hxxps://sto[.]romsfast[.]com/PS2-Redump/Crash%20Nitro%20Kart%20%28USA%29[.]zip?token=cHFfalBpX09GF292WHEdYV9WQhV1cV52Ug%3D%3D

Analysis

user interaction
yes
max time kernel
209s
max time network
213s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/04/2026, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://sto.romsfast.com/PS2-Redump/Crash%20Nitro%20Kart%20%28USA%29.zip?token=cHFfalBpX09GF292WHEdYV9WQhV1cV52Ug%3D%3D
Sample260417-tmfglsft6v

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
202	2436	chrome.exe

Drops file in Program Files directory 38 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_395169391\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_2037797404\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1458245343\regex_patterns.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Cryptomining	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Fingerprinting	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Staging	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_2037797404\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1458245343\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Staging	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_2037797404\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Analytics	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\CompatExceptions	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Content	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_2037797404\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1458245343\v1FieldTypes.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Advertising	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Content	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Analytics	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Social	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1835607338\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Other	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Advertising	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_395169391\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_395169391\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1458245343\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1458245343\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1835607338\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Cryptomining	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Fingerprinting	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Social	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_395169391\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Mu\Entities	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Entities	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Other	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
972	msedge.exe
2436	chrome.exe
3360	msedge.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134209158327872249"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-914486190-3969805341-592249730-1000\{A561618C-FB53-4911-9A5C-8A1C0473CC5D}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-914486190-3969805341-592249730-1000\{6A4ACA73-C608-4C29-A89B-A566DB1164DC}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
1244	msedge.exe
1244	msedge.exe
5772	chrome.exe
5772	chrome.exe
5936	msedge.exe
5936	msedge.exe
2076	chrome.exe
2076	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

pid	Process
5976	msedge.exe
5976	msedge.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe
Token: SeShutdownPrivilege	5772	chrome.exe
Token: SeCreatePagefilePrivilege	5772	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5976 wrote to memory of 1552	5976	msedge.exe	85
PID 5976 wrote to memory of 3360	5976	msedge.exe	86
PID 5976 wrote to memory of 5828	5976	msedge.exe	87
PID 5976 wrote to memory of 5828	5976	msedge.exe	87
PID 5976 wrote to memory of 5828	5976	msedge.exe	87
PID 5976 wrote to memory of 5780	5976	msedge.exe	89
PID 5976 wrote to memory of 5780	5976	msedge.exe	89
PID 5976 wrote to memory of 2788	5976	msedge.exe	90
PID 5976 wrote to memory of 2612	5976	msedge.exe	91
PID 5976 wrote to memory of 2788	5976	msedge.exe	90
PID 5976 wrote to memory of 2788	5976	msedge.exe	90
PID 5976 wrote to memory of 2612	5976	msedge.exe	91
PID 5976 wrote to memory of 2612	5976	msedge.exe	91
PID 5976 wrote to memory of 1284	5976	msedge.exe	94
PID 5976 wrote to memory of 5036	5976	msedge.exe	95
PID 5976 wrote to memory of 1284	5976	msedge.exe	94
PID 5976 wrote to memory of 5036	5976	msedge.exe	95
PID 5976 wrote to memory of 1012	5976	msedge.exe	97
PID 5976 wrote to memory of 1244	5976	msedge.exe	100
PID 1244 wrote to memory of 4840	1244	msedge.exe	101
PID 1244 wrote to memory of 972	1244	msedge.exe	102
PID 1244 wrote to memory of 4268	1244	msedge.exe	103
PID 1244 wrote to memory of 4268	1244	msedge.exe	103
PID 1244 wrote to memory of 4268	1244	msedge.exe	103
PID 1244 wrote to memory of 4624	1244	msedge.exe	104
PID 1244 wrote to memory of 4624	1244	msedge.exe	104
PID 1244 wrote to memory of 1036	1244	msedge.exe	108
PID 5772 wrote to memory of 3324	5772	chrome.exe	112
PID 5772 wrote to memory of 4216	5772	chrome.exe	113
PID 5772 wrote to memory of 4216	5772	chrome.exe	113
PID 5772 wrote to memory of 2436	5772	chrome.exe	114
PID 5772 wrote to memory of 2600	5772	chrome.exe	115
PID 5772 wrote to memory of 2600	5772	chrome.exe	115
PID 5772 wrote to memory of 3312	5772	chrome.exe	117
PID 5772 wrote to memory of 3312	5772	chrome.exe	117
PID 5772 wrote to memory of 516	5772	chrome.exe	118
PID 5772 wrote to memory of 516	5772	chrome.exe	118
PID 5772 wrote to memory of 676	5772	chrome.exe	119
PID 5772 wrote to memory of 676	5772	chrome.exe	119
PID 5772 wrote to memory of 4888	5772	chrome.exe	121
PID 5772 wrote to memory of 4888	5772	chrome.exe	121
PID 5772 wrote to memory of 1868	5772	chrome.exe	122
PID 5772 wrote to memory of 1876	5772	chrome.exe	126
PID 5772 wrote to memory of 1876	5772	chrome.exe	126
PID 5772 wrote to memory of 4312	5772	chrome.exe	129
PID 5772 wrote to memory of 4312	5772	chrome.exe	129
PID 5772 wrote to memory of 2200	5772	chrome.exe	140
PID 5772 wrote to memory of 2200	5772	chrome.exe	140
PID 1244 wrote to memory of 5136	1244	msedge.exe	141
PID 1244 wrote to memory of 1256	1244	msedge.exe	142
PID 1244 wrote to memory of 4848	1244	msedge.exe	143
PID 5772 wrote to memory of 5340	5772	chrome.exe	144
PID 5772 wrote to memory of 4148	5772	chrome.exe	145
PID 5772 wrote to memory of 2384	5772	chrome.exe	146
PID 5772 wrote to memory of 3132	5772	chrome.exe	149
PID 5772 wrote to memory of 3132	5772	chrome.exe	149
PID 5772 wrote to memory of 5704	5772	chrome.exe	150
PID 5772 wrote to memory of 5704	5772	chrome.exe	150
PID 5772 wrote to memory of 2444	5772	chrome.exe	151
PID 5772 wrote to memory of 2444	5772	chrome.exe	151
PID 5772 wrote to memory of 4512	5772	chrome.exe	152
PID 5772 wrote to memory of 4512	5772	chrome.exe	152
PID 5772 wrote to memory of 212	5772	chrome.exe	153
PID 5772 wrote to memory of 212	5772	chrome.exe	153

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://sto.romsfast.com/PS2-Redump/Crash%20Nitro%20Kart%20%28USA%29.zip?token=cHFfalBpX09GF292WHEdYV9WQhV1cV52Ug%3D%3D
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa5679c188,0x7ffa5679c194,0x7ffa5679c1a0
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,6982910939815694903,16525586497801792955,524288 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,11230248742263285434,10210729747461602744,262144 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,3677564825411221686,8414918633262614747,524288 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10901940094027231882,16318176919414998161,2097152 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,2518387400992789775,6087008339329605647,2097152 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,9639385370441218695,2967807108537597381,524288 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,12080962738078220931,11365730738039480394,524288 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,12347873929607294883,11156685653309458862,524288 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,12347873929607294883,11156685653309458862,524288 --field-trial-handle=2032,i,14292506598227103618,13421143507899275013,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa5679c188,0x7ffa5679c194,0x7ffa5679c1a0
    3⤵
    PID:4840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,14468207830970278871,13761482572463653913,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
    3⤵
    - System Time Discovery
    PID:972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,11467567394797290001,5994865529293993338,262144 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
    3⤵
    PID:4268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,16461856004404261201,2336545863045708926,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
    3⤵
    PID:4624
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,6591416381896676077,15286259721662404654,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
    3⤵
    PID:3524
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,6591416381896676077,15286259721662404654,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
    3⤵
    PID:1036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,13387018803697627801,3985656504164000267,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
    3⤵
    PID:5136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,18039089026055750932,6345001156727560332,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
    3⤵
    PID:1256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,9960064883094468970,6820644252344119691,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:8
    3⤵
    PID:4848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,5523866466694068727,2986413618055859495,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
    3⤵
    PID:3308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,16622021086355975588,9249740370058795599,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
    3⤵
    PID:4796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4520,i,12940075846794586250,7724909138050643113,262144 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,9024489988817201679,8820362390505628594,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
    3⤵
    PID:212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4044,i,8401730995461997614,18171249521437867698,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
    3⤵
    PID:4828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,7695565361484943800,15333660420059231536,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
    3⤵
    PID:4732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,71822594508693003,722528071166809352,524288 --field-trial-handle=2332,i,13133205039662014005,15874269950785226628,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
    3⤵
    PID:2588

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:112

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:656

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa54fcc728,0x7ffa54fcc734,0x7ffa54fcc740
  2⤵
  PID:3324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1788,i,5122230105326653718,15695086890882607772,262144 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,5874790902485480239,8367290528610703602,524288 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,41271714077914675,1765519711668482294,524288 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3284,i,18230369887372816868,8933868399930298366,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3476,i,8384352467953601668,17351274228232694280,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4456,i,12088578610219059103,13601123847459670401,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4508 /prefetch:2
  2⤵
  PID:676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4768,i,16724550945504871320,6000253167308045063,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,792041945008445268,12673849307927174517,524288 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5828,i,4465056465282474670,15509049889690900808,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3516,i,5790335750435714377,6866342712334969670,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5980,i,13599987677057299192,10279908066248214997,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3292,i,6771744321658012312,3980155440922519353,524288 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:5340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5908,i,12383032980425798846,15352386373267484933,524288 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3568 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4772,i,5143536688906177708,10560565047334229880,524288 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6164,i,15556665402663903618,3199912946120047436,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6180 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6068,i,9454701106570445994,2484509673268713095,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5996,i,9166340228915506733,1306902004294111554,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5984,i,10898900421773501296,15651515278986167794,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6388 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6344,i,12333445965808894879,4808345920672623696,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6320,i,13213708883053831912,9848434050938461027,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6312,i,9443727787268326297,2688186855639735833,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6720,i,4866109949412925815,415316417732621682,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1328 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7116,i,10811492288337791670,3797738908194193650,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7096 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6684,i,14252987691064490946,3886604385320724593,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6704 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6640,i,9106113014473509842,6933277189527784340,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7132,i,496636104077106521,7037327871772646545,2097152 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7060 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3588,i,15013266228649825820,2775622169332746851,262144 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1328 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,12723223551933997215,7028906088829523847,524288 --field-trial-handle=2008,i,17885401089729318440,17464040985893298943,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3268 /prefetch:8
  2⤵
  PID:5060

