hxxp://footbaljersesy[.]cum

Analysis

user interaction
yes
max time kernel
250s
max time network
242s
platform
windows10-2004_x64
resource
win10v2004-20250619-en
resource tags

arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2026, 19:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://footbaljersesy.cum
Sample260508-x1a1tscy21

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
2412	Launcher.exe

Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
223	camo.githubusercontent.com
224	camo.githubusercontent.com
225	camo.githubusercontent.com
226	camo.githubusercontent.com
307	raw.githubusercontent.com
308	raw.githubusercontent.com
221	camo.githubusercontent.com
222	camo.githubusercontent.com

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Mu\Content	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Sigma\Cryptomining	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\en_GB\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_86169040\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_466967805\regex_patterns.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1723890850\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_104958143\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Mu\Cryptomining	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_86169040\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1272861193\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Mu\CompatExceptions	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Sigma\Advertising	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\gl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Sigma\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\ms\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1625459820\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1272861193\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Sigma\Staging	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\sq\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_466967805\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Mu\Other	msedge.exe
File created	C:\Program Files\msedge_url_fetcher_6100_1443498543\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_104_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\en\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Sigma\Fingerprinting	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\am\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\da\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\kk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\tr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\mn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_86169040\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1723890850\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1723890850\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5832_104958143\crl-set	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6100_858951839\_locales\ne\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134227415300336303"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-636600838-1632888396-3521553955-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-636600838-1632888396-3521553955-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-636600838-1632888396-3521553955-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-636600838-1632888396-3521553955-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-636600838-1632888396-3521553955-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-636600838-1632888396-3521553955-1000\{174FAE9E-763F-4A0F-951A-E27CF1675355}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-636600838-1632888396-3521553955-1000\{9CF1CA76-6603-4882-A144-F4CE3A0D9C32}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
5832	msedge.exe
5832	msedge.exe
3400	chrome.exe
3400	chrome.exe
5024	msedge.exe
5024	msedge.exe
3596	chrome.exe
3596	chrome.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe
2412	Launcher.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2412	Launcher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe

