61D910275FD8FE0333BB77B2BE6C5729C6E20103FD6CF5D433B4BFFB
SHA-512:	E5F3138784900787DA0C05019D6D28EEAA2BF2AD6F177426F642B53AC2738C0E7534A552A40DC515A3D21E5770ADD638233B8BC39886EDD6BFD3E58F4559973C
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13301043684070586","alternate_error_pages":{"backup":true},"autofill":{"orphan_rows_removed":true},"browser":{"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"this_week_number":2739},"default_apps_install_state":2,"domain_diversity":{"last_reporting_timestamp":"13301043684071922"},"extensions":{"alerts":{"initialized":true},"chrome_url_overrides":{},"last_chrome_version":"91.0.4472.77"},"federated_learning":{"floc_id":{"compute_time":"13301043684284162","finch_config_version":"1","history_begin_time":"0","history_end_time":"0","sorting_lsh_version":"0"}},"gcm":{"product_category_for_subtypes":"com.chrome.windows"},"google":{"services":{"signin_scoped_device_id":"87e5d2c9-e8ad-4001-85fb-3071a376f2e3"}},"intl":{"selected_languages":"en-US,en"},"invalidati

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\8562e6cb-bfe9-44cb-8a69-518bd84158e1.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	18563
Entropy (8bit):	5.558257783157731
Encrypted:	false
SSDEEP:
MD5:	076F8C75570B6DB07C0B80AECC7A0FBC
SHA1:	95D77E5AD15885E29C83438ABD85342385FB948A
SHA-256:	C76A39301FA72BD4AFC1D28FAD07DDD7B48DB5FD65DD1DEA2DCA819D521032F2
SHA-512:	3272A9792101543E0A0A48366E72706F476D4A9B23ECF70E00D89C862ED403B7B4D9E5931AF39419F0DD82C3CE451DEBFB48C5CD13B232CA8B17E2850FDB805B
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13301043682713834","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\8d770cf4-6ca7-4932-956b-bf49035bb4e2.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	15830
Entropy (8bit):	5.571064705460496
Encrypted:	false
SSDEEP:
MD5:	34442A55BD9F03AB1DB9E9BE66D0413B
SHA1:	145D9C212F57A7D29B9E89D045E1DE55C0788997
SHA-256:	A2F3E7FE1160573244C492789D99C478C21FE1A14FAE36F133670EDA1D8C3E0F
SHA-512:	84B3B573EB614FCF3AC3312ADD50143625C4F05FCCD4F88DFC3294B84839D6873378EE28CB3702303F0F8F5AA15C07F90717C51E3D724F99C6A5E513BF05926E
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13301043682713834","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\99eb3cfa-e42a-400b-a2a6-25c54012abdc.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 13 icons, 8x8, 32 bits/pixel, 10x10, 32 bits/pixel
Category:	dropped
Size (bytes):	181072
Entropy (8bit):	5.774426487043815
Encrypted:	false
SSDEEP:
MD5:	1B40AC9ABB964672109D49ABFCFE2717
SHA1:	966E224F2887075825D42D2E7E0063BFAA81A99C
SHA-256:	503149B1B47F8296DEDB800251DBD9AF614856F0D7E6AB1C03DBC90EBCE53674
SHA-512:	00B50E49CAFD8246102BB460C7B96C20B50A2DDCB48A64C40D65901B517A2698DB9C5AA5EC7F143314DDB8D74624377F12A95C7F4D9FCE206473E8BBF126388B
Malicious:	false
Reputation:	low
Preview:	............ .H............. ............... .p............. .h...n......... ............... ......... .... .....n...((.... .h.......00.... ..%..~H..@@.... .(B..&n..``.... .....N......... .(....D........ .2v...M..(............. .................................]..X\.).H...>..Z............\..._...V...F...A...A.......^..Wb...f.)...l...v.M...B...@..Wc...[.....z...`...J.....9...E...k...R.D.......G...A.....;...E...h..XKd..KW..........D...>...=..X....GQ.JW..;M..8K..@H..=;.............JV.YKV.IT.BS.Y........................................(............. .....................................[..TZ.5.B...@..T................X...]...`...\...K...D...A...;.......3...\...e...V...h.).d.G.<...F...@...3...^..Td...X.....e....v.....:...E...=..T`...d...h.B.....?...;...O...B...A...b.!.g...Ru......9...8...P...C...C...l..U].M.5@..............6...C...@..T....EW..LX..=K..Ob..Me..5R..AX..;V..++......BL..KW..KW..DO..BL..EN..AJ..;1..................HT.UIV.FT.BQ.U..............................

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\9b0a2e24-1ee5-4c37-b036-fa70c294fdf1.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5028
Entropy (8bit):	5.075428381503621
Encrypted:	false
SSDEEP:
MD5:	6C772437675B8E27E05B31C3858664A4
SHA1:	61BE7293DA76F383DD93434DC502A264CCE18F92
SHA-256:	7F0D58070B7DE4C63A49B0280906C89A133DD0667F8E5153F2538A580EE17B1C
SHA-512:	616B33509B7638BDCE836CAE70E10574D1938351935FDC250DA52D3DFE19D478FE12A6AD4912DE7C286CDF13F960CC40F9798A00D2B4FFBA2D5B360F77D2BF15
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13301043684070586","alternate_error_pages":{"backup":true},"autocomplete":{"retention_policy_last_version":91},"autofill":{"orphan_rows_removed":true},"browser":{"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"this_week_number":2739,"this_week_services_downstream_foreground_kb":{"112189210":41,"115188287":59,"130931413":0,"21145003":243,"35565745":2,"47815025":1,"5151071":2,"6019475":81,"8561691":1,"88863520":1}},"default_apps_install_state":2,"domain_diversity":{"last_reporting_timestamp":"13301043684071922"},"extensions":{"alerts":{"initialized":true},"chrome_url_overrides":{},"last_chrome_version":"91.0.4472.77"},"federated_learning":{"floc_id":{"compute_time":"13301043684284162","finch_config_version":"1","history_begin_time":"0","history_end_time"

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	11217
Entropy (8bit):	6.069602775336632
Encrypted:	false
SSDEEP:
MD5:	90F880064A42B29CCFF51FE5425BF1A3
SHA1:	6A3CAE3996E9FFF653A1DDF731CED32B2BE2ACBF
SHA-256:	965203D541E442C107DBC6D5B395168123D0397559774BEAE4E5B9ABC44EF268
SHA-512:	D9CBFCD865356F19A57954F8FD952CAF3D31B354112766C41892D1EF40BD2533682D4EC3F4DA0E59A5397364F67A484B45091BA94E6C69ED18AB681403DFD3F3
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["A+1PYW3V6CJbBuQ7aqrgYhyH3bT8PKyBXp3hN2slpI0=","WSOpQRkYTHjPSlG9Zif2a7TNhy43NDcG1Zg5Nv0UbH0=","jDctR8ImG5KZrQKm4kDjUB7FokSJfjo/pmvFowRVlaY=","LPxhhJiuU0lprt0T6flpS7TkaDg7MocrbmzO65xH6RI=","nZ9zLb2By96AkKXALRM+C0Eu11XUjPiMXEKjiCPdtHE=","wifibc1QfMBN2jrtUtLgsCefvuceTpAatmLvul11RJA=","dHjWlSIIdjj7MWqg3T8MG58RuuqRXk32vqi/13JqEgA=","zd3DV7dbvfNvx1hdhU01fW5ily52DLN0CFL/ADaEeTI=","DpjXcO85FFFY9KJFPkGNfFUtdQIOsGwO5jUckiUwY14=","gqid6l1+mk/6yWgUECRofI9lMipXgXh2jEN2+CxmPE0=","prDB91X2Mmfg/M/txVMITWBmEGbOGjqBTP7CMjYqdHs=","yLPAqV4gqoyS/zFkEt3Cn2j0q2v9QOSthVFfWn8EzCM=","EPQ3jzdrLkAHyvf3920B5Y3aAkO1IJdn/UtbnAmq6T0=","+oOc6ca+ChKUpTu+oa2ZRxRE+wG3QJmuYWEvYCs40NI=","3mBGNAiRlTANEQkqzU3TEi+5wJ0ubR5uwtS4/9OOM7w=","1A9NNawxuhu95H5eThvf1rewJ4QQWhhPNxJXO1C/n68=","E3vWLQxzmj+e5QxYbUscllJ5n0ITpw5JBHV1Kph3/KM=","i3I8ghdTF9c1ZXNBZmvsID+DV4gxBVN27rj9wsMtRpg=","R8B8qYabnMSlLPhrtu0hGYrHn3llsMHqBbi70gkIjEE=","rhlzuEvv2KRAFMms896xFwkNgPrw6WvmgPn6xrBSa2Y=","LAMXv6sRb0VZrY34aVXF3Fftxs

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 13 icons, 8x8, 32 bits/pixel, 10x10, 32 bits/pixel
Category:	dropped
Size (bytes):	181072
Entropy (8bit):	5.774426487043815
Encrypted:	false
SSDEEP:
MD5:	1B40AC9ABB964672109D49ABFCFE2717
SHA1:	966E224F2887075825D42D2E7E0063BFAA81A99C
SHA-256:	503149B1B47F8296DEDB800251DBD9AF614856F0D7E6AB1C03DBC90EBCE53674
SHA-512:	00B50E49CAFD8246102BB460C7B96C20B50A2DDCB48A64C40D65901B517A2698DB9C5AA5EC7F143314DDB8D74624377F12A95C7F4D9FCE206473E8BBF126388B
Malicious:	false
Reputation:	low
Preview:	............ .H............. ............... .p............. .h...n......... ............... ......... .... .....n...((.... .h.......00.... ..%..~H..@@.... .(B..&n..``.... .....N......... .(....D........ .2v...M..(............. .................................]..X\.).H...>..Z............\..._...V...F...A...A.......^..Wb...f.)...l...v.M...B...@..Wc...[.....z...`...J.....9...E...k...R.D.......G...A.....;...E...h..XKd..KW..........D...>...=..X....GQ.JW..;M..8K..@H..=;.............JV.YKV.IT.BS.Y........................................(............. .....................................[..TZ.5.B...@..T................X...]...`...\...K...D...A...;.......3...\...e...V...h.).d.G.<...F...@...3...^..Td...X.....e....v.....:...E...=..T`...d...h.B.....?...;...O...B...A...b.!.g...Ru......9...8...P...C...C...l..U].M.5@..............6...C...@..T....EW..LX..=K..Ob..Me..5R..AX..;V..++......BL..KW..KW..DO..BL..EN..AJ..;1..................HT.UIV.FT.BQ.U..............................

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1207
Entropy (8bit):	5.7193146484818405
Encrypted:	false
SSDEEP:
MD5:	9DE85CA522F7258040363A94CE8C9721
SHA1:	F1FAC899889B378A59F71D99EFCA9D6E43C06548
SHA-256:	F1F638FEE38702C8791A9E2D090FE0D3E0A854009682F44B1AA6769277B7F997
SHA-512:	DABE7BB8ABF36910CD82714B97ADF5C4238278038080C94A0AD0A6522011B43578D1B63A36C8CF4241403D47CB5AAD4BDCC56F2AEB94B97C2326752F70F1795B
Malicious:	false
Reputation:	low
Preview:	............."......365..com..https..login..microsoft..office..www..10ee182aed92..3e840921..4cef..5c4f..acrobat..adobe..ba5b..link..track..uri..urn:aaid:scds:us........10ee182aed92......365......3e840921......4cef......5c4f......acrobat......adobe......ba5b......com......https......link......login......microsoft......office......track......uri......urn:aaid:scds:us......www..2.........0.........1.........2.........3.........4..........5..........6........8.........9.........:........a.............b..........c...............d..........e............f...........g........h........i.............k.........l.........m.........n..........o.............p........r............s..........t...........u.........w...:......................"........."............................................"........"........"........"........"........"........"........"........"........"........"B............. .......https://www.office.com/2#Office 365 Login \| Microsoft Office:..............:.............

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5309
Entropy (8bit):	5.094367286952279
Encrypted:	false
SSDEEP:
MD5:	894E6751E3010C3459E6B81B62E0ACAA
SHA1:	5D65A59A8325057D1E44C01AE0075C2B183AD4E6
SHA-256:	C2A890FE3A0474500A5FCC2EFD1F3B1941D8AA24A5123E6429AB68C9489C6C82
SHA-512:	21C36221E3ACCE88DF6D22F41975037B85AAB1EFED94F1C8B3D536B832DA2912FC99DD0A1AAFEF9A2E619B6B27E5682E9A2BE6C5A8ABBF1BC081CE9D3BCBAB85
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13301043684070586","alternate_error_pages":{"backup":true},"autocomplete":{"retention_policy_last_version":91},"autofill":{"orphan_rows_removed":true},"browser":{"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"this_week_number":2739,"this_week_services_downstream_foreground_kb":{"112189210":41,"115188287":59,"130931413":0,"21145003":243,"35565745":2,"47815025":1,"49601082":3,"5151071":2,"54845618":21,"6019475":81,"82509217":10446,"8561691":1,"88863520":1}},"default_apps_install_state":2,"domain_diversity":{"last_reporting_timestamp":"13301043684071922"},"extensions":{"alerts":{"initialized":true},"chrome_url_overrides":{},"last_chrome_version":"91.0.4472.77"},"federated_learning":{"floc_id":{"compute_time":"13301043684284162","finch_config_version":"1"

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	18563
Entropy (8bit):	5.558257783157731
Encrypted:	false
SSDEEP:
MD5:	076F8C75570B6DB07C0B80AECC7A0FBC
SHA1:	95D77E5AD15885E29C83438ABD85342385FB948A
SHA-256:	C76A39301FA72BD4AFC1D28FAD07DDD7B48DB5FD65DD1DEA2DCA819D521032F2
SHA-512:	3272A9792101543E0A0A48366E72706F476D4A9B23ECF70E00D89C862ED403B7B4D9E5931AF39419F0DD82C3CE451DEBFB48C5CD13B232CA8B17E2850FDB805B
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13301043682713834","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\f7e01850-ce80-4674-bc7c-8170c3ba86e3\556be1bce36d62b7_0

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	13803
Entropy (8bit):	5.675575275220477
Encrypted:	false
SSDEEP:
MD5:	233B11E93F84EA131F0D802E754D3D21
SHA1:	C1982910B527E41E9E18F1B1B1571A458FD472BE
SHA-256:	AB1C52FC0A0FD400E95F3EB314F7C84D2C0E5BCDEA147105FE7997986C77E306
SHA-512:	F17B500E09104B25E741E7B924960B4D530DCF5BD08508EE8242E053DA64E6C9FB768955D9024A15FF4D824E7B75012D7E6B7A34B97EAC8364135EE5B5F49561
Malicious:	false
Reputation:	low
Preview:	0\r..m......\... 6......https://acrobat.adobe.com/home/offline.html?__WB_REVISION__=ababbbc20c0d9163913a45d2c03f9066<!DOCTYPE html>. Copyright (c).2020 Adobe Systems Incorporated. All rights reserved. -->. offline.html -->.<html>.<head>.<style>.body {. background-color: #fff;. color: #333;. font-family: adobe-clean, Helvetica, Arial, sans-serif;. font-size: 16px;. margin: 0;. text-align: center;.}...content {. align-items: center;. display: flex;. height: 100vh;. justify-content: center;.}..h1 {. color: #2c2c2c;. font-size: 28px;. font-weight: lighter;. margin: auto;. margin-top: 16px;.}..@media (min-width: 375px) {. h1 {. margin-top: 32px;. }.}..#service-msg {. color: #707070;. font-size: 14px;. font-style: italic;. margin-top: 12px;.}..#lang-picker {. font-size: 12px;. margin: auto;. margin-top: 72px;.}...lang-choice {. color: #747474;. cursor: pointer;. display: inline-block;. padding

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\f7e01850-ce80-4674-bc7c-8170c3ba86e3\index

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO-8859 text, with no line terminators, with escape sequences
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Reputation:	low
Preview:	0\r..m..................