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2588

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1458245343\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1244_1835607338\manifest.json
Size 52B
SHA256 36565d2ebd6c48537cb3e6fe24ac74ca68dda18b3f0f8be13f47d01aec181d62
MD5 152537f005b8875f68b1af4ac41c46f1
SHA1 70f529940adc1404721cbc1542c65eee289216ff
SHA512 bfcf5e9523b9268e1b0a546b5786498b1decc624ab1ba4fdd89e2e92edacd20800d731fef37c98aef45c64268d267b97d09f78124167685dd152bacd620dc9d0
TLSH
T1D0900260053491171AC10E546570F8859391661955850D1D0545154806A546CE051298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1244_2037797404\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1244_395169391\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1244_395169391\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\Sigma\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1244_630452071\manifest.json
Size 132B
SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
MD5 a4d9ab812da8b2906ff9d46f9ffc07c3
SHA1 48b428dc760bc008058e6df47a9f05f2f86b4abb
SHA512 5a2ba950ed85ee55bc1402d57d09ca8d54c0c2df5b43a402bb8bf3668920a40d584fa18d270376b046e23be00698bd1399ef6a0b695ee6c0b99fb454616b1cb6
TLSH
T1E8C09B115801797654DD77F00D29D7526672CB1D1494250546F5C218EC2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c3369fb60ab79bb60e0b76a37fbf765986c9db6495ddcfdcb824147056d1b1fd
MD5 90d9b509ff4680c9fd630312b07ff9df
SHA1 dcc53c9cba849e2aa30bf53aa8f42f30c2106bed
SHA512 af39d449601aa7af665d9b99abf5c703d0459fdeb100c6c7806d9bbb60d8402a4f37dccdcf15dde13152bf24eeaef278206d357e20fc52778f1907098c337a31
TLSH
T119E02BABCC62EC2B0CF9171960140749EE5123572B41550F7B3CA60C8FF823B4982C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 33KB
SHA256 2bdb569e636e5b4850a3ac847e648e604667d367badb2d5e897604b29b6fc729
MD5 e9e31315ac19e0a72e352bb75033d770
SHA1 aa7af4b5def30605ee9b216a0cc9faba03c4a7b5
SHA512 c80a1093e122b12628bd7a34fcd15380bc7be86093822baf8c28cbfa002c47083bdcfe85b5785875730806b720da7bd539437d6a84c3e53a8b1f18db12f04ba0
SSDEEP 768:pDcDoL2JxtuWH3s1QmRjFje/LoibFAu800wn8JxQhFDLsWTk2n:W86JJQpvKZmuV0HQhxYYn
TLSH
T120F2F17A43E476CC55CC7CB8DDE6FF5442D683A871970F7764020BAA680868ACB32995
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 18KB
SHA256 67daf1ccc636ba810fc13842a0fd5ab5b699116c5731d5df3a14aa7640a6898f
MD5 24b4051d5ae6cad68fcde5cc19ef8d0d
SHA1 d5cbb0e57890da9b7a4ee3b4cb3c9c39644a2e2f
SHA512 b127e87a960bfce22c4ebd0be03e529c76f03cdbbb45f5f3fe73b10125bbf9ceee59cf36a8271732c70f841cc02086be6efb7d7634c5276887394954df45e1cb
SSDEEP 384:QwwejX06kOcwdMEKTv00ZKOZLL0AS69T+jrDlXWVvGyj5lhQJEHxKiZ3qaOkBN:2ejXlkdIKTv00ZLp0A39CjrDlGVxjAwP
TLSH
T1FE82D188162B1F7E96C669947B8C3C9AC5F2D4281761FD7C24601CA6E68850F4FCD2CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 17KB
SHA256 2192158e76188a690354f0260c4b21c611e139414b43409514821325c5b6d990
MD5 09d1b55ee5e5b3487e781f5da17e5faf
SHA1 60c4645a9f888e4d850858c2fbba995bcbbda960
SHA512 64921ba2f59e2c8613dc37bdcc68d2579aec6779d0bb0016150ddfd11ac48c6e8841f753df408b53c81c2623643944137221c34c8e040cdf6147d1d0237a0ad2
SSDEEP 384:suosPN55m1yEZ8TAnCwKtZpMsgqGWGkzxrekuWMHvntk:Ks12E6nnluprbGar9udHvtk
TLSH
T1E882E041A1949D5A60DD4DB13C3B972299DB32BC43C38D3D6490EFF899DB250C7E82B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
Size 33KB
SHA256 4239e121faa1f2173a1ba303ae30df1b1e81a49f6b58b57459272502c7582532
MD5 cde84667d6db3c2c805a4c3c8b49c0bd
SHA1 5f565d07f830238750e40999b457e3071fafeb29
SHA512 28d97f37bc630a37518d0208cb6487105b6245e1a07c3f1cc7bb8b051c0af56e4a6e03906e8b0875867496749c3da49885c96d1d96d6ed1e0d268ccf422540d1
SSDEEP 768:p5nBF5uR0L3/grNNBpZ+JgbOX4ibZI6pze+1Vu2YauxO5Ecsf8WF:p5BOSD4p7OgbORbZDpzpuWs0s
TLSH
T104F2F24D809272C33B8AA7D2BC9C4654F90A241B6AA9C0D7F53E7A0C39673E63E71715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 29KB
SHA256 815bc65c17b5df87b2d93033cf40df2fffe51859b3e53c3d944edb7cb8165a6f
MD5 31c2e6b83a03e3c5c5c5bcdb3dc9a5e3
SHA1 cedb688cb9b995b5924e7579e90f87ac64d34281
SHA512 7bb3a51441cc515d743f71fed544ce934ea407db3bc71fa259c42fe8eea161561ca71d4bcca226dd6f6323b9c198e2130abea7022a5b76360b7ae6718eb458e2
SSDEEP 768:q+FuO4uYxW7LmGL6PSgU16timqVKai1cqER3PGW:q5O4uYxW7DL6qgYmNaOC3Pj
TLSH
T1C4D2E19C3E9478BCB163EA890487C5442F5734F09092A46772693FEBFA11F5DD23A819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 31KB
SHA256 c6b60861a459aa8fb6f879e480548a0ac06384d6b40b7be0ecb09b79e0776600
MD5 ef8b134f541e7ff45fff1161a7ada4ee
SHA1 b228ed25fe38ab91a30aac8d8e800ad41f8cb4ad
SHA512 4662ccbb5da23ad5e79e656eb129a6887b10b2dfd97e80606d777eed9d2edeae17f61a44cbbd75d6c868a5b73fb2dc3da05e12b3c5e17e5acb8e504568cfc6dc
SSDEEP 768:bQaQyzHEsntUI6wy9tged9UJIwI/iIZchtpY0WUns+rq9JfuQaVKq8:Ua17tOwy7jBZAp5nlO9Jfvox8
TLSH
T14DE2F1BB9C8E1A70B96508DBF521C76C66228D84F4249BFEC3CB7374509A7235949D0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 124KB
SHA256 42a660c54bd851519c93dd2a277488f7a1ef611eb2aaa0c9fd38a941fb0b1523
MD5 6775d822d683e68de34f7ac2dd6cfe57
SHA1 9a966e07ff8736412685cd497498d6f7da4ec889
SHA512 47366eea00f8553cf56ad4c2195635eb9dde34f57761316a0d4af875c21bce2d0fa5d9860c9dcd676d920e79945e795f8b32ff0c658c7b5b103bc1b1ad26dd5a
SSDEEP 3072:HScYhCKXEvysKaZEUxwliLI2m11md/oPrDa:H/YCyqZ39m11mdEXa
TLSH
T1DFC312161544F916A8B704EDBD46403BF5EE72FF803A0887AB5FF58023E294D66D329E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000027

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
Size 20KB
SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
MD5 8bd8220ca4c1c9bf2756086b9cdd2737
SHA1 c4b09065bdb49f26cb911e6c724d49cdaa771b6d
SHA512 16c22bb9f89d11df3db453ab71365fd27de31ffe97b1159b5ba940932773b0c4fd02903d9ed55cb1f05eb88ede1b3561ee555e90a0a592abda4f826ebe5eb691
SSDEEP 384:BoikZS4VhesCQMQABVDUA+6SxKg8Z848u3eI2Vci2jRYxqEafv:dGcsCQMQCVDUA+VxKg8Zv8VGi6GPan
TLSH
T11E92E17988A32D89689D4E44A3FF6B5A5E09C94B1D2F05FE59181CC863D4E8BFC2C45C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000030