Suspicious use of FindShellTrayWindow 61 IoCs

pid	Process
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
2536	7zG.exe
3400	chrome.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
6100	msedge.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2412	Launcher.exe
2412	Launcher.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 6100 wrote to memory of 1592	6100	msedge.exe	83
PID 6100 wrote to memory of 3260	6100	msedge.exe	85
PID 6100 wrote to memory of 2040	6100	msedge.exe	87
PID 6100 wrote to memory of 2040	6100	msedge.exe	87
PID 6100 wrote to memory of 4956	6100	msedge.exe	86
PID 6100 wrote to memory of 4956	6100	msedge.exe	86
PID 6100 wrote to memory of 4956	6100	msedge.exe	86
PID 6100 wrote to memory of 116	6100	msedge.exe	88
PID 6100 wrote to memory of 948	6100	msedge.exe	89
PID 6100 wrote to memory of 116	6100	msedge.exe	88
PID 6100 wrote to memory of 116	6100	msedge.exe	88
PID 6100 wrote to memory of 948	6100	msedge.exe	89
PID 6100 wrote to memory of 948	6100	msedge.exe	89
PID 6100 wrote to memory of 4576	6100	msedge.exe	91
PID 6100 wrote to memory of 4576	6100	msedge.exe	91
PID 6100 wrote to memory of 4576	6100	msedge.exe	91
PID 6100 wrote to memory of 2676	6100	msedge.exe	94
PID 6100 wrote to memory of 2676	6100	msedge.exe	94
PID 6100 wrote to memory of 2676	6100	msedge.exe	94
PID 6100 wrote to memory of 3576	6100	msedge.exe	95
PID 6100 wrote to memory of 3576	6100	msedge.exe	95
PID 6100 wrote to memory of 1128	6100	msedge.exe	96
PID 6100 wrote to memory of 1128	6100	msedge.exe	96
PID 6100 wrote to memory of 2916	6100	msedge.exe	97
PID 6100 wrote to memory of 2916	6100	msedge.exe	97
PID 6100 wrote to memory of 5944	6100	msedge.exe	99
PID 6100 wrote to memory of 2404	6100	msedge.exe	102
PID 6100 wrote to memory of 2404	6100	msedge.exe	102
PID 6100 wrote to memory of 4324	6100	msedge.exe	103
PID 6100 wrote to memory of 4324	6100	msedge.exe	103
PID 6100 wrote to memory of 5832	6100	msedge.exe	108
PID 5832 wrote to memory of 4284	5832	msedge.exe	109
PID 5832 wrote to memory of 2148	5832	msedge.exe	111
PID 5832 wrote to memory of 4408	5832	msedge.exe	112
PID 5832 wrote to memory of 4408	5832	msedge.exe	112
PID 5832 wrote to memory of 4408	5832	msedge.exe	112
PID 5832 wrote to memory of 2020	5832	msedge.exe	113
PID 5832 wrote to memory of 2020	5832	msedge.exe	113
PID 5832 wrote to memory of 4976	5832	msedge.exe	115
PID 3400 wrote to memory of 4216	3400	chrome.exe	118
PID 5832 wrote to memory of 5388	5832	msedge.exe	119
PID 5832 wrote to memory of 5388	5832	msedge.exe	119
PID 3400 wrote to memory of 4508	3400	chrome.exe	120
PID 3400 wrote to memory of 4508	3400	chrome.exe	120
PID 3400 wrote to memory of 5464	3400	chrome.exe	121
PID 3400 wrote to memory of 1448	3400	chrome.exe	122
PID 3400 wrote to memory of 1448	3400	chrome.exe	122
PID 3400 wrote to memory of 5244	3400	chrome.exe	125
PID 3400 wrote to memory of 5244	3400	chrome.exe	125
PID 3400 wrote to memory of 4540	3400	chrome.exe	124
PID 3400 wrote to memory of 4540	3400	chrome.exe	124
PID 3400 wrote to memory of 4356	3400	chrome.exe	126
PID 3400 wrote to memory of 4356	3400	chrome.exe	126
PID 3400 wrote to memory of 2604	3400	chrome.exe	127
PID 3400 wrote to memory of 2604	3400	chrome.exe	127
PID 3400 wrote to memory of 5732	3400	chrome.exe	129
PID 3400 wrote to memory of 5732	3400	chrome.exe	129
PID 3400 wrote to memory of 5204	3400	chrome.exe	130
PID 3400 wrote to memory of 5940	3400	chrome.exe	132
PID 3400 wrote to memory of 5940	3400	chrome.exe	132
PID 3400 wrote to memory of 3884	3400	chrome.exe	133
PID 3400 wrote to memory of 3884	3400	chrome.exe	133
PID 3400 wrote to memory of 5660	3400	chrome.exe	134
PID 3400 wrote to memory of 5660	3400	chrome.exe	134

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://footbaljersesy.cum
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x268,0x7ff919dcf208,0x7ff919dcf214,0x7ff919dcf220
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1812,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2220,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2488,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3424,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3432,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=4816,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --field-trial-handle=3540,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations --always-read-main-dll --field-trial-handle=4908,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --string-annotations --always-read-main-dll --field-trial-handle=4804,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=4860,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=5808,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=5808,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=6104,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=6136,i,3510548296782679485,3469255573850287180,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:5832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x218,0x258,0x7ff919dcf208,0x7ff919dcf214,0x7ff919dcf220
    3⤵
    PID:4284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1900,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:3
    3⤵
    PID:2148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=3608,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:2
    3⤵
    PID:4408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=1928,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
    3⤵
    PID:2020
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=4308,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
    3⤵
    PID:3928
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=4308,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
    3⤵
    PID:4976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=4488,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
    3⤵
    PID:5388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --always-read-main-dll --field-trial-handle=568,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
    3⤵
    PID:4464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --always-read-main-dll --field-trial-handle=4616,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:8
    3⤵
    PID:1552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --always-read-main-dll --field-trial-handle=4328,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:8
    3⤵
    PID:2112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=4664,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:8
    3⤵
    PID:5808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=4768,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
    3⤵
    PID:5712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=4572,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
    3⤵
    PID:3392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4964,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=3352,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:8
    3⤵
    PID:4708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=3272,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:8
    3⤵
    PID:1332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations --always-read-main-dll --field-trial-handle=3284,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:8
    3⤵
    PID:4104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=3380,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:8
    3⤵
    PID:3100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=3404,i,6215782561467896346,6059055199381197501,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
    3⤵
    PID:5968