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\f7e01850-ce80-4674-bc7c-8170c3ba86e3\index-dir\temp-index

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.316852147124862
Encrypted:	false
SSDEEP:
MD5:	F3796C6ED48F4362039A5471C0979665
SHA1:	167458E0494C2398ECED73D3DB2B791A804A77F6
SHA-256:	3979C5459B88A38E7151BBE42D6A841ED1CE76CD6DB77338C513B4A580489416
SHA-512:	E6522D37558C1728109363800C9FD1CAEAF894992B11B40C6A910CC29395FFC7E743A14A820195097F195A012B405543FC712F9C4BAE26782E364B4A516B9296
Malicious:	false
Reputation:	low
Preview:	@.......oy retne.............7...........bm..kU.........7........K.:A/.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\f7e01850-ce80-4674-bc7c-8170c3ba86e3\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.316852147124862
Encrypted:	false
SSDEEP:
MD5:	F3796C6ED48F4362039A5471C0979665
SHA1:	167458E0494C2398ECED73D3DB2B791A804A77F6
SHA-256:	3979C5459B88A38E7151BBE42D6A841ED1CE76CD6DB77338C513B4A580489416
SHA-512:	E6522D37558C1728109363800C9FD1CAEAF894992B11B40C6A910CC29395FFC7E743A14A820195097F195A012B405543FC712F9C4BAE26782E364B4A516B9296
Malicious:	false
Reputation:	low
Preview:	@.......oy retne.............7...........bm..kU.........7........K.:A/.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\index.txt (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	123
Entropy (8bit):	4.926885722624298
Encrypted:	false
SSDEEP:
MD5:	314230771353E7E1F87E85E052579316
SHA1:	2775A351BA3EA8D559F9AB7D3D253D9DBB5752BE
SHA-256:	E9CAAA5A3FBFC6A14B8B88BFA0F4DEB4C615AABE9A8342A80DC86960C0EBD960
SHA-512:	39AEDEC25ADC3046902A8892C9FCA81547DE6E5B61D58589BC7A3BB2D19BF790A9EF555340879CCC7A96A0275AB65F73711B37CD72266C6C96C17BC7D9DD8431
Malicious:	false
Reputation:	low
Preview:	.]..workbox-precache-v2-https://acrobat.adobe.com/.$f7e01850-ce80-4674-bc7c-8170c3ba86e3..n(.0...https://acrobat.adobe.com/

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\index.txt.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	123
Entropy (8bit):	4.926885722624298
Encrypted:	false
SSDEEP:
MD5:	314230771353E7E1F87E85E052579316
SHA1:	2775A351BA3EA8D559F9AB7D3D253D9DBB5752BE
SHA-256:	E9CAAA5A3FBFC6A14B8B88BFA0F4DEB4C615AABE9A8342A80DC86960C0EBD960
SHA-512:	39AEDEC25ADC3046902A8892C9FCA81547DE6E5B61D58589BC7A3BB2D19BF790A9EF555340879CCC7A96A0275AB65F73711B37CD72266C6C96C17BC7D9DD8431
Malicious:	false
Reputation:	low
Preview:	.]..workbox-precache-v2-https://acrobat.adobe.com/.$f7e01850-ce80-4674-bc7c-8170c3ba86e3..n(.0...https://acrobat.adobe.com/

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	110897
Entropy (8bit):	5.338271267979368
Encrypted:	false
SSDEEP:
MD5:	AC6F6A6E55DB725E8D8202C6ADE55E32
SHA1:	41CC839FAFB8EB536E2A026498D909AC18373EEF
SHA-256:	F3F9422A38BAAA58121208A70BC700A6C02F75F30928C8930223FA2B9089FB40
SHA-512:	767DB37A49B076DA5EC690FF2A70E6D04A04BB257B24AF2DB7E2C633BE26A1D990958F0048E669CCE7DB28C6B0A01E4E6B7930695FF6A8BD0E93A757654D9934
Malicious:	false
Reputation:	low
Preview:	0\r..m...........&......8/! For license information please see sw.js.LICENSE.txt /.!function(t){var r={};function __webpack_require__(o){if(r[o])return r[o].exports;var a=r[o]={i:o,l:!1,exports:{}};return t[o].call(a.exports,a,a.exports,__webpack_require__),a.l=!0,a.exports}__webpack_require__.m=t,__webpack_require__.c=r,__webpack_require__.d=function(t,r,o){__webpack_require__.o(t,r)\|\|Object.defineProperty(t,r,{enumerable:!0,get:o})},__webpack_require__.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},__webpack_require__.t=function(t,r){if(1&r&&(t=__webpack_require__(t)),8&r)return t;if(4&r&&"object"==typeof t&&t&&t.__esModule)return t;var o=Object.create(null);if(__webpack_require__.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:t}),2&r&&"string"!=typeof t)for(var a in t)__webpack_require__.d(o,a,function(r){return t[r]}.bind(null,a));return o},__

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_1

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	182073
Entropy (8bit):	5.897153043833148
Encrypted:	false
SSDEEP:
MD5:	8FD6F84FC538BF998AAF2D56448683BC
SHA1:	771A208665978228F020DAC4EE7A9A4A79D22924
SHA-256:	E9B25482738C51935636CCB63A3B04C59BE1BD74AD77ACB1E6BA41FD2AD1A403
SHA-512:	C176D39DE49F98E7D7331EBE29D0BB0015F4801882F741D62C30ABFFCEF525476C94DD8C8AD7772055BC3947F6D83CFF747106602C087C4A1224FFA15D553996
Malicious:	false
Reputation:	low
Preview:	0\r..m...........&......8.....7......H.......`.....r...$S.D..`B.... L`.....$S...`.....PL`$....<Rb..............Qb.T%D....t.....Qb..v.....r.... Qf.Q.2....__webpack_require__.b$...........I`....Da....:....$S...`......L`......Qc6.......exports..$..a.............C..Qb..z.....l...H.4...a...............Qbb{t.....call.<..K`....Dz8................%.+.......%.+...(.......~....%.0...%.1...'.....%.+...(....(....(.......'..X.........(.......(Rb............$`....Da..............e......... P.........@....@.M....,P.(........https://acrobat.adobe.com/sw.js.a........D`....D`....D`..........`............(..$S.T..`b.....L`......Qb.#.+....o.......m.....a...........G...C...K`....Do(... ............(....[......!....(....~..).%.0...'..'..X........(Rb...........I`....Da....>.........d..........`..L.......Tc..................$S.p..`.....$L`.........Qd.$......toStringTag.....m.....a................Qd..[.....__esModule.....a.........G..K`....Dv(................t.R.+....(....!....(........(....~..).'..X.....

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	4.035831287727654
Encrypted:	false
SSDEEP:
MD5:	6F8FF7E7650D9DD08444AB868EF3F05C
SHA1:	1E6A980C725F69049FD7289D62A1E429B01C6CCE
SHA-256:	A7BB6328A1C865B730560E0A153C0CA1D923C1AA545468B377720B61DA5477D1
SHA-512:	362D32F95D434D8EFA4230CFE1738E8F2B44E578F0EEB757A2725187AB8AF4EA3A3B76DB751519C9F941CEC1011E0962E4A8B86AE050CC5AA593F60D5BA3E44C
Malicious:	false
Reputation:	low
Preview:	.....*.oy retne............. ...........]...~),........y.......X....,.........%.........n...................K.7....T................dS.$s.gT........T.......4x.<...........J......5j.+y..LT...............w.h...#.T........3.......+...8.T................(C.:A/.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	4.035831287727654
Encrypted:	false
SSDEEP:
MD5:	6F8FF7E7650D9DD08444AB868EF3F05C
SHA1:	1E6A980C725F69049FD7289D62A1E429B01C6CCE
SHA-256:	A7BB6328A1C865B730560E0A153C0CA1D923C1AA545468B377720B61DA5477D1
SHA-512:	362D32F95D434D8EFA4230CFE1738E8F2B44E578F0EEB757A2725187AB8AF4EA3A3B76DB751519C9F941CEC1011E0962E4A8B86AE050CC5AA593F60D5BA3E44C
Malicious:	false
Reputation:	low
Preview:	.....*.oy retne............. ...........]...~),........y.......X....,.........%.........n...................K.7....T................dS.$s.gT........T.......4x.<...........J......5j.+y..LT...............w.h...#.T........3.......+...8.T................(C.:A/.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\ae0752c2-12a2-49e5-92ad-d4ae68291784.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	16472
Entropy (8bit):	5.5711244570888265
Encrypted:	false
SSDEEP:
MD5:	D958D454DF242A5A566E331701A337C2
SHA1:	B250751FA7A1BC5923996F724AAAFC8BE0F48C69
SHA-256:	0B77DD5EE2C03D74000126AC940E031F79DC99A9E40BFC4B682D8F0D91243CC3
SHA-512:	781D320821EDF59B1498234516470433D316926ABF43C5D33DF6594ABF0F45387515704B7CDD0549170B42C000EBA7DE365D5EC2274455BB69DA04C5457FEAA5
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13301043682713834","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\bb4efb3e-0345-4d99-9f77-427c2981486d.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5309
Entropy (8bit):	5.094367286952279
Encrypted:	false
SSDEEP:
MD5:	894E6751E3010C3459E6B81B62E0ACAA
SHA1:	5D65A59A8325057D1E44C01AE0075C2B183AD4E6
SHA-256:	C2A890FE3A0474500A5FCC2EFD1F3B1941D8AA24A5123E6429AB68C9489C6C82
SHA-512:	21C36221E3ACCE88DF6D22F41975037B85AAB1EFED94F1C8B3D536B832DA2912FC99DD0A1AAFEF9A2E619B6B27E5682E9A2BE6C5A8ABBF1BC081CE9D3BCBAB85
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13301043684070586","alternate_error_pages":{"backup":true},"autocomplete":{"retention_policy_last_version":91},"autofill":{"orphan_rows_removed":true},"browser":{"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"this_week_number":2739,"this_week_services_downstream_foreground_kb":{"112189210":41,"115188287":59,"130931413":0,"21145003":243,"35565745":2,"47815025":1,"49601082":3,"5151071":2,"54845618":21,"6019475":81,"82509217":10446,"8561691":1,"88863520":1}},"default_apps_install_state":2,"domain_diversity":{"last_reporting_timestamp":"13301043684071922"},"extensions":{"alerts":{"initialized":true},"chrome_url_overrides":{},"last_chrome_version":"91.0.4472.77"},"federated_learning":{"floc_id":{"compute_time":"13301043684284162","finch_config_version":"1"

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\d50555fc-e082-4755-bd5f-d485328a5da6.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	3461
Entropy (8bit):	4.959107789253435
Encrypted:	false
SSDEEP:
MD5:	0448B8154751FA767AD263B6285FD48D
SHA1:	F2B9DF96C3E6C9BC63041C4BEA4949F59A2A49A0
SHA-256:	4B50C0B84E53739D601833483CEBE1F7A8A9EA08A64F8EF743587B5BA16354E0
SHA-512:	15389E71C4F4C0DD1FCD219DB5708D37F751B62B9FEA0A01E46C212825022057AC684023F9FFC2D715C05681F0B05ED048CA88482EC76550B632C78D50190F44
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13301043684070586","alternate_error_pages":{"backup":true},"autofill":{"orphan_rows_removed":true},"browser":{"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"this_week_number":2739},"default_apps_install_state":2,"domain_diversity":{"last_reporting_timestamp":"13301043684071922"},"extensions":{"alerts":{"initialized":true},"chrome_url_overrides":{},"last_chrome_version":"91.0.4472.77"},"federated_learning":{"floc_id":{"compute_time":"13301043684284162","finch_config_version":"1","history_begin_time":"0","history_end_time":"0","sorting_lsh_version":"0"}},"gcm":{"product_category_for_subtypes":"com.chrome.windows"},"google":{"services":{"signin_scoped_device_id":"87e5d2c9-e8ad-4001-85fb-3071a376f2e3"}},"intl":{"selected_languages":"en-US,en"},"invalidati

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000014.dbtmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:
MD5:	EBC863BD1C035289FE8190DA28B400BC
SHA1:	1E63D5BDA5F389CE1692DA89776E8A51FA12BE13
SHA-256:	61657118ABC562D70C10CBEA1E8C92FAB3A92739F5445033E813C3511688C625
SHA-512:	F21506FEEED984486121A09C1D43D4825EC1EC87F8977FA8C9CD4FF7FE15A49F74DC1B874293409BD309006C7BBC81E1C4BCBA8D297C5875CA009B02E6D2B7BE
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000014.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:
MD5:	EBC863BD1C035289FE8190DA28B400BC
SHA1:	1E63D5BDA5F389CE1692DA89776E8A51FA12BE13
SHA-256:	61657118ABC562D70C10CBEA1E8C92FAB3A92739F5445033E813C3511688C625
SHA-512:	F21506FEEED984486121A09C1D43D4825EC1EC87F8977FA8C9CD4FF7FE15A49F74DC1B874293409BD309006C7BBC81E1C4BCBA8D297C5875CA009B02E6D2B7BE
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000014.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Last Browser

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	106
Entropy (8bit):	3.138546519832722
Encrypted:	false
SSDEEP:
MD5:	DE9EF0C5BCC012A3A1131988DEE272D8
SHA1:	FA9CCBDC969AC9E1474FCE773234B28D50951CD8
SHA-256:	3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
SHA-512:	CEA946EBEADFE6BE65E33EDFF6C68953A84EC2E2410884E12F406CAC1E6C8A0793180433A7EF7CE097B24EA78A1FDBB4E3B3D9CDF1A827AB6FF5605DA3691724
Malicious:	false
Reputation:	low
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Last Version

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	2.6258145836939115
Encrypted:	false
SSDEEP:
MD5:	5829CE2BFB1385DD76A00342DAAEE6DF
SHA1:	E505273D47691581524CBF1699D6A73834ACD9CD
SHA-256:	B609B273EBA3B8EA8478C9A1FAAF9E5D266D1A1F008CED5C1FC2ECFE1A5278C5
SHA-512:	E1FB642D530D8171A46516AA7B8C7C29F802C6E3659AEAF96F10AA77808723D50E8B3ABE9385FC0F42CF1FB95F5EC1CC197F2D24582C3B0FBEB058BCD3C798FE
Malicious:	false
Reputation:	low
Preview:	91.0.4472.77

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Local State (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	119299
Entropy (8bit):	6.063596557394022
Encrypted:	false
SSDEEP:
MD5:	23483811283809EE2593CB54B9CA97CE
SHA1:	50CAB7F0A8DB4D8973BB4682062CEA938BD9D257
SHA-256:	DE264947B2FF7714B87623727D5FBB2A08C91527FF728F9B2C0AB0AC6B8FFF52
SHA-512:	8DE8DBE3485D0ED7FCFBB911F1533AABA6BA9A3A4A2BD5245745730D16FF538A57EB755BBE1A2C3F7BCECDE51B86D4FBAE01D2469E282501542F3E5B142F4369
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.656570085208188e+12,"network":1.656537685e+12,"ticks":159119520.0,"uncertainty":3139791.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAACanWu3FyjzSb22qOd7JcKxAAAAAAIAAAAAABBmAAAAAQAAIAAAAOvzHMHSfF9+m4oxy+22fHMcQg44kCf1BXy1OZZbdvKzAAAAAA6AAAAAAgAAIAAAAPTENVQ24xIsJc/ZQEp5QqLyGws8rV509kXnSOO5wySTMAAAAH5bXPykNQD+rPcaJzuKSNgUUlUVuRFSP9klMm9IrmEdAB20jsgAMb2dc/upU0MueUAAAAChrUBvSOw+ZaWzDX+CTHaJdop4I956Us1Y1/MTm0kr4uGgJ1iujCKCl39idN0Kk67uULB9hxw0UYLGUi8ZC41p"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13301043723749221"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	104388
Entropy (8bit):	3.764074799512096
Encrypted:	false
SSDEEP:
MD5:	62B6F9478C33D4C2E6E94BFF2EC47AA6
SHA1:	523F7E46BE2C54EB53A6FBE44E9263615E617668
SHA-256:	79589D4DD9AD1B493C27DA9D2D8AEB7B42600C81B5E46C5E7D56651FDDCB6C5E
SHA-512:	7D5A633BD14F2CD9D314A2FDA7A1198276C7A377C815E5040D65ED8B9288B9B33BBF9B14415579410BF469ABDDA8FC625A8EB495017231F7F7ACEBC570F350FD
Malicious:	false
Reputation:	low
Preview:	................T...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.F.i.l.e.S.y.n.c.S.h.e.l.l.6.4...d.l.l.......puA...c.:.\.p.r.o.g.r.a.m. .f.i.l.e.s. .(.x.8.6.).\.m.i.c.r.o.s.o.f.t. .o.n.e.d.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.......f.i.l.e.s.y.n.c.s.h.e.l.l.6.4...d.l.l.......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e."...M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n.....2.1...0.8.3...0.4.2.5...0.0.0.3.....T...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.F.i.l.e.S.y.n.c.S.h.e.l.l.6.4...d.l.l.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....`8. ...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.7.-.Z.i.p.\.7.-.z.i.p...d.l.l.......n\....%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.7.-.z.i.p.\.......7.-.z.i.p...d.l.l.......7.-.Z.i.p.......7.-.Z.i.p. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n.......1.9...0.0................`8.....