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030
Size 145KB
SHA256 d98c5908ab637fc97c77ea7863ad3e540609d4291d72ee87614b7858aa0fc7bb
MD5 8b4d4029d8d44614d8510d46f2492cb7
SHA1 78cf57aec7d4c015d5d7e837f7da8c5a63537c2b
SHA512 9e91ba05bfa3fcdf684b9a23a9832ee5a84b3ab55876390a7a4eb78dfba4cd1e4255ce8b4b83a9b8c48dac831ddf7452492015f58eaa739e31888c29197e836c
SSDEEP 3072:EOYyqlYXVzNPt07vX+QD7GiW0rdjrbFK0iU7uHWKvr3L7Ze9ufWlU0AkpU4QPF+:EYqWVjQ+QO8jfF7S2MI9VQF+
TLSH
T1B1E3138E2A92C688D43D453EE116528A4B36DA550F239F3583D83A7A51EB3F3D24F1D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 d50f657e45dbee6d2ee9f36f99d373f32859e64b8be9efa44bb70726f43de7de
MD5 08ca7cae5f4e2ffb6a68bf27859a24bc
SHA1 28fe6b26b533dfa04997532b59a0d42b0a37593c
SHA512 190ebed1b7997fd7f20314229f7fe2685f387b3463de9983d13d4a945895c7def3085775fa12e204fd2ac015544ad1bf583d9ea5efcc3b9b669cdcfbd717a8d0
TLSH
T17A21CC0AC597E459EFB6623444FD4C6DB1E0DA04E5180E7D3DCA297A6B133B73E0014D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 b61e4d48311b754b9c749985f02d83566d213f29014ea6143c0693de2c4d256e
MD5 9fe2cf0e50dc691e8ccec3706acab556
SHA1 94e6fbf4635b811e9208d2e7f2c024b61bae98eb
SHA512 11fd09d24c317b599275b7b33f21c1f05190346ef4cfef8760f60a7cf00fc06d5b406bdf3a2a993dbfa1846a6bef6812b41c833e055b0e922f373ae608812231
SSDEEP 384:DxUJXnaEpEPpYRbBDfdpaaIZff4PVapNkM2wr8WgGTCfMYl5rPagjgRi27WVo0JC:g2D
TLSH
T1F042C3F7C3D8862DD81156F4AB153E1FCE6E0928432C3D66C9E5AF4B93E2571E20064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 8ee7d96012e3a075613f1c01a44ffd4e208a5efde6f9bfb5b91ef7a9486699ee
MD5 8b1c21949af442803a464787a788b326
SHA1 59b68a57bd67f524c5df13147c6cd0f2f9d6d05f
SHA512 2cdff52b12bb945fbbd2e7d4bc3e1dcda21e0bb8b3040e173bd7bd5f196462cf114635c8093657d65cf2c7fa262876aeea2889080382cba4a1c71321f551093d
SSDEEP 192:DxUJXnaEpEPpYR/aaIZff4PVapNkjL2wZuBV8WgGTCfMY5OW:DxUJXnaEpEPpYR/aaIZff4PVapNkjL2C
TLSH
T17C12C0F7C3D8863DD81156F4AB153E1FCE2A0928432C3D66C8E5AF4B93E2971E24064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 66a4b235cb9dc1de3b728708ebe91bf5846c11d0d3b07552d678e9420698d04e
MD5 1002ef70cb680e28524cf69ff438e178
SHA1 e8a253e66b7d709d50187114e5552b88152d63b1
SHA512 b97f6620a31f3b7a216c358ec190b7999952188bce0f713d127c773e6549d826cc38ba784dc932d1e7f867cd0801342060168ce75597c2cddd8d437dafaaccab
SSDEEP 384:DxUJXnaEpEPpYRbBDflaaIZff4PVapNkM2wr8WgGTCfMYl5rPagGHgRhR27WVS:8Ql
TLSH
T1CA42B2F7C3D8863DD81156F4AB153E1FCE6A0928432C3D66C9E9AF4B93E2571E20064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 798738b11ec510ea4cb6d7695eddfd9b76f60bf654835ab91cd5cd6fe60271a5
MD5 18ca4b198693672ee579c150157a5dec
SHA1 a9797602d21672a30a255ead492301a67bc5f5f5
SHA512 c274eaa3cc63ac32491783f67244e0bac57ad7268185fae26718a3e08c3ae9a6021eed8bc0a485c2e068dd86f39fe39c838de1b76a590a8c6761b316b8efe582
SSDEEP 192:CRhcBTe6fQyq4RNIAKv7jahoPRpt7imzYHAwF9mHsb+WNtud6/BbgWZu+Ps22kiI:CRhmTewQ9WGaoXMIwM1lZ2/i/2X6m0e
TLSH
T10662C86AB52059BB4CDAD226F961B76FD7F5202265902E88EAFC8E2C04D76CD3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5b60ae8ea3e71c2d54f1752499bb2cf245eb92d36c55bb1b88b79b436256a37b
MD5 fe2074b3d29e8cd0b6de002a8ab9ee85
SHA1 75f63d6d3bd46730529b7787e2d742f4410c2441
SHA512 f7dfe48aed100d95abe2a0fdb3980597ee3a5e6d7a0836a942d38b6f2a171332d1ff7381aa773c1998ef01546208ecdb742fc1c35b2defa8ae074008b9bbde85
SSDEEP 192:CRhcBTP6fQyq4RNIf0v7jahAPRp21m699mHsb+WNOylbg4Ps2lki/2X6kwtwVyII:CRhmTPwQ9lwa8XaIwOD2ai/2X6N08
TLSH
T1E652E96EB910657B4CDBD22AF961772BDBF5202265942E88EAFC8E3C04D76CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6568834e755d4fe87ea0200ece4a883e2b623c7567ac663e9db9882f4874187d
MD5 be2f417dedfafc5f1652c10185e053cd
SHA1 e2965a6bb6bca0fcc32966d9dd0e67c346d195fd
SHA512 66b985a5343490b83d0f8949d65d1eda8d86ef61195d100620076f4f5d20db6caea711c5b1c21547b1b953a72ec0396334977b5789f1cc98502ad5c90bd8c5bf
SSDEEP 192:CRhcBT/6fQyq4RNIfKv7jahoPRpt7/m6Aw99mHsb+WNOdABbgWZu+Ps22ki/2X6w:CRhmT/wQ9lGaoX/IwWlZ2/i/2X6m0e
TLSH
T10D62DA6AB910597B5CD6D226F961772BD7F5202265902E88EBFCCE3C04E76CD3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 197f92bde597cfb20bf6074d4ea44db7407333a7fd35e6fff4f6653ddf2eaf9d
MD5 1ed0226d23e0d1fa1bca99e144848cde
SHA1 a9517f3982716b3cf6096edd8d94aaedcb8a49b5
SHA512 a263fa25bbbd09e96e6a69d0e3a2a5dd21e55921ae37b430308e682cecb6e0b0d6143de5d053c5e9cf19a1bc0c806c9cf3f72dd047deb62e815c7c41e211f301
SSDEEP 192:CR9P6fQyq4RNIf0v7jahAPRp2w9mHsb+WNnbg0lki/2X6kwtwVyIsnAUgtaJ:CR9PwQ9lwa8XbIwc0ai/2X6N08
TLSH
T14F42E82DB914647B5CCBD21AF9617B57DBF5202265902E88EAFC8E3C04E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 0f6c66a4bfb2efa61cc6320d3d072e07921d28d78bf1761e24d374274573eebb
MD5 156b9e5e7a1f8bfa125c011013ef154b
SHA1 270338698987d76e59318b3abef9c75cc8e24acd
SHA512 2963e8d85cbd5be912d308c5ff32842ca2de643c5cca739cc317bc9b31c0d14b9373d5a042ce01061671e08d3ee4686a6691a0af5186421741b8728459c10a7a
SSDEEP 192:CRhcBT/6fQyq4RNIAKv7jahoPRpt7imz3AwF9mHsb+WNtubdBbgWZu+Ps22ki/2d:CRhmT/wQ9WGaoX/IwBlZ2/i/2X6m0e
TLSH
T12262D96AB92059BB4CD6D227F961B76FD7F5202265902E88EAFC8E2C04D76CD3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ea6a0cdf0d472841fe1a1335d242e1bd0e1896ea1b27504eaf9152560371f591
MD5 04d61018df3d143dfa6f5da1f7ba3e61
SHA1 2a5a81f4b1be69c5c9ec71fb0ddea69062d56fd7
SHA512 15fcecb8bc24e131a0f7079950d193e85cde0da4ee8ebe9bcde9e215023ab1cd23f99f005c1d7a57a7748b2a4ca3422c6edf1d315e80c6ff2df25eb5f631e589
SSDEEP 192:CRhcBTP6fQyq4RNIfxpv7jahAPRp21m6V9mHsb+WNOlBbgWZu+Ps2nki/2X6kwkV:CRhmTPwQ9lxpa8XKIwTlZ2ki/2X6E0e
TLSH
T1B852FA6EB910697B5CDAD21AF921771BDBF1202265942E88EAFCCE3C00E76CD3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 56a1e8c00cba78461b814b7af7b99a3de58a4329a7a44475b23e4150677716ca
MD5 6932e737f9fb5bb798f741f34796b7e1
SHA1 58bd5e6597f4a5801de9e176eca39fb244cddab8
SHA512 6e0d027f757f85c0e73419b5d0cc63c8778e317595fc91efbb163ddebee9c4ad7ab8467ebddc43b66b02293c61347fd81b0b3e241e6794b5bc99b05d775c9885
SSDEEP 384:y4jGR7KxkXqKf/pUZNCgVLH2Hfgslyi7pLuLcifIpXODGJ+ErU3DcHG8akl78fPY:yMGR7KxkXqKf/pUZNCgVLH2Hfgswi7pz
TLSH
T1FC720AA76C4C997B0F94CACCC8177F4FADB5015B65E9886493FB582603D8BCB11091EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 7a0dc93a96d4bd9ef84a0a3e47fbd9ac45687ceef001ddf07eb5088c901c3d4e
MD5 b671738dff5863034db624d3fa5f7490
SHA1 98a711081584d043198f84d15bfbac3e8913f4f2
SHA512 e5d830f1edb490838e7f2f9c753ffff596a42d1d11e18d6cf8b90ea1544c07fbeb1b57bd879c5bf6c85dc09f7a14dcf16a45a6781aa5aef02877b054e8adf5fa
TLSH
T180B01210C0019501C44303B021CB04C8B1145F10C709130553F06971DC361B140143D2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b467.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b467.TMP
Size 96B
SHA256 cfd331aef3b8ab5c66fbbdc03ac516c422d1e0475725a77f665390982cddda8b
MD5 b7ff1633830618323d39710e879986e7
SHA1 5d5316e0144a87e72b00964fcdc1c28faa839341
SHA512 8a198a354a6b99ac3079c4b934b300adcb4b662f627146667d4bd1ed4cd4d0976ca611d6a315d8f618c9fae22b52d3acaac272d181c20ee198a3dc35aa39050d
TLSH
T12FB00255C203B312D0431BB029A99BD97264DF25C603135296E05AA6DC65671C525561
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 f10b6318ccb53085f74934e1dcf2df3619c20881e29729ba0aa6d3ff1f976ce1
MD5 3e96d562ddbefac1f7fc491b9d7d58e2
SHA1 35606ee69ba879cb11dce33198ecd10ab2ed4c23
SHA512 5ab5933a3c6af4d5b01a9c50cb6a7e312bd832d8b395c40f3bef74554f0ddd600476c7677b5ee056f7b2c129abaf72146d1bd8573426657dc2ebfb5d7103abb8
SSDEEP 3072:0QHu7sLxK4avMAi/v8XsMjiJpJHHWDjeqT3Qw/xLANk0mUW5GmRntSFCjEENB:0QHuUxK4akAMU94srOk0HOGm/SFyEE/
TLSH
T1891412BD9F1B19B36C6E496B718C3909CE22224A515BD6ED71BCC75DB18C1804EE3F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 39672d002aa85ad3b0ec6515fa2eabc4bed1d98762398200de1011619c1db5fd
MD5 8fc78e41b2d367768387d5c4ea22b453
SHA1 84a96f481ba4844aaa34d6159502ae32c02a6138
SHA512 5c29108c1228192468d9ebf889ed12e197bd8f3aa41dca23d13b8cc25c4867ae1b1d5f3f84a8ea870abacd10f19f4cd3529898e53c807518137bdf3fdea630c7
SSDEEP 3072:0mu7sLxK4avMAi/v8XsMjiJpJHHWDjeqT3Qw/xLANk0mUW5GmRntSFCjEENB:0muUxK4akAMU94srOk0HOGm/SFyEE/
TLSH
