Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
http://r.email.rdv360.com/tr/cl/tl7Wu25UHrnjkn5sfc0vx0u4dtyo0w00PXMuL2iagRDUR4r6sEL0l9C97pb-2sRztT-v8bXx-XwXmfdSPRXPxbz7LHu0VNziyeYAzkCiIjcvnS7WBSJwBh3b5lynhLuGZ-icKIPKLG1_Nge8zb9RKR3x8-eqdE9Z6NZ1eNGz7xHfVQji-8Y3Ly2KhJRTjnC_XVffoO3v2wTAX7vCTKg95DV-fGkRhyk0Etop2L_GVfVQwjhA4X5PZ4rHEGj4_1HhHvnPUbiBjyJo

Overview

General Information

Sample URL:http://r.email.rdv360.com/tr/cl/tl7Wu25UHrnjkn5sfc0vx0u4dtyo0w00PXMuL2iagRDUR4r6sEL0l9C97pb-2sRztT-v8bXx-XwXmfdSPRXPxbz7LHu0VNziyeYAzkCiIjcvnS7WBSJwBh3b5lynhLuGZ-icKIPKLG1_Nge8zb9RKR3x8-eqdE9Z6NZ1eNGz
Analysis ID:679059

Detection

HTMLPhisher
Score:56
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Phishing site detected (based on favicon image match)
Yara detected HtmlPhish10
HTML body contains low number of good links
No HTML title found

Classification

Process Tree

  • System is start
  • chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://r.email.rdv360.com/tr/cl/tl7Wu25UHrnjkn5sfc0vx0u4dtyo0w00PXMuL2iagRDUR4r6sEL0l9C97pb-2sRztT-v8bXx-XwXmfdSPRXPxbz7LHu0VNziyeYAzkCiIjcvnS7WBSJwBh3b5lynhLuGZ-icKIPKLG1_Nge8zb9RKR3x8-eqdE9Z6NZ1eNGz7xHfVQji-8Y3Ly2KhJRTjnC_XVffoO3v2wTAX7vCTKg95DV-fGkRhyk0Etop2L_GVfVQwjhA4X5PZ4rHEGj4_1HhHvnPUbiBjyJo5lqUbQI MD5: 74859601FB4BEEA84B40D874CCB56CAB)
    • chrome.exe (PID: 4568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1736,6163712053603421985,875303126275118539,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:8 MD5: 74859601FB4BEEA84B40D874CCB56CAB)
  • cleanup

Yara Signatures

HTML

SourceRuleDescriptionAuthorStrings
58601.1.pages.csvJoeSecurity_HtmlPhish_10Yara detected HtmlPhish_10Joe Security

    Sigma Signatures

    ⊘No Sigma rule has matched

    Snort Signatures

    ⊘No Snort rule has matched

    Joe Sandbox Signatures

    Click to jump to signature section

    Show All Signature Results

    Phishing

    barindex
    Phishing site detected (based on favicon image match)
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luMatcher: Template: outlook matched with high similarity
    Yara detected HtmlPhish10
    Source: Yara matchFile source: 58601.1.pages.csv, type: HTML
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luHTTP Parser: Number of links: 0
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luHTTP Parser: Number of links: 0
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luHTTP Parser: HTML title missing
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luHTTP Parser: HTML title missing
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luHTTP Parser: No <meta name="author".. found
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luHTTP Parser: No <meta name="author".. found
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luHTTP Parser: No <meta name="copyright".. found
    Source: https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.luHTTP Parser: No <meta name="copyright".. found
    Source: chrome.exeMemory has grown: Private usage: 1MB later: 27MB
    Source: unknownDNS traffic detected: queries for: r.email.rdv360.com
    Source: unknownNetwork traffic detected: HTTP traffic on port 56278 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 65147 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49583
    Source: unknownNetwork traffic detected: HTTP traffic on port 51698 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 61323 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 60094 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55885
    Source: unknownNetwork traffic detected: HTTP traffic on port 54481 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 56568 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54481
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 61789
    Source: unknownNetwork traffic detected: HTTP traffic on port 63978 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 63852 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 49583 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 58121 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 58121
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 65147
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 60658
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 64239
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 61323
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49636
    Source: unknownNetwork traffic detected: HTTP traffic on port 52220 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 64103 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 60658 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 51976 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51976
    Source: unknownNetwork traffic detected: HTTP traffic on port 64239 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 60094
    Source: unknownNetwork traffic detected: HTTP traffic on port 55417 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52220
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 55417
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 51698
    Source: unknownNetwork traffic detected: HTTP traffic on port 61789 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 56568
    Source: unknownNetwork traffic detected: HTTP traffic on port 49636 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 63978
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 56278
    Source: unknownNetwork traffic detected: HTTP traffic on port 64005 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 64103
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 65531
    Source: unknownNetwork traffic detected: HTTP traffic on port 55885 -> 443
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 63852
    Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 64005
    Source: unknownNetwork traffic detected: HTTP traffic on port 65531 -> 443
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 142.250.185.163
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: unknownTCP traffic detected without corresponding DNS query: 172.217.168.195
    Source: global trafficHTTP traffic detected: GET /tr/cl/tl7Wu25UHrnjkn5sfc0vx0u4dtyo0w00PXMuL2iagRDUR4r6sEL0l9C97pb-2sRztT-v8bXx-XwXmfdSPRXPxbz7LHu0VNziyeYAzkCiIjcvnS7WBSJwBh3b5lynhLuGZ-icKIPKLG1_Nge8zb9RKR3x8-eqdE9Z6NZ1eNGz7xHfVQji-8Y3Ly2KhJRTjnC_XVffoO3v2wTAX7vCTKg95DV-fGkRhyk0Etop2L_GVfVQwjhA4X5PZ4rHEGj4_1HhHvnPUbiBjyJo5lqUbQI HTTP/1.1Host: r.email.rdv360.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\alfredo\AppData\Local\Temp\ded9d592-1d18-42d2-ae59-aacf7ad3ea9a.tmp
    Source: classification engineClassification label: mal56.phis.win@27/102@14/108
    Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://r.email.rdv360.com/tr/cl/tl7Wu25UHrnjkn5sfc0vx0u4dtyo0w00PXMuL2iagRDUR4r6sEL0l9C97pb-2sRztT-v8bXx-XwXmfdSPRXPxbz7LHu0VNziyeYAzkCiIjcvnS7WBSJwBh3b5lynhLuGZ-icKIPKLG1_Nge8zb9RKR3x8-eqdE9Z6NZ1eNGz7xHfVQji-8Y3Ly2KhJRTjnC_XVffoO3v2wTAX7vCTKg95DV-fGkRhyk0Etop2L_GVfVQwjhA4X5PZ4rHEGj4_1HhHvnPUbiBjyJo5lqUbQI
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1736,6163712053603421985,875303126275118539,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:8
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1736,6163712053603421985,875303126275118539,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:8
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
    Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-62ED2CFD-1AC8.pma
    Source: Window RecorderWindow detected: More than 3 window changes detected

    Mitre Att&ck Matrix

    Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
    Valid AccountsWindows Management InstrumentationPath Interception1
    Process Injection    		1
    Masquerading    		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local SystemExfiltration Over Other Network Medium2
    Encrypted Channel    		Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
    Default AccountsScheduled Task/JobBoot or Logon Initialization Scripts1
    Extra Window Memory Injection    		1
    Process Injection    		LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaExfiltration Over Bluetooth2
    Non-Application Layer Protocol    		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
    Domain AccountsAt (Linux)Logon Script (Windows)Logon Script (Windows)1
    Extra Window Memory Injection    		Security Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared DriveAutomated Exfiltration3
    Application Layer Protocol    		Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
    Local AccountsAt (Windows)Logon Script (Mac)Logon Script (Mac)Binary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput CaptureScheduled Transfer1
    Ingress Tool Transfer    		SIM Card SwapCarrier Billing Fraud

    Screenshots

    Thumbnails

    This section contains all screenshots as thumbnails, including those not shown in the slideshow.


    windows-stand

    Antivirus, Machine Learning and Genetic Malware Detection

    Initial Sample

    SourceDetectionScannerLabelLink
    http://r.email.rdv360.com/tr/cl/tl7Wu25UHrnjkn5sfc0vx0u4dtyo0w00PXMuL2iagRDUR4r6sEL0l9C97pb-2sRztT-v8bXx-XwXmfdSPRXPxbz7LHu0VNziyeYAzkCiIjcvnS7WBSJwBh3b5lynhLuGZ-icKIPKLG1_Nge8zb9RKR3x8-eqdE9Z6NZ1eNGz7xHfVQji-8Y3Ly2KhJRTjnC_XVffoO3v2wTAX7vCTKg95DV-fGkRhyk0Etop2L_GVfVQwjhA4X5PZ4rHEGj4_1HhHvnPUbiBjyJo5lqUbQI0%Avira URL Cloudsafe

    Dropped Files

    ⊘No Antivirus matches

    Unpacked PE Files

    ⊘No Antivirus matches

    Domains

    SourceDetectionScannerLabelLink
    r1.mailin.fr0%VirustotalBrowse
    static.cloudflareinsights.com0%VirustotalBrowse

    URLs

    ⊘No Antivirus matches

    Domains and IPs

    Contacted Domains

    NameIPActiveMaliciousAntivirus DetectionReputation
    i.picsum.photos
    		104.26.5.30
    		truefalse
      		high
      r1.mailin.fr
      		185.107.232.127
      		truefalseunknown
      static.cloudflareinsights.com
      		172.64.156.26
      		truefalseunknown
      accounts.google.com
      		142.250.184.205
      		truefalse
        		high
        in-automate.sendinblue.com
        		104.17.10.12
        		truefalse
          		high
          luxury-figolla-aa6075.netlify.app
          		34.159.25.198
          		truefalse
            		unknown
            ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com
            		5.101.110.225
            		truefalse
              		high
              clients.l.google.com
              		142.250.185.206
              		truefalse
                		high
                sibautomation.com
                		104.18.34.145
                		truefalse
                  		high
                  ck7gx3my.allanovarygroup.com
                  		95.111.231.164
                  		truefalse
                    		unknown
                    cstaticdun.126.net.w.kunluncan.com
                    		163.181.56.174
                    		truefalse
                      		unknown
                      picsum.photos
                      		172.67.74.163
                      		truefalse
                        		high
                        clients2.google.com
                        		unknown
                        		unknownfalse
                          		high
                          r.email.rdv360.com
                          		unknown
                          		unknownfalse
                            		unknown
                            cstaticdun.126.net
                            		unknown
                            		unknownfalse
                              		high

                              Contacted URLs

                              NameMaliciousAntivirus DetectionReputation
                              https://ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.com/outlook.html#gauthier.bondue@bgl.lufalse
                                		high
                                https://ck7gx3my.allanovarygroup.com/1FR6#gauthier.bondue@bgl.lutrue
                                  		unknown

                                  World Map of Contacted IPs

                                  • No. of IPs < 25%
                                  • 25% < No. of IPs < 50%
                                  • 50% < No. of IPs < 75%
                                  • 75% < No. of IPs

                                  Public IPs

                                  IPDomainCountryFlagASNASN NameMalicious
                                  104.26.5.30
                                  		i.picsum.photosUnited States
                                  		13335CLOUDFLARENETUSfalse
                                  142.250.185.206
                                  		clients.l.google.comUnited States
                                  		15169GOOGLEUSfalse
                                  34.104.35.123
                                  		unknownUnited States
                                  		15169GOOGLEUSfalse
                                  172.64.156.26
                                  		static.cloudflareinsights.comUnited States
                                  		13335CLOUDFLARENETUSfalse
                                  5.101.110.225
                                  		ppxtnknhsgcfghkqjzproje.ams3.digitaloceanspaces.comNetherlands
                                  		14061DIGITALOCEAN-ASNUSfalse
                                  104.18.34.145
                                  		sibautomation.comUnited States
                                  		13335CLOUDFLARENETUSfalse
                                  104.17.10.12
                                  		in-automate.sendinblue.comUnited States
                                  		13335CLOUDFLARENETUSfalse
                                  142.250.186.106
                                  		unknownUnited States
                                  		15169GOOGLEUSfalse
                                  239.255.255.250
                                  		unknownReserved
                                  		unknownunknownfalse
                                  163.181.56.174
                                  		cstaticdun.126.net.w.kunluncan.comUnited States
                                  		24429TAOBAOZhejiangTaobaoNetworkCoLtdCNfalse
                                  142.250.185.163
                                  		unknownUnited States
                                  		15169GOOGLEUSfalse
                                  142.251.36.35
                                  		unknownUnited States
                                  		15169GOOGLEUSfalse
                                  172.217.168.195
                                  		unknownUnited States
                                  		15169GOOGLEUSfalse
                                  185.107.232.127
                                  		r1.mailin.frFrance
                                  		200484SENDINBLUE-ASNFRfalse
                                  142.250.184.205
                                  		accounts.google.comUnited States
                                  		15169GOOGLEUSfalse
                                  95.111.231.164
                                  		ck7gx3my.allanovarygroup.comUkraine
                                  		51167CONTABODEfalse
                                  34.159.25.198
                                  		luxury-figolla-aa6075.netlify.appUnited States
                                  		2686ATGS-MMD-ASUSfalse
                                  172.67.74.163
                                  		picsum.photosUnited States
                                  		13335CLOUDFLARENETUSfalse

                                  Private

                                  IP
                                  192.168.2.1
                                  127.0.0.1

                                  General Information

                                  Joe Sandbox Version:35.0.0 Citrine
                                  Analysis ID:679059
                                  Start date and time: 05/08/202207:44:472022-08-05 07:44:47 +02:00
                                  Joe Sandbox Product:CloudBasic
                                  Hypervisor based Inspection enabled:false
                                  Report type:full
                                  Cookbook file name:defaultwindowsinteractivecookbook.jbs
                                  Sample URL:http://r.email.rdv360.com/tr/cl/tl7Wu25UHrnjkn5sfc0vx0u4dtyo0w00PXMuL2iagRDUR4r6sEL0l9C97pb-2sRztT-v8bXx-XwXmfdSPRXPxbz7LHu0VNziyeYAzkCiIjcvnS7WBSJwBh3b5lynhLuGZ-icKIPKLG1_Nge8zb9RKR3x8-eqdE9Z6NZ1eNGz7xHfVQji-8Y3Ly2KhJRTjnC_XVffoO3v2wTAX7vCTKg95DV-fGkRhyk0Etop2L_GVfVQwjhA4X5PZ4rHEGj4_1HhHvnPUbiBjyJo5lqUbQI
                                  Number of analysed new started processes analysed:17
                                  Number of new started drivers analysed:0
                                  Number of existing processes analysed:0
                                  Number of existing drivers analysed:0
                                  Number of injected processes analysed:0
                                  Technologies:
                                  • EGA enabled
                                  Analysis Mode:stream
                                  Analysis stop reason:Timeout
                                  Detection:MAL
                                  Classification:mal56.phis.win@27/102@14/108
                                  Cookbook Comments:
                                  • Adjust boot time
                                  • Enable AMSI