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\ChromeExtMalware.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1286206
Entropy (8bit):	4.001212920944526
Encrypted:	false
SSDEEP:
MD5:	534E0EB277997EFF4750750EC52CF491
SHA1:	E8CEF0EB4B52FE4F2E88574FF9700290A91621CC
SHA-256:	250A3FA7D66757D6A326D7651E271E6D835B6B993D4EB85109F269F8EBE1C748
SHA-512:	1376117B88E105EE8DC50063EE2C1BEAF3203EDA1231CB33929CD753660F4BCBD839EB406F22DC97E6A7F0FB68096D4F009A580ACC74F35D88BC088F7C3FF054
Malicious:	false
Reputation:	low
Preview:	.........N .*.N....N. ..Naaaadbolalgmogecpogmlebfkpigmpdjaaaaiognmpgbjoffachmpnnppfnokcbeaaaakngccdmgikgidoadpaopippmdfihaaadcbdjencpiphepfhhdebfocpbfddcaaaggnhhcicpemabkcpekihlocinhaalaaahfampijhmeembhjbebjebkeoedjjfaaahkcageknejffamkgfoiakhpjciaobaaaiinppadbheljngocoegdcncpaejiiaaakpbbojhipcodjiknnbjkafgjolnjnaaalhkjlldhojjcmmiaoopcglbdlfjcpaaamfohdgeiomgdngemljnheihdmgkecaaamnkbkbppehfhhkmiodoniifhfpkkaaaanfaliloicindpienfhcnpndcibpcgaaankgpdiealiomopmnjblmeimiejfdaaabajgbpmnmnmhdfmjmnbkbjpibhmefdaabchfpoaokbenfoikepjpdidacbiekfaabchjflcbccncldaekpjpcienceijonaabcnnmihfbpfblmeflmggaccdjlpfppaabefojcgchjbojmkeidhaceaaojjjodaabgniekficofjmfoejkgpncpaimldcmaabllpaogiigffnofgfhaecokpnhflghaaboihdfgkjdneohdofabaponaaibbdeaabpdmlmkpedpigeignclfmodjhpllljaacakdiakmgiollmahgdginnioeonmfbaacdffaeghaialcklmicpdlpnikjholcaacfcnecbpnccnonpbdgpbljaghhclaaaacfjaodbklidgpgkophnjoielmlapppaacgihcbcjhegjcfgkobdigjngohmjmfaacgmmndomhckgeglaphhdeegmonpbfjaacgncginkjobaaiokjcmbjgjclgbgfaaacjmcdmcl

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\ChromeExtMalware.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1286206
Entropy (8bit):	4.001212920944526
Encrypted:	false
SSDEEP:
MD5:	534E0EB277997EFF4750750EC52CF491
SHA1:	E8CEF0EB4B52FE4F2E88574FF9700290A91621CC
SHA-256:	250A3FA7D66757D6A326D7651E271E6D835B6B993D4EB85109F269F8EBE1C748
SHA-512:	1376117B88E105EE8DC50063EE2C1BEAF3203EDA1231CB33929CD753660F4BCBD839EB406F22DC97E6A7F0FB68096D4F009A580ACC74F35D88BC088F7C3FF054
Malicious:	false
Reputation:	low
Preview:	.........N .*.N....N. ..Naaaadbolalgmogecpogmlebfkpigmpdjaaaaiognmpgbjoffachmpnnppfnokcbeaaaakngccdmgikgidoadpaopippmdfihaaadcbdjencpiphepfhhdebfocpbfddcaaaggnhhcicpemabkcpekihlocinhaalaaahfampijhmeembhjbebjebkeoedjjfaaahkcageknejffamkgfoiakhpjciaobaaaiinppadbheljngocoegdcncpaejiiaaakpbbojhipcodjiknnbjkafgjolnjnaaalhkjlldhojjcmmiaoopcglbdlfjcpaaamfohdgeiomgdngemljnheihdmgkecaaamnkbkbppehfhhkmiodoniifhfpkkaaaanfaliloicindpienfhcnpndcibpcgaaankgpdiealiomopmnjblmeimiejfdaaabajgbpmnmnmhdfmjmnbkbjpibhmefdaabchfpoaokbenfoikepjpdidacbiekfaabchjflcbccncldaekpjpcienceijonaabcnnmihfbpfblmeflmggaccdjlpfppaabefojcgchjbojmkeidhaceaaojjjodaabgniekficofjmfoejkgpncpaimldcmaabllpaogiigffnofgfhaecokpnhflghaaboihdfgkjdneohdofabaponaaibbdeaabpdmlmkpedpigeignclfmodjhpllljaacakdiakmgiollmahgdginnioeonmfbaacdffaeghaialcklmicpdlpnikjholcaacfcnecbpnccnonpbdgpbljaghhclaaaacfjaodbklidgpgkophnjoielmlapppaacgihcbcjhegjcfgkobdigjngohmjmfaacgmmndomhckgeglaphhdeegmonpbfjaacgncginkjobaaiokjcmbjgjclgbgfaaacjmcdmcl

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlBilling.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	48958
Entropy (8bit):	7.996563552663544
Encrypted:	true
SSDEEP:
MD5:	1E269B120828345F57DEE1F2CEAC50A5
SHA1:	509242AFA9E10617E7A611F7B482A24441618B86
SHA-256:	1E5259A4D9FE67A62A158DECF7CFAB5B66AA1F9302450757F7712F13457F813B
SHA-512:	9A4FE10A6E03FA6E92D383992A6356248A15A77F4366CB844ABD8CFD3E6670F16B5E8CB2EB2CBC953EFCE6E4ECC9F1C443D3CCD6A52B67EAD08CB60407B4EB13
Malicious:	false
Reputation:	low
Preview:	.......... ..........................O........v..X....J..... )..%...(....`X./...Bur.D$b.J:..O..P..S...Y...[XG._%Z.a]..eP..h.,.sY..zP1...3...8.......2...^...}......E...%....c..P....&.........]&..~......._..P...L'..........<.......PA.#%e.,.I.1...8...H.0.M...Y1..\.m.`...e...g...mS..sY..y....c>.......3........../.......gp..........6...............&..+=..(........?V..T...........t...........@......c[..r.......1L...U...E. ...$...%/^.&^..(...)x..:\|..;...;...=...AA..E=..J...O...O.R.Q...R&b.X.r.a...e...m...t...t.E.v..~x...................(...Vc..i6...\|..................t......q......p..s....9..........ow...........u.#...%.*.1...3i..7...9.r.<d,.<...>w].Aj..O.;.X...\k..r6..rw..\|.`..t....2..........~..9......rE.....,...I......q...8..@@..6...I....!..h...:......................%L.......wA.03R.8m..>...E.,.H]..L?..TYq.V...].._.9.`y..d.\.h.S.i...{.;.}.....o......[.......F......9.......p...]....6..~...P:..n...N....J..M.......8....<..5F....W......[V..~........a...B...#.....

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlBilling.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	48958
Entropy (8bit):	7.996563552663544
Encrypted:	true
SSDEEP:
MD5:	1E269B120828345F57DEE1F2CEAC50A5
SHA1:	509242AFA9E10617E7A611F7B482A24441618B86
SHA-256:	1E5259A4D9FE67A62A158DECF7CFAB5B66AA1F9302450757F7712F13457F813B
SHA-512:	9A4FE10A6E03FA6E92D383992A6356248A15A77F4366CB844ABD8CFD3E6670F16B5E8CB2EB2CBC953EFCE6E4ECC9F1C443D3CCD6A52B67EAD08CB60407B4EB13
Malicious:	false
Reputation:	low
Preview:	.......... ..........................O........v..X....J..... )..%...(....`X./...Bur.D$b.J:..O..P..S...Y...[XG._%Z.a]..eP..h.,.sY..zP1...3...8.......2...^...}......E...%....c..P....&.........]&..~......._..P...L'..........<.......PA.#%e.,.I.1...8...H.0.M...Y1..\.m.`...e...g...mS..sY..y....c>.......3........../.......gp..........6...............&..+=..(........?V..T...........t...........@......c[..r.......1L...U...E. ...$...%/^.&^..(...)x..:\|..;...;...=...AA..E=..J...O...O.R.Q...R&b.X.r.a...e...m...t...t.E.v..~x...................(...Vc..i6...\|..................t......q......p..s....9..........ow...........u.#...%.*.1...3i..7...9.r.<d,.<...>w].Aj..O.;.X...\k..r6..rw..\|.`..t....2..........~..9......rE.....,...I......q...8..@@..6...I....!..h...:......................%L.......wA.03R.8m..>...E.,.H]..L?..TYq.V...].._.9.`y..d.\.h.S.i...{.;.}.....o......[.......F......9.......p...]....6..~...P:..n...N....J..M.......8....<..5F....W......[V..~........a...B...#.....

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlCsdAllowlist.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	5079
Entropy (8bit):	7.96121611560501
Encrypted:	false
SSDEEP:
MD5:	B8FFFA1C176CEC6B2D4D3D3DCF86B2BA
SHA1:	C743FE0DE7F5412E4064FEA221F54514FD7F963B
SHA-256:	1E76CF0198644A39CFFCC40217696F2F02C42447654EBC3C0485B71DEE8B07FC
SHA-512:	F6AC4FF10CFF9E70B851A0DF5CC343CE2C29FD8D2A77FC00D5D0BAC36C11D0841070949ED62CCF35099F7FE2C703EF7EAFB3671038466E62A098F7EDAFECDA63
Malicious:	false
Reputation:	low
Preview:	........' ......................V&...vo......O......2p..;.I.A.....v..^Q........]...5...i.O.\..b...\|......)p0.+.d.n.... -...o......\|..4............mB.-7........S.4=..-7..b.>...`...m.._..u.P..0`..........E.....)...2m......U...].......1.!..O .Z...a.a../....7..<......vm..~....+............>.\..........].` ...8...Q..)..m.....}../...K...2X...L..N...5...Y..vi.......>... ...;..d#..f.....B.(....r..,i...........x>..m..G++.....W..#.a.F.p...-...c.4S..Fw..\|.f.... ..X U.. .%. .T.!.Z.!.."...".v#...#...$R..$p..$...%2..%z..&Pw%&...&..'...'X..'...'.W.(Z.(_z.(z.m(...(..(...(..l(..(...(..T)..e)vV....+qS.+.1j+.,>.n,K.,}L.,. .,..,...-+W.-.mI-...-.....=..LC..W...a.h......./<.\/..0*.0t.!0...0...1.w.1Y..1...1.9z1..2F.Y2...3..r3&..3d..3u.B3.b.3...3...3...4e.4..84..4..5[M.5izF5..85..95.q?5...6.V.6H.N6...6...6..V8..y8N<.8x..8..88.9.8...9..l97..9E.V9_:.9j..9.[:.s3;_M.<.q.<.3.<...=`'.=..>...>...?=.?G..?S..?p..?.Md?.'.@...@...A-!.AM..A.1cB..ACS.\C\.#C...D..D!.3D\|..D.v.D..1D.(E=..Eu

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlCsdAllowlist.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	5079
Entropy (8bit):	7.96121611560501
Encrypted:	false
SSDEEP:
MD5:	B8FFFA1C176CEC6B2D4D3D3DCF86B2BA
SHA1:	C743FE0DE7F5412E4064FEA221F54514FD7F963B
SHA-256:	1E76CF0198644A39CFFCC40217696F2F02C42447654EBC3C0485B71DEE8B07FC
SHA-512:	F6AC4FF10CFF9E70B851A0DF5CC343CE2C29FD8D2A77FC00D5D0BAC36C11D0841070949ED62CCF35099F7FE2C703EF7EAFB3671038466E62A098F7EDAFECDA63
Malicious:	false
Reputation:	low
Preview:	........' ......................V&...vo......O......2p..;.I.A.....v..^Q........]...5...i.O.\..b...\|......)p0.+.d.n.... -...o......\|..4............mB.-7........S.4=..-7..b.>...`...m.._..u.P..0`..........E.....)...2m......U...].......1.!..O .Z...a.a../....7..<......vm..~....+............>.\..........].` ...8...Q..)..m.....}../...K...2X...L..N...5...Y..vi.......>... ...;..d#..f.....B.(....r..,i...........x>..m..G++.....W..#.a.F.p...-...c.4S..Fw..\|.f.... ..X U.. .%. .T.!.Z.!.."...".v#...#...$R..$p..$...%2..%z..&Pw%&...&..'...'X..'...'.W.(Z.(_z.(z.m(...(..(...(..l(..(...(..T)..e)vV....+qS.+.1j+.,>.n,K.,}L.,. .,..,...-+W.-.mI-...-.....=..LC..W...a.h......./<.\/..0*.0t.!0...0...1.w.1Y..1...1.9z1..2F.Y2...3..r3&..3d..3u.B3.b.3...3...3...4e.4..84..4..5[M.5izF5..85..95.q?5...6.V.6H.N6...6...6..V8..y8N<.8x..8..88.9.8...9..l97..9E.V9_:.9j..9.[:.s3;_M.<.q.<.3.<...=`'.=..>...>...?=.?G..?S..?p..?.Md?.'.@...@...A-!.AM..A.1cB..ACS.\C\.#C...D..D!.3D\|..D.v.D..1D.(E=..Eu

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlCsdDownloadAllowlist.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	34141
Entropy (8bit):	7.9947506004157365
Encrypted:	true
SSDEEP:
MD5:	88AF75DEA9B956D10CC04FD9BD206BF6
SHA1:	15B6B934D3FEBC8267F1530A9638D530A7C41C7A
SHA-256:	2BED00B5DC29A320754D4ED0EC122D4AE5E463CE157CACED59F82A20D0FA20B8
SHA-512:	6CBD74C21B31AE8069744B2FCFF1D637BDEB2B8F4EAE64551F4B4046B837C7231D42EE861A86D65C9C664CADDC70E05E9F4DC459D794FA4EEA4C880193414BA9
Malicious:	false
Reputation:	low
Preview:	......... ........... ........Nt.HO5..... ..UM..7<.............~.'.....V.W..;B.......ST....Fv.^}@/3w1@..U...wWG.(.....V....(' .J...w....&1.D......n.&\|.J=.......=...`H.l..G......... ..R..P.wS6.....\.D.<.....2..zH.dL...i.W..2.......%...2p..j<q......I..M..H.O_.i...p....B..)..m..Oty}...`.f.l.4.^...%i..d.lZ.$<R.W...J......j.....a..g ,G".1...~.>.x.....7....J..@!t=..b..Q....;..l%8\|.n.......2z.%..;..3J.;..S...VV..[.........%,....Yw...{`X..,._........,..V}v%G....D.B...)O....m_.....J...`.6..._B]..;....?.$@v....9.fd.ee.O.O.e..L..5[..?....?..y.%..g....~8.B..p!.$.U..Af..F...mu...(....D..!0].A..l59,....aa...T...QI{(....R.<....u...b.cQ.iJ].....mh.u@..G..D.\|FLz./d=...U.K.p.}.9.U\|Ib...(n.y._..9.d....OC.....b..C.A\|.8...\,..s....L.`f.....e....g....C^2.....:...V.../J....c..fPB&.t.....Xd..`+..'....z_.[.......,....b.z9.[......O&.1%.7r..=}.*....c.5.......!.m....h}.h.u.l)......tY..F....o\|......K.......S....C4al?.B1..c......t....<H./...0.n...

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlCsdDownloadAllowlist.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	34141
Entropy (8bit):	7.9947506004157365
Encrypted:	true
SSDEEP:
MD5:	88AF75DEA9B956D10CC04FD9BD206BF6
SHA1:	15B6B934D3FEBC8267F1530A9638D530A7C41C7A
SHA-256:	2BED00B5DC29A320754D4ED0EC122D4AE5E463CE157CACED59F82A20D0FA20B8
SHA-512:	6CBD74C21B31AE8069744B2FCFF1D637BDEB2B8F4EAE64551F4B4046B837C7231D42EE861A86D65C9C664CADDC70E05E9F4DC459D794FA4EEA4C880193414BA9
Malicious:	false
Reputation:	low
Preview:	......... ........... ........Nt.HO5..... ..UM..7<.............~.'.....V.W..;B.......ST....Fv.^}@/3w1@..U...wWG.(.....V....(' .J...w....&1.D......n.&\|.J=.......=...`H.l..G......... ..R..P.wS6.....\.D.<.....2..zH.dL...i.W..2.......%...2p..j<q......I..M..H.O_.i...p....B..)..m..Oty}...`.f.l.4.^...%i..d.lZ.$<R.W...J......j.....a..g ,G".1...~.>.x.....7....J..@!t=..b..Q....;..l%8\|.n.......2z.%..;..3J.;..S...VV..[.........%,....Yw...{`X..,._........,..V}v%G....D.B...)O....m_.....J...`.6..._B]..;....?.$@v....9.fd.ee.O.O.e..L..5[..?....?..y.%..g....~8.B..p!.$.U..Af..F...mu...(....D..!0].A..l59,....aa...T...QI{(....R.<....u...b.cQ.iJ].....mh.u@..G..D.\|FLz./d=...U.K.p.}.9.U\|Ib...(n.y._..9.d....OC.....b..C.A\|.8...\,..s....L.`f.....e....g....C^2.....:...V.../J....c..fPB&.t.....Xd..`+..'....z_.[.......,....b.z9.[......O&.1%.7r..=}.*....c.5.......!.m....h}.h.u.l)......tY..F....o\|......K.......S....C4al?.B1..c......t....<H./...0.n...