T19C1412BA9F1F19B3786E0567719C6D09CE1211492057A7EE72BCC76E72886804BE3F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 a4c80daedf4d0342b1bce9c34396b53afbc2f52d49a155329f93fdc1ffd03288
MD5 43ea4eeb4eb7046d3b8a344b1b3c9562
SHA1 758fc8092bffb4828dcd084d1ddc423f6bf4ea3c
SHA512 295d1e5f253f9d33a81bebc2a84e2cf07b092d0bcc9919ff54ab7c36b28980a68ed1d1e3e3788269fd4f4524ca53e4bb71ae80ac367c4974d8aa77a09b4a8d34
SSDEEP 3072:0pu7sLxK4avMAi/v8XsMjiJpJHHWDjeqT3Qw/xLANk0mUW5GmRntSFCjEENB:0puUxK4akAMU94srOk0HOGm/SFyEE/
TLSH
T1591412BA9F1F19B3686E0567719C6D09CE1211492057A7EE72BCC76E72886804BE3F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 9b8e80d6091883ae32389d8d22771cc10e13548ae1f82d454d327faaf6b4c8e0
MD5 a0501a8214564baee5f9965dbc4a4c2d
SHA1 b84a4ac28ab96a92b338a08a28a28bfe3e9e6ab9
SHA512 9c084cb07976b8c850a865f627ee5ef4edbfbd6c9b446a9f28c9616c196e3eef9efd184f10177d5a9a4b4d5e2c342ccb63f31c55aec1dd19c81fae905dec73c9
SSDEEP 3072:0kHu7sLxK4avMAi/v8XsMjiJpJHHWDjeqT3Qw/xLANk0mUW5GmRntSFCjEENB:0kHuUxK4akAMU94srOk0HOGm/SFyEE/
TLSH
T1311412BD9F1B19B36C6E496B718C3909CE22224A515BD6ED71FC875DB28C1804EE3F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 39aeba942fff5f8ef09e5173c90c3abb220555da2c52e9d3544f1dc0e279a10d
MD5 226e57bf80139b57f2655a81f35256ae
SHA1 b32d60c5641d92de916eb8877efc5b11a15f1762
SHA512 fd70c81d6daf923e9f26e7e398c3a8c202d949e1c2cbab254ee281db235abbf8662f3ebccefc290958405fda69069f59411651d0b821af230caf5d8a8d8b1cd2
SSDEEP 1536:0cCDcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9Yj:0X3Qw/xLANk0mUW5GmRntSFCjEENW
TLSH
T1CC9302BA9E2646E7957E468176AE780CCE13130D709FA9CC715C639C21D41C92B72E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 4583e87d65b7dae0bae4c4436606c58fdf3f116a352c9ac3bcdcf931d6efeee4
MD5 b206dd7871df082fc8e99fdd0cddcff5
SHA1 6d17c745100ebe2150ef9327070d41648c446007
SHA512 49aee0a083a9151fe552dfb5dcc4e8f9689bc20ee35b1cd0771015291cf01c58107a3a9e1e6f6f0e14ccc3d38608205f89fcff38e3a50a95cbaecbde90cf37c6
SSDEEP 3072:0L2u7sLxK4avMAi/v8XsMjiJpJHHWDjeqT3Qw/xLANk0mUW5GmRntSFCjEENB:0L2uUxK4akAMU94srOk0HOGm/SFyEE/
TLSH
T1181412BE9F1B19B36C6E496B718C3D09CE22124A515BD6ED71BCC75DB28C1804AA3F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 b6b99398224f2f3f65aabb9495b2c76d9b9060fa9a79b4517a21376364030e7f
MD5 640db3760da73adfef0176f1e915b1a0
SHA1 e31b31523ee78b9ae4bb7989254e22d9b33de0c5
SHA512 684bc5e9df88022a3b30762ee2420512285cf1919ae80531ed09355a1e6a88dac93af0973d203799f3a003c13505743277179e828e275b98d14b53afd597d0b7
SSDEEP 3072:0VHu7sLxK4avMAi/v8XsMjiJpJHHWDjeqT3Qw/xLANk0mUW5GmRntSFCjEENB:0VHuUxK4akAMU94srOk0HOGm/SFyEE/
TLSH
T18F1412BD9F1B19B36C6E496B718C3909CE22224A515BD6ED71BCC75DB18C1804EE3F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e66733335fffdf7660922435b9f53d5da6e1809a16098e80468418c65eb430e8
MD5 8b3bf88494098b6222abedf28ee7e1b1
SHA1 36bb8983d2a76d0fb62e1c9ab0e1919196a664dd
SHA512 ca8335ed70d58dd3f06bd6a7297ffe95ebdbf0f6175ab0e5870f8b8fe7a6397b4e60d0519b90afea7995fe1ee0bf655ab143f36213d47f8a5fa9878a0556f56b
TLSH
T147D0A738769AF40AD629103342D15292236E894234A28510F95DD0AD98256B997EA187
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1661c2968f851b8bd19cd9d59c941be0b68051fdf0c97c0e55bc59caa3fb56ea
MD5 5443ba53ea9c982079f1abc74c5d77dd
SHA1 5e5061ec65f3afed5011d0222fd155ac745036ff
SHA512 80825a8a4f5066a4ff9b344ad058b31e62f3edb37ac7a61684e6deeb247f14364016dc552991a4335658c3871d816fd5a3b6d4bb6f72b0a9ffec4234a2a67717
TLSH
T11BD0A73C764EB406EA55207381C0A681276E485632B14651BD5CD42E9C169B596DE187
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d68b8059d1fdfd8541892ccb136bddd7ec7601b55110e2cdd4c0e5ace97d9da8
MD5 531be76c0b4d3ce6131509c7d95980da
SHA1 8d06c8ade4d281ea8e43a1dd0a469db76987e5cf
SHA512 3f61844b74b97a902b9307c088590e72b7ad0e95c0f14948ae3780aa3e04b871d8e5c5cb6ca5f5fdf524ad8258178623c85c528a35deec8559c2d1d114436d1f
TLSH
T125D0C05C12B3BC35D4CB987004C13B03323ED893659187307C2234B80C0304048960C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 124add784983f4b3e9ba22eb8c5255ea25656a1c777d789f7704194edc1e3343
MD5 88e3bb4183c64d5a0cd11c7a071bd395
SHA1 63292c5981f3b035e5ee7337f571ce8c67c3e920
SHA512 628b14eacb8cb259fd114e4858b6c6e4a4d1060d7a5186def6e95333c3ac595ef4dba06afc33c29d1b5dfdc2a8235ed73c6aa1de6d6e46c07ddea96690738280
TLSH
T164D0A738764EA406EA55207381C0A681276E485732B14651BD5CD42EAC159B596DE187
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8b1e4ba6890ec60cfe9f6942acc1937ba6fdde042b45c0a2e0b7e13ade701cfd
MD5 642961cbd4f67f82b3038bc1275d24c3
SHA1 f1df4ba11ac13409c392147b2a9da411bc9cd6eb
SHA512 4f7f98f2ebf15c98a7f379a7975f6dff1c7086a1e3cf81d3daec8c9be6212ba05fb4eefc5fa2c0486a277860dc8b2aecdded5e174409117a0736b1cd3b8443d0
TLSH
T1CCD0805C52B3BC75D4C7997045C53B47373ED493659187317C6274B90C534504D961C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ebef36b88d073aee5c56218c02b8fc7d872703560501b038dca106d8cb84e849
MD5 cf00b50b48eb5b0c32184235b874ff04
SHA1 319d37f0d7136db1062e2c6e23721f05514a9d98
SHA512 2ea94f02910fa37668d85aa06c4bc47d1b20691cd7b16ac6528dbb8a7d15737a010fc722f10118d9a4f60ec78230e40066eab28666978a21f13dd6496dbdc3bd
TLSH
T1B2E02BAED822DC2B0CFD075D60A08649E754134727805A0F3A3C910D8FB563A4185C5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 9db2be270f505d26cb1940d558e967685cabc3eb334abbd9480c370e20255060
MD5 fc8c444d11ce1822afb749eddf422592
SHA1 540db86317a9c336bd5dec5bd87c4e7127a4550c
SHA512 05e8ce5134f63d1de382fff96f558a05775f856b39b5bb274848eb0c15dec4a4ccd438f2b188f1e4b773950595efbba4ff0bd76dc06b965647919219c95f31af
SSDEEP 768:KG78dc8b68b8Tl8cRLRF8VpZVJB1e8N8nfdL9zMY9D0P55:KG78dc8b68b8h8ORF8jJB1e8N8v19Dw
TLSH
T15113927E3A5D0C26DAE7947C5CAF4B3067B2CBE0E4C106237F71351187A535A7A2E609
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 98108032545279d75795b90f7c71018eb1dc357306be43399954e21a7d4a23a6
MD5 939b6918b862cbafe78041d0aea337fc
SHA1 e778e1751e21fc213ed7361e7673bd2e266ded54
SHA512 446c839b074ce1b707a9f660270a4583c95f99a983873427e4af44e17bbfbe6705f50b6a978c80d82436d537070421d5bbe6428eeebd0ab082b348183af2bba1
SSDEEP 1536:YhPkL+eE1iEF3/U5etCJ3TT1AxaJephwI/LFzy/CPTEX2gUx:Yh+E9UeikLIqTc2
TLSH
T182445EF70955A01BCFA812F5E2133A3DD177015D6CE1F8EAE67C0C952825B22B6BDB84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 9f885296491301e02f72b04fa9379ce0658b79f83ded6da16a863a2b7549471d
MD5 bad2bf401259753e65bdaec04ab7955c
SHA1 b791cf145fa4c5a95d109d170ec5551647559b81
SHA512 751ad68418ed47166c0095733f03bd255eddeb743100e2bd1328ad75adadfd4545da911bf4da9eb1ca8d1d5b0572cbc7fac642679b203f658db67f79f2fbb306
SSDEEP 3072:gb5mviHqu1GqR6lEsFopL/H+Weyl7As4sBewP1rGQ:i5uB+GqMEskr+WeylAs4o9GQ
TLSH
T133255CEE8B382C87DD6B4D70B4E0EC22BCB412D37619E1D34818C99097963C6679B6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 573febb831b665308dd6209beb6fabebcc55a170e75232fcd9ddd0e9fd79dbfc
MD5 6c960aa0451deb6e87e79d339744175a
SHA1 bb5af72803b0c660ae06f42442ba217d6e2300da
SHA512 eaf278f4f713dc3a96d9ffc1dec6eba6768da4f48cec7720ea5b722a15a913e2b338e37e17db8f76c5820e511dfbfefa79b4dbb26ce3248b11531580fb13a663
SSDEEP 49152:IuKu0h0c5vFrHUgCDNa8uX05z8PH239MhRC:a5hX5vFr0DRgh
TLSH
T1B6867EEEC6785C83CE678A70B4E0EC477C7412C3B555C1D38958C69812AB7C1BBE92AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c5368956bbe7d1f9849ecb80b93b50e49e2abbae10ce461f0c3d333aa53962f1
MD5 38d007a1b276494f7313371279b244a9
SHA1 e3bd5a50da4ef77ea375ed886881a5bc5a9f545b
SHA512 f9602863afa0472b95d50c652e46bf1e3e56340fdfd51c947866e3713ec1ea635710141bb49ed5de1db76c7c6db36cb3d0fd17a5b4178c4db55ee6cff0c87b9b
TLSH
T1A4617254568E8874EBE341B1C6F61384F7349BEA24033E3135F5863C4AD6B91F2B0B21
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 10e6b6222a0f9776aa509fa70cca04596ae0af7999e0c00f03a352ba36d4a039
MD5 72dc315904590054335c1cb32d4ebbae
SHA1 772bd9ffacd9c4987fde884c6f1a230b4aea78d6
SHA512 4d60019b8ecb048994de367dab940a23f3cad56385e139a4c6a4b89c1aa085e0b70603d74067e41af0df69f0dfe54c3a3b46f0ba6c9da7e5e8ff99d4fa9d7de9
TLSH
T1D3E0D8E6A5CAC26DA5A434C78138B78C818034C3D796AF132B00C9C4B743211BB45986
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 e7b2562ceedf6e4a5d4851708b4fc3707601faaf22d3459c15e9a6dfa4f7e3f4