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:5312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4060

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:1000

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8f721dcf8,0x7ff8f721dd04,0x7ff8f721dd10
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1964,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=1952 /prefetch:2
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=1548,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=1908 /prefetch:3
  2⤵
  PID:5464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2348,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=2324 /prefetch:8
  2⤵
  PID:1448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3104,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3112,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4352,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4628,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4640 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=5304,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:5732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=5496,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:5204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=5556,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:5940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=5320,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=5404,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:5660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=5612,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:5208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5828,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3284,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:5688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=5984,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3140,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --field-trial-handle=208,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:1000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --field-trial-handle=6196,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --string-annotations --field-trial-handle=3312,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:3696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=4384,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4456 /prefetch:2
  2⤵
  PID:5208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=3456,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --string-annotations --field-trial-handle=3452,i,10551027816634866668,16445026613153556427,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3124 /prefetch:8
  2⤵
  PID:5540

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"
1⤵
PID:5780

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2860

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1512

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\FC 26 LE v26.2.6\" -spe -an -ai#7zMap12440:94:7zEvent13880
1⤵
- Suspicious use of FindShellTrayWindow
PID:2536

C:\Users\Admin\Downloads\FC 26 LE v26.2.6\Launcher.exe
"C:\Users\Admin\Downloads\FC 26 LE v26.2.6\Launcher.exe"
1⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2412

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_104958143\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1272861193\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1272861193\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1625459820\manifest.fingerprint
Size 66B
SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
MD5 c28ffa45708f10e3a35143ed2708782f
SHA1 84a03f2615333c9311dbf79d6f58f56b5c009163
SHA512 beac0eacff45a152eb2a50f4d72db2933b8f8ba97e6f0a9f6811abe866fef5c7c83068151915dbdffaccaee5d0cd335d182671f44dbab6da2222266ff8a28ff0
TLSH
T169A022F3F000F02030022F8A80203C00C8A23BA80C8020808000BEE0200322A3A0C820
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1625459820\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_1723890850\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_466967805\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\Sigma\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_493254545\manifest.json
Size 132B
SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
MD5 a4d9ab812da8b2906ff9d46f9ffc07c3
SHA1 48b428dc760bc008058e6df47a9f05f2f86b4abb
SHA512 5a2ba950ed85ee55bc1402d57d09ca8d54c0c2df5b43a402bb8bf3668920a40d584fa18d270376b046e23be00698bd1399ef6a0b695ee6c0b99fb454616b1cb6
TLSH
T1E8C09B115801797654DD77F00D29D7526672CB1D1494250546F5C218EC2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5832_86169040\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 fe1e3c4d86016964de95e0ce984b314389b74e604d52e6c8b2083911403c1661
MD5 4d5fe0f7811a3e064178bd91288d2e65
SHA1 1a1981ae9e19c5795f3b46afaf8916882f7b1262
SHA512 67a167299da2246dec33fa8c5c62b7f2c8639c0cc9dbe102cd9f4753481fd46041f923d272f5f9fef8ea8f6d77348e97ab4179a3dac3cda8a9bc98d86d97a9a2
TLSH
T142E022AACC31AC270AFE076C60544A5AEB80032B2BC0C84F363CC20C8FB463A6586C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000033