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlHighConfidenceAllowlist.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	310238
Entropy (8bit):	7.999358451653412
Encrypted:	true
SSDEEP:
MD5:	B0F180A6C2EC35B26EE94D6B426F7DA8
SHA1:	C91DB0922B8257E100A3EE3169951A46379DD617
SHA-256:	CD214C0E01848DF49FEC64496F1BFC269402833558F1C594813AB191D4B0C919
SHA-512:	46AA4DD33DE25BAB0381DF2669F979F1B4C2264914E7EF4994AB128EC59505A99BAD62336FBBC278985733A41823FF7AD4689FA39D4CC97E10DEDAB66C640B9F
Malicious:	false
Reputation:	low
Preview:	.......... ........... ........,..-.bxe...%1.f....F..W..Q......'(x.C.c..2Y..c..wT...F.......C..B......Cs..T......ljy...J.<..B..CD.v..#..Uh...:.\|i.....Nt.HO5..... ..UM..7<.................6..A..Q....9D\|'.....&.......[J.B..o...~.3N.......#q..^...0..i..(....MZ.....MO...P.D#k\|......}Wt]......l....#...!......v.#.%....R~s......(.=....gw.......8.....[.a......4.....g...8.S-........T.k.[..=...q..x....,.<..i'..P.8U.._.Q".B/...!y....j.. y.......T...@...G\|j...._.\.....5.J.S.j'......V&.....s.....IB.ce..u=j..C.v..W-p...5.9L..V.]..h..[.....0.U.Y-9...f..z7...dlS...2..#.rx-.Y.K"S...C.B........b.m..+s..^d....N.}.<x+.8y^'@X.....J.^..a;..."E]-....g..;F..tHj.YA^<=...~...H {U#Q?y..lP...2@..X.........n.c....pG[!.[>..y.......b...M.....].."..^..!.!.AI....du..I.d:D.....IYW.u*..v...l)8..D^...vo.r.ivl.....3R..-!1).>........C.^..._...wy.......8..f..Dp..J..d.C\|..]g.G6My........I'b&30....f..W....K......Q~#6..$..0.K..t.;.8.I..`p..s....%.}.._........8%no.I.m

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlHighConfidenceAllowlist.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	310238
Entropy (8bit):	7.999358451653412
Encrypted:	true
SSDEEP:
MD5:	B0F180A6C2EC35B26EE94D6B426F7DA8
SHA1:	C91DB0922B8257E100A3EE3169951A46379DD617
SHA-256:	CD214C0E01848DF49FEC64496F1BFC269402833558F1C594813AB191D4B0C919
SHA-512:	46AA4DD33DE25BAB0381DF2669F979F1B4C2264914E7EF4994AB128EC59505A99BAD62336FBBC278985733A41823FF7AD4689FA39D4CC97E10DEDAB66C640B9F
Malicious:	false
Reputation:	low
Preview:	.......... ........... ........,..-.bxe...%1.f....F..W..Q......'(x.C.c..2Y..c..wT...F.......C..B......Cs..T......ljy...J.<..B..CD.v..#..Uh...:.\|i.....Nt.HO5..... ..UM..7<.................6..A..Q....9D\|'.....&.......[J.B..o...~.3N.......#q..^...0..i..(....MZ.....MO...P.D#k\|......}Wt]......l....#...!......v.#.%....R~s......(.=....gw.......8.....[.a......4.....g...8.S-........T.k.[..=...q..x....,.<..i'..P.8U.._.Q".B/...!y....j.. y.......T...@...G\|j...._.\.....5.J.S.j'......V&.....s.....IB.ce..u=j..C.v..W-p...5.9L..V.]..h..[.....0.U.Y-9...f..z7...dlS...2..#.rx-.Y.K"S...C.B........b.m..+s..^d....N.}.<x+.8y^'@X.....J.^..a;..."E]-....g..;F..tHj.YA^<=...~...H {U#Q?y..lP...2@..X.........n.c....pG[!.[>..y.......b...M.....].."..^..!.!.AI....du..I.d:D.....IYW.u*..v...l)8..D^...vo.r.ivl.....3R..-!1).>........C.^..._...wy.......8..f..Dp..J..d.C\|..]g.G6My........I'b&30....f..W....K......Q~#6..$..0.K..t.;.8.I..`p..s....%.}.._........8%no.I.m

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlMalBin.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1145459
Entropy (8bit):	7.999862516989099
Encrypted:	true
SSDEEP:
MD5:	99500A974D695321C2FAD7595955D6FD
SHA1:	11AC95EEA1A0D0E6DECF5FC59ABC9A4179965736
SHA-256:	CDB4641FBE3E5976652E69362ACB7459F69DBFDF63C2328A83D79F91C39373DD
SHA-512:	1E54389E609CBA485D82FF31AF43714F203B01ECBACE6232F8EBD594D16C6D11C2E601617AA97692E98A75C24372179A3EE8D17A192A6968490DCD30E4897809
Malicious:	false
Reputation:	low
Preview:	.........E ...E.....E.....E..-l..M..o=..............k...m....Z.......d..........h...}x...C...T..........Q;...........................a....~.......a.......V......@...G...^J..........Y..+{../...............@V..A........,...\|.....IH..........#.../...........d........#......@....v.......8...u.......R..eX...=...7.......).......Q..M+.........................S#..S...i,...]..a}..e...h..............N..E........_..x....z..r...........2...........%...&~......."...].....&.......1:..S...T...@.............. Iv. ... .. ...!.}.!.@.!.9.!N..!...!.L."..."..":H."s.."x)."...#.7.#...#...$ ..$5..$JK.$.V.$...%y..%{..%\|..%..%...&If.&{..&...&.L.'.+.(P..(...(.4.(.q.)...)...).^.)C...R.......+B..+qr.,Zt.,d..,...-.........7..-...72..H........./0t./x../\|../.../.../.../...0.P.0]..0~..0...0.m.1.:.1j..1...2.H.2"..26..2M..2W..2...2.g.3C..3.,.3...3...4.4.4..5.\.5...5#..5...5w..5...5...6...6}/.6}..6...6.>.6.P.6. .7.y.7...7D..7S..8.&.8.t.8.G.8r_.8...8..8.c.8..9>.9...:!..:p".:...:...;...;...;..;.j.<

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlMalBin.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1145459
Entropy (8bit):	7.999862516989099
Encrypted:	true
SSDEEP:
MD5:	99500A974D695321C2FAD7595955D6FD
SHA1:	11AC95EEA1A0D0E6DECF5FC59ABC9A4179965736
SHA-256:	CDB4641FBE3E5976652E69362ACB7459F69DBFDF63C2328A83D79F91C39373DD
SHA-512:	1E54389E609CBA485D82FF31AF43714F203B01ECBACE6232F8EBD594D16C6D11C2E601617AA97692E98A75C24372179A3EE8D17A192A6968490DCD30E4897809
Malicious:	false
Reputation:	low
Preview:	.........E ...E.....E.....E..-l..M..o=..............k...m....Z.......d..........h...}x...C...T..........Q;...........................a....~.......a.......V......@...G...^J..........Y..+{../...............@V..A........,...\|.....IH..........#.../...........d........#......@....v.......8...u.......R..eX...=...7.......).......Q..M+.........................S#..S...i,...]..a}..e...h..............N..E........_..x....z..r...........2...........%...&~......."...].....&.......1:..S...T...@.............. Iv. ... .. ...!.}.!.@.!.9.!N..!...!.L."..."..":H."s.."x)."...#.7.#...#...$ ..$5..$JK.$.V.$...%y..%{..%\|..%..%...&If.&{..&...&.L.'.+.(P..(...(.4.(.q.)...)...).^.)C...R.......+B..+qr.,Zt.,d..,...-.........7..-...72..H........./0t./x../\|../.../.../.../...0.P.0]..0~..0...0.m.1.:.1j..1...2.H.2"..26..2M..2W..2...2.g.3C..3.,.3...3...4.4.4..5.\.5...5#..5...5w..5...5...6...6}/.6}..6...6.>.6.P.6. .7.y.7...7D..7S..8.&.8.t.8.G.8r_.8...8..8.c.8..9>.9...:!..:p".:...:...;...;...;..;.j.<

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlMalware.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	341159
Entropy (8bit):	7.999471584992881
Encrypted:	true
SSDEEP:
MD5:	B5148150C1121BAD82BCED3B72B09AE1
SHA1:	DEEE5DA755D82318B3D3A7DC31124FFA9A87CEA3
SHA-256:	82B2A8C1C5DA2708F2118DDE9B477E96F43A9FE3BAF47601A46F3FFB4632F5E5
SHA-512:	F6013A677CA864BC5CCB89C94000236E6972FBC50F313E12477E1A3DD1BDC96139D56A8B8F9EE4E165A4D3A69013D28CBE718CC8DEEACC0720C7D907B5A1A810
Malicious:	false
Reputation:	low
Preview:	.......... ......................~..........8...........\...P.............a.......2...8...<....V.......p..................d%..........q^..b....)..TM..w...............$..:..../..............-....n.......@...........a.!.^."...#N..$9Z.$A..%1$.%?I.%._.'...'...(d..)E..)Sf..Z.+...+..0...1:Y.2...2.[.3C..3..70n.8.y.9L..:...:.I.;...<.V.>/A.>...>.1.@p8.A.{.A...A...B5<.C'..Dbf.D...E...F.3.G.{.G.k.HD..HS..H...I...J...Kx..K...L...N...P...Ph..Q@V.R.'.R.n.T:..V.U.W...W.R.Y.Q.Z...Z...Z...Z...Z...[.a.\...\.w.^R..^Y).^...^.3._B.._...c...c...c...d3..e.C.ffS.g.&.i...i..i..j...j9%.j.%.l...m.9.sw].s.n.t...t+..u..u..vG..vG..w.^.z...{.Y.\|.m.\|D..}6..}QB.~Ph..r(...........P...I......7...jh..A....(...$..'................ .......y..?t...,.......c..nU..............,........0.......g..v...............6...K(..ZQ...X.......)..........TA..E8..3...V...gt.../...%..Sr.....&......7...xa.........=J..q................0..!...6...xz..}...7....@...t...{...J...,...y...I.............pb......&..........S.......

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlMalware.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	341159
Entropy (8bit):	7.999471584992881
Encrypted:	true
SSDEEP:
MD5:	B5148150C1121BAD82BCED3B72B09AE1
SHA1:	DEEE5DA755D82318B3D3A7DC31124FFA9A87CEA3
SHA-256:	82B2A8C1C5DA2708F2118DDE9B477E96F43A9FE3BAF47601A46F3FFB4632F5E5
SHA-512:	F6013A677CA864BC5CCB89C94000236E6972FBC50F313E12477E1A3DD1BDC96139D56A8B8F9EE4E165A4D3A69013D28CBE718CC8DEEACC0720C7D907B5A1A810
Malicious:	false
Reputation:	low
Preview:	.......... ......................~..........8...........\...P.............a.......2...8...<....V.......p..................d%..........q^..b....)..TM..w...............$..:..../..............-....n.......@...........a.!.^."...#N..$9Z.$A..%1$.%?I.%._.'...'...(d..)E..)Sf..Z.+...+..0...1:Y.2...2.[.3C..3..70n.8.y.9L..:...:.I.;...<.V.>/A.>...>.1.@p8.A.{.A...A...B5<.C'..Dbf.D...E...F.3.G.{.G.k.HD..HS..H...I...J...Kx..K...L...N...P...Ph..Q@V.R.'.R.n.T:..V.U.W...W.R.Y.Q.Z...Z...Z...Z...Z...[.a.\...\.w.^R..^Y).^...^.3._B.._...c...c...c...d3..e.C.ffS.g.&.i...i..i..j...j9%.j.%.l...m.9.sw].s.n.t...t+..u..u..vG..vG..w.^.z...{.Y.\|.m.\|D..}6..}QB.~Ph..r(...........P...I......7...jh..A....(...$..'................ .......y..?t...,.......c..nU..............,........0.......g..v...............6...K(..ZQ...X.......)..........TA..E8..3...V...gt.../...%..Sr.....&......7...xa.........=J..q................0..!...6...xz..}...7....@...t...{...J...,...y...I.............pb......&..........S.......

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlSoceng.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	24499119
Entropy (8bit):	7.999992595916789
Encrypted:	true
SSDEEP:
MD5:	383E11C72AB4E7A0232563F651B12190
SHA1:	C957F4F74F9EAD4C378AFAB3B740F0532CC7019D
SHA-256:	6E8DD916F20EE15A7449AA873BCE3A47884BE4AD00B394BE786E0A7CE1918766
SHA-512:	4108C91D9F588A7C4BB100372815C41F97CC4FA0E046A7AE9BCF46E216EB10AADDEE17B87AE5DB0D72F5318A7ECE1EBCA89190A8F0569A5AC21F4C98FEC811F9
Malicious:	false
Reputation:	low
Preview:	........... .*..............................J.......$...P...v.......,.......,......!...-.../...0#..7M..8...:...;...=d..?...@d..A...CO..E...E...E...Gz..K...M...O...R...X...\..._...`...a...cY..g ..gG..h...h...n...o[..r...r...w...yo..z....Y...i.......`...........x...............1...............k...z...(.........................y...]...Z...........y.......=...=...6..................}...........5...f...z...................z..........................&...(l..(...(...)...+.../~../.../...2...5J..6...:...D...Jf..J...N...N...U...W...Z...^...e...g...jN..j...u~..u...x...}t..~............<...........................z...............m.......................u...1.......9...............F...........m.......3...N...V...X..............u......Q...........2...............}.......`...d.......s...\...@......._...........................5...;.......d...b..................!i..$-..$...$...%v..%...'...'J..)...3m..76..8#..8...9K..;...A...C...E...Fg..I...J...N...P0..T...W...Z...[$..da..h...i...v4..w&..x...

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlSoceng.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	24499119
Entropy (8bit):	7.999992595916789
Encrypted:	true
SSDEEP:
MD5:	383E11C72AB4E7A0232563F651B12190
SHA1:	C957F4F74F9EAD4C378AFAB3B740F0532CC7019D
SHA-256:	6E8DD916F20EE15A7449AA873BCE3A47884BE4AD00B394BE786E0A7CE1918766
SHA-512:	4108C91D9F588A7C4BB100372815C41F97CC4FA0E046A7AE9BCF46E216EB10AADDEE17B87AE5DB0D72F5318A7ECE1EBCA89190A8F0569A5AC21F4C98FEC811F9
Malicious:	false
Reputation:	low
Preview:	........... .*..............................J.......$...P...v.......,.......,......!...-.../...0#..7M..8...:...;...=d..?...@d..A...CO..E...E...E...Gz..K...M...O...R...X...\..._...`...a...cY..g ..gG..h...h...n...o[..r...r...w...yo..z....Y...i.......`...........x...............1...............k...z...(.........................y...]...Z...........y.......=...=...6..................}...........5...f...z...................z..........................&...(l..(...(...)...+.../~../.../...2...5J..6...:...D...Jf..J...N...N...U...W...Z...^...e...g...jN..j...u~..u...x...}t..~............<...........................z...............m.......................u...1.......9...............F...........m.......3...N...V...X..............u......Q...........2...............}.......`...d.......s...\...@......._...........................5...;.......d...b..................!i..$-..$...$...%v..%...'...'J..)...3m..76..8#..8...9K..;...A...C...E...Fg..I...J...N...P0..T...W...Z...[$..da..h...i...v4..w&..x...

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlSubresourceFilter.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	140975
Entropy (8bit):	7.998801202524904
Encrypted:	true
SSDEEP:
MD5:	A0F08609A4791D63C334431B8E4B02B4
SHA1:	30CE613D9A15AE6519008085213A857F2C6D5E22
SHA-256:	DE5EB44D6A24C812A9B59F8EF2A808E5E8372483EC59A18FC097599735702C65
SHA-512:	B39C075A044ED43C3D1CD465C13568E06C735B9951109FB32D86C911E0F2D4299BCD10B1736B6AF05E83A1D03451564F206F5B2EDEABC2D066206CBB9ED9B4F9
Malicious:	false
Reputation:	low
Preview:	.......... ...................\|...Z.......g...c...L..lZ...i..........n..!...#...#...$yn.)..).@./.;./Y]./...2z..3..4..5.L.96..9...:+Q.>...>.y.?O..@$_.A.".A...C...C(O.D...G4..H?..Hg/.J...L.N.M...Q~..Q..Q...SX..SeL.T...U..\...]..._.t._...`N..c.I.j...ky..l.!.q...r.1.v\|..\|...}...~........W..............ea...P..!z.....r,...W...9.......p.. ...n...........v...}...i..................^....m...>...Q..hu...........^.......y..........3(..........w...E..z........]...9..........N...>.............U....e..6...A....4...6......r......!..?O...e...;..N..+...........9z...O.....S.......A.......@..-...n...F..b.......0W..q..............i...v...Y\|..............y..,...w_...2.............:a..z.......jv......a...^...............x..~[...Q...7."`..#&..#}..)T.., B.,0..0.l.2...2.$.3.`.5>..6Us.6...7...:...>...>...>...E...E.U.G.W.H.A.J.A.L=..L.'.N.n.R...S%..T.b.Y{).]..]...^..._.6.`...`D..b0c.b...d...g\|L.m(..sN..sYx.v..x(D.xw..x.T.z4..{/..{....]..y?......]+..U........N..8.......P.......e....a..

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlSubresourceFilter.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	140975
Entropy (8bit):	7.998801202524904
Encrypted:	true
SSDEEP:
MD5:	A0F08609A4791D63C334431B8E4B02B4
SHA1:	30CE613D9A15AE6519008085213A857F2C6D5E22
SHA-256:	DE5EB44D6A24C812A9B59F8EF2A808E5E8372483EC59A18FC097599735702C65
SHA-512:	B39C075A044ED43C3D1CD465C13568E06C735B9951109FB32D86C911E0F2D4299BCD10B1736B6AF05E83A1D03451564F206F5B2EDEABC2D066206CBB9ED9B4F9
Malicious:	false
Reputation:	low
Preview:	.......... ...................\|...Z.......g...c...L..lZ...i..........n..!...#...#...$yn.)..).@./.;./Y]./...2z..3..4..5.L.96..9...:+Q.>...>.y.?O..@$_.A.".A...C...C(O.D...G4..H?..Hg/.J...L.N.M...Q~..Q..Q...SX..SeL.T...U..\...]..._.t._...`N..c.I.j...ky..l.!.q...r.1.v\|..\|...}...~........W..............ea...P..!z.....r,...W...9.......p.. ...n...........v...}...i..................^....m...>...Q..hu...........^.......y..........3(..........w...E..z........]...9..........N...>.............U....e..6...A....4...6......r......!..?O...e...;..N..+...........9z...O.....S.......A.......@..-...n...F..b.......0W..q..............i...v...Y\|..............y..,...w_...2.............:a..z.......jv......a...^...............x..~[...Q...7."`..#&..#}..)T.., B.,0..0.l.2...2.$.3.`.5>..6Us.6...7...:...>...>...>...E...E.U.G.W.H.A.J.A.L=..L.'.N.n.R...S%..T.b.Y{).]..]...^..._.6.`...`D..b0c.b...d...g\|L.m(..sN..sYx.v..x(D.xw..x.T.z4..{/..{....]..y?......]+..U........N..8.......P.......e....a..