MD5 dbb6d4589142be3212f6a9fd5fadbeef
SHA1 28fa6bc308fa208bded603b6a1be5c76d5078757
SHA512 e7cf53b65fef3daec045e74ae4960efaece493b0c63ced953775999c52d5adb2b93400584af70d6f3f5a669affc22ef94277467dc147181cffa511e4b1f7627f
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jQlW5LUK5fKFtIWqYpU:Tyi+7f+UZD4jJ/BclWxUCKFOWTpU
TLSH
T142E2CE4C3B11F912C8ED733DA1C2C6F05EFC682C464DB570963899768C53AA2F49E10A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 e64faadcd7eec8ae02469724f025d4dbeaaf013eda2c2765226464da6c224662
MD5 20417a551d454e45a878899cf94e499c
SHA1 96e9fc18a135d43088a3416b2b7f82f8836a6dee
SHA512 e4c246e24fbbc462b80855c4fa31f9671eaec0e46bbfec9dc5f5d5ca73ae4e03c8d82c0cd97f738e18864bf05a5f9fea0ff4ff5982c8287aea12c627a224591c
TLSH
T127E0269419DAC27ED1DC7897836C674C86D034CBE2983F82274B8884F303F85E3B6284
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 6c2a021030111a847bd86b3b8a45fabfbcf507d2144e4c4737de7cb431211e4f
MD5 b8a069e86bb302f62c414bef11d993b8
SHA1 30db9f2372ba5123b938b6c69e886014f650833c
SHA512 66d62465d0f7d1fec4e54821d6e2377d8048948837426846b76daa1e18c1f80450a1903c55caa2551cf619cf6ba8ad190251015fae5fefa397728d418ddde0a1
SSDEEP 96:nyaGIU+bGz83uy3+u4tgp4DLjGQLBze9z3ra1jBHMsDEuspU0wbtqrOQpPfR4J+1:nyff+G83uy3Ct7XBBK3OH7DXspU3iV
TLSH
T1D814210E5F353721CDBD917669E744B35D6CF03F8B1266DA686104B4CEE3A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 619c191578c62359ff7fe34d38ad0146608f875781ce33de473d17197cc56ad9
MD5 b9982e377620e68227a3eecb54b1b4b8
SHA1 4e44f2da338ba48d73f485032491b8c44226f84d
SHA512 c6795f17f188b324114a64d14a7f9e72bd83b856b5aca0f9cc47a47242e175b9bd8055e2e88dce78ba2068a4a2c011f4e47be0fc01c4bdcda6ba03c9e0e71213
TLSH
T13AE0D8A15ADEC17E92882047832D775CC7E03D8ED68C2F011B459848F147204A3D51C5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 a84f789acb9fe4e0c65567120fdee1dfacc7427693a5f2fe8076d87ecba768db
MD5 a8bed127ba07108a11673c7daf4d3eac
SHA1 ccf9119a3002c519fe1e49f792ca54139b86bbed
SHA512 6e6a06ffa41a278ff7286c159c9639106e054b56091b53bc629270736bfb4f07ce08c97b1b18e24c5b18b63501e14306cdf131dae828acc28469c8d509adb3f8
SSDEEP 48:T2SLopFMatSaw/auUOt8Byo+wnoUgvJAwH:iSeMatUaAK+kUBAA
TLSH
T10292014E2F346261D0F14B77E9D5855A2F7C112DC3A326D9ED1460F3CD9299BF1050A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c59876c5f44842746be60a69b7f73a4dad9caa50b28b42017656413a87ba2378
MD5 1a375e157a6f369c437902e5a2e83860
SHA1 9acaa6287e7c5313dbbc6ffc5ebb042ae5d2d238
SHA512 ba13294cf9bbe383bfa5c60757efaf9c7cda6bdd507e258dd42cd9bff5e2d0e3c1a5d54cad83d06ff068dea4af3c4f470114823e72d8894db1b9d720fe50284a
TLSH
T15651CEF3C3F4856DC9119AF0AA146E2BCE5D0914436C3D5AC9E4EF5B93E2470E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4409028f0044ac8245b96c35e593cc38fc183dc90c613164e739acc8e6f52600
MD5 93c0ac14ffd0c823fe7f914c7cab3021
SHA1 ceacb937daba9c96c134b8c85cdbda5df4859310
SHA512 dfce23c3be348aed2460aa8906d72b602e8319e423b2089c40261211edf01abed353f872c2703a4459f59fe6b3ec0903b4bd926dc8ae6c74508e91d6c51f17aa
TLSH
T13641CCF383F4866DC92196F0AA146E2FCE5D0914436C3DAA89E4EF5B93E2470E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 840d52462104b8d006a3ed8e924a99ae078f4e4d56020f46ca1408eff2df7bd7
MD5 50e4ae1bc643c0ae3c4715345d8f4569
SHA1 e27b41bb626aacc2d137198292d58102a3955ff5
SHA512 91b1068850b4e6de35cf6e8b7a04719d145e2c1784d41b3d99cd6732ba2c8e39bd856ddc2153026c741aad2af0781cf22d6584ae5440ca73266d27c33250818d
SSDEEP 96:OIEumQv8m1ccnvS6S9l9eH2KJky8fXJkBnFbkQenmZ+4g:OIEumQv8m1ccnvS6A9yay2afrbE
TLSH
T1F5F200FA07276205D99444B0A0056B8EAF17000B47F6B7EC76D447E3F3921E2B6B979A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 6fc212c5df1e634ac274760e5f163c37e56ce0f19503c59c6fca8dd6b18dd8a4
MD5 88cd39fbc14070c142991a0d4d4d27e7
SHA1 b9f5105533b149047c59958e4a3511da8ce4d824
SHA512 239a84ccf9170dc30faf748c1cf0d8a7896ca179413ae80e60cd01c74b2fdd2f5ae28df4dfaff946ea08e4bd9fb3f6dee327f68c664abb3a396f75c0b86016cd
SSDEEP 192:sxZiR6pyMqZ/K1Ml81kx/fas5WpV9TgYbbc6zodpLvSHW6+WN5Tla95/Y1zWJeiN:sxZiJfx/fas5Wv90ecBzSHb5hq/GLZa
TLSH
T1A172F8067938597BCCD6D20AFA45BF53D7F9152392905E489AFCCA1C00E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 5e837286279cad6020a08d36ffce099bd6a1ac7451038f24b24df710112cee4f
MD5 642853300251910b2991eca06714b301
SHA1 461d597481f379ec0a2ef1d17a7e08e890b83429
SHA512 7129802ef83efc260b9b69df976ffbb87e6aa96069b1202c9d97c0260df735eeebc8c802e7b49c8d53d6c29554cf536d0bfad6fb299aeea55f52a8cd4f459233
SSDEEP 768:Jdc+tx27pLuL/VRWvV/qH8F1+UoAYDCx9Tuqh0VfUC9xbog/OVZDFkLlMeNtFroh:Jdc+txWE/VRWvV/qHu1jaYDFkLO6t+/Z
TLSH
T17AF20B3B6C0CCB7E4F840E9CEC2A7E9E6DE801CB96988D5447F9885C02C66EB55171DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 d116c5a0244fb0f6237be101e601589a57ebf7688efdecc7417529aef1e229d2
MD5 fa848015b194fdfce0523b0f8e047e26
SHA1 064de5db45798470355a3882ce7f320179f5bd73
SHA512 40ee4de1fc5c522009d94f2749b27f01383505efbf555702df58246748fd6eb01a8fa55426ded221ad0d0a4af91a604c4d4b3e0e9c20890450f03700907da01a
TLSH
T115E0269027ECD2FDB09A344303A8934CC3E874CBD2C83E426FC9CA85F247604B2E2180
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 dc6a03f5bdd51c3ffd398c7e262fa4cea8f88c673b2eec564bc8d0a5ac20f0b3
MD5 3e6fceb7a9d362c144c9c452647673a2
SHA1 272e7e3c7a8166b68078ce3c7ff6d359ceaa1238
SHA512 e234195aa79828c4b424f9ee5a76e5b89161e261f6b5dbc23e378ab352ab853accd2fe9e548e7a2e126f22d98343a5925fdc7fa9afd7d4925da43eb5937b51fc
TLSH
T140B01258BBC2E943C8CF18774D98B7C05220F00108C00E2368055F648E493D63F13C95
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 68e1f04053f2929474bd2a68040dd7b0ce6515b11c1462b0923d780cd1b5d4b8
MD5 8b12483739472e5a1f760983602e50df
SHA1 b70fa5ff5d38f0617e2d68818cae89c3b5b52f6a
SHA512 4bdd4f357ac08c58a9b2e40ab346e88027ddfc1ef795515c6e6bc7b8f95cc296d26aa51c9843c855cd922162b67550e914d2f523b7eb6ff930d660ab7c565191
TLSH
T157E0D86467D9CBBEA1C924874368E388C2A37887D6D82E616F09A484F30724073A3140
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 25dccc0ac49ed64327a7d48e14c8d2203d76caf2a96006bb215c8a383578acc7
MD5 91e1e93536c36f54ac657dff8f404df5
SHA1 9afa85e4603d642d53036f8f476a56556e388792
SHA512 2a79739a832ba01f1bf4dc542a42300cf1a0d1ff6c6fcc1daee4f164d31a4404ece2e0e7498852e4ae58f91869c365cc40b0d082a1b1682418dabf2b02416b5a
TLSH
T1A5E0D8B05AD4C67DD084648743ECAB4C82A0798B93943F91AB094484F303640B3B5190
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 081a100aa6fc711a5d1a0c9f4cad71b1ee36fa88c6dd62f2f45bcf3c4be1a0ed
MD5 908e57f3723989fce7be37c3996b3084
SHA1 dd7378b4f09a1e09d52bd0558a4402e703c0a8d8
SHA512 6a1e4ff0b76f28d4fbadf8737b3f775a46101c0b6ef9ff79f750345f1a35aa69414754f4c187c2abdb2daec0e2ad36e3b3e530355ce8a7fc9235314ff2e1eaf1
SSDEEP 768:SXEpUTaFkzG/T1ddEtgjzzLlRQbz4BD30LK4xfaPgn8/:SXEpUTaFlz0LK4xfaPgn8/
TLSH
T105C25A10313B02803A7E699D9594B86F66C270B73058A83B7BB840A65F6FE10DDFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 960f4d16e87ef92413780b8b35f8c423cdf8ceb9db4e0cdedb7038be7b85d253
MD5 ab37b99b94d22205da6014c376f308ae
SHA1 2b12b32f488b99a277f58027ec5dd0efbc7aa6d3
SHA512 f58e774bd297fe729924719d4df0b3c9478316f0265832d0436810a3859b047057366a725c757f0049d63017cb1e4eb50bf4d8ed172635e6987b3cdcdb1b69a0
SSDEEP 384:SXEpUTaFkzG/T1ddEtgjzzLlRQbz4BD30LK4xfaPw:SXEpUTaFkzG/T1ddEtgjzzLlRQbz4BDI
TLSH
T100B22D10313B02C03A7E699E9595B46F62C270B33058B83B7BB940A64F6BE14DDFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 f929676a978cb1a36b83f1353be12b17b75437cc3b31f43fbfaf578609012ad0
MD5 0f00a10e4ef0e1928c24dfbb865e4e1b
SHA1 7f039dc78e94ebdce2c709d07edec5fd8f4f8ea4
SHA512 b1f8716d67c7d4effc8e4c7ab4c3a5fd771a8bfd44557f703d3673f8475074536b4c2b409f82a28f86d980feb45526d834cb6dd7e94618fc45257cd2e39db0d3
SSDEEP 384:mxti7il3idiKfQ9QQn7IMW1hPJuVd6vPkxW:mHi7il3idin9zn7zAhUVd6vP+W
TLSH
T15F24740A7B747001EDE6D9725CB080771E3CB16DCF22A6916DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 6a45ff5db9f83370605b6e61517397c9c1ef3690e262e432cee334af156a885d
MD5 d0967f909128c90c18a67ba16b917131
SHA1 fd020818e726873e648b644abc90d60fe8f21d7f