                                  Warnings

                                  • Exclude process from analysis (whitelisted): CompPkgSrv.exe, SIHClient.exe, svchost.exe
                                  • Excluded IPs from analysis (whitelisted): 142.251.36.35, 34.104.35.123
                                  • Excluded domains from analysis (whitelisted): fs.microsoft.com, edgedl.me.gvt1.com, login.live.com, slscr.update.microsoft.com, clientservices.googleapis.com, nexusrules.officeapps.live.com
                                  • Not all processes where analyzed, report is missing behavior information
                                  • Report size getting too big, too many NtOpenFile calls found.
                                  • Report size getting too big, too many NtSetInformationFile calls found.
                                  • VT rate limit hit for: cstaticdun.126.net.w.kunluncan.com

                                  Created / dropped Files

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\8645a63b-c89f-4e4a-b9fc-17802b379337.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):115640
                                  Entropy (8bit):6.033215378695376
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:363DCB73D3F4EDB32656828FB472EC94
                                  SHA1:8CCDF74DDCD7599CF8066D00296731EA71409BF4
                                  SHA-256:391C70638934CC420F684F0B9C4970D50961209D97DA026DFF499F5E4CF4AA22
                                  SHA-512:DD0CEC45A5384045D631D9CE97A11889A3CC381ADC2233F39BA80A29B5F5DF06351DC71FC4A7AB1F357D18DD82245D8EFB79CBFD0E4781A1586C5A9936BE3EE0
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.659710721059073e+12,"network":1.659678322e+12,"ticks":169969588.0,"uncertainty":2501466.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABBQ7WxpM2gT7fMNkY5iRxkAAAAAAIAAAAAABBmAAAAAQAAIAAAALDWDwoLRYqp0NkiPsTxUN2QcOPsitaJrdacpo+ULE2PAAAAAA6AAAAAAgAAIAAAAOIeKQBWbQSCqXv1OSNS2lIZGHfAdJRwvbkapN4/FWvwMAAAAPz8I/w07KQb4Ut8ObsBGVgFwbuU88R362cCGZpNEtOEILJDMaKWOA4Y9ejBRTt5kEAAAADq8RkIezfgqGPgEaEMkhoGd9qhyBeyucXcRUPEI7mgYIxaDt8C5FJrjkEhV5EOUcUmR2SCzqYelImLnfOlbhRQ"},"policy":{"last_statistics_update":"13304184318402258"},"profile":{"info_cache":{"Default":{"active_time":1659710720.125924,"avatar_icon":"chrom

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:data
                                  Category:dropped
                                  Size (bytes):40
                                  Entropy (8bit):3.254162526001658
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:FA7200D6F80CD1757911C45559E59C0E
                                  SHA1:89C6E99BAEC4EBB3E9A97B928FB473D1498EBA88
                                  SHA-256:D9779EA4D6DD544A23C2A1C53146B6A4E596927F47DFA0680B0A7EE751D43BB2
                                  SHA-512:71D9B2DA8EAF404063D918812BA61C3EFB6A23A283B0332180A38C8137FBB21D7977C008D5A57A74469776945CD4ED42C0BCC09F923EDEC52D8F7FE90FA2D104
                                  Malicious:false
                                  Reputation:low
                                  Preview:sdPC.....................A.>'..M..,.,.-.

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\10b1ee98-af52-49be-a5ff-99c76172e7c2.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):18568
                                  Entropy (8bit):5.558035963286391
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:E2ABF93CAC16410217E43EE3C03B7C40
                                  SHA1:323E72C2442561933F48BC9955A8E85CECFE0F5D
                                  SHA-256:93006884E1FAF50897DE3DDFBB33A03DF1F9B9C78BF5C5ACD53DB2354BC2E691
                                  SHA-512:516459355D45306E3AFDE9B076A87C07F9056F5FE7FD5A225DC34A7586D665FBC0165352BC5C61DBA96DFA0BE2377EDCAF113AC9B4521A051CD7A05F55791B48
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13304184318935147","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\9f5cfa59-9490-4d17-b164-dd1fa50c2cc4.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:very short file (no magic)
                                  Category:dropped
                                  Size (bytes):1
                                  Entropy (8bit):0.0
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:5058F1AF8388633F609CADB75A75DC9D
                                  SHA1:3A52CE780950D4D969792A2559CD519D7EE8C727
                                  SHA-256:CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
                                  SHA-512:0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
                                  Malicious:false
                                  Reputation:low
                                  Preview:.

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:data
                                  Category:dropped
                                  Size (bytes):1851
                                  Entropy (8bit):6.066553269874225
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:629CF74527876263B18C9C871752DF1F
                                  SHA1:64023E3ECCCC0B115E32932165D28B06FFD6A493
                                  SHA-256:3E2455202EAFB424D621D15028B3D3D8E7E5CE070DDB870666D24971BFD12C10
                                  SHA-512:E1C9161AEDEE68A148A13577185E59C4218E844B70B0226F57434D5BA09C5A81738094D510F37A0E76B59F037324CF7A75E252B4CC28C3384E18FD73CA8E4E95
                                  Malicious:false
                                  Reputation:low
                                  Preview:............"......1hhhvnpubibjyjo5lqubqi..2srztt..8y3ly2khjrtjnc..cl..com..email..eqde9z6nz1engz7xhfvqji..fgkrhyk0etop2l..gvfvqwjha4x5pz4rhegj4..http..ickipklg1..nge8zb9rkr3x8..r..rdv360..redirection.;tl7wu25uhrnjkn5sfc0vx0u4dtyo0w00pxmul2iagrdur4r6sel0l9c97pb..tr..v8bxx..xvffoo3v2wtax7vctkg95dv.8xwxmfdsprxpxbz7lhu0vnziyeyazkciijcvns7wbsjwbh3b5lynhlugz*........1hhhvnpubibjyjo5lqubqi......2srztt......8y3ly2khjrtjnc......cl......com......email......eqde9z6nz1engz7xhfvqji......fgkrhyk0etop2l......gvfvqwjha4x5pz4rhegj4......http......ickipklg1......nge8zb9rkr3x8......r......rdv360......redirection...?.;tl7wu25uhrnjkn5sfc0vx0u4dtyo0w00pxmul2iagrdur4r6sel0l9c97pb......tr......v8bxx......xvffoo3v2wtax7vctkg95dv...<.8xwxmfdsprxpxbz7lhu0vnziyeyazkciijcvns7wbsjwbh3b5lynhlugz..2...$.....0...........1..........2............3............4.........5............6..........7...........8..........9...........a............b............c...............d.............e...............f.............g......

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):3343
                                  Entropy (8bit):4.945222848960228
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:CAB8BEABE7E66A4015C98A3C77B3698B
                                  SHA1:C960AAAEA7014E105290C7D0F09BFCA837C8E8CC
                                  SHA-256:75431010BFE77818B8BEF4B0C4B328C00668DC6B13C09AAB769EBF58BDA4EDF7
                                  SHA-512:0D1E94E84294AEA4BF400FF9D0654748BFFEB92D3A1643A6A13B541ADB1BC13EA2F649560A27C8CC3D8AEF9DA5D6B668C7E3BE696091CE882A475B91A9A4CAC8
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3-29"],"expiration":"13270230891381309","port":443,"protocol_str":"quic"},{"advertised_alpns":["h3-Q050"],"expiration":"13270230891381310","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":39697},"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3-29"],"expiration":"13270230887958662","port":443,"protocol_str":"quic"},{"advertised_alpns":["h3-Q050"],"expiration":"13270230887958664","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":52163},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3-29"],"expiration":"13270230886326794","port":443,"protocol_str":"quic"},{"advertised_alpns":["h3-Q050"],"expiration":"13270230886326795","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://clients2.google.com","supports_spdy

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):7274
                                  Entropy (8bit):5.022191314260278
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:F7BB59319B62B91B56E6E078E7FB3DB4
                                  SHA1:405FECF5D6E9345778B725B1AF69E0E6615A11AF
                                  SHA-256:7DDDF5D64EBCFBC5CA4634684D7E56D7F7BB73A4D2DF8BF46D1A01BBE8BA8F69
                                  SHA-512:E99B9F3031A8ADD35ECCF86094F9081E4F9DA6E00264806C6E04848121F51BBD0210DA5364E47E5073463373876C84926845CC85AF19120FF387C6928A58BC76
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13304184320283643","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13267638885244271","autocomplete":{"retention_policy_last_version":92},"autofill":{"orphan_rows_removed":true},"bookmark_bar":{"show_on_all_tabs":false},"browser":{"has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1490045"],"daily_received_length":["0","0","0","0","0","0","0","0","0","0","0","0"

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):16479
                                  Entropy (8bit):5.570618165536764
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:5A0C97A8B8BACB5FF889FB4E5E5B908E
                                  SHA1:96D86CB2353F82C0B8CE4E06082C52FCB8F7416B
                                  SHA-256:1B9394796883BFC2D6A87E7713B241D02C31AC83576940729C9C6C37D4688376
                                  SHA-512:68B32FC02AEB2A82B535273F2943CB272081CFD181E994B1D903514B9CD1D3684665AD4EB72CB076F63F8C8E7CD3EC920CD77EA623902977012D9C0687F38880
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13304184318935147","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:data
                                  Category:dropped
                                  Size (bytes):270336
                                  Entropy (8bit):0.0012471779557650352
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:F50F89A0A91564D0B8A211F8921AA7DE
                                  SHA1:112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
                                  SHA-256:B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
                                  SHA-512:BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
                                  Malicious:false
                                  Reputation:low
                                  Preview:........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000001.dbtmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text
                                  Category:dropped
                                  Size (bytes):16
                                  Entropy (8bit):3.2743974703476995
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:46295CAC801E5D4857D09837238A6394
                                  SHA1:44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
                                  SHA-256:0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
                                  SHA-512:8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
                                  Malicious:false
                                  Reputation:low
                                  Preview:MANIFEST-000001.

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\CURRENT (copy)

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text
                                  Category:dropped
                                  Size (bytes):16
                                  Entropy (8bit):3.2743974703476995
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:46295CAC801E5D4857D09837238A6394
                                  SHA1:44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
                                  SHA-256:0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
                                  SHA-512:8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
                                  Malicious:false
                                  Reputation:low
                                  Preview:MANIFEST-000001.

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\MANIFEST-000001

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:PGP\011Secret Key -
                                  Category:dropped
                                  Size (bytes):41
                                  Entropy (8bit):4.704993772857998
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:5AF87DFD673BA2115E2FCF5CFDB727AB
                                  SHA1:D5B5BBF396DC291274584EF71F444F420B6056F1
                                  SHA-256:F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
                                  SHA-512:DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
                                  Malicious:false
                                  Reputation:low
                                  Preview:.|.."....leveldb.BytewiseComparator......

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\af5b532a-5c7c-4ed4-aa0e-c0287454b618.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):6507
                                  Entropy (8bit):4.9843357905936525
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:7B3DE715AEC730279554A5323893BC91
                                  SHA1:EA7C5EC0228833B24710ACBD02A75EA9ABED533D
                                  SHA-256:7B145576B6BC2E714E889931590318B1368CCCADAD732D110270CC7D7A875831
                                  SHA-512:6A30646569731AABCD57BC16D575B3527711855C1A60C604EF9F1F038A0CF76BB7760A0745A780C683224398D44B34BD3B1E65402CBD5C9CF074D61CAC79242A
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13304184320283643","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13267638885244271","autocomplete":{"retention_policy_last_version":91},"autofill":{"orphan_rows_removed":true},"bookmark_bar":{"show_on_all_tabs":false},"browser":{"has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1490045"],"daily_received_length":["0","0","0","0","0","0","0","0","0","0","0","0"

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\b8e6063e-f40a-4191-a32f-81239d33f47f.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):6507
                                  Entropy (8bit):4.984169044893014
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:EEBF0911C32BE70580C578FBC9709961
                                  SHA1:568C14070AE0F4EE5F20CF3753D8A47480E4D57A
                                  SHA-256:8CD7C39D7A688F5BC62848DBBC55B32D3AD22190C98D688C9C4756FA470C19B2
                                  SHA-512:255DDCFD1AB2B9AD85F5A201CD376B9478D916359CDBD9F984C99F2EB084CFC6139E820319B6829B97C0E5106F4477703854F0EFC8C7516F75C01E7ABB18073D
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13304184320283643","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13267638885244271","autocomplete":{"retention_policy_last_version":91},"autofill":{"orphan_rows_removed":true},"bookmark_bar":{"show_on_all_tabs":false},"browser":{"has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1490045"],"daily_received_length":["0","0","0","0","0","0","0","0","0","0","0","0"

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\c943f0bc-03eb-4c79-9c8e-35d93d414d10.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):16479
                                  Entropy (8bit):5.570618165536764
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:5A0C97A8B8BACB5FF889FB4E5E5B908E
                                  SHA1:96D86CB2353F82C0B8CE4E06082C52FCB8F7416B
                                  SHA-256:1B9394796883BFC2D6A87E7713B241D02C31AC83576940729C9C6C37D4688376
                                  SHA-512:68B32FC02AEB2A82B535273F2943CB272081CFD181E994B1D903514B9CD1D3684665AD4EB72CB076F63F8C8E7CD3EC920CD77EA623902977012D9C0687F38880
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13304184318935147","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\cc3d9904-db0e-4903-a2da-5e45719d82c3.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):7274
                                  Entropy (8bit):5.022191314260278
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:F7BB59319B62B91B56E6E078E7FB3DB4
                                  SHA1:405FECF5D6E9345778B725B1AF69E0E6615A11AF
                                  SHA-256:7DDDF5D64EBCFBC5CA4634684D7E56D7F7BB73A4D2DF8BF46D1A01BBE8BA8F69
                                  SHA-512:E99B9F3031A8ADD35ECCF86094F9081E4F9DA6E00264806C6E04848121F51BBD0210DA5364E47E5073463373876C84926845CC85AF19120FF387C6928A58BC76
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"account_id_migration_state":2,"account_tracker_service_last_update":"13304184320283643","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13267638885244271","autocomplete":{"retention_policy_last_version":92},"autofill":{"orphan_rows_removed":true},"bookmark_bar":{"show_on_all_tabs":false},"browser":{"has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","1490045"],"daily_received_length":["0","0","0","0","0","0","0","0","0","0","0","0"

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000006.dbtmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text
                                  Category:dropped
                                  Size (bytes):16
                                  Entropy (8bit):3.2743974703476995
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:AEFD77F47FB84FAE5EA194496B44C67A
                                  SHA1:DCFBB6A5B8D05662C4858664F81693BB7F803B82
                                  SHA-256:4166BF17B2DA789B0D0CC5C74203041D98005F5D4EF88C27E8281E00148CD611
                                  SHA-512:B733D502138821948267A8B27401D7C0751E590E1298FDA1428E663CCD02F55D0D2446FF4BC265BDCDC61F952D13C01524A5341BC86AFC3C2CDE1D8589B2E1C3
                                  Malicious:false
                                  Reputation:low
                                  Preview:MANIFEST-000006.