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlSuspiciousSite.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1935
Entropy (8bit):	7.901648941133711
Encrypted:	false
SSDEEP:
MD5:	F051741DFDC105248B4CE653C40AC182
SHA1:	B81A7A2522CD8E81D29E2A8AFA4C5A651ECCD0BB
SHA-256:	6ECFD31D0079836C8B08041072D8B1BABD8975D48369874E55541B45A304AE75
SHA-512:	EE52A33933A5D78DBF82F251C51EC08AD4FD6E583CB5F90D8F3AE18554F998776A380F733A775917BAC3701943F38F6C9CCDB8049AF63BF096FF0131F0EAC2FA
Malicious:	false
Reputation:	low
Preview:	......... ...............`<...m..h......Z....o.iA3.p.Q........sF(.{.......4...?w.t.T.........1.1..r^...p.s....i...M......C..0..A~....x......_.....<Y...x..9..Q7..^.H._E..<...xJ...L.......B;.c.F.j.X......#..B.}..\|`....)..\...z............2........U x..!..."O.."...#.I.$h..$..$...%.;.%6.o%`. %..'F.K'w.5'...'..B((..(s.b)...).X;#vi...++Z.+/%.+.pt,...,..>,..- ..-..Q-..7......-./mm 0.v.0.'D1ez.2.p2..`2$.13Ev.3FK.3h$.44..5a:#6...6..i6...7.M.7.%y9z..:5..<P.-=n..>..F>.3.>.v\|>.@p.A+..B...CB..CS..C..C.^.D..#D.x.E...F.Q.F...G9k.HC..H.c.H..H...I2Q.I^E.ItPRI..-J.z-J.V.K...K.q.K...L..L.=1M,).N ..N.k.N.%tOn`.O..GP7.uPU.{P.CQ..RSd.T/dST...U..EU.>.U>E.UI.AU..`U..Y;.tY.;.Y..Z...Z...[W..[..t\..p_.._.Oh`.##`..ac.Ral..a.4.bh!.b...d.pVd...d..ue!..fT..g..g9.&g;..i.G:i...i../j...l...lKAim...m.)<o.ENp{i.p...q..r...s#/.s&<hs.Q.t9..t...u.o.v%E.wd..w..aw..x&J.x.#y.ARz#..zi.I}e.}...}..~To.~W..~.tt~..........t..eu....3.:.M0......^3N.v.;............N3..&.*..........H....r....

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlSuspiciousSite.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1935
Entropy (8bit):	7.901648941133711
Encrypted:	false
SSDEEP:
MD5:	F051741DFDC105248B4CE653C40AC182
SHA1:	B81A7A2522CD8E81D29E2A8AFA4C5A651ECCD0BB
SHA-256:	6ECFD31D0079836C8B08041072D8B1BABD8975D48369874E55541B45A304AE75
SHA-512:	EE52A33933A5D78DBF82F251C51EC08AD4FD6E583CB5F90D8F3AE18554F998776A380F733A775917BAC3701943F38F6C9CCDB8049AF63BF096FF0131F0EAC2FA
Malicious:	false
Reputation:	low
Preview:	......... ...............`<...m..h......Z....o.iA3.p.Q........sF(.{.......4...?w.t.T.........1.1..r^...p.s....i...M......C..0..A~....x......_.....<Y...x..9..Q7..^.H._E..<...xJ...L.......B;.c.F.j.X......#..B.}..\|`....)..\...z............2........U x..!..."O.."...#.I.$h..$..$...%.;.%6.o%`. %..'F.K'w.5'...'..B((..(s.b)...).X;#vi...++Z.+/%.+.pt,...,..>,..- ..-..Q-..7......-./mm 0.v.0.'D1ez.2.p2..`2$.13Ev.3FK.3h$.44..5a:#6...6..i6...7.M.7.%y9z..:5..<P.-=n..>..F>.3.>.v\|>.@p.A+..B...CB..CS..C..C.^.D..#D.x.E...F.Q.F...G9k.HC..H.c.H..H...I2Q.I^E.ItPRI..-J.z-J.V.K...K.q.K...L..L.=1M,).N ..N.k.N.%tOn`.O..GP7.uPU.{P.CQ..RSd.T/dST...U..EU.>.U>E.UI.AU..`U..Y;.tY.;.Y..Z...Z...[W..[..t\..p_.._.Oh`.##`..ac.Ral..a.4.bh!.b...d.pVd...d..ue!..fT..g..g9.&g;..i.G:i...i../j...l...lKAim...m.)<o.ENp{i.p...q..r...s#/.s&<hs.Q.t9..t...u.o.v%E.wd..w..aw..x&J.x.#y.ARz#..zi.I}e.}...}..~To.~W..~.tt~..........t..eu....3.:.M0......^3N.v.;............N3..&.*..........H....r....

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlUws.store (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	146343
Entropy (8bit):	7.998674202005983
Encrypted:	true
SSDEEP:
MD5:	1214E6387F9D3FD79685AEC712F146C7
SHA1:	0C0D583CB9904A5A909EFAB9820B7BD690D51FAB
SHA-256:	9F923574FA23CF141B8CCFCDDA01F2D6C712504D01F7B075715D6F6D5394DDF5
SHA-512:	60CF1AFA279B4F20F130C5BFE7A298A154F4890FFF2FC2755678BF6F38A70EEFBB54D25BE6D29381D6B05AFF5EA3C9599676B8A75521EB7062F6689AC3394C71
Malicious:	false
Reputation:	low
Preview:	.......... ...................x...G..5+...........o...T..3&......j................X......y.......#..$\..%S6.&hE.)...)...-.../...3...4...5...?x..Ey..J...O...O...O...PAN.P...P...T...U8..W...XvA.ZP..Z...\.3.].;.^..._..`...g...j...k.#.qQ..qS..s...t.h.w.r.y.y.}.....Q..............0......R....7...C.......9...........P..+5..Y........H...A...#...%...<.......i..k...$g..........Z...>.......A.......;7.....a]..D8..}'......MJ................i....B.....Ya..F..W6...!...u......P..[J......................dW...{.._+......3z..................................x...g..........TT..$...\_...................?..en...2.$.\.%3F.%;..'.'......../.I.1...3...5...6...:w..;...=...>...@.K.EN&.F...G(..H8..K...M.h.M...S...T...[...\...]...b.w.b...c...dm..d...e.d.f...g.^.k>..l...m*j.o.W.q.7.s0B.s.6.t D.u8..v.W.w...x(D.ymk.y.1.\|.?.~V<..0...........Y6..f......c...........+...s...................4..........b\|...b...@......?...C.......j...l....K.......\|..4..........c............8...~...............,.........

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Safe Browsing\UrlUws.store_new

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	146343
Entropy (8bit):	7.998674202005983
Encrypted:	true
SSDEEP:
MD5:	1214E6387F9D3FD79685AEC712F146C7
SHA1:	0C0D583CB9904A5A909EFAB9820B7BD690D51FAB
SHA-256:	9F923574FA23CF141B8CCFCDDA01F2D6C712504D01F7B075715D6F6D5394DDF5
SHA-512:	60CF1AFA279B4F20F130C5BFE7A298A154F4890FFF2FC2755678BF6F38A70EEFBB54D25BE6D29381D6B05AFF5EA3C9599676B8A75521EB7062F6689AC3394C71
Malicious:	false
Reputation:	low
Preview:	.......... ...................x...G..5+...........o...T..3&......j................X......y.......#..$\..%S6.&hE.)...)...-.../...3...4...5...?x..Ey..J...O...O...O...PAN.P...P...T...U8..W...XvA.ZP..Z...\.3.].;.^..._..`...g...j...k.#.qQ..qS..s...t.h.w.r.y.y.}.....Q..............0......R....7...C.......9...........P..+5..Y........H...A...#...%...<.......i..k...$g..........Z...>.......A.......;7.....a]..D8..}'......MJ................i....B.....Ya..F..W6...!...u......P..[J......................dW...{.._+......3z..................................x...g..........TT..$...\_...................?..en...2.$.\.%3F.%;..'.'......../.I.1...3...5...6...:w..;...=...>...@.K.EN&.F...G(..H8..K...M.h.M...S...T...[...\...]...b.w.b...c...dm..d...e.d.f...g.^.k>..l...m*j.o.W.q.7.s0B.s.6.t D.u8..v.W.w...x(D.ymk.y.1.\|.?.~V<..0...........Y6..f......c...........+...s...................4..........b\|...b...@......?...C.......j...l....K.......\|..4..........c............8...~...............,.........

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\29\scoped_dir576_785204986\Ruleset Data

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	150088
Entropy (8bit):	4.840705441204293
Encrypted:	false
SSDEEP:
MD5:	38B61CF227D0B809F33EF088B1AD7BEA
SHA1:	77C969ADC9558354648BD191C5CD1B5F83182D42
SHA-256:	39D1777333C221E5F8D5C4B07EBD0D44B9103F4E35C70540747861EEC7B9F558
SHA-512:	9BD2E2EACF29F6DB0EAFFE008AACBCA767FB49B44CAC0BF998B8019982D07BE03DDF49F58428CA3E76ABBA6EF5671E1F70EC25880FBD1A0755E055BE80DBE669
Malicious:	false
Reputation:	low
Preview:	.........................[.................................. ...p...l...h...d...`...\...X...T...P...L...H...D...@...<...8.......0...........$... ...................\|...`...........<... ........'......rekoj............'......ennab............'......ozama........*...(......nozam............(......lgoog...........0(......lreko...........H(......onwod...........`(......uotpo........+..x(......geips............(......g.bat.......(&..d(...............Y...............Y...Y...Y..lY..PY...Y..0Y...Y...Y...X...X...Y...Y...Y...Y...X...X...Y..\|Y..xY..hX..pY..lY..hY..@X..`Y..\Y..XY..TY...X...W...W..DY..@Y...W...W..4Y..\|W..,Y..(Y..$Y.. Y...Y...Y...Y..DW...Y...Y...Y...W...X...X...V...X...X...X...X...X...X...X...X...X...V...V...X..\|V..`V..DV...X...X.. V...X...X...X...X...X...X...X...U...X...X...X..\|X..xX..tX..pX...U...U..dX..`X..\X..XX..TX..PX..LX..HX..DX..TU..<X..8X..0U...U...T...T..$X...T...X...T...X...X...X..tT...X...X..PT...W...W..,T...T...W...W...W...W...S...W...W...W...W...W...W...W...W...W...S..

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\b093bdd4-5c8f-402e-b809-73883b3db8e5.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	119299
Entropy (8bit):	6.063596557394022
Encrypted:	false
SSDEEP:
MD5:	23483811283809EE2593CB54B9CA97CE
SHA1:	50CAB7F0A8DB4D8973BB4682062CEA938BD9D257
SHA-256:	DE264947B2FF7714B87623727D5FBB2A08C91527FF728F9B2C0AB0AC6B8FFF52
SHA-512:	8DE8DBE3485D0ED7FCFBB911F1533AABA6BA9A3A4A2BD5245745730D16FF538A57EB755BBE1A2C3F7BCECDE51B86D4FBAE01D2469E282501542F3E5B142F4369
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.656570085208188e+12,"network":1.656537685e+12,"ticks":159119520.0,"uncertainty":3139791.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAACanWu3FyjzSb22qOd7JcKxAAAAAAIAAAAAABBmAAAAAQAAIAAAAOvzHMHSfF9+m4oxy+22fHMcQg44kCf1BXy1OZZbdvKzAAAAAA6AAAAAAgAAIAAAAPTENVQ24xIsJc/ZQEp5QqLyGws8rV509kXnSOO5wySTMAAAAH5bXPykNQD+rPcaJzuKSNgUUlUVuRFSP9klMm9IrmEdAB20jsgAMb2dc/upU0MueUAAAAChrUBvSOw+ZaWzDX+CTHaJdop4I956Us1Y1/MTm0kr4uGgJ1iujCKCl39idN0Kk67uULB9hxw0UYLGUi8ZC41p"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13301043723749221"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\eyup\AppData\Local\Temp\0eff6adf-e261-4943-805f-5077330ab250.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Category:	dropped
Size (bytes):	30948
Entropy (8bit):	7.99105089802474
Encrypted:	true
SSDEEP:
MD5:	7F0FCE2F184F63FED8E9929FB106C282
SHA1:	0582EB5BFC7FCCCC1C77A860F00E351E61F5DC67
SHA-256:	7C33F333216849E50AFC9550DA7DA4450D221B837340716ACCEE3766FFD4A62B
SHA-512:	AD1CD5B804C08C4C25BD6F97153D3371156848A83682DF1829B0B113B60ED0B01D67B5CD737CB414C8B825E12C7E0D6B5F9B338F4AF7FC82BE8AAF4CA8E279BA
Malicious:	false
Reputation:	low
Preview:	............y..../...D4e.sH.v.{......mv9MR...&..b.`.P."........r.....X...9s.s..w..;...>.}8...O.ep....O.]...$KO.tu...2?Yfi.'ove..T.....(.N7.R..<yr....t..})......>[......."......'7.j......#.n..e1..Fr...........j5xH.~....yvw....y.....vI......IWT..)...\|...\..<=.V.C..}.fF..T.....~.~..:).....i...2./D.}...]..<+3T..Z.Q90.......3..7.e..p.:..-.P..n.}j....U...."...\|Gm...AdQ:...gz%n..:...K.o[...".n...(V..A...U.D.~x.Q..X.tw.F..,.Q...k.9.w.......2....t......XF....E./...Hu.%..].....7.T...X.\$4.~.....`..e\....}.X...`A...J.....k...$IO..OS:...=...R...q......FE.H.)M..WX/........6.._..ry..J..`.q.'....x^..[r..Z.Y:..0...g.y....#.1.'...F7M.6...S....7.To.G.... `#.......-."...^....;..8..{.6VhL?%uU...K....O9.`Y....b.5.,zP.+\..!.1wK.j.P].....jW.!.j...i3.v.<..n.P..g....~.x..z.8...2^..U.f.bt#.+.U..N......!.[.!#.C.A.xy.....p...n.mU,.....=.......h .ME..T/....lT\h,.U..........(.U ...Tf.?Zd8.2.V........../....Oyh.j.._.I.k..u...).3.r.3...j......O....+],...

C:\Users\eyup\AppData\Local\Temp\576_1583784604\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	97968
Entropy (8bit):	5.489893397464442
Encrypted:	false
SSDEEP:
MD5:	3846A25BC9191585763E06550798BAB1
SHA1:	F43D903B13AB969E2276E304795CE164F22F893C
SHA-256:	C7D5D133E8F995D3E4D5B68F28BE0D7B1F290DFBD1502E0EC260142325FA8F88
SHA-512:	6B1E1776DE4B4B7D7BD7E6252F555AD84CC689EFE1F3920B3ACFE23DE65212254FC219E0A530037A5EA819894BC2F5B85ECFC0ADDEE9AF3163393AA32F97BA44
Malicious:	false
Reputation:	low
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.yomeno.xyz^.:...........adcore.com.au.....adcore.ch..0.8.@.R./adcore_..........0.8.@.R.uwoaptee.com^.8.........safeway.com0.8.@.R.fwcdn2.com/js/embed-feed.js..........0.8.@.R._468_60..3........0.8.@.R#/wp-content/plugins/wp-super-popup/.9........0.8.@.R)bancodevenezuela.com/imagenes/publicidad/..........0.8.@.R..adbutler-..........0.8.@.R.adrecover.com^..........0.8.@.R.hdbcode.com^.?...........google.com0.8.@.R!developers.google.com/google-ads/.-...........konograma.com..0.8.@.R./adserver..............vk.com0.8.@.R.vk.me/css/al/ads.css.,........0.8.@.R.mysmth.net/nForum//ADAgent_..........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.E...........daum.net0.8.@.R)daumcdn.net/adfit/static/ad-native.min.js.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^..........0.8.@.R./banner.cgi?..............thefreedictionary.com...downloads.codefi.re*...windows7themes.net

C:\Users\eyup\AppData\Local\Temp\576_1583784604\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Reputation:	low
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Users\eyup\AppData\Local\Temp\576_1583784604\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.993915630498445
Encrypted:	false
SSDEEP:
MD5:	6B2EDD2D0C16E5D77BD2C3E4AE88C95F
SHA1:	BC82982FA8A04FA6FD9F17DA03D443A57E0F78D4
SHA-256:	CA0F5F75FC56FBEDA7522B2C83707A451D01760F417C497A37C70554E290B737
SHA-512:	533026A33030795ABF24B6E78D26763734D98CA74BFA4FAC2073EFAD0BB5CA1C38E7036BEAF17E6ABBFE56CF968E80EB3CA3CFD23AEEC10CE1280E8DB1C4078C
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"VM_rIA1uXuXjbhz_uZ8uQp9F3FfgEgGTjCXL08Q_jrGXXH-Yty1DqAw4yzWsadeOjVRozUf_7kBrYJ2U8Y8slircdLRbrqJejQeyyrJx4HFT8qgZEb60YHdsOd76C57YzF5dXErpjT7_FkWA41lTxLQvdWbACMO0DE7uOHO9mZx5pM98Ni9GsM_yxJbRSyDZWa8BdPHErfMuO6YE6D8tbnYTr2tXcMV9p2ZEAFMiso2B-6DSr

C:\Users\eyup\AppData\Local\Temp\576_1583784604\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9458563396006063
Encrypted:	false
SSDEEP:
MD5:	991F44CE02222E783A1FEFE4187727CE
SHA1:	9855D1CA0338ADCD5829C3260BF7FAAF88A23509
SHA-256:	58704ADE087671AA1226BC9CEC1719F5B80B90C571EF747812A64458BBEA0F50
SHA-512:	C2616426939B235620A22B24A9BEC6D4F7DBB695C812F1784A4C95B41E53A21F371A6C440177CFABDE47E203EB83269F9013FC75C6D758EA6FDFE7B52B4A554E
Malicious:	false
Reputation:	low
Preview:	1.34ff2e9d7a7ce81c5d760d4b0f4b59a0237dd5db0d1e84ccd5103a30687eac17

C:\Users\eyup\AppData\Local\Temp\576_1583784604\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	115
Entropy (8bit):	4.563301657145084
Encrypted:	false
SSDEEP:
MD5:	47B89067C397B3EABBD04E6FC4008B71
SHA1:	7B4E623806D7EA8BFCD2FE6836A21E50C9F9340E
SHA-256:	8FCDA141D859902D36D55F05BB4BBED0BA36B88BABF4AEC4CE7229ABB5F0BDB6
SHA-512:	FDA1CE8EB24A05F65E8132248EEF96C422E5AA2D3254B590FBFD3FCB2016E3B7F6E4B53702D88E1695D4BEC0175F72EB4256CDAA2FF72DDF4390D480D04BA373
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.36.0".}.