SHA512 2250d62ff4c6121764a398ed8c4c729456a9f606bc6b3aeff318417998eef7914b6ed0dc82a6953a473d51a56a2140133124198cb244615781a58571c2e8f3b3
TLSH
T1345114C0A3BA54C96F89AAC2C219751375E13E6F260E5D72632D44F49F4C8288F7FE21
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 461bbab77c17faef0619ca11cc07ba306134ae81c9fa9b5dd4feb07b71ae1187
MD5 d677e6581a673a54b8b47c4d4383f96e
SHA1 d86c10ffa880cbed72908e01b2e29a725d586f05
SHA512 9e0d5211eb204b86d3f38b2aa5e8d39761b12ec1ed167e3e083f0235b0b0bcea345bfa69030834fed0bfdd4f7b23126a8d26490933dd9c762afd943d8f8b6f18
SSDEEP 192:krkKgOpf7x7AsHRl9HNusH+HnlQlbQsIIITbjMIMZIYcY0:cVSsTCswGQsIIITbjMIMyBZ
TLSH
T1D552721A26051B37C19E5F77027ACB921BE6C8814972223D3560988FCDF2B979BC51F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 57ae9810bc830f95a58b48f0f7ff0508b8519eb2cacac0412e0acce7be3d69b3
MD5 07f76ceca48192a036786019674d86b9
SHA1 4d2e9d9e9c45023c8da07e8714e0bcb6e2f9aa7d
SHA512 376acb0abb377a645dd7217c592dcc529076706bbad9c5b2a57b97e05f1e019c2e1b62282c5a5d25633fe18b4a328fb1e86e8398a061f7aa2717929a15fb6f34
TLSH
T150E020507DC5C2BFE09D30870218575C82803487EA942F457F06C4C8F303A40F375541
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 d2099344f350befee18418ff31c1738d7f80e470913d56530f1ff7e2c941e183
MD5 a85c16bf10f68f42540abb4a48173519
SHA1 a36168e5af033696d15e8e049b1d91339a75bcf7
SHA512 1f8769c2c3afdaee09161b33f289c7bf98e382ffab11eb79b6270affc0daa05c519cef945780dceb9e459ad098021ae6b3773e94da11ca5e14c9c577f71a0e8b
TLSH
T12D216056F320C158D18E8A3EA46E97251738E8169FBCEC0F447924756D72E041E8B7E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 062234b7a7a21e214e8e2453f5a5d57f0ea40d3cc68abd815672b5677877ca87
MD5 3006054c0bcfb75ce736ca3d2782cbd8
SHA1 483981214e5a4282ff8d8964f9c33ee90321a594
SHA512 f89f1221ed2360dee1f465fcced19752c2160f0f09c92f0076e31a2584fb84d775b53ea8d1b41eccf86b0c32463cfe81b4a9d2863a12175c9b937ca4dfb47e65
TLSH
T1C6E0D85079D5C1AFD09570870378978C83913887EA943F812F028A8CF303B81B367141
MD5 SHA1 SHA512 TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.4\data.txt
Size 145KB
SHA256 7dd75cb36b4cc7c5f2df67bac823b9d9d2c3653172ff73ce6cccd39683970a08
MD5 79f8327a9cd094a4edb1fd159e289e95
SHA1 4d3615906d16d8a807e1bd394bef139507ce12ff
SHA512 9ab212871ccbe15c062da9898a782d75d208a2591b4c804df3e32581751801889f8cad8fae53dc0307cb89172c4536d35e44c06d63df6928ec4c4446a55a1343
SSDEEP 3072:tPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEEY6lCuZY:9X1aI5aZoKzMJ07NtxoY
TLSH
T1C7E3F110CDC51FA8CEAC362C60FE0F1A63D1C69D4867A5C9DB63FD0A6F97A0492275C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 7fa4b0363ae5d7767a4f953e604f895890125b62f42040d4586e615447ff2bdb
MD5 cd123867b60120f51cc239f84afb6470
SHA1 ca4f9778170f9d78c3a512aa20da120c4b6464ec
SHA512 bcb15cbd0fb45f52e659ab4ed9f1f1ae1f4612fec140208be7dbcc76fe310cb9055a329601293e5a7091b41c6bec25835bd84f1f93a28f318d97b995e9a86ffe
SSDEEP 3:MsEllllkEthXllkl2zEflBYlll:/M/xT02z2Yl
TLSH
T1AC4404147FC40545C54030304055D3D05370F5110513574334F1443F5CF75C41C44000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 833553acdc203fb0ff44e396d4147f7caa0d641c72672f58b7b51c7a410d126a
MD5 6a85b39429e4c98b00f79921a81ceed9
SHA1 f2f925845c33464e9fa6264b81c9dee7ec29a00e
SHA512 fca14bc3596f5d4262fbffa634dca83bc3846236c7a9cdea9f45c6ee3874859b25a69655261a039c09606a375a4852ae9792cfc8bfde9cacd58f2c5033040ae3
SSDEEP 384:njiFavqMg3sNo8TUNTUlIm29JC2vRbfYPfLKhEUCs6laMdnS4mtmk3rNlk+5vI+U:OFayv3LwgJqPfLZUf6UMdS4smkrY
TLSH
T14AC23B75E898DABBEDE78F85A7497A07EEF001A7D58C4AC4CAD81D0E10D719E134BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 c508bc16a769df009789d0ab065de5d1924c86473adad281e5a5ffb578d8bd13
MD5 baefb8d610d7c1f22d00ced86e78d370
SHA1 f7da517f8df6dd74909309ef9bdda9e9b01e3551
SHA512 309ee5312ed916d9cab253ad7a592b0cf3c4b1d8f5286ce35943c8d5a308a329de5d25dc908e5767eea0d178ccebe000b131d9b384cb48aa07cfb13228701125
SSDEEP 384:nriFUjccCs+Bt0S34sNx8TUNTUlI4p9JtpaRbfYPfLKhEUCs6lMuodidyGXU/Aa6:GFiccQY+wg8hPfLZUf6KSUGXabW6t4
TLSH
T11CC24B32E899CD7BADE68B85F34A7657EEF001B789885ED8DAC85E0C00871DD170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 8ec8350bd20635d04dfe6e27236b3633f34ae61a8c85107f7f1c497f494657e4
MD5 dc231d9e998ae41c54606dcdf4ff494f
SHA1 c89505f9456d246c8fefba74c64273846431bfd0
SHA512 33d3f83b9b89e7ee955443b69fcbe426fb80d42051186711f7e3652ba50d63ce6fd8856ef175a6a46692b018095f71984513032d23210c4011ef11565010be6f
SSDEEP 768:pFiccQY+wg8hPfLZUf6rkq2lIKA7HTabW6t4:KccQYsSQxlIKMHmW24
TLSH
T102D24D72E895CDFBADE68AC5B34ABA07AEF001B78588599CD6EC6D1D108B1FD0307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 f629e02c598bda666f40bfaf4a392011a20c95e306898c8f10c2996364e1e39d
MD5 1b5c9aaec40886f9d79857f02c844ac1
SHA1 4b7e4bfeb040eeeccc7e7bda108285a58fb051c0
SHA512 89bc224064bc30781a84c939367d178ad82b0756cf0cc03746cb736e3e2d602143e44ddada60a411e6f79c3610900c852aa773f9b2de19c9aef0a7a3fe810ff4
SSDEEP 384:nniFavqMg3sNT8TUNTUlIm29J/07RbfYPfLKhEUCs6lMuodsg0VdnS4mtmk3rNlY:iFayv34wgKmPfLZUf6KcNVdS4smkrY
TLSH
T150C23B76E898D9ABEDE78F85E7497A17EFF001A7D98C49C4CAC81D0E009759E134BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 18a39ca476f8719ece994f4d941d9a798bb5e4eaafa73cfae4a7f9023d8e09c9
MD5 a6b0b471cd490491caf41f6d7d97d72c
SHA1 2cf21cbe5058252a62c21c3bca81f4da8f843986
SHA512 a81cd2f20884bc8bf4a5a861ba103516aa62a187e20af5bd7073f30fbae77749b898d3ef8221d044de15c8dc7bbe6fb84803c362d29751e43b57b0d6d2c7a702
SSDEEP 768:WFiccQYowgzhPfLZUf6Kan8SU15p4e0AXabW6jyh:VccQYVSL0n+zAyW1h
TLSH
T1A2E21872E495DDEBA8D5CAC8A346F607AEE00173868C599CD6E87E2D309F4FC030A955
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6c4ffe81ebcca35b45b7272fcbe4e8129b511ffc7010211b5b867628b2011a77
MD5 47dff04913e3a6b51fd7d986bd386042
SHA1 c6044f0600f901a4729a2cd494b38afb13881e4d
SHA512 8aaf17e2d6256205f3b60d2e15c59d39f74315fe34b14cb62932be249f550b1b16f43513949a112f37ae41f35847f80e7af1f59cbc75f5d401ed66a223acac71
SSDEEP 768:WFJccQU3owgO6hPfLZUf6KaNVXabW6jyh:MccQU3TpSJVyW1h
TLSH
T1E8C23B32E899DDBBEDE68F85F34A7A07AFF001A795885AD4DAC85E0D00871DD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 5522c35a197f8fa1e992a76c19db3b44e5fd1010647e94abc2dc15a1071d8ff3
MD5 8b3212ef0ce5792e1ccc1a250668a3bb
SHA1 752886216bb68021ec343945e7bbd40f66e4cb4f
SHA512 563829c0ce9321965593653d99c75f863951f293d50ff8fc48a4c8ecb69717f45e2de1c366805ba65ff235ffb737de677d9db83eac06f882e5d0d29be4114080
SSDEEP 768:WFiccQYowgAhPfLZUf6Kan8SU15p4e0AXabW6jyh:VccQY6SL0n+zAyW1h
TLSH
T1D9E21972E495DDEBA8D5CAC8A346F607AEE00173868C599CD6E87E2D309F4FC030AD55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 a279b8b1f6d96411cd2f1e0daf7f787e2dac662357e604f13c256ecad96bcab4
MD5 f9975ead21320e7174b13b1532150f56
SHA1 65eab501f12fd65797b4e5534081d0fb5fe87510
SHA512 8281cc712e919e2076f1ea26cb72b40f751453673ba4fc1ea559b5bfe7f3e54214ac1cc9aae43501e23ea9035afa112b273f56021951d3f306501af869f7250c
SSDEEP 3:MsEllllkEthXllkl2zEflsNu:/M/xT02zXN
TLSH
T1D2440404FFCD0405C54014304451C7501370D5100D31574375F1443F5CC75D45C44401
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
Size 19KB
SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
MD5 3495430eefd1e96e8bd95b67ccab0f91
SHA1 54129d2d72e062ad36a66922331818e81bd34df3
SHA512 9197537719b70837ce997cd2b168c6bf6fe877811f81459a0c0f1363b7179960594761df147c85034c628b8e9a3463084ac26fb8bcc3fbc765089adfeea56f6b
SSDEEP 384:/jA5024xyUE2oAklQth8rYWepdFhgX/0lRwjTV2qh8NmrbijF4E5C65aNbC:q0WCoAklQcrJepdFeP0lmjTV2qSV9C6P
TLSH
T162925151887035622F2F50CEE0583F8E1199767540AEE6DE9FE48666F28C0F37494EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
Size 4KB
SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
MD5 db9a3dbc4820c8d84a0a569be1234dc0
SHA1 78fe9b49b800627cd2eb458cbe0251591a2a693a
SHA512 a6735713a801d28e644b31f34335e29d55a46d4b263e923cbec9b57fd18f8b0cecf9b78fab578065207080faa5e81156d04c8fbedb436b718893b6d17123742c
SSDEEP 96:2eHeEcb6eD0Hl1LJEmjwsi4RjBzGPeKkF7y5W4jNU/oyw:2/EcWeQ0d4OZkVkW4jNoo1
TLSH
T105817615A4A024423F2E5668E03C76F911E8253880F6F7D5EFB19975B30C0D778E497E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompatExceptions