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\e1468f54-7fa4-4cf0-af29-cf0ba2d1888c.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):3343
                                  Entropy (8bit):4.945222848960228
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:CAB8BEABE7E66A4015C98A3C77B3698B
                                  SHA1:C960AAAEA7014E105290C7D0F09BFCA837C8E8CC
                                  SHA-256:75431010BFE77818B8BEF4B0C4B328C00668DC6B13C09AAB769EBF58BDA4EDF7
                                  SHA-512:0D1E94E84294AEA4BF400FF9D0654748BFFEB92D3A1643A6A13B541ADB1BC13EA2F649560A27C8CC3D8AEF9DA5D6B668C7E3BE696091CE882A475B91A9A4CAC8
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3-29"],"expiration":"13270230891381309","port":443,"protocol_str":"quic"},{"advertised_alpns":["h3-Q050"],"expiration":"13270230891381310","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":39697},"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3-29"],"expiration":"13270230887958662","port":443,"protocol_str":"quic"},{"advertised_alpns":["h3-Q050"],"expiration":"13270230887958664","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":52163},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3-29"],"expiration":"13270230886326794","port":443,"protocol_str":"quic"},{"advertised_alpns":["h3-Q050"],"expiration":"13270230886326795","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://clients2.google.com","supports_spdy

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Default\fd6733c6-5db5-415f-9ea9-ef139ee21343.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):15765
                                  Entropy (8bit):5.573419052514717
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:0EF05FBD2D655223E8155231DF207A6D
                                  SHA1:88154E434B4DE44D305A17FDBFAD7203EB5AAD71
                                  SHA-256:244C2BCACE442602870C147E6B0EC13DB60C9FB60B1F7D6149C50529277911B9
                                  SHA-512:0D17C2368C718EADE83124CF778D6F003BD4D6C77F34F13FD41B7B81BDC2351F863FAEF1E8EB1F19A69D2FECB0F39B18A2DEADA6C468080EB840ADA28CA7C9B7
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13304184318935147","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_i

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Last Browser

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:data
                                  Category:dropped
                                  Size (bytes):106
                                  Entropy (8bit):3.138546519832722
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:DE9EF0C5BCC012A3A1131988DEE272D8
                                  SHA1:FA9CCBDC969AC9E1474FCE773234B28D50951CD8
                                  SHA-256:3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
                                  SHA-512:CEA946EBEADFE6BE65E33EDFF6C68953A84EC2E2410884E12F406CAC1E6C8A0793180433A7EF7CE097B24EA78A1FDBB4E3B3D9CDF1A827AB6FF5605DA3691724
                                  Malicious:false
                                  Reputation:low
                                  Preview:C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Last Version

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with no line terminators
                                  Category:dropped
                                  Size (bytes):13
                                  Entropy (8bit):2.873140679513133
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:3A0E5D4F452CF99191634D0FFAB744A0
                                  SHA1:F115BBB898EEFF640D8D19AD44A86C3FCDFFC0AD
                                  SHA-256:B9D528D3AE283039F4700C7E4E790744C58A26353A91B536DD91CBA4F648A35F
                                  SHA-512:87BF9DB30598EC454A02A4A32E5458E83870524D4AA497CB167C8A92B7521204B7B75E2BE18D61F9FBE51CA7DE8E35782AA65E6F6F11E4A4926A9B6C85D6528A
                                  Malicious:false
                                  Reputation:low
                                  Preview:92.0.4515.107

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Local State (copy)

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):115640
                                  Entropy (8bit):6.033215378695376
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:363DCB73D3F4EDB32656828FB472EC94
                                  SHA1:8CCDF74DDCD7599CF8066D00296731EA71409BF4
                                  SHA-256:391C70638934CC420F684F0B9C4970D50961209D97DA026DFF499F5E4CF4AA22
                                  SHA-512:DD0CEC45A5384045D631D9CE97A11889A3CC381ADC2233F39BA80A29B5F5DF06351DC71FC4A7AB1F357D18DD82245D8EFB79CBFD0E4781A1586C5A9936BE3EE0
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.659710721059073e+12,"network":1.659678322e+12,"ticks":169969588.0,"uncertainty":2501466.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABBQ7WxpM2gT7fMNkY5iRxkAAAAAAIAAAAAABBmAAAAAQAAIAAAALDWDwoLRYqp0NkiPsTxUN2QcOPsitaJrdacpo+ULE2PAAAAAA6AAAAAAgAAIAAAAOIeKQBWbQSCqXv1OSNS2lIZGHfAdJRwvbkapN4/FWvwMAAAAPz8I/w07KQb4Ut8ObsBGVgFwbuU88R362cCGZpNEtOEILJDMaKWOA4Y9ejBRTt5kEAAAADq8RkIezfgqGPgEaEMkhoGd9qhyBeyucXcRUPEI7mgYIxaDt8C5FJrjkEhV5EOUcUmR2SCzqYelImLnfOlbhRQ"},"policy":{"last_statistics_update":"13304184318402258"},"profile":{"info_cache":{"Default":{"active_time":1659710720.125924,"avatar_icon":"chrom

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:data
                                  Category:dropped
                                  Size (bytes):94804
                                  Entropy (8bit):3.756573048083645
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:F23CC30688A79E30AF656F6995974DF8
                                  SHA1:992FC4B687E6B297E998C55793DB7733C87830A4
                                  SHA-256:BF7BBFCF8845FF0A43712398AD6B50AD51B5E7E7BC3233FBB798E43C30CCD16A
                                  SHA-512:A12C565782B75237E3090091C12352411BAF50828E2DFC0A0A3586B0BEEA03A6C33C4294E70A3D90DD366EAE67974248AD0808C674173F596BE18D4163172DD8
                                  Malicious:false
                                  Reputation:low
                                  Preview:Pr..............T...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.F.i.l.e.S.y.n.c.S.h.e.l.l.6.4...d.l.l.......puA...c.:.\.p.r.o.g.r.a.m. .f.i.l.e.s. .(.x.8.6.).\.m.i.c.r.o.s.o.f.t. .o.n.e.d.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.......f.i.l.e.s.y.n.c.s.h.e.l.l.6.4...d.l.l.......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e."...M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n.....2.1...0.8.3...0.4.2.5...0.0.0.3.....T...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.F.i.l.e.S.y.n.c.S.h.e.l.l.6.4...d.l.l.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....c8. ...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.7.-.Z.i.p.\.7.-.z.i.p...d.l.l.......n\....%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.7.-.z.i.p.\.......7.-.z.i.p...d.l.l.......7.-.Z.i.p.......7.-.Z.i.p. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n.......1.9...0.0................c8.....

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\b4314e89-ab34-47c9-a3c2-0f86a056dd7f.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:data
                                  Category:dropped
                                  Size (bytes):94804
                                  Entropy (8bit):3.756573048083645
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:F23CC30688A79E30AF656F6995974DF8
                                  SHA1:992FC4B687E6B297E998C55793DB7733C87830A4
                                  SHA-256:BF7BBFCF8845FF0A43712398AD6B50AD51B5E7E7BC3233FBB798E43C30CCD16A
                                  SHA-512:A12C565782B75237E3090091C12352411BAF50828E2DFC0A0A3586B0BEEA03A6C33C4294E70A3D90DD366EAE67974248AD0808C674173F596BE18D4163172DD8
                                  Malicious:false
                                  Reputation:low
                                  Preview:Pr..............T...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.F.i.l.e.S.y.n.c.S.h.e.l.l.6.4...d.l.l.......puA...c.:.\.p.r.o.g.r.a.m. .f.i.l.e.s. .(.x.8.6.).\.m.i.c.r.o.s.o.f.t. .o.n.e.d.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.......f.i.l.e.s.y.n.c.s.h.e.l.l.6.4...d.l.l.......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e."...M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n.....2.1...0.8.3...0.4.2.5...0.0.0.3.....T...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e.\.2.1...0.8.3...0.4.2.5...0.0.0.3.\.a.m.d.6.4.\.F.i.l.e.S.y.n.c.S.h.e.l.l.6.4...d.l.l.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....c8. ...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.7.-.Z.i.p.\.7.-.z.i.p...d.l.l.......n\....%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.7.-.z.i.p.\.......7.-.z.i.p...d.l.l.......7.-.Z.i.p.......7.-.Z.i.p. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n.......1.9...0.0................c8.....

                                  C:\Users\alfredo\AppData\Local\Google\Chrome\User Data\c1be3794-cd03-48a9-9630-d22f0ecb81f5.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):115621
                                  Entropy (8bit):6.032923897710206
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:09FB5AB3F4CCD267B1CE3A133E5BF5CC
                                  SHA1:6D574C4A76BFEA9C648D92BEBC33B343CE53B2E5
                                  SHA-256:9A584F9E4F7E12E20E0694F4B5BAD39481EDCBB64E491DD8FFBD107BF18EBEC9
                                  SHA-512:562DABF8A1D72CA7ECDA7B5714FFC424057226C7EAE008F7A95C97F23E22DAF71CC2428BF9A65F5CE49243AA2DBCC02639892CD9268D40EEC4194CD9461BDDE6
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.659710721059073e+12,"network":1.659678322e+12,"ticks":169969588.0,"uncertainty":2501466.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABBQ7WxpM2gT7fMNkY5iRxkAAAAAAIAAAAAABBmAAAAAQAAIAAAALDWDwoLRYqp0NkiPsTxUN2QcOPsitaJrdacpo+ULE2PAAAAAA6AAAAAAgAAIAAAAOIeKQBWbQSCqXv1OSNS2lIZGHfAdJRwvbkapN4/FWvwMAAAAPz8I/w07KQb4Ut8ObsBGVgFwbuU88R362cCGZpNEtOEILJDMaKWOA4Y9ejBRTt5kEAAAADq8RkIezfgqGPgEaEMkhoGd9qhyBeyucXcRUPEI7mgYIxaDt8C5FJrjkEhV5EOUcUmR2SCzqYelImLnfOlbhRQ"},"policy":{"last_statistics_update":"13304184318402258"},"profile":{"info_cache":{"Default":{"active_time":1659710720.125924,"avatar_icon":"chrom

                                  C:\Users\alfredo\AppData\Local\Temp\2eb87601-7b5e-475d-83a1-a92bdaf100a5.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
                                  Category:dropped
                                  Size (bytes):5168
                                  Entropy (8bit):7.956694278195136
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:3E5CCD9B583763AF68E28C5101373167
                                  SHA1:2005CDC0A8070B65E321A197D576698ECC267496
                                  SHA-256:41412C0863920BA95E9FDBD3AF000CBE926A73C078997A233DF55379A5C4D274
                                  SHA-512:04BF4F7320326B085C40527797577D8770A30A1ED24A8587A000A5AE1D8F39E0B7F187DB14603295AC7A2901A4698683CC3BED2C2611539293A1927AB31BEAE1
                                  Malicious:false
                                  Reputation:low
                                  Preview:...........[ks.8..._.........#..,.G..8.;.55;.%..&5$e...... )..d.._...%.....s.....+..Uv}...]rq......luK.).zJh..3.&..Uu...W...s.H. .MV..\U3Ef.\.|...TU.9.z )I...u.+.g3U`Zs.6d...JiJ.rU.IV.".'L|8.d..j.J..q.....O."..<,...n...~|E.dV.u.O..'"...e.uyJ?..?]~.?.......M.,.7...j.,.fz].. >+o.gz....<^(5.Jg_.Ap.U.i............?.8....,..*.*./.iQ..8......A.DO/....?.~..N.~a.-..g.N~.......o.^...L.mW.]:{....../........[VkTu[wki.gK...;-.<...\.".3]..}V...)9i.V.P="m?......V.i...7..S.U.d..(..\....g....bU.....}........P9$.A...N..ckV..Qz..A....7..{pd.f.7....}6on.....7J;...Y..l>W...H.Z.........j.......Wk9vj+V.W.zAm.....P.oYo..|........}.g.^.p...Z....l%cT|LN3..H......{...~.J.%.!k.(.)..."....q.%.V.. d..MZ.`......o..m3....1.../..jeH........Q....X...j..o..|.o.r..nVw._...9 .......o...l....!...{....xU5..}.x.I..3.vT%z.k..o..........^.S*.t(....+r\.u<...G.`.........g...r..?...}7.=.....c~.F.e..w.v$sC/.B.p.D~..J...:....7Vl3w...s.-"......]+..KO.~....%.I..?.&.o...\?.9..

                                  C:\Users\alfredo\AppData\Local\Temp\594ac664-0db3-4027-a078-b89a1bb17fa1.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:Google Chrome extension, version 3
                                  Category:dropped
                                  Size (bytes):248531
                                  Entropy (8bit):7.963657412635355
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:541F52E24FE1EF9F8E12377A6CCAE0C0
                                  SHA1:189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6
                                  SHA-256:81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
                                  SHA-512:D779D78A15C5EFCA51EBD6B96A7CCB6D718741BDF7D9A37F53B2EB4B98AA1A78BC4CFA57D6E763AAB97276C8F9088940AC0476690D4D46023FF4BF52F3326C88
                                  Malicious:false
                                  Reputation:low
                                  Preview:Cr24..............0.."0...*.H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.|1..n.<Fb..f..*Q1.....s..2..{*.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-*eu...b.........\..F!...b...l5....zJ.q.......L].....w[T0.6....E.....r..%Z.vFm.9..5!,.~g5...;.t...']....+A.....u....k...e..&..l.6r[yU...%..f.......N..V.....<+.....l..}.{...z...)y.n..'..).....,.b....5.08K%..O.g..D.S.F5o..<(....>....\f..X..I..2."l...w....7f|.~.c.4.E.......0..0...*.H............0.......).'..b.*$w\$.q&.]zF_2..;...?.U,...W..L1.2...R..#....W.....c1k.$W..$.J....+M!.Hz.n`U.I)N.|b.l....{.K@]6.LlP/....](.A..................I...).H....IQ.y.;MG.d..ix..#f.Z$|..|.?...0K...t"i..s...Y..%.Ky....0...{.!+.~v.;....J.....Z....).(6..@?v.;~..2..c....[0Y0...*.H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. .0...|!..A..L.+.=...kP.!.1..