C:\Users\eyup\AppData\Local\Temp\5a947744-d056-40e0-9d9a-7116f61244e3.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Category:	dropped
Size (bytes):	5168
Entropy (8bit):	7.956694278195136
Encrypted:	false
SSDEEP:
MD5:	3E5CCD9B583763AF68E28C5101373167
SHA1:	2005CDC0A8070B65E321A197D576698ECC267496
SHA-256:	41412C0863920BA95E9FDBD3AF000CBE926A73C078997A233DF55379A5C4D274
SHA-512:	04BF4F7320326B085C40527797577D8770A30A1ED24A8587A000A5AE1D8F39E0B7F187DB14603295AC7A2901A4698683CC3BED2C2611539293A1927AB31BEAE1
Malicious:	false
Reputation:	low
Preview:	...........[ks.8..._.........#..,.G..8.;.55;.%..&5$e...... )..d.._...%.....s.....+..Uv}...]rq......luK.).zJh..3.&..Uu...W...s.H. .MV..\U3Ef.\.\|...TU.9.z )I...u.+.g3U`Zs.6d...JiJ.rU.IV.".'L\|8.d..j.J..q.....O."..<,...n...~\|E.dV.u.O..'"...e.uyJ?..?]~.?.......M.,.7...j.,.fz].. >+o.gz....<^(5.Jg_.Ap.U.i............?.8....,..../.iQ..8......A.DO/....?.~..N.~a.-..g.N~.......o.^...L.mW.]:{....../........[VkTu[wki.gK...;-.<...\.".3]..}V...)9i.V.P="m?......V.i...7..S.U.d..(..\....g....bU.....}........P9$.A...N..ckV..Qz..A....7..{pd.f.7....}6on.....7J;...Y..l>W...H.Z.........j.......Wk9vj+V.W.zAm.....P.oYo..\|........}.g.^.p...Z....l%cT\|LN3..H......{...~.J.%.!k.(.)..."....q.%.V.. d..MZ.`......o..m3....1.../..jeH........Q....X...j..o..\|.o.r..nVw._...9 .......o...l....!...{....xU5..}.x.I..3.vT%z.k..o..........^.S*.t(....+r\.u<...G.`.........g...r..?...}7.=.....c~.F.e..w.v$sC/.B.p.D~..J...:....7Vl3w...s.-"......]+..KO.~....%.I..?.&.o...\?.9..

C:\Users\eyup\AppData\Local\Temp\9a12f6dd-c966-4b74-b889-749f18722189.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Category:	dropped
Size (bytes):	101891
Entropy (8bit):	7.9971613680976565
Encrypted:	true
SSDEEP:
MD5:	173CA02E5B06065771DEB2F28E4E5A9E
SHA1:	20F1774FB280C94C13082A255C27D7A786EFD5C7
SHA-256:	634557AE2916F2FAA0CBF2557F8F96E26845ABE94D2784FD73B169EC5618B186
SHA-512:	D947E3ED56BE1F3C668943E8F066F39650D2E0D76BF64BAD167E100B8B1066B88D8E851346AFBD9777E90445F41C5108A0A2F1514A3F28F02D4EC39978121E71
Malicious:	false
Reputation:	low
Preview:	............{..0......&xqH.....zyIBv9....=...+......I6....3#.l.@..9.s].W7...h4..H...7.^.........Bg.....`.;.S...P.............z.3.........9~.P..{..-.z........b.:......>..'....I8.......'v.M'E.?bA...N8.'.8I.._...<v&.pT{.L'Ne...#.S!].T.-+...r)5.j.U.8q....X..VPo.....F.o..A.~~.?.w......eNJ..a)....i....:?._^..v.<=ei...i.......Q...8k......~j.c.W......~...Q.yq..^9..z.......S..b.E..L3\|.9S.pa...a....5...J.\.2l..s..4.....S.u..o.\|.Q.K.0.=........0....xj.4....Mie..C..3..... ..........WN........4Vs.B..N.bD...VK%...mb...{{....pd..7..G.....}.J;"..4,.......A.R\|0d..)..M......;;.8.h.C.u..pkM..Z@.......r..U....H...],..l:~p..8`....3....5..t../S{.{`.^kB=f......ZR..L.$t..D%I..xB../.{rb..h8.!.........Z.0........{PuK%Vv...RR........j.vw.[B..$..\|&..eZEW.Z[&..d>.o......@..t.z.O.12C......Kk..oS.[.0.M...<.zq#*g.r......"0+.[.....Tb.E....F...U..U0...G.........t!.+...&K.@.N.#R.]...+.;.M[..x,...J.l........&y.n.....j>..0.\|W.+.S.0X.S.E..L....R.....W.u.g.S.&^.g..N/..

C:\Users\eyup\AppData\Local\Temp\d3350674-1236-4dc4-8d7f-6c20eb616f82.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	248531
Entropy (8bit):	7.963657412635355
Encrypted:	false
SSDEEP:
MD5:	541F52E24FE1EF9F8E12377A6CCAE0C0
SHA1:	189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6
SHA-256:	81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
SHA-512:	D779D78A15C5EFCA51EBD6B96A7CCB6D718741BDF7D9A37F53B2EB4B98AA1A78BC4CFA57D6E763AAB97276C8F9088940AC0476690D4D46023FF4BF52F3326C88
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b.........\..F!...b...l5....zJ.q.......L].....w[T0.6....E.....r..%Z.vFm.9..5!,.~g5...;.t...']....+A.....u....k...e..&..l.6r[yU...%..f.......N..V.....<+.....l..}.{...z...)y.n..'..).....,.b....5.08K%..O.g..D.S.F5o..<(....>....\f..X..I..2."l...w....7f\|.~.c.4.E.......0..0....H............0.......).'..b.$w\$.q&.]zF_2..;...?.U,...W..L1.2...R..#....W.....c1k.$W..$.J....+M!.Hz.n`U.I)N.\|b.l....{.K@]6.LlP/....](.A..................I...).H....IQ.y.;MG.d..ix..#f.Z$\|..\|.?...0K...t"i..s...Y..%.Ky....0...{.!+.~v.;....J.....Z....).(6..@?v.;~..2..c....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. .0...\|!..A..L.+.=...kP.!.1..

C:\Users\eyup\AppData\Local\Temp\f22f81f8-09b8-4e7b-9364-e51ef1100db2.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Category:	dropped
Size (bytes):	28591
Entropy (8bit):	7.990723999928585
Encrypted:	true
SSDEEP:
MD5:	EC81EAEB7C25F9A43DF2C6ABF480C0E2
SHA1:	7B9FBC83C744F499A8D8B2F123CDD0C3A6393D73
SHA-256:	7BA17A9865D120FA8268CC592FE07D2250EB7B9596A54F0083E41CD33716306D
SHA-512:	B277D4F91A7B6824D414906C9F4CDEDDD571FD65993D7C20327E837B4EB77FD693A7C4FAFE6BAEB8C1B90F8684A71FBA33FEFDF94C7FD71808785696DEB89B00
Malicious:	false
Reputation:	low
Preview:	...........Zms.6..._..p..[.(.b[...M....N{..t ...S.......v...H.q.g:....]...p..6I8_d...C.\p.X$.2.p.g.8I}8.".D)$<..O...}.J9.3..a.i.'...x.....5O...x......I.M.!.'\.l.2.0.cN.fq....\......7..,......>.p...w&.KS.......(O.V>......O.r..V~J.`....U(..Y..MIy..w..g0e......D.,L..y..N.+..._....O.h.]...V....r................O.\|.:....Li..>COy......N.h.......R....Q%.,Xr.y...G8=.A....!8(..L....c....sA....t.Vl:...v...G;...^.l...#.t.>...k..d..kr...B......Pb.0..!..;9.....:~....j;....j.O..!B......?....^.]....;...[.g.B...%..'.7;.9.>..gP. p8...:.5l.Y.....Jp..R,.?..b..8O......h.X(..G.).Cz.C..%....x.ET.....AEi.../..0.. ....k.t...wl..e...H.i.F.....?.....z...?..........(../.O..R.?.4..7...j ..Q.....l..ob!..A..j...@..!).....K...MW.U.N.......W..Bh'8.'.y....Y.[o...PI..W....i...r.e..=.k^.WC..Uy.j..687^.z.#u5.4O...........-j.j3..L.1..F...8.......@l.9.c.aGC.R.&..j.Q-av?...[4.E..T8....u..+9.<.n.Qw.D..N..S..3.D...... .%C.j.7.Y.s(.0wq.ZI.#''#..[K.GJ ....4.....?

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	556
Entropy (8bit):	4.768628082639434
Encrypted:	false
SSDEEP:
MD5:	58BA5F65ED971591D1F9D81848EE31D0
SHA1:	BDA3C8B74653334FC8F060CAFBCEA58DF0113AB7
SHA-256:	CDD91587F5AF2C865776B36A5E9A07B10D21B9D911DE0B814B7A1E94B14AE885
SHA-512:	BA2A6BAA3011A54E6B07E29DFD133009D66B6CFFF525DEC0024BDE55A9BED463AD130307EE64BFB4A983A11FFD6B44BD53ED38EB144083A2CBEFA8D85C4D5D41
Malicious:	false
Reputation:	low
Preview:	{"craw_app_unavailable":{"message":"Ara mateix aquesta aplicaci\u00f3 no est\u00e0 disponible."},"craw_connect_to_network":{"message":"Connecteu-vos a una xarxa."},"app_name":{"message":"Sistema de pagaments de Chrome Web Store"},"app_description":{"message":"Sistema de pagaments de Chrome Web Store"},"iap_unavailable":{"message":"La funci\u00f3 Pagaments a l'aplicaci\u00f3 no est\u00e0 disponible actualment."},"please_sign_in":{"message":"Inicieu la sessi\u00f3 a Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	550
Entropy (8bit):	4.905634822460801
Encrypted:	false
SSDEEP:
MD5:	43161EFFA28A0DBFC67B8F7DBE1B5184
SHA1:	FE0A9235A59B51B7F564F14FF564344927F035B8
SHA-256:	3A04421DF5218E8ABD3B0E2AFE11E8338D7BDCBCD1ADB122416944B102BC9696
SHA-512:	FC6A391A4B37FFEE2182F29C1590E32766A1820DC58D0A70A8DD96D7ABE74B47181B24AFFF8ADAE12686CCB1B898DCDDB882EFD205C3387B5B6F3CFBE6E5BA78
Malicious:	false
Reputation:	low
Preview:	{"craw_app_unavailable":{"message":"Aplikace v sou\u010dasn\u00e9 dob\u011b nen\u00ed dostupn\u00e1."},"craw_connect_to_network":{"message":"P\u0159ipojte se pros\u00edm k s\u00edti."},"app_name":{"message":"Platby Internetov\u00e9ho obchodu Chrome"},"app_description":{"message":"Platby Internetov\u00e9ho obchodu Chrome"},"iap_unavailable":{"message":"Platby v aplikaci aktu\u00e1ln\u011b nejsou k dispozici."},"please_sign_in":{"message":"P\u0159ihlaste se do Chromu."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	505
Entropy (8bit):	4.795529861403324
Encrypted:	false
SSDEEP:
MD5:	31264DDBF251A95DE82D0A67FA47DB3A
SHA1:	3A48DC7AF26A153594C7849E1D92AAC31296459B
SHA-256:	EDB51898A6C73D0090D6916B7B72EBAC71E964EABB5BA7CD68E21966024F0D23
SHA-512:	B97D61BD71E3F0A91FF1048D2ACAD4BC092CCAF157B7A96029B6AB5AF1812B01814E3153CD894307CB13DC132523EAC22B19CADA6B97F4B81B0D1132562317B5
Malicious:	false
Reputation:	low
Preview:	{"craw_app_unavailable":{"message":"Appen er ikke tilg\u00e6ngelig i \u00f8jeblikket."},"craw_connect_to_network":{"message":"Opret forbindelse til et netv\u00e6rk."},"app_name":{"message":"Betalinger i Chrome Webshop"},"app_description":{"message":"Betalinger i Chrome Webshop"},"iap_unavailable":{"message":"Betaling i appen er ikke tilg\u00e6ngelig i \u00f8jeblikket."},"please_sign_in":{"message":"Log ind p\u00e5 Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	516
Entropy (8bit):	4.809852395188501
Encrypted:	false
SSDEEP:
MD5:	7639B300B40DDAF95318D2177D3265F9
SHA1:	BF9EFDF073231CB3FCFCA5CCCA25B079ECFC45BD
SHA-256:	356A9D4ADFEC484DA824E7A72059B724B1686FC90082F4A4B667630436D593B0
SHA-512:	70593318C6626B5D25729E8D8109D5611B95283266621BE60ADD7E60C0DD5BC43848E956C767251B7B3CCDF5A0929922DE38F90CC8632CCD0C1CCFC7D6DEFE69
Malicious:	false
Reputation:	low
Preview:	{"craw_app_unavailable":{"message":"Die App ist momentan nicht verf\u00fcgbar."},"craw_connect_to_network":{"message":"Bitte stellen Sie eine Verbindung zu einem Netzwerk her."},"app_name":{"message":"Chrome Web Store-Zahlungen"},"app_description":{"message":"Chrome Web Store-Zahlungen"},"iap_unavailable":{"message":"In-App-Zahlungen sind momentan nicht m\u00f6glich."},"please_sign_in":{"message":"Bitte melden Sie sich in Chrome an."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	1236
Entropy (8bit):	4.338644812557597
Encrypted:	false
SSDEEP:
MD5:	3026E922B17DBEE2674FDAEE960DF584
SHA1:	76602B1E3449F1B67DE42FD31A581B0821BFEFF0
SHA-256:	876845B5A061FAB3CF2A1466E01015DC40DF8449F1CB4205F575CEBED8717BAD
SHA-512:	0C4DCB2589553F9F75534E6C702EBF9095665C93D213564265E39220A99B61BB112A3B20980CE0377C7E98878E3240EB87312B5ECE874382B7E9CA90A0016992
Malicious:	false
Reputation:	low
Preview:	{"craw_app_unavailable":{"message":"\u0397 \u03b5\u03c6\u03b1\u03c1\u03bc\u03bf\u03b3\u03ae \u03c0\u03c1\u03bf\u03c2 \u03c4\u03bf \u03c0\u03b1\u03c1\u03cc\u03bd \u03b4\u03b5\u03bd \u03b5\u03af\u03bd\u03b1\u03b9 \u03b4\u03b9\u03b1\u03b8\u03ad\u03c3\u03b9\u03bc\u03b7."},"craw_connect_to_network":{"message":"\u03a3\u03c5\u03bd\u03b4\u03b5\u03b8\u03b5\u03af\u03c4\u03b5 \u03c3\u03b5 \u03ad\u03bd\u03b1 \u03b4\u03af\u03ba\u03c4\u03c5\u03bf."},"app_name":{"message":"\u03a0\u03bb\u03b7\u03c1\u03c9\u03bc\u03ad\u03c2 \u03c3\u03c4\u03bf Chrome Web Store"},"app_description":{"message":"\u03a0\u03bb\u03b7\u03c1\u03c9\u03bc\u03ad\u03c2 \u03c3\u03c4\u03bf Chrome Web Store"},"iap_unavailable":{"message":"\u039f\u03b9 \u03c0\u03bb\u03b7\u03c1\u03c9\u03bc\u03ad\u03c2 \u03b5\u03bd\u03c4\u03cc\u03c2 \u03b5\u03c6\u03b1\u03c1\u03bc\u03bf\u03b3\u03ce\u03bd \u03b4\u03b5\u03bd \u03b5\u03af\u03bd\u03b1\u03b9 \u03b1\u03c5\u03c4\u03ae\u03bd \u03c4\u03b7 \u03c3\u03c4\u03b9\u03b3\u03bc\u03ae \u03b4\u03b9\u03b1\u03b8