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
Size 4KB
SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
MD5 26c006f350f70dbc8c18098b773c3d4c
SHA1 eb015f7010dd74c874675d0599e634027363b7b4
SHA512 0f56d119a5f89689d0e45a6163133048aa95255447c4156d4fb2565f45c32dbb95adc39666a833d2127ce57f3f4198ce45d2a174955ec088bcdd2f74f59b3f6b
SSDEEP 96:lApOOxO7bthcySBm1yJJzyEsQBCETe+yH:+xqT6mcJJz4QBXTeBH
TLSH
T13F91B8037E4409276E95D005C0ED209E2DB5ABB0C85DDDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
Size 668B
SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
MD5 95aa820d67ec466eb3444a9458eb7e56
SHA1 f93e178ff40310e071e4d596f0aff0514666f787
SHA512 15281c334f013f0200ca2d6faaaec81dc5602058cf3522b805e21ca5f031cb4ca68606d353e6745bfb86f07fdd6ccc892942aee5ad7cf0f9f0798a4d7f497a47
TLSH
T1FE01D3D7D86197676FE25AD1D02E73C9F04456F26050F7C10F55315857A8A432794CE8
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
Size 1KB
SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
MD5 3d90e5235a4bee8f1dccfc2aecf7c585
SHA1 5beb333084b3af33e7fbd8c83326e18650a87f85
SHA512 c81af723cadaa57f638b9dbc60aca5d2600cebb8282d78a7b86edc6b473bd3a1768c8fde1b11d50b6b967b2866495655de09577973778038434bf4b513ba74a7
TLSH
T180214F8685D038316E6E148CD55C3B9C12EA3A7040E6F6DCCEF486A0B50489F7280CA7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