                                  C:\Users\alfredo\AppData\Local\Temp\98a516f7-efb9-493e-a565-73796a0815bb.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
                                  Category:dropped
                                  Size (bytes):28748
                                  Entropy (8bit):7.9918576871001425
                                  Encrypted:true
                                  SSDEEP:
                                  MD5:2A37AD0EC191D53104BB46953AC6C43C
                                  SHA1:FD23FFC5B7E4A6B45FBD88A486D15FAA51DC07AE
                                  SHA-256:51F075EB69486CB23B32A0776782B4A1B2AF204429AB94510469E02B115E56CC
                                  SHA-512:AEB91CB7902A800D7B0C43627EC2B52121BC41BA29A1B6ABEDBFCFA4802254A0594ED239EA7A3F8D40241E43D436428D1E4AC117BD97269D78460F82F9BDCF68
                                  Malicious:false
                                  Reputation:low
                                  Preview:...........Zms.6..._..p..[.(.b[...M....N{..t ...S.......v...H.q.g:....]...p..6I8_d...C.\p.X$.2.p.g.8I}8.".D)$<..O...}.J9.3..a.i.'...x.....5O...x......I.M.!.'\.l.2.0.cN.fq....\......7..,......>.p...w&.KS.......(O.V>......O.r..V~J.`....U(..Y..MIy..w..g0e......D.,L..y..N.+..._....O.h.]...V....r................O.|.:....Li..>COy......N.h.......R....Q%.,Xr.y...G8=.A....!8(..L....c....sA....t.Vl:...v...G;...^.l...#.t.>...k..d..kr...B......Pb.0*..!..;9.....:~....j;....j.*O..!B......?....^.]....;...[.g.B...%..'.7;.9.>..gP. p8...:.5l.Y.....Jp..R,.?..b..8O......h.X(..G.).Cz.C..%....x.ET.....AEi.../..0.. ....k.*t...wl..e...H.i.F.....?.....z...?..........(../.O..R.?.4..7...j ..Q.....l..ob!..A..j...@..!).....K...MW.U.N.......W..Bh'8.'.y....Y.[o...PI..W.*...i...r.e..=.k^.WC..Uy.j..687^.z.#u5.4O...........-j.j3..L.1..F...8.......@l.9.c.aGC.R.&..j.Q-av?...[4.E..T8....u..+9.<.n.Qw.D..N..S..3.D...... .%C.j.7.Y.s(.0wq.ZI.#''#..[K.GJ ....4.....?

                                  C:\Users\alfredo\AppData\Local\Temp\9ff474c1-ac36-4ac0-b71a-cd16234876c9.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
                                  Category:dropped
                                  Size (bytes):101891
                                  Entropy (8bit):7.9971613680976565
                                  Encrypted:true
                                  SSDEEP:
                                  MD5:173CA02E5B06065771DEB2F28E4E5A9E
                                  SHA1:20F1774FB280C94C13082A255C27D7A786EFD5C7
                                  SHA-256:634557AE2916F2FAA0CBF2557F8F96E26845ABE94D2784FD73B169EC5618B186
                                  SHA-512:D947E3ED56BE1F3C668943E8F066F39650D2E0D76BF64BAD167E100B8B1066B88D8E851346AFBD9777E90445F41C5108A0A2F1514A3F28F02D4EC39978121E71
                                  Malicious:false
                                  Reputation:low
                                  Preview:............{..0......&xqH.....zyIBv9....=...+......I6....3#.l.@..9.s].W7...h4..H...7.^.........Bg.....`.;.S...P.............z.3.........9~.P..{..-.z........b.:......>..'....I8.......'v.M'E.?bA...N8.'.8I.._...<v&.pT{.L'Ne...#.S!].T.-+...r)5.j.U.8q....X..VPo.....F.o..A.~~.?.w......eNJ..a)....i....:?._^..v.<=ei...i.......Q...8k......~j.c.W......~...Q.yq..^9..z.......S..b.E..L3|.9S.pa...a....5...J.\.2l..s..4.....S.u..o.|.Q.K.0.=........0....xj.4....Mie..C..3..... ..........WN........4Vs.B..N.bD...VK%...mb...{{....pd..7..G.....}.J;"..4,.......A.R|0d..)..M......;;.8.h.C.u..pkM..Z@.......r..U....H...],..l:~p..8`....3....5.*.t../S{.{`.^kB=f......ZR..L.$t..D%I..xB../.{rb..h8.!.........Z.0........{PuK%Vv...RR.*.......j.vw.[B..$..|&..eZEW.Z[&..d>.o......@..t.z.O.12C......Kk..oS.[.0.M...<.zq#*g.r......"0+.[.....Tb.E....F...U..U0...G.........t!.+...&K.@.N.#R.]...+.;.M[..x,...J.l........&y.n.....j>..0.|W.+.S.0X.S.E..L....R.....W.u.g.S.&^.g..N/..

                                  C:\Users\alfredo\AppData\Local\Temp\be885b63-4b7e-4840-a62c-b21cb6c23beb.tmp

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
                                  Category:dropped
                                  Size (bytes):3110
                                  Entropy (8bit):7.933903341619943
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:A83A2746B84F1CF573B02965B72ED592
                                  SHA1:85CC572D6F90029EB99AAFA56297D1BCA494313A
                                  SHA-256:DF4B53C1C7C48E80753D4945E6EC7847084F51BF57F0ED9D341326C74651D6EC
                                  SHA-512:C287F479EF572A06FF191C4E9A8A718507C97A2A45CB265D7DC65DD7922B80D36CE7660EC5D7EA9F3D1F1EF71C51C3E4F3D7973754F97A89B4F14D1B1FDE70DE
                                  Malicious:false
                                  Reputation:low
                                  Preview:............ko.7......J...../..v....... ....zE.\+.T..f..%wW.$........p8/.....z..|a...}.#y.`.l..7Kr..T:'.UE,.&.i..Y............h...B.....gJ....%.\.?.f]1R..@3.jHA..eHi&.Q..`....g.__?'3^...@~X..a8............UN..%...&.F..K19".Y:.).L.L..WL..xxD>.P@ ...&'..j..)%.Q\..<!.3n.<#....;.gd2.LZ....x.m&.e.`&;.KX..."...<G....8.R.jsd....g.)..?.$=UVT...#.+g.!.......R..1..#D.k...3.Bj3iT.....*.M..L....}..S.K.....zi..n.A{......n..o.0j..q...w...3.7.N..].>...zK..sr1#.d..Tk..ckB...<....j.a.M1oe.9.jIQ.y+...6.....]....v.X.......q.....a>...2`.WV.v.'..~.3*.4.'8...hkT.H..9SOIF.%...;n.6.U....i!...2v.9/.;.....R..8.(..L.b....aY2ps% ."...x.V..Y[.h.....^.........U.....p.'.&m.....6..%pWE....:..o.k...<.....5....j.I...*9...f..3.....-..0..D;......*S.td/...........^_.v.)y ..Uf..q>.v2...0....o....Y%5;.5fn..{.......p_......B..V.......D.Y.l....q 3...sm.b..!..E....a. &.w.-.s..>..M_...`.0..k.!<SH...9$.....V.\A$..}..8....#`...,...3.W..k...\..xH.1).~.Y.L1.O...\.....k.....s..i+.....).0