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	450
Entropy (8bit):	4.679939707243892
Encrypted:	false
SSDEEP:
MD5:	DBEDF86FA9AFB3A23DBB126674F166D2
SHA1:	5628AFFBCF6F897B9D7FD9C17DEB9AA75036F1CC
SHA-256:	C0945DD5FDECAB40C45361BEC068D1996E6AE01196DCE524266D740808F753FE
SHA-512:	931D7BA6DA84D4BB073815540F35126F2F035A71BFE460F3CCAED25AD7C1B1792AB36CD7207B99FDDF5EAF8872250B54A8958CF5827608F0640E8AAFE11E0071
Malicious:	false
Reputation:	low
Preview:	{"craw_app_unavailable":{"message":"App currently unavailable."},"craw_connect_to_network":{"message":"Please connect to a network."},"app_name":{"message":"Chrome Web Store Payments"},"app_description":{"message":"Chrome Web Store Payments"},"iap_unavailable":{"message":"In-App Payments is currently unavailable."},"please_sign_in":{"message":"Please sign into Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	542
Entropy (8bit):	4.704430479150276
Encrypted:	false
SSDEEP:
MD5:	3F4B0F56C2839839FC3E3270ED4CB7B6
SHA1:	0D74EA655EAE3990E95BD26F6E1467EDF3EB3478
SHA-256:	1912EA5E0A62BBC669DC14AB5A5BD5514B0502C483EE1F27C3F8834384187079
SHA-512:	4E6A828FE73FC4AB03F0EE966CE7BD8061575A059E90709F908D8D91C5F4EB6A8D25BBFA100E48AD7AC94E76D3BCD3547C277B4150D515222757CC9906AD20A2
Malicious:	false
Reputation:	low
Preview:	{"craw_app_unavailable":{"message":"Esta aplicaci\u00f3n no est\u00e1 disponible en este momento."},"craw_connect_to_network":{"message":"Con\u00e9ctate a una red."},"app_name":{"message":"Sistema de pagos de Chrome Web Store"},"app_description":{"message":"Sistema de pagos de Chrome Web Store"},"iap_unavailable":{"message":"Los pagos en la aplicaci\u00f3n no est\u00e1n disponibles en este momento."},"please_sign_in":{"message":"Inicia sesi\u00f3n en Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	637
Entropy (8bit):	4.47253983486615
Encrypted:	false
SSDEEP:
MD5:	6B2583D8D1C147E36A69A88009CBEBC7
SHA1:	4D4DEEB4BE6AA0181825F3371A761ABC5B4D5937
SHA-256:	6659BC3705311D7641A73995DCFEA80C7734F2F4EBBC3787B3892A240348324F
SHA-512:	37F0DBFCC1B5A2B8E4C92C49D2D9DEEF25616421350324F57E0149A45A6CCB437F5E3CBE97412C4B5DBBF2593783C7DF71E9C25A851AEAE6E4764C545723FA53
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "En este momento, Pagos En-Apps no est. disponible.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Accede a Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	595
Entropy (8bit):	4.467205425399467
Encrypted:	false
SSDEEP:
MD5:	CFF6CB76EC724B17C1BC920726CB35A7
SHA1:	14ED068251D65A840F00C05409D705259D329FFC
SHA-256:	C85800BF45942FCC7FD6B1DF929C25F9CC2A977A6678966BD03D4B6B69889AFD
SHA-512:	53D7D01BB30C0306DE65A79FD9551D2E8C1F71F4F45F71906B009071CB3E0F231E6A50FDD78773E9B4DE94085BC7B97F829842FA21A89A2080D33458B745C46F
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome'i veebipoe maksed".. },.. "app_name": {.. "message": "Chrome'i veebipoe maksed".. },.. "craw_app_unavailable": {.. "message": "Rakendus pole praegu saadaval.".. },.. "craw_connect_to_network": {.. "message": "Looge .hendus v.rguga.".. },.. "iap_unavailable": {.. "message": "Rakendusesisesed maksed ei ole praegu saadaval.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Logige Chrome'i sisse.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	647
Entropy (8bit):	4.595421267152647
Encrypted:	false
SSDEEP:
MD5:	3A01FEE829445C482D1721FF63153D16
SHA1:	F3EAAADDC03F943FC88B30B67F534AA13E3336DD
SHA-256:	0BDE54B20845124113383B6EB81E43A0F05E4EB0C44BEE3C1DFAC4CC5FEC2836
SHA-512:	3B92B6C86D30FD36AA3CEFF8773BA60C3FC5CC19C693540137044C5838A5503895C770C0336A4D0A3DB5E42F3FB36274D8D3F85B9DCA2F3EC0E974FDDB0BEAD8
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Storen maksut".. },.. "app_name": {.. "message": "Chrome Web Storen maksut".. },.. "craw_app_unavailable": {.. "message": "Sovellus ei ole t.ll. hetkell. k.ytett.viss..".. },.. "craw_connect_to_network": {.. "message": "Muodosta verkkoyhteys.".. },.. "iap_unavailable": {.. "message": "Sovelluksen sis.iset maksut eiv.t ole t.ll. hetkell. k.ytett.viss..".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Kirjaudu sis..n Chromeen.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	658
Entropy (8bit):	4.5231229502550745
Encrypted:	false
SSDEEP:
MD5:	57AF5B654270A945BDA8053A83353A06
SHA1:	EEEF7A4F869F97CF471A05D345E74F982D15E167
SHA-256:	EC002ED92359F67818B49455DFC579E140368E6A004080AF022FD4F57F6B03F2
SHA-512:	5F0AE839FCF3F4EA48FF41A76655AE0F3821564AFD5D42FBB9FBB9A38E8D8F7BB5E9B6F71064588CD441261F644095A44A755C134CE546D506D9A21E488BAF52
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "app_name": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Kasalukuyang hindi available ang app.".. },.. "craw_connect_to_network": {.. "message": "Mangyaring kumonekta sa isang network.".. },.. "iap_unavailable": {.. "message": "Kasalukuyang hindi available ang Mga Pagbabayad na In-App.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Mangyaring mag-sign in sa Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	677
Entropy (8bit):	4.552569602149629
Encrypted:	false
SSDEEP:
MD5:	8D11C90F44A6585B57B933AB38D1FFF8
SHA1:	3F9D44EA8807069A32AACA2AAAD02FD892E6CC90
SHA-256:	599491F8C52B945C16C441ADF45BFD45AFAE046DA07757D97C56AF4DE75ED3B5
SHA-512:	D7EF7F5AD7EF1A1595825D79B69E2B1E988AD3CF1F3881496FCCD30F241E4E9C6E457F9F5D0F855DE3536DB7A40C3E1C55946B50D3F556F4A35285066A0CD6F7
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "app_name": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "craw_app_unavailable": {.. "message": "Application indisponible pour le moment.".. },.. "craw_connect_to_network": {.. "message": "Veuillez vous connecter . un r.seau.".. },.. "iap_unavailable": {.. "message": "Les paiements via l'application ne sont pas disponibles pour le moment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Veuillez vous connecter . Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	835
Entropy (8bit):	4.791154467711985
Encrypted:	false
SSDEEP:
MD5:	E376D757C8FD66AC70A7D2D49760B94E
SHA1:	1525C5B1312D409604F097768503298EC440CC4D
SHA-256:	8106D98C4F8DA16DB698444409558E29CC96735E188BFA303C333A5D99231C1D
SHA-512:	673F3F259AF2946E4F49BBED14A2A70D44BF9FDA9D7A71DC9172BA9B7B3C7F7062B16D29682B638D485B0520ED6F99E7A735F28C7C719B539559005B69FA7555
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome ... ..... ......".. },.. "app_name": {.. "message": "Chrome ... ..... ......".. },.. "craw_app_unavailable": {.. "message": "......... .. ... ...... .... ...".. },.. "craw_connect_to_network": {.. "message": "..... ....... .. ...... .....".. },.. "iap_unavailable": {.. "message": "..-.. ...... ... ...... .... ...".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "..... Chrome ... .... .. .....".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	618
Entropy (8bit):	4.56999230891419
Encrypted:	false
SSDEEP:
MD5:	8185D0490C86363602A137F9A261CC50
SHA1:	5BD933B874441CEACB9201CCC941FF67BAED6DC0
SHA-256:	A2B2EC359A9DD9DCCCE02859CE1E738BD30FAA4A05F1DC522893FFDF722BBC15
SHA-512:	D7629978FC031EA5F716F9C1065FB2FEAB48C15F10CD68830DC966FA1002C03DDC7ACDE314C7D075F9F3A0A68552A6ACBCCDEE24CF20B6C3DD1BCE6562D0396E
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "app_name": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikacija trenuta.no nije dostupna.".. },.. "craw_connect_to_network": {.. "message": "Pove.ite se s mre.om.".. },.. "iap_unavailable": {.. "message": "Pla.anje u aplikaciji trenuta.no nije dostupno.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prijavite se na Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	683
Entropy (8bit):	4.675370843321512
Encrypted:	false
SSDEEP:
MD5:	85609CF8623582A8376C206556ED2131
SHA1:	1E16EB70DB5E59BB684866FF3E3925C2DEF25A12
SHA-256:	32A249749F12ADB6A220BF9ADC272C7E5D9AD5497A38B0086D961E3ABA17FBC6
SHA-512:	27883430865D3CFA6EDFE8C6CE1442BD96150B5CE520CCF7D556A330CAA6392C712B47BD86F7350E174876BC681F6DEC94D1312402655B0AF90883A2899EC78B
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Internetes .ruh.z Fizet.si rendszere".. },.. "app_name": {.. "message": "Chrome Internetes .ruh.z Fizet.si rendszere".. },.. "craw_app_unavailable": {.. "message": "Az alkalmaz.s jelenleg nem .rhet. el.".. },.. "craw_connect_to_network": {.. "message": "K.rj.k, csatlakozzon egy h.l.zathoz.".. },.. "iap_unavailable": {.. "message": "Az alkalmaz.son bel.li fizet.s jelenleg nem .rhet. el.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Jelentkezzen be a Chrome-ba.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	604
Entropy (8bit):	4.465685261172395
Encrypted:	false
SSDEEP:
MD5:	EAB2B946D1232AB98137E760954003AA
SHA1:	60BDC2937905B311D2C9844DF2D639D7AC9F7F67
SHA-256:	C6E8800450602DE0F39FE9F6854472383813FB454B08ABAE7E25A9167CE004C3
SHA-512:	970FEC9A9EF0BAF7F693C4C5977F3B47914579C5B5414FCE9DBB5E4574659A5BB9AD2DE0CC886B368F49C019785AF7D2D7FE82F71341F039EADC399ED776CA12
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pembayaran Chrome Webstore".. },.. "app_name": {.. "message": "Pembayaran Chrome Webstore".. },.. "craw_app_unavailable": {.. "message": "Aplikasi tidak tersedia saat ini.".. },.. "craw_connect_to_network": {.. "message": "Sambungkan ke jaringan.".. },.. "iap_unavailable": {.. "message": "Pembayaran Dalam Aplikasi saat ini tidak tersedia.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Harap masuk ke Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	603
Entropy (8bit):	4.479418964635223
Encrypted:	false
SSDEEP:
MD5:	A328EEF5E841E0C72D3CD7366899C5C8
SHA1:	2851ED658385804E87911643F5A4200B1FB26E13
SHA-256:	CD891C45F7586FB4A2514205A11F260E4A6D4482FA03D901909DD9F57BE0536D
SHA-512:	E47297896E981774EC3B59D41B89D6BA9333F6B4435EB9727D8645A46B10C7D408ADE06844871FA757382FBE7E645276449DB7B1B23BC59C9A71A5CB5A5ECC57
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamenti Chrome Web Store".. },.. "app_name": {.. "message": "Pagamenti Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "App al momento non disponibile.".. },.. "craw_connect_to_network": {.. "message": "Collegati a una rete.".. },.. "iap_unavailable": {.. "message": "La funzione Pagamenti In-App non . al momento disponibile.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Accedi a Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	697
Entropy (8bit):	5.20469020877498
Encrypted:	false
SSDEEP:
MD5:	9B3A5D473C3F2BBFAEECE94A07A940B8
SHA1:	61BACA342CF766BBA15C7B4D892A0E7DAC9405AA
SHA-256:	706312A4A2AEF3317223F141EB2B82685345B7EED444F16BB4DF3A272716DA1F
SHA-512:	94F6FEE9A11BD890AB8211C98D1CC142348961EBCF756F66477A3E3A76519804B70BE0AE4E551739F8AFE32D7ADE6EDE04EF6B9B9EED03E3A857E6058EEDD4C6
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome ........".. },.. "app_name": {.. "message": "Chrome ........".. },.. "craw_app_unavailable": {.. "message": ".................".. },.. "craw_connect_to_network": {.. "message": "................".. },.. "iap_unavailable": {.. "message": ".......................".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Chrome ............".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	631
Entropy (8bit):	5.160315577642469
Encrypted:	false
SSDEEP:
MD5:	9F6B4D82A70C74CA751E2EAE70FAB5CF
SHA1:	0534F125FFCE8222277CF2BE3401C59DAF9217F8
SHA-256:	D1467B8D037114403E8F4EFC52E88C4A7FEB96126BE4CFF883FEFF1084EF7E68
SHA-512:	ED9319830314385D09C06F62EE34186E8CA576C857981205E4468A28B3ACD2AB03384E77B866032C324ABDD97A56EFD08E2D6E0C79D563578B3EC52517819BD8
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome . ... ..".. },.. "app_name": {.. "message": "Chrome . ... ..".. },.. "craw_app_unavailable": {.. "message": ".. .. ... . .....".. },.. "craw_connect_to_network": {.. "message": "..... ......".. },.. "iap_unavailable": {.. "message": ".. .. ... ... . .....".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Chrome. .......".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	665
Entropy (8bit):	4.66839186029557
Encrypted:	false
SSDEEP:
MD5:	4CA644F875606986A9898D04BDAE3EA5
SHA1:	722A10569E93975129D67FBDB75B537D9D622AD1
SHA-256:	7C311AB751D840D750C11553C083785813E079C1D464FE568A98C9E3EF3DB96C
SHA-512:	E575E3D0622F5BD4B6C0EE79128A1B1F1882195670139D1983F4377D847141B8FB8EBB8BCED82AF3A220ED07D3577AFBE085BADC0E9C7678292B80E3EC5D3444
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": ".Chrome. internetin.s parduotuv.s mok.jimo sistema".. },.. "app_name": {.. "message": ".Chrome. internetin.s parduotuv.s mok.jimo sistema".. },.. "craw_app_unavailable": {.. "message": "Programa .iuo metu negalima.".. },.. "craw_connect_to_network": {.. "message": "Prisijunkite prie tinklo.".. },.. "iap_unavailable": {.. "message": "Mok.jimai programoje .iuo metu negalimi.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prisijunkite prie .Chrome..".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	671
Entropy (8bit):	4.631774066483956
Encrypted:	false
SSDEEP:
MD5:	C5CE2C51391EAFD3DA9E4C71549A3C28
SHA1:	1F67FF6EF6E90C0CE3AAF56ED543A3EFD381574D
SHA-256:	1FA1DF2CA8516DEF490FB8484E9AA498ACFF80EEF5C9258FFE42D3678E6C7DED
SHA-512:	C85F6281E682F52BC2147DEA7E2F3BB4DC48D98BADA8687B05C6C7271C78EA7F5431CD51671A4184C9AE004FC53C016E3C594697F483195CCBA08A93821EEF70
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome interneta veikala maks.jumu sist.ma".. },.. "app_name": {.. "message": "Chrome interneta veikala maks.jumu sist.ma".. },.. "craw_app_unavailable": {.. "message": "Lietotne pagaid.m nav pieejama.".. },.. "craw_connect_to_network": {.. "message": "L.dzu, izveidojiet savienojumu ar t.klu.".. },.. "iap_unavailable": {.. "message": "Maks.jumi lietotn.s pa.laik nav pieejami.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "L.dzu, pierakstieties p.rl.k. Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\nb\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	624
Entropy (8bit):	4.555032032637389
Encrypted:	false
SSDEEP:
MD5:	93C459A23BC6953FF744C35920CD2AF9
SHA1:	162F884972103A08ADB616A7EB3598431A2924C5
SHA-256:	2CD700AEB57D89C2E73333D0702556EE3FF3863516170F85669BC680FCBDC4E0
SHA-512:	F76E6E8D8499306883C3EC1E774F7E8BB6B601096DA5A14D17D3E7D5732829542041E42B7350466589291ADCC83FB065FD591B4E20CFCF8EDC586E128ECBFCB5
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Nettmarked-betalinger".. },.. "app_name": {.. "message": "Chrome Nettmarked-betalinger".. },.. "craw_app_unavailable": {.. "message": "Appen er utilgjengelig for .yeblikket.".. },.. "craw_connect_to_network": {.. "message": "Du m. koble til et nettverk.".. },.. "iap_unavailable": {.. "message": "Betaling i app er ikke tilgjengelig for .yeblikket.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Du m. logge p. Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	615
Entropy (8bit):	4.4715318546237315
Encrypted:	false
SSDEEP:
MD5:	7A8F9D0249C680F64DEC7650A432BD57
SHA1:	53477198AEE389F6580921B4876719B400A23CA1
SHA-256:	92BE7C2DC9CFBE5A65E9CE6488D364C8D7EC19E7B67A31E4D43C1CB2B169671C
SHA-512:	969AB979546A741C0F3EDBEEB21BABA375FA8870D4FB9248CDD4C305736E332E10CAB7B64C5C078E60EC0CD73848101B390BE8F44B89C310058AF4C1CA3C8AA7
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Betalingen via Chrome Web Store".. },.. "app_name": {.. "message": "Betalingen via Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "App momenteel niet beschikbaar.".. },.. "craw_connect_to_network": {.. "message": "Maak verbinding met een netwerk.".. },.. "iap_unavailable": {.. "message": "In-app-betalingen is momenteel niet beschikbaar.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Log in bij Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	636
Entropy (8bit):	4.646901997539488
Encrypted:	false
SSDEEP:
MD5:	0E6194126AFCCD1E3098D276A7400175
SHA1:	E8127B905A640B1C46362FA6E1127BE172F4A40F
SHA-256:	E2699F98C511B18A2AFB82EAE9A4804B646C4FF1077D80E77C17A3943A6373C2
SHA-512:	A71F7C7BFBBF1E37E699601AF2E095C56CBA91F90CB7556477DF31D01B83ADFB1271E1775C9BA299FF6875BBFC2B6AB47488CC88E33DEF2F6F2E0E5AC687B777
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "P.atno.ci w sklepie Chrome Web Store".. },.. "app_name": {.. "message": "P.atno.ci w sklepie Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplikacja jest obecnie niedost.pna.".. },.. "craw_connect_to_network": {.. "message": "Po..cz si. z sieci..".. },.. "iap_unavailable": {.. "message": "P.atno.ci w ramach aplikacji s. teraz niedost.pne.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Zaloguj si. w Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	636
Entropy (8bit):	4.515158874306633
Encrypted:	false
SSDEEP:
MD5:	86A2B91FA18B867209024C522ED665D5
SHA1:	63DEC245637818C76655E01FCB6D59784BC7184E
SHA-256:	6374880FDD1F8AF1EE8AEA6A06B73BE0AB265AFCEB4FE6F08BDE3B3989264B21
SHA-512:	DA6DBDE5028756421C2904F605632EE98831A25A1247E6238A931629B94CE8A00FD76F4235F118D2167304BD60F2C06B2AD78E54FF6CE53F8C38DF8C7B5AFCE4
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamentos da Chrome Web Store".. },.. "app_name": {.. "message": "Pagamentos da Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplicativo indispon.vel no momento.".. },.. "craw_connect_to_network": {.. "message": "Conecte-se a uma rede.".. },.. "iap_unavailable": {.. "message": "No momento, os Pagamentos no aplicativo n.o est.o dispon.veis.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Fa.a login no Google Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	622
Entropy (8bit):	4.526171498622949
Encrypted:	false
SSDEEP:
MD5:	750A4800EDB93FBE56495963F9FB3B94
SHA1:	8BFB915488A4EB3CB33D68E2E59F1F8447DB7D61
SHA-256:	C1C94F65FABAF17DEF98A8587711A56D61B1E5607500E9B01F2824DB109F9E83
SHA-512:	2AEDEF5793406221BE76AF22031CE8C30AB5FAEAED09BB394C153E2EBE990C89C1A2A73B40D8A92842641AFCA8C77FFD808A2058602D3646FD8DAE2844406F24
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamentos via Chrome Web Store".. },.. "app_name": {.. "message": "Pagamentos via Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplica..o atualmente indispon.vel.".. },.. "craw_connect_to_network": {.. "message": "Ligue-se a uma rede.".. },.. "iap_unavailable": {.. "message": "Os Pagamentos na app est.o atualmente indispon.veis.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicie sess.o no Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	641
Entropy (8bit):	4.61125938671415
Encrypted:	false
SSDEEP:
MD5:	98D43E4B1054A65DF3FA3CC40AB6FB6D
SHA1:	46E0A21C4DA2BB5D4D8F837AE211C1B6FA26E7E2
SHA-256:	113A13900CBA62FE8AED06751971C23A80A99B47F9BE219CF884D57DB19611D9
SHA-512:	A76DC53912A4F46714926B9EA2B22E909540E447F61F6DD72607AB7B3BB5D4A9B39E525B04C33AEC53BA813D14AC1FB5827275B2524E52B693E83171E1CD1466
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pl..i prin Magazinul web Chrome".. },.. "app_name": {.. "message": "Pl..i prin Magazinul web Chrome".. },.. "craw_app_unavailable": {.. "message": ".n prezent, aplica.ia nu este disponibil..".. },.. "craw_connect_to_network": {.. "message": "Conecteaz.-te la o re.ea.".. },.. "iap_unavailable": {.. "message": "Pl..ile .n aplica.ie nu sunt disponibile momentan.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Conecteaz.-te la Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	744
Entropy (8bit):	4.918620852166656
Encrypted:	false
SSDEEP:
MD5:	DB2EDF1465946C06BD95C71A1E13AE64
SHA1:	FB4F3ECE9ECECEBBC6CA2A592A15FB9C1FDFB811
SHA-256:	FBAF22CE6E16DE174CED8CB5EA3098CCA1C3426A2111FF33BD3E64DA64ED67AB
SHA-512:	4E0CF00BAEF1757548DEB17BBE1AF55770A0A0F7351779EF55C7DEFA6D112D0227B8865C2C22E0EC62E6E2F1C8E1632A2D0CE6828D25C5ABBF143C990116F632
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "......... ....... ........-........ Chrome".. },.. "app_name": {.. "message": "......... ....... ........-........ Chrome".. },.. "craw_app_unavailable": {.. "message": ".......... ...........".. },.. "craw_connect_to_network": {.. "message": "............ . .....".. },.. "iap_unavailable": {.. "message": "....... ..... .......... ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "....... . Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	647
Entropy (8bit):	4.640777810668463
Encrypted:	false
SSDEEP:
MD5:	8DF215D1EFBDABB175CCDD68ED8DCB0A
SHA1:	2B374462137A38589A73FDD00A84CBDC7E50F9F4
SHA-256:	7FA16AF97E6CFC52EC6008EB679D3F30E7E0C24F9EF2D18A9228EAF4DED9D63B
SHA-512:	C0E623343BDAEB4731800D183B59F2FCFE285F0C7153EC99641FD84F2F2DCFE47D21E73F3D28B1240340453C5668EB0AFFBE087AAB62F1C88CD2A40CC44E599D
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "app_name": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplik.cia moment.lne nie je dostupn..".. },.. "craw_connect_to_network": {.. "message": "Pripojte sa k sieti.".. },.. "iap_unavailable": {.. "message": "Platby v aplik.cii moment.lne nie s. k dispoz.cii.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prihl.ste sa do prehliada.a Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	4.5101656584816885
Encrypted:	false
SSDEEP:
MD5:	3943FA2A647AECEDFD685408B27139EE
SHA1:	0129DD19D28373359530B3B477FE8A9279DABB7D
SHA-256:	18AFF072EE0DF7C3495045435C752A805606E6D5D462EF2321C443F1773F4B3A
SHA-512:	42E62B3855611FF2E1D39C11404CB1A09825EE4CA6A8ACB3FF538B4574388F549E3BD79137DD4DC128A8DC44DD270D7D878E4AAD20DA8250A5C25297B0DEC09D
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pla.ila v spletni trgovini Chrome".. },.. "app_name": {.. "message": "Pla.ila v spletni trgovini Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikacija trenutno ni na voljo.".. },.. "craw_connect_to_network": {.. "message": "Pove.ite se z omre.jem.".. },.. "iap_unavailable": {.. "message": "Pla.ila v aplikacijah trenutno niso na voljo.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prijavite se v Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	743
Entropy (8bit):	4.913927107235852
Encrypted:	false
SSDEEP:
MD5:	D485DF17F085B6A37125694F85646FD0
SHA1:	24D51D8642CDC6EFD5D8D7A4430232D8CDE25108
SHA-256:	7FFDE34C58E7C376C042DE64DEF6481DAE32BE8B70F0B18EDF536290CBE0C818
SHA-512:	0DDECFD860E99290B6C3AAA04F510272AE081CF2D93ED5832D9D6378EC9D36177FFBE213471247FB94721EA34A83E7665669200047091D0FDE134E3D763217E7
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "....... . Chrome ...-..........".. },.. "app_name": {.. "message": "....... . Chrome ...-..........".. },.. "craw_app_unavailable": {.. "message": ".......... .. ........ ...........".. },.. "craw_connect_to_network": {.. "message": "........ .. .......".. },.. "iap_unavailable": {.. "message": "....... . .......... .. ........ ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "......... .. . Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	630
Entropy (8bit):	4.52964089437422
Encrypted:	false
SSDEEP:
MD5:	D372B8204EB743E16F45C7CBD3CAAF37
SHA1:	C96C57219D292B01016B37DCF82E7C79AD0DD1E8
SHA-256:	B8BA77E0089B0676545EC16D32468B727812B444F90B33A7A5B748E6C36C4388
SHA-512:	33640529E0D5DCC5CA4BDB0615A2818E8D26C6FCB7B3474C08AC3EB67B9DB40E1F0A79954ED20728CD47A686D2533DCBC76ABCBDB917F8530C8DE8BBA687352E
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Betalning via Chrome Web Store".. },.. "app_name": {.. "message": "Betalning via Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Appen .r inte tillg.nglig f.r tillf.llet.".. },.. "craw_connect_to_network": {.. "message": "Anslut till ett n.tverk.".. },.. "iap_unavailable": {.. "message": "Betalning i appen .r inte tillg.ngligt f.r n.rvarande.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Logga in i Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	945
Entropy (8bit):	4.801079428724355
Encrypted:	false
SSDEEP:
MD5:	83E2D1E97791A4B2C5C69926EFB629C9
SHA1:	429600425CB0F196DDD717F940E94DBD8BFF2837
SHA-256:	2FECA577F43D97BAEEA464741D585892103585208FD0A935B810A03BDCE83C88
SHA-512:	60A5928DAA8CB4341487F477C56B5A98B83EDE50E5F4F55A802E01FDDAB86F3E795D391953D3D9214552D14D3F58C5A183693C613720FC12FC387D7B8F9B9AB6
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "............... Chrome .........".. },.. "app_name": {.. "message": "............... Chrome .........".. },.. "craw_app_unavailable": {.. "message": ".............................".. },.. "craw_connect_to_network": {.. "message": ".........................".. },.. "iap_unavailable": {.. "message": "...............................................".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "................. Chrome".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	631
Entropy (8bit):	4.710869622361971
Encrypted:	false
SSDEEP:
MD5:	2CEAE0567B6BB1D240BBAD690A98CA3B
SHA1:	5944346FBD4A0797B13223895995CAB58E9ECD23
SHA-256:	A7CB86F30C9C31FE5540282C308BA96ADB4EC16EF98C87129EB88105E5BEF5FC
SHA-512:	108A07C6D03D7178E8D0FFEF5349E0249A898D864964FED8757BD8A08BC1C6D9613F2A6C01AA34A6606127D1C6CE14C229FA02586677DBB060B85E3E845950E1
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Ma.azas. .demeleri".. },.. "app_name": {.. "message": "Chrome Web Ma.azas. .demeleri".. },.. "craw_app_unavailable": {.. "message": "Uygulama .u anda kullan.lam.yor.".. },.. "craw_connect_to_network": {.. "message": "L.tfen bir a.a ba.lan.n.".. },.. "iap_unavailable": {.. "message": "Uygulama ..i .demeler .u anda kullan.lamaz.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "L.tfen Chrome'da oturum a..n.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	720
Entropy (8bit):	4.977397623063544
Encrypted:	false
SSDEEP:
MD5:	AB0B56120E6B38C42CC3612BE948EF50
SHA1:	8B3F520E5713D9F116D68E71DAEED1F6E8D74629
SHA-256:	68ABA284751EB9C856032062EF9B1651E2A1E5CE5FDA0977FFC97D63BA7BED9E
SHA-512:	CD852A58217F739C1CD58567FF432D31A7AD3F68C884ABBA1DA95799BCD1545C6A5D3B06F319681C12B78AD0A709828DE4B22736316F148D21F5DB76A5BCCBEF
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "....... ...-........ Chrome".. },.. "app_name": {.. "message": "....... ...-........ Chrome".. },.. "craw_app_unavailable": {.. "message": "........ ......... ...........".. },.. "craw_connect_to_network": {.. "message": "............. .. .......".. },.. "iap_unavailable": {.. "message": "....... ..... ........ ..... .. .........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "........ . Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	695
Entropy (8bit):	4.855375139026009
Encrypted:	false
SSDEEP:
MD5:	7EBB677FEAD8557D3676505225A7249A
SHA1:	F161B4B6001AEAEAB246FF8987F4D992B48D47BE
SHA-256:	051F96ED874C11C4A13589B5F68964E4F5B03B52DDA223D56524F2CA23760C04
SHA-512:	74FD267CF7E299FB8E7054605C3F651F057F676FF865082FA24F4916755456768DB0DA62DBC515D829B48AB1F9CFC8AD3E841DCBF1F194D5CB14C5335A192A0D
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Thanh to.n tr.n c.a h.ng Chrome tr.c tuy.n".. },.. "app_name": {.. "message": "Thanh to.n tr.n c.a h.ng Chrome tr.c tuy.n".. },.. "craw_app_unavailable": {.. "message": ".ng d.ng hi.n kh.ng kh. d.ng.".. },.. "craw_connect_to_network": {.. "message": "Vui l.ng k.t n.i v.i m.ng.".. },.. "iap_unavailable": {.. "message": "Thanh to.n trong .ng d.ng hi.n kh.ng kh. d.ng.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Vui l.ng ..ng nh.p v.o Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	595
Entropy (8bit):	5.210259193489374
Encrypted:	false
SSDEEP:
MD5:	BB73BF561BB79F89D9BF7C67C5AE5C65
SHA1:	2FADD3A1959B29C44830033A35C637D0311A8C9C
SHA-256:	D804F2A040D21D7511EFD5213D8E1721D64964A1A0DBB48E21622CEEDC9D967E
SHA-512:	627D44CEF1FE5C5ABD598BD47FF5E22B9EFC1CF98DDE3868FA9E5896C134A0C9C055AC34EDDADAE56B6690E51AEA89965D38F770552A85C732CC796795DC68D2
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome .........".. },.. "app_name": {.. "message": "Chrome .........".. },.. "craw_app_unavailable": {.. "message": ".........".. },.. "craw_connect_to_network": {.. "message": ".......".. },.. "iap_unavailable": {.. "message": "............".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "... Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	634
Entropy (8bit):	5.386215984611281
Encrypted:	false
SSDEEP:
MD5:	5FF50C673CC0C661D615F0CFD0E6DCA0
SHA1:	60DFF98DEAB9C4746B288BDD9C94B3BCAE5EAA85
SHA-256:	C6F8C640F3353A7B9B1432A0C139C1AEEC40133800E6C9B467B63991AD660308
SHA-512:	361D62D91F4931C5F34092C9F2C6A5323D5EEB82A24E7ABE11F7817D8D66341C0ECAD4DCB4B10873920C8D6A3CC9F5704889E178EB2549001A9F62BEDF6C8019
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome ............".. },.. "app_name": {.. "message": "Chrome ............".. },.. "craw_app_unavailable": {.. "message": ".............".. },.. "craw_connect_to_network": {.. "message": "......".. },.. "iap_unavailable": {.. "message": "................".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "... Chrome.".. }..}..