TransparentAdvertisers

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
Size 20KB
SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
MD5 6959a6835772c67f4e72105e4be259a2
SHA1 72d1fe9070a5c0eed55d989cbd961dbc5442796c
SHA512 98085236a15e810642602e5dd475aa5a9532bb38917aef784e977bb398b3f9e39f7966370d39c1b554cf3e39858713e8b45bc27fbdb8a701b2a903e453a67591
SSDEEP 384:5z8Qpkm9jXUmEtMANAgFYNX8htrCoEeZCNyn9CbRqKi8iyZd0KE:1lb9TU/t9NAgFYNMhte1eZ0yn9is38iT
TLSH
T10292C261986035523EAF019DF1993FCD69A4633080E9FAE9CFA0C636B35D4D335948FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
Size 3KB
SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
MD5 e018dfa2df54c80ffbfd02c6d2ff5430
SHA1 de3f876b05355c6024d76f1bc24a552e532e2a2a
SHA512 b6d7886b4094837b271d1aa1f72b8c521970527552186604bcb83e17f85fa4a22e658628f79eca7d164ace781555abaa07c423a380fe87006aaed77f53e37838
TLSH
T16C61D918252024211F1B526AE55D3E8E69F4233904F8F7E08FF04EB5B10A4E738E5B77
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
Size 5KB
SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
MD5 dee2a727844dd3cea088941e82722406
SHA1 24ebec9b92eeb6af83841ab02e858f415580f719
SHA512 e48edf5f6dcbbd615f42f1b3181b2998bd700508094466009a6a48193a48c3e30e6c4d71cc43aae81d18a88ad9fd7e28eb50a0a52ca6889a270001fecdb64dfb
SSDEEP 96:PwYuGYJywH2R7pBBYy+wf0yhZ7RBJ1ja8nBwGhQmxpFD1Lcg:Pnf03H2/KwfNL7vNTBR
TLSH
T152B154B2855079922F7D01D2F9D6225088E482715CBEEBC747A1C61CCD1EDE735A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
Size 106KB
SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
MD5 751e7cc660220e7464935a9b90643274
SHA1 05a725af45c74a9e129839b2fa7acca5d83066d8
SHA512 bc879a9bed224b6abdaed2581f948fcad53361b17dc76d5b5df10607ac893db2f39bc5ce5fbbe86e6392ae66f29fc93ac1079fd2d029b9338697b004325c4b36
SSDEEP 1536:PYNbfqJF3b6wgb6hh2Dgf+x8GC2kMYdSKySPxVMRjAxUR9Wv:Gbi3M6hjf+W2kMk26VMRjaUX4
TLSH
T131B3E73C9F70C4295EE7000B6C28B95846142BD59E87DDC4EEBF7A090272AF536A85F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
Size 2KB
SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
MD5 5330ccc991b45c6f2777d23c7d8afe8d
SHA1 d11187c035458fe1201608a91062962903de2e53
SHA512 2db42b7a6b7f2170f6cad2a26a606ff6357cb8c707ba9947baab14dd7f566df04a274e46e36cee72c43ee87ebf4d455b4af3f6da973f29bdbefeb0304f1d6f93
TLSH
T1A3414422581030617E7D49DCF59A3F0D29D9613A84C9F6D6DFE08936722E8E734A4896
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
Size 198B
SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
MD5 7bb2f4076e4f47781b77d811b21ef1ff
SHA1 fc0feddf6f52841bbd780d21b8e0ddff74fd70ac
SHA512 28356614bc38576ecb37218f9f6f631bd9e55573206c3aa854b91956a33fc828c71f42c7dc7dc6aa86540dab8e345b8f88bf9c6eb56e49824f492854c193b27b
TLSH
T1B4D01250151A5B0D6FEA41D1DA8055241DA19DF474CFF8CC5555B032E68895729C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
Size 3KB
SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
MD5 fbfc314bba2160b09a3376521c762772
SHA1 3566357486c5d466958334e813c90c0a97bfc985
SHA512 e4383491ce5170d0daf4abee61484c62611dfc604549b537d0080f24bfb8cf379ec3efbfb6caf10e7c066ec06457fb077832d5f780d226f0a957f624e0ba9383
TLSH
T17161DD36C590A9932E5D0C41EEC55E700DD8157ECCA6F4D287B082F8F0AD8977D94BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 7906b647713da685b7103d80e806f43cb2343f84943cf08f2b37a88cf26c93e0
MD5 fd3e9d9740fa8c99de6918e0abf7b923
SHA1 dd0110fe202aacccafa8981a4b3dff116afbb451
SHA512 db6d954cf91baf5e641c6e6b773b24bacec9ca001f0aa09a5d0c692b942a38a4296e12460db1ace488a483fb004870eed7864529c15d627d6d916e78f1672550
TLSH
T1C23120E1587C1AD0C5BE19AFB08B78FC84D8C226F6A871792854DD64072A91E654047F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 597ffb6dedf47217c26078877199c96fe46eefb826f9be76636e3bf988c95bab
MD5 172c48f021139b4ec2dbaefbdefbaf70
SHA1 d7f6617c87242372d3da4679e6862c331b3ce1a2
SHA512 9f78731872835d84a64b36ceebbeed65c15b44a355d53ab12978c80da689fb6ddb96f101d77d89730d7b738af850240e8617d9ac8dc93a9c93aaf01fce0a005b
TLSH
T1DB310CE1297D1AD0D1BD09AFB09B78FC84D8C225F6A8317D2854DDA80B3E95E254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 cb7d6dc5bd35c86942ff6c76b5e4a56bb9d3b18b8841de2e8e26ebec04ab1bf3
MD5 a3b0bacaecc837c9bed77474b6f08ae1
SHA1 abf11f37545269496680abda9314eb5fa31c9960
SHA512 3435f9dcc2ef7a6f1e88b5352ffcf5d25b8e597a7a9c5d1a79437f5705675284c4e0b03091dc7762505f562d190b9945b514db03e3dfb21f9b5379301937d4d6
TLSH
T15C21FDE2697C0AD0C4BD0AAFA09B78FC44D8C219F5A871BD1824DDA40B3D95E640087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 ff6a456c97f42fa0f029eee5f500d054b16aa3533062efe768b6fc4b1f5b52b5
MD5 681e4fa1fddfc03ffea1de05f1356e23
SHA1 9d8a67d97242ac945fe11ed1ea7e7aa88a1ae7fa
SHA512 8d2e3e8269e217390cbc829e5940b6508ec6a3f4b8beeee004d6dacedfab7e6a37878ac30de5768c49a40ccb5788e8751f7115f701c75b9e451f18ea8aa727bb
TLSH
T1D5310FE1597D0AD0C4BD0AAFA09B7CFD40D8C319F5A8317D1864DD940B3D95E250047F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 d43c4a221bf9dbd30f05d8a866c0b5d916a942d1c67ba04e138285a8e14c6cb7
MD5 c719faa49ca526e437065bfa859da180
SHA1 b9d28b5f69ede7c4d8d63afcc5ae72a9c2e7e473
SHA512 bb91e05e430ab18ea526d0aac20e7e18a9487ecc3900987c78fa53c8d63185afb15dc3b14901af10f3c5c832eac5bb5f093622859789267b0e11a7bf6e249485
TLSH
T187312FE1587C1AD0C1BE19AFF08B78FC84D8C226F6A831792814DD640B2A91E254047F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 516B
SHA256 a9c3a1a1dfda2b8fe8c4edf73af4c03edf963896b5eff6176428fe4f1178db3f
MD5 1f7ac2cdbe2db1cba99488c2074d58cd
SHA1 67f627ef04ac2f896af8d807e4e1ab78fcf36197
SHA512 e7b2e0336faf464f337546407db6dab9bf0482008d429f316eda81e1b39f72d4083107a5618fc5f3e3e337a4f4f396b1d305a2fc6ebd6491d3e11e4ee8740194
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 65fb5794dc0de67fa9c016e96d489c0f69373241befd7e6a749e378cbca71023
MD5 60d9b0d6349a57aedd374c935d6d25f2
SHA1 97fffb2d8f598675c5e96fa098367dded0a14eaa
SHA512 b808be88332dba831584edca39385fbdcc39138b6db5f08bbc523510b42e6742a696034bd8d77258c66b504d7ebdd282e599be1181703353d667190c45180cc6
TLSH
T1D5412A58A6FA1158B3B77F5AABF6686E447BBD373E07D05D10110E4E4A23A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 147c58c0c2bad6da252a177b05d966a82218c1c837d5da15329d8f6c24e7818a
MD5 eba4429454b02b9117ac48a48db07f27
SHA1 fbdc1a3323ffdc39984a8a208134b62a5fe53c1c
SHA512 2c15a8d4d9c7e6729967feabae56847f4a1feb20661b3222a1a858fa53f3a7949791031a8f3c7620e3ca336a28a2ad0ff340064078077f49bc05142dd7aa891e
TLSH
T19B516068A6F911487377AF599BF2A86E947FF8732A07D45D00120E4E0B22A40CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 389e518c06f44e96bbe80a9c0e997bff5f914fc3d248dde3db2d76ea58c15796
MD5 d34ce191910ceea29841b6ffd7d6a7f0
SHA1 cea849249cf94ae8bceb69eb9ecc8ac28bdff20b
SHA512 32d835f9c10a687dcef4a192048c9e2e76e05d05f896ce3d1a9cd9dc1aa8a3254d958a7bc5690f722e73757ff4986fdbf8ad2d496b598dc5fb2ff5a701d36af0
TLSH
T169414EE13935623F97C7CBC470754C842971F18103AF5A5CAE764435BD5CEA1631ABCA
MD5 SHA1 SHA512 TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 11KB
SHA256 7dd806f8ddde76a02942185f6f747511be023c377b6a45c5abf7752267b1f2ea
MD5 18482e705f13349e3ba204d4eb9e7011
SHA1 4daa72b736129c533a2868ddfa9fda34b5de1337
SHA512 695a45bb3df035f981e3035b2482c287f5aa562db7bb69315463b295b1c39bc5ace3e13cbfc54b38f9b12e10356d895b3c401b520bf0a8f85e5936725b743e99
SSDEEP 96:2kDxFkNjrNKlPfR9mKByhUGL3jO5y7NTj6DxFZF2+fjGDxFMx1W0vnOzFqvjPDxJ:2Wqv81fRgiKjOY7eZ8IUUS4rxF
TLSH
T16B32F1142AFB2559F0B3DF326BE57B71AF7BF9125318686E108083094961E40ED4AB3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 8KB
SHA256 69562f0c672583e07dac83317a43c1028b5abea40d61b0afda36171874b2a9f4
MD5 c15502da3517e5469492afb249e7c793
SHA1 f73f0032a01226a871f8d5ae472c6862a18424b6
SHA512 e51a78317147270b1b8f4727955cb6f68cbcb40ccf6885df2fef2a4131141d089345be3ef8fe4a11abd3c9565ff8284659b625e161604dbf42411fcbacb5e8aa
SSDEEP 96:Uk8xFZF2+fjTkDxFMx1W0vnOzFqvjwkDxFHjwfkDxFgTj2B:U/Z7WIUUS4sWyWF
TLSH
T1A802DF142AFB1956F1F3CA326FF67731AF76FA129319692E1081830D09A1A405D4EB7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 751286.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 751286.crdownload
Size 3.1MB
SHA256 7f33da37489a1852c042c3e7221566d1243f8b7be1bf583e0a0fbbb6dd9637c3
MD5 33856bf8e7796c2f185cd9c1b8a867cf
SHA1 e37daa1157d56bd891236b0c80daf2c174e377b7
SHA512 ddd38cae74334428379f8692e6e4520b3a464d7b1a430981697e03fa37b9dd51af23affc5057d07a3e16f43dc7d7f9ae6064b3c3020b12a8c5b5239083ccfb05
SSDEEP 98304:cAkUMb+1JahwkyV4L+3/1mIIE0/BfWLtX52PMmxEd:3MyJahwLVR3/bIE2BStmMIC
TLSH
T1B7E52392B741C836D97312331F5AE765A57DF9A10E228A4733D82A3F8FB01815A35F1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 772563.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 772563.crdownload
Size 3.9MB
SHA256 b30aa2218893db318c72bf75a3c88f29907eef0a2dd85a6b195af99946e7a981
MD5 81a0ba9f4ea215e887289a0842248dd8
SHA1 5fe80a43caef17b1183bf008afb51ecb7b1b633d
SHA512 e7e99a43d77623e4ce6ecc8bc7e6cbcec87f9205c8b101045cfde6d3c1a113d5475415e5c7c336fd038ac3c8c12d5b1d7bbde937c9488d35ff9309d4dabf5c5e
SSDEEP 98304:OAiuN0V0ZhWQ7LepW4ghq6ZrWecBcG4uK7W:p0VeWQLrhX1WxaW
TLSH
T1C61633217B80D033D2A315325FA9E76D97BEB6691E22425B67C80E0DDF32941BE35F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1276-552-0x0000014C0E460000-0x0000014C0E50C000-memory.dmp

Download