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\bg\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):796
                                  Entropy (8bit):4.864931792423268
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:6F8E288A9AD5B1ED8633B430E2B4D4CA
                                  SHA1:F671D3D4BEFA431D1946D706F4192D44E29B6F08
                                  SHA-256:A114E2783D0E9B12155017323BA70838F0F82A71C7EE8DC1F115AE36991241F8
                                  SHA-512:0F87F3F0D115B872288949E59ACD3CD41B1FBC64A622D8FDA6D71FAFC5A900D92ADFBB0E7EB926F2A8759BBAA0896D48728FB719BBF5EF54AC21027328F7700C
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "........ . ... ........ .. Chrome".. },.. "app_name": {.. "message": "........ . ... ........ .. Chrome".. },.. "craw_app_unavailable": {.. "message": "........... .... ...... .. .............".. },.. "craw_connect_to_network": {.. "message": "...., ........ .. . ......".. },.. "iap_unavailable": {.. "message": "........... .... ...... .. .......... ....... .. .........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "...., ...... . Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\ca\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):675
                                  Entropy (8bit):4.536753193530313
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:1FDAFC926391BD580B655FBAF46ED260
                                  SHA1:C95743C3F43B2B099FEBEBC5BD850F0C20E820AC
                                  SHA-256:C67898B67F9C9209EAFDA6532B62D5789863CFB855998DD6A70E7775316CEC20
                                  SHA-512:39D95D45C5746DA3BAA7AE6A3344EA17D7A7C3569C2A56959FF119261DA08C747A320FCF701AC72B8DBDBF8BF06FD8B239017A282CDDA444F3826D4EC672CBB4
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Sistema de pagaments de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagaments de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Ara mateix aquesta aplicaci. no est. disponible.".. },.. "craw_connect_to_network": {.. "message": "Connecteu-vos a una xarxa.".. },.. "iap_unavailable": {.. "message": "La funci. Pagaments a l'aplicaci. no est. disponible actualment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicieu la sessi. a Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\cs\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):641
                                  Entropy (8bit):4.698608127109193
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:76DEC64ED1556180B452A13C83171883
                                  SHA1:CFB1E56FD587BCDC459C1D9A683B71F9849058F9
                                  SHA-256:32290D69A90E6BAAC428B10382C99221B12773BB9A184F3B93DFB48A4F6D7A40
                                  SHA-512:5230A217968D5DC463E2E92D704544311A721E5CEF65C3125CBD8DEB9C0293D3BFB5C820A6011ABF77095FDEE7DAF67D541DC202B0C9CDB0908CBB85D84885CB
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "app_name": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikace v sou.asn. dob. nen. dostupn..".. },.. "craw_connect_to_network": {.. "message": "P.ipojte se pros.m k s.ti.".. },.. "iap_unavailable": {.. "message": "Platby v aplikaci aktu.ln. nejsou k dispozici.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "P.ihlaste se do Chromu.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\da\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):624
                                  Entropy (8bit):4.5289746475384565
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:238B97A36E411E42FF37CEFAF2927ED1
                                  SHA1:4E47AC90BA24C8F4724D9293FA40CFD4ADA66FE0
                                  SHA-256:4977D4A053542FF66967FAED6B06585DD70E68E20BFEB533B66FE3287F9655D9
                                  SHA-512:FD0742D47B5F5AB9AAD9B4C3D57F63CB693E060EECE123A72036C6E92156D099495C7E9E9CC6DC83EEBCDDCC4B4C81FB47E4C9559DA3EBA024780FFF10C53E0A
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Betalinger i Chrome Webshop".. },.. "app_name": {.. "message": "Betalinger i Chrome Webshop".. },.. "craw_app_unavailable": {.. "message": "Appen er ikke tilg.ngelig i .jeblikket.".. },.. "craw_connect_to_network": {.. "message": "Opret forbindelse til et netv.rk.".. },.. "iap_unavailable": {.. "message": "Betaling i appen er ikke tilg.ngelig i .jeblikket.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Log ind p. Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\de\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):651
                                  Entropy (8bit):4.583694000020627
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:6B3E916E8C1991AA0453CBA00FEDCAAA
                                  SHA1:D6366D15912E40CA107FD42BFE9579C3336A51F9
                                  SHA-256:A62FFAB910E31531758EEE48B2CC71A8857BEC3021DEAD50B668CBA3C8667053
                                  SHA-512:87EA4311B61F29543B13F3E17DFA919D0C320B4FE370CC152E0B1514BCA79B0ABB526DDCF08621D6EBFA48923EE8FB4C667EFB120A72BD9583EEBEE7BFB80552
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Chrome Web Store-Zahlungen".. },.. "app_name": {.. "message": "Chrome Web Store-Zahlungen".. },.. "craw_app_unavailable": {.. "message": "Die App ist momentan nicht verf.gbar.".. },.. "craw_connect_to_network": {.. "message": "Bitte stellen Sie eine Verbindung zu einem Netzwerk her.".. },.. "iap_unavailable": {.. "message": "In-App-Zahlungen sind momentan nicht m.glich.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Bitte melden Sie sich in Chrome an.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\el\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):787
                                  Entropy (8bit):4.973349962793468
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:05C437A322C1148B5F78B2F341339147
                                  SHA1:AB53003A678E44A170E73711FBD9949833BBF3AA
                                  SHA-256:A052C32B4FCAC61152EB0ADB2C260FB6A8256AD104AA0013DB93E9798D41A070
                                  SHA-512:C36CB9202A34356DD06D377E2A088F428D0B8EBE7D2E54F8380485E9D94A0598D7F651C1E7A2FD55BE481D49C02B0812F2BA335E08611EC85EE0BD60784A6B40
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "........ ... Chrome Web Store".. },.. "app_name": {.. "message": "........ ... Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": ". ........ .... .. ..... ... ..... ..........".. },.. "craw_connect_to_network": {.. "message": ".......... .. ... .......".. },.. "iap_unavailable": {.. "message": ".. ........ ..... ......... ... ..... ..... .. ...... ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": ".......... ... Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\en\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):593
                                  Entropy (8bit):4.483686991119526
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:91F5BC87FD478A007EC68C4E8ADF11AC
                                  SHA1:D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6
                                  SHA-256:92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
                                  SHA-512:FDC2A29B04E67DDBBD8FB6E8D2443E46BADCB2B2FB3A850BBD6198CDCCC32EE0BD8A9769D929FEEFE84D1015145E6664AB5FEA114DF5A864CF963BF98A65FFD9
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Chrome Web Store Payments".. },.. "app_name": {.. "message": "Chrome Web Store Payments".. },.. "craw_app_unavailable": {.. "message": "App currently unavailable.".. },.. "craw_connect_to_network": {.. "message": "Please connect to a network.".. },.. "iap_unavailable": {.. "message": "In-App Payments is currently unavailable.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Please sign into Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\es\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):661
                                  Entropy (8bit):4.450938335136508
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:82719BD3999AD66193A9B0BB525F97CD
                                  SHA1:41194D511F1ACC16C1CA828AC81C18C8C6B47287
                                  SHA-256:4DB9B2721E625C18B9E05C04B31AF5D9694712F1CAAF6219ABE34BB08E5DB1C7
                                  SHA-512:D4C49B43427799B6292CEED11CACB1D76F7CE43EBF402B43B638A6EB2B414ED0981E386CB8CDF0B51D1BD9552934FE25B2F6392266BB73D8C9A691F65BCE0128
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "Los pagos en la aplicaci.n no est.n disponibles en este momento.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicia sesi.n en Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\es_419\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):637
                                  Entropy (8bit):4.47253983486615
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:6B2583D8D1C147E36A69A88009CBEBC7
                                  SHA1:4D4DEEB4BE6AA0181825F3371A761ABC5B4D5937
                                  SHA-256:6659BC3705311D7641A73995DCFEA80C7734F2F4EBBC3787B3892A240348324F
                                  SHA-512:37F0DBFCC1B5A2B8E4C92C49D2D9DEEF25616421350324F57E0149A45A6CCB437F5E3CBE97412C4B5DBBF2593783C7DF71E9C25A851AEAE6E4764C545723FA53
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "En este momento, Pagos En-Apps no est. disponible.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Accede a Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\et\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):595
                                  Entropy (8bit):4.467205425399467
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:CFF6CB76EC724B17C1BC920726CB35A7
                                  SHA1:14ED068251D65A840F00C05409D705259D329FFC
                                  SHA-256:C85800BF45942FCC7FD6B1DF929C25F9CC2A977A6678966BD03D4B6B69889AFD
                                  SHA-512:53D7D01BB30C0306DE65A79FD9551D2E8C1F71F4F45F71906B009071CB3E0F231E6A50FDD78773E9B4DE94085BC7B97F829842FA21A89A2080D33458B745C46F
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Chrome'i veebipoe maksed".. },.. "app_name": {.. "message": "Chrome'i veebipoe maksed".. },.. "craw_app_unavailable": {.. "message": "Rakendus pole praegu saadaval.".. },.. "craw_connect_to_network": {.. "message": "Looge .hendus v.rguga.".. },.. "iap_unavailable": {.. "message": "Rakendusesisesed maksed ei ole praegu saadaval.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Logige Chrome'i sisse.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\fi\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):647
                                  Entropy (8bit):4.595421267152647
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:3A01FEE829445C482D1721FF63153D16
                                  SHA1:F3EAAADDC03F943FC88B30B67F534AA13E3336DD
                                  SHA-256:0BDE54B20845124113383B6EB81E43A0F05E4EB0C44BEE3C1DFAC4CC5FEC2836
                                  SHA-512:3B92B6C86D30FD36AA3CEFF8773BA60C3FC5CC19C693540137044C5838A5503895C770C0336A4D0A3DB5E42F3FB36274D8D3F85B9DCA2F3EC0E974FDDB0BEAD8
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Chrome Web Storen maksut".. },.. "app_name": {.. "message": "Chrome Web Storen maksut".. },.. "craw_app_unavailable": {.. "message": "Sovellus ei ole t.ll. hetkell. k.ytett.viss..".. },.. "craw_connect_to_network": {.. "message": "Muodosta verkkoyhteys.".. },.. "iap_unavailable": {.. "message": "Sovelluksen sis.iset maksut eiv.t ole t.ll. hetkell. k.ytett.viss..".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Kirjaudu sis..n Chromeen.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\fil\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):658
                                  Entropy (8bit):4.5231229502550745
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:57AF5B654270A945BDA8053A83353A06
                                  SHA1:EEEF7A4F869F97CF471A05D345E74F982D15E167
                                  SHA-256:EC002ED92359F67818B49455DFC579E140368E6A004080AF022FD4F57F6B03F2
                                  SHA-512:5F0AE839FCF3F4EA48FF41A76655AE0F3821564AFD5D42FBB9FBB9A38E8D8F7BB5E9B6F71064588CD441261F644095A44A755C134CE546D506D9A21E488BAF52
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "app_name": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Kasalukuyang hindi available ang app.".. },.. "craw_connect_to_network": {.. "message": "Mangyaring kumonekta sa isang network.".. },.. "iap_unavailable": {.. "message": "Kasalukuyang hindi available ang Mga Pagbabayad na In-App.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Mangyaring mag-sign in sa Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\fr\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):677
                                  Entropy (8bit):4.552569602149629
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:8D11C90F44A6585B57B933AB38D1FFF8
                                  SHA1:3F9D44EA8807069A32AACA2AAAD02FD892E6CC90
                                  SHA-256:599491F8C52B945C16C441ADF45BFD45AFAE046DA07757D97C56AF4DE75ED3B5
                                  SHA-512:D7EF7F5AD7EF1A1595825D79B69E2B1E988AD3CF1F3881496FCCD30F241E4E9C6E457F9F5D0F855DE3536DB7A40C3E1C55946B50D3F556F4A35285066A0CD6F7
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "app_name": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "craw_app_unavailable": {.. "message": "Application indisponible pour le moment.".. },.. "craw_connect_to_network": {.. "message": "Veuillez vous connecter . un r.seau.".. },.. "iap_unavailable": {.. "message": "Les paiements via l'application ne sont pas disponibles pour le moment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Veuillez vous connecter . Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\hi\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):835
                                  Entropy (8bit):4.791154467711985
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:E376D757C8FD66AC70A7D2D49760B94E
                                  SHA1:1525C5B1312D409604F097768503298EC440CC4D
                                  SHA-256:8106D98C4F8DA16DB698444409558E29CC96735E188BFA303C333A5D99231C1D
                                  SHA-512:673F3F259AF2946E4F49BBED14A2A70D44BF9FDA9D7A71DC9172BA9B7B3C7F7062B16D29682B638D485B0520ED6F99E7A735F28C7C719B539559005B69FA7555
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Chrome ... ..... ......".. },.. "app_name": {.. "message": "Chrome ... ..... ......".. },.. "craw_app_unavailable": {.. "message": "......... .. ... ...... .... ...".. },.. "craw_connect_to_network": {.. "message": "..... ....... .. ...... .....".. },.. "iap_unavailable": {.. "message": "..-.. ...... ... ...... .... ...".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "..... Chrome ... .... .. .....".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\hr\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:UTF-8 Unicode text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):618
                                  Entropy (8bit):4.56999230891419
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:8185D0490C86363602A137F9A261CC50
                                  SHA1:5BD933B874441CEACB9201CCC941FF67BAED6DC0
                                  SHA-256:A2B2EC359A9DD9DCCCE02859CE1E738BD30FAA4A05F1DC522893FFDF722BBC15
                                  SHA-512:D7629978FC031EA5F716F9C1065FB2FEAB48C15F10CD68830DC966FA1002C03DDC7ACDE314C7D075F9F3A0A68552A6ACBCCDEE24CF20B6C3DD1BCE6562D0396E
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app_description": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "app_name": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikacija trenuta.no nije dostupna.".. },.. "craw_connect_to_network": {.. "message": "Pove.ite se s mre.om.".. },.. "iap_unavailable": {.. "message": "Pla.anje u aplikaciji trenuta.no nije dostupno.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prijavite se na Chrome.".. }..}..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\hu\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):612
                                  Entropy (8bit):4.865151680865773
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:4AD92AFDE3408FBBE43B0C3C71677650
                                  SHA1:3488901077F336A3196F9AE116E36DF1674E1ACA
                                  SHA-256:61258FE04C23AE14FDC99EE846CEA71CC703990CC0F80C3934299646E86C475E
                                  SHA-512:EB945FA455DEB9D70033DC0A8AA55D1F47AA00214B70AD34D5419A54F9C05B267F96F9785139F452BEE6972376DDF13EE51C681845A2B0818172FB75BA1FD093
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Az alkalmaz\u00e1s jelenleg nem \u00e9rhet\u0151 el."},"craw_connect_to_network":{"message":"K\u00e9rj\u00fck, csatlakozzon egy h\u00e1l\u00f3zathoz."},"app_name":{"message":"Chrome Internetes \u00e1ruh\u00e1z Fizet\u00e9si rendszere"},"app_description":{"message":"Chrome Internetes \u00e1ruh\u00e1z Fizet\u00e9si rendszere"},"iap_unavailable":{"message":"Az alkalmaz\u00e1son bel\u00fcli fizet\u00e9s jelenleg nem \u00e9rhet\u0151 el."},"please_sign_in":{"message":"Jelentkezzen be a Chrome-ba."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\id\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):461
                                  Entropy (8bit):4.642271834875684
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:9008516AA1D8F8C2B8ECE70B7E4963AD
                                  SHA1:EA7AD4BE77A80A4B9FB1E59A340010830E494747
                                  SHA-256:89CAB0AF2B53C6ABEB93C8C628DDCBDD286A7A2672FE03440411BB654E3A0675
                                  SHA-512:46534829417CAD54310BA90AD4545918A2E934508E0CC3467E367944E52315B1BC6500119214EABD40D641DD167C077935436135AF1C0DB1D1007AE98E6175FC
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Aplikasi tidak tersedia saat ini."},"craw_connect_to_network":{"message":"Sambungkan ke jaringan."},"app_name":{"message":"Pembayaran Chrome Webstore"},"app_description":{"message":"Pembayaran Chrome Webstore"},"iap_unavailable":{"message":"Pembayaran Dalam Aplikasi saat ini tidak tersedia."},"please_sign_in":{"message":"Harap masuk ke Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\it\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):464
                                  Entropy (8bit):4.701550173628233
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:BB9C32BA62DDA02F9471C64B5F9CF916
                                  SHA1:9825037D5D9185C58456CDD887C77B10A41D8C84
                                  SHA-256:43A0B113D3773BA78F82BB9E42DDC46F6892D0FBBB351F94A7C105E4A146E9C1
                                  SHA-512:4D3DB91A6251F2DD9CBF97D29805A7AC23F49988966E9B686D486B4A8CEBEA33F5502E3891D5231674061127C282C745FB87FDA7467A6172851BF6925506C8CA
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"App al momento non disponibile."},"craw_connect_to_network":{"message":"Collegati a una rete."},"app_name":{"message":"Pagamenti Chrome Web Store"},"app_description":{"message":"Pagamenti Chrome Web Store"},"iap_unavailable":{"message":"La funzione Pagamenti In-App non \u00e8 al momento disponibile."},"please_sign_in":{"message":"Accedi a Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\ja\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):806
                                  Entropy (8bit):4.671841695172103
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:96C8CBD161D3CE9CB1A46CB2CD0C6583
                                  SHA1:78BBFCF035B5B620E353C8E520653ADD3F4E7DB8
                                  SHA-256:81D8F1D9F72B3139BC5D9845BCF82990308FB6175D07514D8238B1E6D5D02E8A
                                  SHA-512:692468B7B44D961D8248BBC30CC11DE9F3F7E89D01A609E6CB71CAF653D8212C15DFA834C5FB6E8261FD21A25E9616861C0A3FC01DB27CBBE79C3FDE2C6549DD
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u30a2\u30d7\u30ea\u306f\u73fe\u5728\u3054\u5229\u7528\u3044\u305f\u3060\u3051\u307e\u305b\u3093\u3002"},"craw_connect_to_network":{"message":"\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u63a5\u7d9a\u3057\u3066\u304f\u3060\u3055\u3044\u3002"},"app_name":{"message":"Chrome \u30a6\u30a7\u30d6\u30b9\u30c8\u30a2\u6c7a\u6e08"},"app_description":{"message":"Chrome \u30a6\u30a7\u30d6\u30b9\u30c8\u30a2\u6c7a\u6e08"},"iap_unavailable":{"message":"\u30a2\u30d7\u30ea\u5185\u30da\u30a4\u30e1\u30f3\u30c8\u306f\u73fe\u5728\u3054\u5229\u7528\u3044\u305f\u3060\u3051\u307e\u305b\u3093\u3002"},"please_sign_in":{"message":"Chrome \u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u304f\u3060\u3055\u3044\u3002"},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\ko\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):656
                                  Entropy (8bit):4.88216622785951
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:3CAF23A8EA2332D78B725B6C99EC3202
                                  SHA1:95C3504F55A929449EF2E3AB92014562AACD39AD
                                  SHA-256:BFE72BBC492B9018A599CB6575366696E431E6A38400E4B2ED06EAE3340D3AE5
                                  SHA-512:C000FCCB567D3590D4C401005E78C539961455BB13686296EC4FF7018BB0A4DAB2DA96FBDAA33D999C1409B5796932370219B3FF8490B671586DEBD6145519D6
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\ud604\uc7ac \uc571\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4."},"craw_connect_to_network":{"message":"\ub124\ud2b8\uc6cc\ud06c\uc5d0 \uc5f0\uacb0\ud558\uc138\uc694."},"app_name":{"message":"Chrome \uc6f9 \uc2a4\ud1a0\uc5b4 \uacb0\uc81c"},"app_description":{"message":"Chrome \uc6f9 \uc2a4\ud1a0\uc5b4 \uacb0\uc81c"},"iap_unavailable":{"message":"\ud604\uc7ac \uc778\uc571 \uacb0\uc81c\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4."},"please_sign_in":{"message":"Chrome\uc5d0 \ub85c\uadf8\uc778\ud558\uc138\uc694."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\lt\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):576
                                  Entropy (8bit):4.846810495221701
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:41F2D63952202E528DBBB683B480F99C
                                  SHA1:9DD998542DBE6609299D4A5A25364A32FA7D7865
                                  SHA-256:FF7C083CD1E6134DD8263C634336EB852274BAD1BFAD18762814C42BC65309D8
                                  SHA-512:7BD2E2D4264C6BD62DF2584F3C1D3A910C5C5A28F4532F1E8F0C2235E93714EDD6074EA24960D4DEB4F9125DA81CA813F06330EFF66FA8DF1552D1DAC686441E
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Programa \u0161iuo metu negalima."},"craw_connect_to_network":{"message":"Prisijunkite prie tinklo."},"app_name":{"message":"\u201eChrome\u201c internetin\u0117s parduotuv\u0117s mok\u0117jimo sistema"},"app_description":{"message":"\u201eChrome\u201c internetin\u0117s parduotuv\u0117s mok\u0117jimo sistema"},"iap_unavailable":{"message":"Mok\u0117jimai programoje \u0161iuo metu negalimi."},"please_sign_in":{"message":"Prisijunkite prie \u201eChrome\u201c."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\lv\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):584
                                  Entropy (8bit):4.856464171821628
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:1D21ED2D46338636E24401F6E56E326F
                                  SHA1:24497EDB25724BC4A57823C5CD06F50DB9647DD4
                                  SHA-256:434A375C32B8A21C435511C551F740FD4D170EC528A8F4EFC3D798EA4A07B606
                                  SHA-512:10A870718CC6281EE09DE01900D303B06589D9281C5849D6105C6FCF58BFFA3855F29C6ECA3689FFE6EF304BABCF41C5700EE2D8AFE711D57CB711194366FA6A
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Lietotne pagaid\u0101m nav pieejama."},"craw_connect_to_network":{"message":"L\u016bdzu, izveidojiet savienojumu ar t\u012bklu."},"app_name":{"message":"Chrome interneta veikala maks\u0101jumu sist\u0113ma"},"app_description":{"message":"Chrome interneta veikala maks\u0101jumu sist\u0113ma"},"iap_unavailable":{"message":"Maks\u0101jumi lietotn\u0113s pa\u0161laik nav pieejami."},"please_sign_in":{"message":"L\u016bdzu, pierakstieties p\u0101rl\u016bk\u0101 Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\nb\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):501
                                  Entropy (8bit):4.804937629013952
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:8F0168B9A546D5A99FD8A262C975C80E
                                  SHA1:B0718071BD0B7251D4459E9C87DF50C14622FBD6
                                  SHA-256:F03FA7384DF79EBA6E0274D570996030F595A3BF6B781929DD9DB6593262E41F
                                  SHA-512:A1191CDC496DDD7470BDCFAF186BB9488767159E0CA6A6242D195FA3351704DC8F8BBD03DBEE57D37BBD897C9E8D14B7325FB37D58AC80DEC0F972FF893758B8
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Appen er utilgjengelig for \u00f8yeblikket."},"craw_connect_to_network":{"message":"Du m\u00e5 koble til et nettverk."},"app_name":{"message":"Chrome Nettmarked-betalinger"},"app_description":{"message":"Chrome Nettmarked-betalinger"},"iap_unavailable":{"message":"Betaling i app er ikke tilgjengelig for \u00f8yeblikket."},"please_sign_in":{"message":"Du m\u00e5 logge p\u00e5 Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\nl\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):472
                                  Entropy (8bit):4.651254944398292
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:E7F74DCE7B6411E4E0D95E9252CF74FA
                                  SHA1:33CC6C73C5F8D0144C0260C2E5A9BD0DB3EF6477
                                  SHA-256:3564AEF46C01602B19CC29FD8A79676C543427EDE98206D0C91B33AF0CCF3977
                                  SHA-512:B0987002F8BC4F0B0AC41A87E90BA729464BF2F34D1CC413DD3837019F5F37FD46EB9E9FDABB97F5BDCB50768ABF808AF6E7C531CD7BCA477C71990D2F13335B
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"App momenteel niet beschikbaar."},"craw_connect_to_network":{"message":"Maak verbinding met een netwerk."},"app_name":{"message":"Betalingen via Chrome Web Store"},"app_description":{"message":"Betalingen via Chrome Web Store"},"iap_unavailable":{"message":"In-app-betalingen is momenteel niet beschikbaar."},"please_sign_in":{"message":"Log in bij Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\pl\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):549
                                  Entropy (8bit):4.978056737225237
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:E16649D87E4CA6462192CF78EBE543EC
                                  SHA1:53097D592B13F3C1370366B25024EA72208B136A
                                  SHA-256:EB435F7460A63576CA1ECB51948E7A3AD5168D2F175AE2B5836D469672923D84
                                  SHA-512:6EC702CEC6E312CAC6F33109A57F7D83A3F073F2F9A9BD42DB0F91A36F87D800EEB978C69023B6A0E00B86ECE3E1024C269F89D038F0926619F40D075F6689DD
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Aplikacja jest obecnie niedost\u0119pna."},"craw_connect_to_network":{"message":"Po\u0142\u0105cz si\u0119 z sieci\u0105."},"app_name":{"message":"P\u0142atno\u015bci w sklepie Chrome Web Store"},"app_description":{"message":"P\u0142atno\u015bci w sklepie Chrome Web Store"},"iap_unavailable":{"message":"P\u0142atno\u015bci w ramach aplikacji s\u0105 teraz niedost\u0119pne."},"please_sign_in":{"message":"Zaloguj si\u0119 w Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\pt_BR\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):513
                                  Entropy (8bit):4.734605177119403
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:1F4BC8A5EFD59D61127ABEECD4B6CAE3
                                  SHA1:8647B4D2D643AE4F784ABDDC50D87A39AD02971A
                                  SHA-256:E1950CBBF056F068EA56160DDB318F3E6232BFBBE096D221C7CA6FCAACE2A8B9
                                  SHA-512:B58A95BBBC0A16B06826684198B481D2E15A7C760956721C3B538C62C902873A7856F328506457EE66311E45D7A16A4AAAC85B12853AA7EF09780189D28EB3DE
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Aplicativo indispon\u00edvel no momento."},"craw_connect_to_network":{"message":"Conecte-se a uma rede."},"app_name":{"message":"Pagamentos da Chrome Web Store"},"app_description":{"message":"Pagamentos da Chrome Web Store"},"iap_unavailable":{"message":"No momento, os Pagamentos no aplicativo n\u00e3o est\u00e3o dispon\u00edveis."},"please_sign_in":{"message":"Fa\u00e7a login no Google Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\pt_PT\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):503
                                  Entropy (8bit):4.742240430473613
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:D80ECE7E4B3741CD9CD29B89D006B864
                                  SHA1:8F0D587B78E36861ED00524ABF886FA20E14CAE4
                                  SHA-256:C8FF9ACAEA1D3B6F8483339CB40F66BC563CCA8DD87F2337F813C492B20F451B
                                  SHA-512:8A53D9618BBD1A62CD48501E5620932631C1B045612082D99429628D2BF4409AEE3FA695107E82037B5CB332111C456CF3A74235C66B61380CF1E382914F1088
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Aplica\u00e7\u00e3o atualmente indispon\u00edvel."},"craw_connect_to_network":{"message":"Ligue-se a uma rede."},"app_name":{"message":"Pagamentos via Chrome Web Store"},"app_description":{"message":"Pagamentos via Chrome Web Store"},"iap_unavailable":{"message":"Os Pagamentos na app est\u00e3o atualmente indispon\u00edveis."},"please_sign_in":{"message":"Inicie sess\u00e3o no Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\ro\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):554
                                  Entropy (8bit):4.8596885592394505
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:D63E66B94A4EA2085D80E76209582FB1
                                  SHA1:4ECAC3EB64DD6253310A0776E6D42257FC290D77
                                  SHA-256:91A5AAD210C3E0241106E8821B3897EDEFEC9D85033C94DB2324FF3A5FDE5AC7
                                  SHA-512:09AC34CF286FD0730EED4F6DB3E2FD00A026D0F42DCC75AE49B045DDAD38DFA38B0FB7823ECAC8B0A9BC2A89F4EAF4BCE081779F2ECDF6CC39286045577DC5C9
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u00cen prezent, aplica\u021bia nu este disponibil\u0103."},"craw_connect_to_network":{"message":"Conecteaz\u0103-te la o re\u021bea."},"app_name":{"message":"Pl\u0103\u021bi prin Magazinul web Chrome"},"app_description":{"message":"Pl\u0103\u021bi prin Magazinul web Chrome"},"iap_unavailable":{"message":"Pl\u0103\u021bile \u00een aplica\u021bie nu sunt disponibile momentan."},"please_sign_in":{"message":"Conecteaz\u0103-te la Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\ru\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):1165
                                  Entropy (8bit):4.224419823550506
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:22F9E62ABAD82C2190A839851245A495
                                  SHA1:E7F79BD875918F0D0799DB5F45FAC6297FB66AF7
                                  SHA-256:9FC1167626C97BCBFDAFF23C6033A44252F89A501AF1DF41C43CB3A994FEB09F
                                  SHA-512:F577F2F0C344C4E4050AF025A9FB9AC78CADF7FE177F63AB9863826A9808B7FBF5D3363E3B61D7A6DB083EF5EBAC5474D710347B701640AB9C229A3E5D1F0A48
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e."},"craw_connect_to_network":{"message":"\u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u0441\u044c \u043a \u0441\u0435\u0442\u0438."},"app_name":{"message":"\u041f\u043b\u0430\u0442\u0435\u0436\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430 Chrome"},"app_description":{"message":"\u041f\u043b\u0430\u0442\u0435\u0436\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430 Chrome"},"iap_unavailable":{"message":"\u041f\u043b\u0430\u0442\u0435\u0436\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b."},"