C:\Users\eyup\AppData\Local\Temp\scoped_dir576_782133629\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1098
Entropy (8bit):	4.919185521409901
Encrypted:	false
SSDEEP:
MD5:	6CA25F3EF585B63F01BCDF8635120704
SHA1:	00C063811E31EA5F9A00F175A71EA25E7821F621
SHA-256:	49D9DE983F7436BA786E6E04A5A20C10F41687AE06B266B1B6553F696719563D
SHA-512:	566BFD9BADBD8951EE52E5911EB68B51E86286989096D32DE6E32A2523761B0E0AFCA251EF3BEA36B5D51FB8354A5FCA567772A02C3F3B9D8DFE529609FA0430
Malicious:	false
Reputation:	low
Preview:	{."update_url": "https://clients2.google.com/service/update2/crx",.. "name": "__MSG_APP_NAME__",. "description": "__MSG_APP_DESCRIPTION__",. "manifest_version": 2,. "version": "1.0.0.6",. "minimum_chrome_version": "29",. "default_locale": "en",. "app": {. "background": {. "scripts": [. "craw_background.js". ]. }. },. "permissions": [. "identity",. "webview",. "https://www.google.com/",. "https://www.googleapis.com/*",. "https://payments.google.com/payments/v4/js/integrator.js",. "https://sandbox.google.com/payments/v4/js/integrator.js". ],. "oauth2": {. "auto_approve": true,. "scopes": [. "https://www.googleapis.com/auth/sierra",. "https://www.googleapis.com/auth/sierrasandbox",. "https://www.googleapis.com/auth/chromewebstore",. "https://www.googleapis.com/auth/chromewebstore.readonly". ],. "client_id": "203784468217.apps.googleusercontent.com". },. "icons": {. "16": "images/icon_16.png",. "128

C:\Users\eyup\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Little-endian UTF-16 Unicode text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:
MD5:	F3B25701FE362EC84616A93A45CE9998
SHA1:	D62636D8CAEC13F04E28442A0A6FA1AFEB024BBB
SHA-256:	B3D510EF04275CA8E698E5B3CBB0ECE3949EF9252F0CDC839E9EE347409A2209
SHA-512:	98C5F56F3DE340690C139E58EB7DAC111979F0D4DFFE9C4B24FF849510F4B6FFA9FD608C0A3DE9AC3C9FD2190F0EFAF715309061490F9755A9BFDF1C54CA0D84
Malicious:	false
Reputation:	low
Preview:	..

Static File Info

⊘No static file info

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Created / dropped Files

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\1a6ccf4c-7dea-44a6-993d-3a656d5a6e49.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\1fc66c70-a542-4e55-8b8a-2f6fbfdba610.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\310c0c51-a425-4e90-9151-bc48c0aaaab4.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\74504a49-972d-41ae-9a71-723dd303b3db.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\938a696a-4539-4b6a-a2c5-ee120d168e07.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\017f4cc8-d382-4951-bb08-8a5681b45de4.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\0ba72f6e-cf19-4734-87c6-1e06a9b6e43a.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\4504651f-5913-4952-b2c7-619ae854c2b5.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\57d805eb-f3a4-4c5b-86ca-fde2c0d21a4d.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\7e108add-4da9-4798-a394-83485b966f4c.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\8562e6cb-bfe9-44cb-8a69-518bd84158e1.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\8d770cf4-6ca7-4932-956b-bf49035bb4e2.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\99eb3cfa-e42a-400b-a2a6-25c54012abdc.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\9b0a2e24-1ee5-4c37-b036-fa70c294fdf1.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico (copy)

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\f7e01850-ce80-4674-bc7c-8170c3ba86e3\556be1bce36d62b7_0

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\f7e01850-ce80-4674-bc7c-8170c3ba86e3\index

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\f7e01850-ce80-4674-bc7c-8170c3ba86e3\index-dir\temp-index

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\f7e01850-ce80-4674-bc7c-8170c3ba86e3\index-dir\the-real-index (copy)

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\index.txt (copy)

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7b539bde8ca0807396a791d6ee4db1189d0e5380\index.txt.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_1

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\ae0752c2-12a2-49e5-92ad-d4ae68291784.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\bb4efb3e-0345-4d99-9f77-427c2981486d.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\d50555fc-e082-4755-bd5f-d485328a5da6.tmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000014.dbtmp

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)

C:\Users\eyup\AppData\Local\Google\Chrome\User Data\Last Browser

Windows Analysis Report
https://acrobat.adobe.com/link/track?uri=urn:aaid:scds:US:3e840921-5c4f-4cef-ba5b-10ee182aed92