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033
Size 363KB
SHA256 987520c161d9a0a6b78a6a2e9ac48fff7df21258a76f765ec62e3d7d872330bd
MD5 b889c4491374b48bd54967089c47b24f
SHA1 a4a0dc062539561c1cf4db1f4eeead5182d86e6b
SHA512 daaf9a7078b7ee13a69823aac7ad50c7dc417d5287bd53b838b11ee99c290a9d8f7cad868703041478e1acd000c7a2e2a97b8d742acce7ba3d933cfae4fba1ab
SSDEEP 6144:Md5+VYpEzQqG1X55Ay0K4P1ucWp6qD//wwgVfDhyeGHBdmtPWVkjOQV3u3:c+VfQq8DITWpNwxdhjGHBUZWCjOQto
TLSH
T1FF84233119E1CC63AC01838B0E0DB54FDA677D697BAC153E1042A8E7D1726BE5CB25B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 ff6d5f2e19ca731894e1f4af5d6d23e5555922a82467fc971085ddb358f9eb2c
MD5 995769f399f3699fc63620fbfac39c92
SHA1 559e63965a6baddf09adf9072ad2baaf362a7720
SHA512 f1a48a7f8f83050b471dd75b5ffc89e789b58b70d45fb0dfe31fc5df48f1db8cb8d3ba678b89a1e9631f0d2c54dfc90ec3c3d4e9a2d09eeaa87bca7bb67fd6ad
SSDEEP 96:900TqPpTdcVgBM2GsQgD+D5gxmrwloBKUNwqu:9HT2dcVgBM52tI0lpqu
TLSH
T138C12AA5B1946437CF80A83D4EDBAD9E7B30999BD16FCF2F9294273224033F5145AC28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\_locales\en\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\_locales\en_US\messages.json
Size 1KB
SHA256 102b586b197ea7d6edfeb874b97f95b05d229ea6a92780ea8544c4ff1e6bc5b1
MD5 578215fbb8c12cb7e6cd73fbd16ec994
SHA1 9471d71fa6d82ce1863b74e24237ad4fd9477187
SHA512 e698b1a6a6ed6963182f7d25ac12c6de06c45d14499ddc91e81bdb35474e7ec9071cfebd869b7d129cb2cd127bc1442c75e408e21eb8e5e6906a607a3982b212
TLSH
T161210707DA04AB37827A6136BC656685F33007EE2201E86F7DBCD50C5F229A791A7798
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 0d7221edd86bcb451f0d7c813fe29b3e446ed1acd674452e241d790a06e7a0c4
MD5 c76cf64f91630a5f7df72c25307276a0
SHA1 5ef305a9271fd426a186c4f9c676da276f79c233
SHA512 a0a1d90d4e58fccbcf9c9a37bb1b4df69d4d415ba5f58c94e8c9a65bae1391672176af042744a58ba24383183dc0aff06bf84fe93041a78cb6f187dba0da272f
SSDEEP 192:D2tUJ5A53JmRcTWdS/PeTMVjcYEUf0ycEr+5QTmGDmSmJmVm39mk:D2tUJ5A53JmRcTWdS/PeTMVjcYEUf0yU
TLSH
T14E0289F7C7E4867DD95156F86A256E1FCE2D0924432C3D2AC8D4AF4BA3F1871E25028E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 1ba63c3bd823a8698060f01e0b49dda16a192bfa6b0156036f43cdc509c2adb3
MD5 66d9468b51c95e640f74230069996818
SHA1 b27bfbd6f74610d65267fd0772e4d67f781dd152
SHA512 955e2fa8de39e3de743bcba422a83ef1a3e507c723e0274be211757dad32bfe7499f02048a94a9ef399b26ec7b604915a528a502002e39e491331b3c741be532
SSDEEP 192:D2tUJ5A53JmJlWcTWdS/PeTMVjcYEUf0ycEr+5QTmGDmSmJmVm3Id6Tdg7mk:D2tUJ5A53JmJlWcTWdS/PeTMVjcYEUff
TLSH
T1B62289F7C7E4867DD95156F86A256E1ECE2D0924432C3D6AC8C4AF4AA3F1871E25028E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 836d16c0f3ece07e8a1967f70cc89b14419c10b62e0624b360f8c205a3d6b3e9