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\sk\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):548
                                  Entropy (8bit):4.850036636276313
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:4BBAA10FD00AADBBA3EF6E805E8E1A62
                                  SHA1:1991901BD6A20C4A7977F09DF30C0CFF0524C504
                                  SHA-256:906C4F7FDDE15DE4C841E7910BBF14D9175E894BCB244B56E8447A5ADFA5B7AB
                                  SHA-512:3490F8826E3DB0C8B4FE7B1866DA27F6585ADF52E74392A592A60A916E8A784FF7B92B3DE8985084546D663588369D9BB03FCB25196B7F9C6DF607BEB7DEF010
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Aplik\u00e1cia moment\u00e1lne nie je dostupn\u00e1."},"craw_connect_to_network":{"message":"Pripojte sa k sieti."},"app_name":{"message":"Platby Internetov\u00e9ho obchodu Chrome"},"app_description":{"message":"Platby Internetov\u00e9ho obchodu Chrome"},"iap_unavailable":{"message":"Platby v aplik\u00e1cii moment\u00e1lne nie s\u00fa k dispoz\u00edcii."},"please_sign_in":{"message":"Prihl\u00e1ste sa do prehliada\u010da Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\sl\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):494
                                  Entropy (8bit):4.7695148367588285
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:F45DE58765A37FD095319D7DEB0F2FB6
                                  SHA1:B585A485C9BC1982EDF7AE0B9AC73A8E91D41CB5
                                  SHA-256:8366774AA582035BC7D949F4E28FAEC371C305D01404DF56FFF5A78B4F6ECDB7
                                  SHA-512:F86334E6E6F90961AD9C8E7DD1A4E923476249469180AC69D9DE59746FE26FAECB585898FC50310380F20CEB0971CA1EB7B55046DA75276840AEA6BAFF574E66
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Aplikacija trenutno ni na voljo."},"craw_connect_to_network":{"message":"Pove\u017eite se z omre\u017ejem."},"app_name":{"message":"Pla\u010dila v spletni trgovini Chrome"},"app_description":{"message":"Pla\u010dila v spletni trgovini Chrome"},"iap_unavailable":{"message":"Pla\u010dila v aplikacijah trenutno niso na voljo."},"please_sign_in":{"message":"Prijavite se v Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\sr\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):1152
                                  Entropy (8bit):4.2078334514915685
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:92C1FAC62EB7F92EC3794D4A141BEF32
                                  SHA1:2AFA41BF51BF9A1089B0B92A9D2DC74299B79813
                                  SHA-256:9DF154C93B02695AF1CC39F085D9D178EC6AF131A62C2AFC65F125F8F9A5B7AC
                                  SHA-512:D0709E4F586EAC03548A47D72156CF48D9B4EB9AF9ED8335DF75F541AE1B4172541647EC8BA081965647A9EAE10DB342F87558977BE6075B2D3CC5C3995ED6EE
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u0410\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0458\u0430 \u0458\u0435 \u0442\u0440\u0435\u043d\u0443\u0442\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430."},"craw_connect_to_network":{"message":"\u041f\u043e\u0432\u0435\u0436\u0438\u0442\u0435 \u0441\u0430 \u043c\u0440\u0435\u0436\u043e\u043c."},"app_name":{"message":"\u041f\u043b\u0430\u045b\u0430\u045a\u0430 \u0443 Chrome \u0432\u0435\u0431-\u043f\u0440\u043e\u0434\u0430\u0432\u043d\u0438\u0446\u0438"},"app_description":{"message":"\u041f\u043b\u0430\u045b\u0430\u045a\u0430 \u0443 Chrome \u0432\u0435\u0431-\u043f\u0440\u043e\u0434\u0430\u0432\u043d\u0438\u0446\u0438"},"iap_unavailable":{"message":"\u041f\u043b\u0430\u045b\u0430\u045a\u0430 \u0443 \u0430\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0458\u0438 \u0441\u0443 \u0442\u0440\u0435\u043d\u0443\u0442\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430."},"please_sign_in":{"message":"\u041f\u04

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\sv\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):523
                                  Entropy (8bit):4.788896709100935
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:6E1BE9CEE29818E54E3D1C7D483DD6F7
                                  SHA1:B9DD926B60E225C5BE8A1DBB7EF3ACE422A204A9
                                  SHA-256:E348583D8C53F4A5DEC4551DA93785C17108466E427E06F84708AA383EA0E326
                                  SHA-512:3ADB32C0F098E064B774E7E7F615F54C44ADFB3BFC554B06A17048C6077C5885D42BD89F6733D64D65EA1785033B36B386EF0B6661FD539855484EA5A2900BB7
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Appen \u00e4r inte tillg\u00e4nglig f\u00f6r tillf\u00e4llet."},"craw_connect_to_network":{"message":"Anslut till ett n\u00e4tverk."},"app_name":{"message":"Betalning via Chrome Web Store"},"app_description":{"message":"Betalning via Chrome Web Store"},"iap_unavailable":{"message":"Betalning i appen \u00e4r inte tillg\u00e4ngligt f\u00f6r n\u00e4rvarande."},"please_sign_in":{"message":"Logga in i Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\th\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):1300
                                  Entropy (8bit):4.09652661599029
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:283D5177FB2FC7082967988E2683EC7C
                                  SHA1:DEDE43967F3CEF9D9325F140872A63BFCE2AA8C5
                                  SHA-256:E8D5820BDE31B66A7641068FDEDD1A5F20C1A783460B98887A670F38422099CF
                                  SHA-512:74413C00C58B7136038D4C41D5C7C79EC02A9830779ABB719D72536B74C5E338B1548A20290559FB3F4E2A938B728CF99041050DD1970848EE9A6590EB0AB3E4
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u0e44\u0e21\u0e48\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19\u0e41\u0e2d\u0e1b\u0e44\u0e14\u0e49\u0e43\u0e19\u0e02\u0e13\u0e30\u0e19\u0e35\u0e49"},"craw_connect_to_network":{"message":"\u0e42\u0e1b\u0e23\u0e14\u0e40\u0e0a\u0e37\u0e48\u0e2d\u0e21\u0e15\u0e48\u0e2d\u0e01\u0e31\u0e1a\u0e40\u0e04\u0e23\u0e37\u0e2d\u0e02\u0e48\u0e32\u0e22"},"app_name":{"message":"\u0e23\u0e30\u0e1a\u0e1a\u0e0a\u0e33\u0e23\u0e30\u0e40\u0e07\u0e34\u0e19\u0e02\u0e2d\u0e07 Chrome \u0e40\u0e27\u0e47\u0e1a\u0e2a\u0e42\u0e15\u0e23\u0e4c"},"app_description":{"message":"\u0e23\u0e30\u0e1a\u0e1a\u0e0a\u0e33\u0e23\u0e30\u0e40\u0e07\u0e34\u0e19\u0e02\u0e2d\u0e07 Chrome \u0e40\u0e27\u0e47\u0e1a\u0e2a\u0e42\u0e15\u0e23\u0e4c"},"iap_unavailable":{"message":"\u0e23\u0e30\u0e1a\u0e1a\u0e0a\u0e33\u0e23\u0e30\u0e40\u0e07\u0e34\u0e19\u0e43\u0e19\u0e41\u0e2d\u0e1b\u0e1e\u0e25\u0e34\u0e40\u0e04\u0e0a\u0e31\u0e19\u0e44\u0e21\u0e48\u0e1e\u0e23\u0e49\u0e2d\u0e21\u0e4

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\tr\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):572
                                  Entropy (8bit):4.93347615778905
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:1BF2AA4BB904B406C9C2B7DF769BB540
                                  SHA1:8D29C4B7A79AB0657747CA194D1934292A46D2A8
                                  SHA-256:0F2E8285BA3E2BDBA6B16435FB941B07159AACFAC80196AD5941B79AB52B712A
                                  SHA-512:0DF48AE0A518A940489E91D8A0D6E7E47A3153747358E06CD792BFA3D826F47FA1502268F602E7D7EDFC1C111AEB3FAF0E67F845986DDA77E2FC4B3336BCF46C
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"Uygulama \u015fu anda kullan\u0131lam\u0131yor."},"craw_connect_to_network":{"message":"L\u00fctfen bir a\u011fa ba\u011flan\u0131n."},"app_name":{"message":"Chrome Web Ma\u011fazas\u0131 \u00d6demeleri"},"app_description":{"message":"Chrome Web Ma\u011fazas\u0131 \u00d6demeleri"},"iap_unavailable":{"message":"Uygulama \u0130\u00e7i \u00d6demeler \u015fu anda kullan\u0131lamaz."},"please_sign_in":{"message":"L\u00fctfen Chrome'da oturum a\u00e7\u0131n."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\uk\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):1088
                                  Entropy (8bit):4.268588181103308
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:FD1C9890679036E1AD914218753B1E8E
                                  SHA1:58160F7A0FC94110A2876223E406A517C8E2660B
                                  SHA-256:39D19CC3387FFCE13A8F11DAD72E2FCBB7CD1A4367EC699AD7C40D6F52ECE717
                                  SHA-512:03E81C398EE6A5DC65A40CA07E1A4CBEC2662D2C151A76C9ECB813587D672AC71311C39C5C5DA8A1AE78A3A6CE3938609D1365F7819424FC34289C7743DF00D2
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u0430 \u0442\u0438\u043c\u0447\u0430\u0441\u043e\u0432\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430."},"craw_connect_to_network":{"message":"\u041f\u0456\u0434\u2019\u0454\u0434\u043d\u0430\u0439\u0442\u0435\u0441\u044f \u0434\u043e \u043c\u0435\u0440\u0435\u0436\u0456."},"app_name":{"message":"\u041f\u043b\u0430\u0442\u0435\u0436\u0456 \u0412\u0435\u0431-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0443 Chrome"},"app_description":{"message":"\u041f\u043b\u0430\u0442\u0435\u0436\u0456 \u0412\u0435\u0431-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0443 Chrome"},"iap_unavailable":{"message":"\u041f\u043b\u0430\u0442\u0435\u0436\u0456 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0443 \u0437\u0430\u0440\u0430\u0437 \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0456."},"please_sign_in":{"message":"\u0423\u0432\u0456\u0439\u0434\u0456\u0442\u044c \u0443

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\vi\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):671
                                  Entropy (8bit):4.846531831162704
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:7D52E9357AB847B4CC8DBC8CC4DA93F5
                                  SHA1:AF877F3992D8056C8F08462BD575595BF79FE5B0
                                  SHA-256:313F71F3FFDCEFC76FC746FF2029FBF8FBE38BD83DCF952FC3DDCD8AA96D5CFB
                                  SHA-512:E66E7FACDF35A0F72AC61DEAAEC43A2DAC976CADEA146EBE3E90E739178F173E32ADCF909F05F2657F2AD66E2ECB6015F6733CEA4B9E42337246469F89D3A12F
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u1ee8ng d\u1ee5ng hi\u1ec7n kh\u00f4ng kh\u1ea3 d\u1ee5ng."},"craw_connect_to_network":{"message":"Vui l\u00f2ng k\u1ebft n\u1ed1i v\u1edbi m\u1ea1ng."},"app_name":{"message":"Thanh to\u00e1n tr\u00ean c\u1eeda h\u00e0ng Chrome tr\u1ef1c tuy\u1ebfn"},"app_description":{"message":"Thanh to\u00e1n tr\u00ean c\u1eeda h\u00e0ng Chrome tr\u1ef1c tuy\u1ebfn"},"iap_unavailable":{"message":"Thanh to\u00e1n trong \u1ee9ng d\u1ee5ng hi\u1ec7n kh\u00f4ng kh\u1ea3 d\u1ee5ng."},"please_sign_in":{"message":"Vui l\u00f2ng \u0111\u0103ng nh\u1eadp v\u00e0o Chrome."},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\zh_CN\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):602
                                  Entropy (8bit):4.917339139635893
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:393680A09DEE0CB9046A62BDC0750B74
                                  SHA1:54E7F8215061A4AB241B87AE4E81C8F860EB2C2B
                                  SHA-256:D5FB52C2897FD5C294784DB63C933AC77C609D10AC91431CCB295D87452CBEE6
                                  SHA-512:14C214CAEFC69B085E918F492C75E2A48BC6A9C2D347D29403B26E69A474825E302A3E106710E5C04E047BD57EE684A67846A5DE956705FFBF41BB0614B8CEB2
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u5e94\u7528\u76ee\u524d\u65e0\u6cd5\u4f7f\u7528\u3002"},"craw_connect_to_network":{"message":"\u8bf7\u8fde\u63a5\u5230\u7f51\u7edc\u3002"},"app_name":{"message":"Chrome \u7f51\u4e0a\u5e94\u7528\u5e97\u4ed8\u6b3e\u7cfb\u7edf"},"app_description":{"message":"Chrome \u7f51\u4e0a\u5e94\u7528\u5e97\u4ed8\u6b3e\u7cfb\u7edf"},"iap_unavailable":{"message":"\u76ee\u524d\u65e0\u6cd5\u4f7f\u7528\u5e94\u7528\u5185\u4ed8\u6b3e\u3002"},"please_sign_in":{"message":"\u8bf7\u767b\u5f55 Chrome\u3002"},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_locales\zh_TW\messages.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):680
                                  Entropy (8bit):4.916281462386558
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:CD30D132A7213FC1B7E03C6D0A49CCF7
                                  SHA1:1141DED39023B821FE9BB4682E0D1EB5469DAF76
                                  SHA-256:5717F13D10E63255947F750C79CBB6BD04A6D97A08261E8D5764AF5EB0561A28
                                  SHA-512:0DCD3CEB93AB58655551B00D7AD4FE4A6F1F6B24EDD31244FF9B57AE529BF1A9E0220A6258C64790F9CC9F026AB9DA3AEE1575809CC94DC4F8754194C958FD19
                                  Malicious:false
                                  Reputation:low
                                  Preview:{"craw_app_unavailable":{"message":"\u76ee\u524d\u7121\u6cd5\u4f7f\u7528\u9019\u500b\u61c9\u7528\u7a0b\u5f0f\u3002"},"craw_connect_to_network":{"message":"\u8acb\u9023\u4e0a\u7db2\u8def\u3002"},"app_name":{"message":"Chrome \u7dda\u4e0a\u61c9\u7528\u7a0b\u5f0f\u5546\u5e97\u4ed8\u6b3e\u7cfb\u7d71"},"app_description":{"message":"Chrome \u7dda\u4e0a\u61c9\u7528\u7a0b\u5f0f\u5546\u5e97\u4ed8\u6b3e\u7cfb\u7d71"},"iap_unavailable":{"message":"\u76ee\u524d\u7121\u6cd5\u4f7f\u7528\u61c9\u7528\u7a0b\u5f0f\u5167\u4ed8\u6b3e\u529f\u80fd\u3002"},"please_sign_in":{"message":"\u8acb\u767b\u5165 Chrome\u3002"},"jwt_retrieve_failed":{"message":"The transaction could not be completed."}}.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\_metadata\verified_contents.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines, with no line terminators
                                  Category:dropped
                                  Size (bytes):7780
                                  Entropy (8bit):5.791315351651491
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:0834821960CB5C6E9D477AEF649CB2E4
                                  SHA1:7D25F027D7CEE9E94E9CBDEE1F9220C8D20A1588
                                  SHA-256:52A24FA2FB3BCB18D9D8571AE385C4A830FF98CE4C18384D40A84EA7F6BA7F69
                                  SHA-512:9AEAFC3ECE295678242D81D71804E370900A6D4C6A618C5A81CACD869B84346FEAC92189E01718A7BB5C8226E9BE88B063D2ECE7CB0C84F17BB1AF3C5B1A3FC4
                                  Malicious:false
                                  Reputation:low
                                  Preview:[{"description":"treehash per file","signed_content":{"payload":"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

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\craw_background.js

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):544643
                                  Entropy (8bit):5.385396177420207
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:6EEBED29E6A6301E92A9B8B347807F5F
                                  SHA1:65DFB69B650560551110B33DCBA50B25E5B876DE
                                  SHA-256:04CD9494B0ED83924DAD12202630B20D053D9E2819C8E826A386C814CC0A1697
                                  SHA-512:FEDE6DB31F2AD242E7BC7B52A8859BA7F466A0B920A8DADCB32DCFB5B2A2742E98B767FF22E0C5BC5C11FEC021240AA9E458486C9039EB4EBE5CF6AF7BE97BF2
                                  Malicious:false
                                  Reputation:low
                                  Preview:/*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var d,e=e||{};e.scope={};e.arrayIteratorImpl=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};e.arrayIterator=function(a){return{next:e.arrayIteratorImpl(a)}};e.ASSUME_ES5=!1;e.ASSUME_NO_NATIVE_MAP=!1;e.ASSUME_NO_NATIVE_SET=!1;e.SIMPLE_FROUND_POLYFILL=!1;e.ISOLATE_POLYFILLS=!1;e.FORCE_POLYFILL_PROMISE=!1;e.FORCE_POLYFILL_PROMISE_WHEN_NO_UNHANDLED_REJECTION=!1;.e.defineProperty=e.ASSUME_ES5||"function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a};e.getGlobal=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");};e.global=e.getGlobal(this);.e.IS_SYMBOL_NATIVE="func

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\craw_window.js

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with very long lines
                                  Category:dropped
                                  Size (bytes):261316
                                  Entropy (8bit):5.444466092380538
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:1709B6F00A136241185161AA3DF46A06
                                  SHA1:33DA7D262FFED1A5C2D85B7390E9DBC830CBE494
                                  SHA-256:5721A4B3F8E09C869A629EFFD350B51C9D46F0AC136717D4DB6265C0EE6F9AC8
                                  SHA-512:26835B4C050F53AD2DDB84469DF9A84BBB2786A655AB52DFC20B54BEDCB81D1ECD789198D5B7D8B940242E5CEAC818A177444D402397AE82C203438C4B1D19CB
                                  Malicious:false
                                  Reputation:low
                                  Preview:/*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var b,k=k||{};k.scope={};k.createTemplateTagFirstArg=function(a){return a.raw=a};k.createTemplateTagFirstArgWithRaw=function(a,c){a.raw=c;return a};k.arrayIteratorImpl=function(a){var c=0;return function(){return c<a.length?{done:!1,value:a[c++]}:{done:!0}}};k.arrayIterator=function(a){return{next:k.arrayIteratorImpl(a)}};k.makeIterator=function(a){var c="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return c?c.call(a):k.arrayIterator(a)};.k.arrayFromIterator=function(a){for(var c,d=[];!(c=a.next()).done;)d.push(c.value);return d};k.arrayFromIterable=function(a){return a instanceof Array?a:k.arrayFromIterator(k.makeIterator(a))};k.ASSUME_ES5=!1;k.ASSUME_NO_NATIVE_MAP=!1;k.ASSUME_NO_NATIVE_SET=!1;k.SIMPLE_FROUND_POLYFILL=!1;k.ISOLATE_POLYFILLS=!1;k.FORCE_POLYFILL_PROMISE=!1;k.FORCE_POLYFILL_PROMISE_WHEN_NO_UNHANDLED_REJECTION=!1;.k.objectCreate=k.ASSUME_ES5||"function"==typeof Object.cre

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\css\craw_window.css

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text
                                  Category:dropped
                                  Size (bytes):1741
                                  Entropy (8bit):4.912380256743454
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:67BF9AABE17541852F9DDFF8245096CD
                                  SHA1:A4AC74DD258E8E0689034FAA1B15A5C7C56DC3BB
                                  SHA-256:10DFBD2D98950B79EE12F6B8E3885AABE31543048DE56AD4FC0A5E34D0D9D4EC
                                  SHA-512:298FA132C6F122798FDB9BC6DE8024915147ADC20355B56A92F0ED9ACCE4549BE6E7F42212E07DCA166E31624D4E66E299565845D4BA1C51CA935050641B61FE
                                  Malicious:false
                                  Reputation:low
                                  Preview:html, body {. margin: 0;. overflow: hidden;.}..webview {. width: 100%;. height: 100%;. min-height: 100%;. position: absolute;.}...craw_overlay {. position: absolute;.. left: 0;. top: 0;. right: 0;. bottom: 0;.. background-color: white;.. -webkit-transition: opacity 250ms linear;.. display: -webkit-flex;. -webkit-flex-direction: column;. -webkit-flex: 1 0%;. -webkit-align-items: center;. -webkit-justify-content: center;.. -webkit-app-region: drag;.}...craw_overlay img {. margin: 16px;.}..#loading_overlay {. opacity: 1;.}..#offline_overlay {. opacity: 0;. display: none;.}..#offline_overlay > img {. -webkit-filter: saturate(0%);.}..#offline_overlay > span {. font-family: 'Open Sans', 'Deja Vu Sans', Arial, sans-serif;. font-size: 15px;. line-height: 21px;. color: #8d8d8d;. display: block;.}..#loading_splash {. width: 128px;. height: 128px;.}..#drag_overlay {. position: absolute;. left: 0;. top: 0;. right: 0;. bottom: 0;. pointer-events: none;. -webkit

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\html\craw_window.html

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:HTML document, ASCII text
                                  Category:dropped
                                  Size (bytes):810
                                  Entropy (8bit):4.723481385335562
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:34A839BC40DEBC746BBD181D9EF9310C
                                  SHA1:8B4EAA74D31EED5B0BABA3CA5460201F6B10DA46
                                  SHA-256:BB8742615E4CD996AE5D0200E443AE6A6F0B473255F03AFFDB8FB4660DE4554D
                                  SHA-512:EE81E5509CBC2CB2B6C834224688C1E1B1AA9AA3866C52F8EAED040D5C390653C52D8D681E2E2CF62906643962ABAC823D5B622385B983B21E0DCCAFDF281EFF
                                  Malicious:false
                                  Reputation:low
                                  Preview:<!DOCTYPE html>.<html>. <head>. <link href="/css/craw_window.css" rel="stylesheet">. <script src="/craw_window.js"></script>. </head>. <body>. <webview></webview>. <div class="craw_overlay" id="loading_overlay">. <img src="/images/icon_128.png" />. <img src="/images/flapper.gif" />. </div>. <div class="craw_overlay" id="offline_overlay">. <img src="/images/icon_128.png" />. <span id="app_unavailable"></span>. <span id="connect_to_network"></span>. </div>. <div id="drag_overlay"></div>. <div id="top_bar">. <div id='close_button'>. <img src='/images/topbar_floating_button_close.png'/>. </div>. <div id='maximize_button'>. <img src='/images/topbar_floating_button_maximize.png'/>. </div>. </div>. </body>.</html>.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\images\flapper.gif

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:GIF image data, version 89a, 30 x 30
                                  Category:dropped
                                  Size (bytes):70364
                                  Entropy (8bit):7.119902236613185
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:398ABB308EEBC355DA70BCE907B22E29
                                  SHA1:CFFB77B8A1724B8F81D98C6D6AD0071D10162252
                                  SHA-256:2B73533F47A99FFEA9CC405FFAFA9C4C53623F62487AEBFBA415945120B22040
                                  SHA-512:FC7A56FC8A61A582161874B54ADBAD30A84840190008EDB0B6FBF84F91393CA58E988E3FE446F11A0C3C691C18249B93AEC2904B3D0C4F0857D79034F662385A
                                  Malicious:false
                                  Reputation:low
                                  Preview:GIF89a.......................................................!.......!..NETSCAPE2.0.....,.............9.:.h0.bT(6.!l.&..("g*k..JL1.[....o. .(:..B(.6."...Z.CUyh0.....j.C.z8..S....2.T'...Q..4 g|]$ueW.NyQ.IoL!AoF#9h>7.0t..%..,.@.m4..7..!.......,.............9.:.h0.bT(6.!l.&..("g*k..JL1.[....o. .(:..B(.6."...Z.CUyh0.....j.C.z8..S....2.T'...Q..4 g|]$ueW.NyQ.IoL!AoF#9h>7.0t..%..,.@.m4..7..!.......,............................................................................................................'..w=.....\.)._6.k..OF...n.#\~"....2b3..I.)..eu.Q.`.e......gr.?>.s.I0.....@.~.Tr.[8.+.,.;..EE....S.*f.....,.....B8/D..;.9.q......ukC...r.I.....j......BGY...o2J....+O4....X4.....cH%7....I.....0H!.!.....!.,.............................................................................................................................................................................................................p8.a$....hh@.4....X,A.0L..(....JX.j...,..........z.X.Q....jB.d....B..

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\images\icon_128.png

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
                                  Category:dropped
                                  Size (bytes):4364
                                  Entropy (8bit):7.915848007375225
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:4DBC9F9E6F5A08D299BAC9E54DF07694
                                  SHA1:BB38F5DE34B1E0BE1109220BA55271087A4D9EA5
                                  SHA-256:91C2718DD23B4356D71F88F6146868369033291086DF327534546DFA459BEB0E
                                  SHA-512:A5F2B1F47502836130D8083F757B7773C1E1CB36B76AD298CC29AB2B428C8002D2F15BD839838FC326DAC3681C2F48AB25A3E7631D33726C4B25E8EC14170912
                                  Malicious:false
                                  Reputation:low
                                  Preview:.PNG........IHDR..............>a.....IDATx..yp.....gF#.:,[H.l.l..8...`/.k....,!a7Km...E...Te..T.....J...p....%.(....+...3....eY.e...L.o...5....h4...\....{?....~.u.`0.....`0.....`0.....`.Y......[(.......).4....ai..w38.+....Bf././..]...{......8...3.....3W~OJ.. /...u6V.C..U.0.+._=.c..9.X.?....L....S@.L...m.0..>.C...L|TF.p5..f4M.,.V....8..a.<...RP..@)E,..E"...h.....!...-....,I..T..........m..._[[{w{{....{*.^......M.x..h4.h.....\.R.E....j).7.....h4.A.E....,. ...iii.Vj?2...=/.B.FK9P..@)=Rj..D".Y...2.B..x.}0...&J...2.......f.O..e.H.....!.J)'I..R....B............QJ;K..L...L.l".L~mhh.R.@).FFF~.L&...~.B.......u.........}.....~.....f..yUU...........^M...6......].,w.e..~.!$.C.R.....E(%e9.,....k..@...W8.........@...........O..@%.~..@.S..P.....`Tp...."...?ME..c......s...`..S1...7.b..aNE..k...3.yP.}.Ch.}......B..........IPE..C.<....T....k......Z..o_......g........P..A=y.J.)h..@.q.-.*].AU.4...F.M.....y%B]+ .\.~..9......:..=...r.....E].o...F..P........i...|....

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\images\icon_16.png

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
                                  Category:modified
                                  Size (bytes):558
                                  Entropy (8bit):7.505638146035601
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:FB9C46EA81AD3E456D90D58697C12C06
                                  SHA1:5FC450F7D73CCFAC8F0D818CB3392BA4D91B69DE
                                  SHA-256:016CA659BA080E194FBFC0929602B16506ED60AA6019FAA51410C4FD93B583E8
                                  SHA-512:ADD810EE9EB7CAEC505B5FD90A1F184CE39D8F8C689DCC240F188FE353B9575489492E07D572A3B1C11A1555CE66AFCA5134903E4C1AA3D54BC7C5ED3E65B50C
                                  Malicious:false
                                  Reputation:low
                                  Preview:.PNG........IHDR................a....IDAT8...Mk.Q...;... .....F..QW.....F....J.?.w..7~......'.Q..B]... .QS...M&_w..b&.|`......p...f.?.D$.y^..........y*...\..Z..t6..oRj.@&.u..G.qN).t.-V*.>(.N.Ep]wFk.60o.]0.`Y..cT..Y.Tb.`DF.d..s.Z..E..9.4._C.._...%..*.^....4.l...Y..X..R..../...Wj+w0[.].._B.k.${.\.>.%...........lz .w.ALxo.2;..a...".p..S..&..uXS...<..6..[..zD.._.N+w.WbM7ye6X<...'(,=.r}........$f..5..P....k..."..8.s.<zgSm@.....).Y.....:e..|.....F...I..A$.....T?.....m....8.........N...z.....V..vd.h'....C.?.....H.;]..C.M.....9.b......IEND.B`.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\images\topbar_floating_button.png

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
                                  Category:dropped
                                  Size (bytes):160
                                  Entropy (8bit):5.475799237015411
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:8803665A6328D23CC1014A7B0E9BE295
                                  SHA1:9DA6EE729D5A6E9F30658B8EC954710F107A641F
                                  SHA-256:D5F9234DC36E7FFA85F35B2359A4F82276F8395EFA76E4553507EA990B27FC6C
                                  SHA-512:ECD9E71B8BA1ED8BD4CA5A0936CB66A83611C4ABCBDA76C250F4CDF4AD80320212E8F5EEB79A38910718F8346ECC1AD580A3FA835EC2B22BE497F36899FB5930
                                  Malicious:false
                                  Reputation:low
                                  Preview:.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...BIDATx...Q..0......2...(p...~Z.}'.>I%O...V!s..................../...`.<..`.....IEND.B`.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\images\topbar_floating_button_close.png

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
                                  Category:dropped
                                  Size (bytes):252
                                  Entropy (8bit):6.512071394066515
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:0599DFD9107C7647F27E69331B0A7D75
                                  SHA1:3198C0A5F34DB67F91A0035DBC297354CBC95525
                                  SHA-256:131817CD9311C03DF22D769DD2AD7FA2E6E9558863A89F7E5E1657424031A937
                                  SHA-512:0076ACB9D6A886BD987876E49495038F9388B292A9EFE5C9093CCA64CA3692E3A5D24E35172C7697F6AAE34B86CA217EE59C003423E46D9499BD27EC7D77A649
                                  Malicious:false
                                  Reputation:low
                                  Preview:.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...... ..Pp.X....H...b@...|.^LC_.E.BP+......X.P..........q..~..p/. ..s.....%D^...$......@.!...<...).?.4{.k.G3...4..[cH..0..l.8.!r..m.R..{..........`.f...#.x.....IEND.B`.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\images\topbar_floating_button_hover.png

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
                                  Category:dropped
                                  Size (bytes):160
                                  Entropy (8bit):5.423186859407619
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:7CB6B9DC1A30F63B8BD976924B75AD96
                                  SHA1:0C40B0C496D2F2B5F2021C117EC8610AC03AB469
                                  SHA-256:721B7AAA9A42A54A349881615A12E3A26983ACA48E173FD2F66E66AA0D725735
                                  SHA-512:4764937364E355956B242B84010AC56102536D2AACBE4227F0E88E4DE7AB468571957EA6C33012539156E5349AE4F777115615AE3361F60ADDF9CD227424F76A
                                  Malicious:false
                                  Reputation:low
                                  Preview:.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...BIDATx...A..0...+B.z.s...*.....$.<u..[...................h.......C.CA).....IEND.B`.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\images\topbar_floating_button_maximize.png

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
                                  Category:dropped
                                  Size (bytes):166
                                  Entropy (8bit):5.8155898293424775
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:232CE72808B60CBE0F4FA788A76523DF
                                  SHA1:721A9C98C835D2CD734153BBE07833C6637ECD68
                                  SHA-256:AFA4EA944CBDEC8543242E627EF46D5BFD3766DCAC664E7E50CDEEF2B352740C
                                  SHA-512:4048EEA5A78DD569521C488C4CE4F7B77AC0454C92EE9107A81A1B3AF91A4EE036039AC1A0A6B8DD26B12E7F1595DB80B7FAA7B6A25D9032BF385528A81A8654
                                  Malicious:false
                                  Reputation:low
                                  Preview:.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...HIDATx......0.CQS.......~..."..........m.v+Sq....<!...M8m...'...@$..0....E........IEND.B`.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\images\topbar_floating_button_pressed.png

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
                                  Category:dropped
                                  Size (bytes):160
                                  Entropy (8bit):5.46068685940762
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:E0862317407F2D54C85E12945799413B
                                  SHA1:FA557F8F761A04C41C9A4BA81994E43C6C275DBB
                                  SHA-256:5C10CE0589EB115600F77381130B70AE0B7B3752614D86D4C89E857658AA222B
                                  SHA-512:07CB69327961FD0019BEF8EF7590B5524905AC373A815F73F6D9E0B26840929F919A96CAA977D4B5656704DACD0F352D568FB3997F80EE6BB94C95B58839DBFE
                                  Malicious:false
                                  Reputation:low
                                  Preview:.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...BIDATx...A..0...+B..@wu...*.....$.<u..[...................h.........M..x(....IEND.B`.

                                  C:\Users\alfredo\AppData\Local\Temp\scoped_dir6856_279269107\CRX_INSTALL\manifest.json

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:ASCII text, with CRLF line terminators
                                  Category:dropped
                                  Size (bytes):1322
                                  Entropy (8bit):5.449026004350873
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:01334FB9D092AF2AA46C4185E405C627
                                  SHA1:47AD3C0E82362FFE5B881DF8D71D6F79AB7F5796
                                  SHA-256:F52714812D68C577A445169D11E84DF6751C2D6886BC429643072BB5D61C6C27
                                  SHA-512:888D96ADB7A847ABE472145258C8C46950EB2FA3BA7D596C2E90A17C8FB06FD0155C56CC8ABA5D076D89368417464BCB2D236F9E40E53241950A01F9F8ED548F
                                  Malicious:false
                                  Reputation:low
                                  Preview:{.. "app": {.. "background": {.. "scripts": [ "craw_background.js" ].. }.. },.. "default_locale": "en",.. "description": "__MSG_APP_DESCRIPTION__",.. "display_in_launcher": false,.. "display_in_new_tab_page": false,.. "icons": {.. "128": "images/icon_128.png",.. "16": "images/icon_16.png".. },.. "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrKfMnLqViEyokd1wk57FxJtW2XXpGXzIHBzv9vQI/01UsuP0IV5/lj0wx7zJ/xcibUgDeIxobvv9XD+zO1MdjMWuqJFcKuSS4Suqkje6u+pMrTSGOSHq1bmBVh0kpToN8YoJs/P/yrRd7FEtAXTaFTGxQL4C385MeXSjaQfiRiQIDAQAB",.. "manifest_version": 2,.. "minimum_chrome_version": "29",.. "name": "__MSG_APP_NAME__",.. "oauth2": {.. "auto_approve": true,.. "client_id": "203784468217.apps.googleusercontent.com",.. "scopes": [ "https://www.googleapis.com/auth/sierra", "https://www.googleapis.com/auth/sierrasandbox", "https://www.googleapis.com/auth/chromewebstore", "https://www.googleapis.com/auth/chromewebstore.readonly" ].. },.

                                  C:\Users\alfredo\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                  Download File
                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                  File Type:Little-endian UTF-16 Unicode text, with no line terminators
                                  Category:dropped
                                  Size (bytes):2
                                  Entropy (8bit):1.0
                                  Encrypted:false
                                  SSDEEP:
                                  MD5:F3B25701FE362EC84616A93A45CE9998
                                  SHA1:D62636D8CAEC13F04E28442A0A6FA1AFEB024BBB
                                  SHA-256:B3D510EF04275CA8E698E5B3CBB0ECE3949EF9252F0CDC839E9EE347409A2209
                                  SHA-512:98C5F56F3DE340690C139E58EB7DAC111979F0D4DFFE9C4B24FF849510F4B6FFA9FD608C0A3DE9AC3C9FD2190F0EFAF715309061490F9755A9BFDF1C54CA0D84
                                  Malicious:false
                                  Reputation:low
                                  Preview:..

                                  Static File Info

                                  ⊘No static file info