MD5 5a75730baf76dd78195f11ccd7e7fa0a
SHA1 41ead4304e4b348f492306e62a233eadbae81a19
SHA512 ea35245d2f4979b6e10d8534dae799cda1d2e678da66bf57d8bc0dc1b807a328139af4b8c84564eb5b967dea6ca95b8eafaab463f8c28031d29d638c9613f30d
TLSH
T1D141C2ABD7BDB46B107D59772E04B8061D79BC36029258F4EE67C02C70459F36B13416
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 60d21e258fd924e86df8ca504e1cbf323a9a0bdae72678bdfd19010530b7bc54
MD5 4df5ba0c6fcdee7d6a3ec62530ef2d87
SHA1 3b4bde8c571a14e3d777368ae77295bed830c608
SHA512 47aa64094510a60e7df6163dc9a85108d3b45b3966772c18293bf81897b89e2257429d40119d605fa4e1076c2247bc1fdd8873266197e04f35ad21c2c03da0c5
SSDEEP 192:FY1cBzcnSiXAvZ8PRptZk91NHS+WNUvVjZ46Yobh+iJQ/AkwrX0LpQyIsnA/g2:FY1mzcSiTXG9cwriq+GvLYZ2
TLSH
T11E42FA5BAD586E7B4CCAE719FA517F1AD7F5201161C02E88EAFC8B1C20D76DC1227447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 673eb0e3968fecf9cf3121321138f2e1b9e59d3749114e8574600e164e0c6286
MD5 aa6532142f5948858cf8463f51394c03
SHA1 a70ed163d7b75393dbb628c2374b991e53153564
SHA512 4306365506c4573cfa032760839446a565443b98a2cae465b1508a9fbdcb8bdcd7ead82a6bb7e76ab704318d1cc33980a703bc33883af563a1a812d476eb7124
SSDEEP 192:FY1cBzcnSiXAvZ8PRptZk91NHS+WNUvVjZvEK+6Yobh+i/r/AkwrXQLpQyIsnA/p:FY1mzcSinXG9cwr54q+kMLMZ2
TLSH
T12A42F95BAD586E7B4CCAE719FA117F1AD7F5241261802E88EAFC8F1C20D76DC2227447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 eddfd7be83236336479c0bd9e50a1bf17553c352d08476b4e7425ea17ebf08ab
MD5 932ae700395ed924b05ce6af6bc166b2
SHA1 c53f1df83a38a1b2c1d61f5a75311b8ac531ebb2
SHA512 2cc2cc067ccb71bbc554dfe61995d8bca49f5e274a0560dba12010941e67a85570651eca9dec8422d949593492934a5ff04d3ce71ec5f9d3dcb6caef60325a12
SSDEEP 192:FY1cBzcnSiXA6Z8PRptZk91NHS+WN6AvvkcVjZvMbM6Yobh+ivr/AkwrXQcTQyIB:FY1mzcSiAXG9c1XDrK+q+KML5Z2
TLSH
T1A552D65A9C685E7B8CDAE719F911BB1AD3F5341261C02E88EAFC8F1C20D76DC2217447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 9284b97196324034823335df5e5a041a2604f2dc42d0f5dae09e0f7ef47ea79d
MD5 f7b90a2f96a95f72b2ab64d98be76b70
SHA1 488d1df767adf37c62bf01c3ade5df8b9402cf43
SHA512 714dc0e00467f61ea13e6651550ef00fad3eb74427d8eeea71e0c770251a7a89af5acf58c22d471b23ff704bc69198f87ee6e78acbfc883a3d7df4a2a1e6788e
SSDEEP 192:FY1cBzOnSiXANZ8PRp7k91NHS+WNUvVjZ46Y+ia/AkwrXYLpQyIsnA/g4:FY1mzOSilXy9cwri+cLUZ4
TLSH
T15B32F91EAD586D7B4CCBD319FA217F56D7F5102121842E88EAFC8B2C10DB6DC122B457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 27faf36ad33c57f45555952fb480bb40eb409c25d6f0a93d235336529a8c50ed
MD5 7d3286b3661346f5524a9386612d7d18
SHA1 dcd9b061b9230585c3df55b3c9597f05abfc2fa9
SHA512 8ded88b16ddf3c40be16392a2936a63008e29d96b4737bc9a558a2eb265bda2f7d3f96190b515df9dfb9a5981683b424182e729cbaac45021547f97c0aeb8b01
SSDEEP 192:FY1cBzOnSiXA0Z8PRp7k91NHS+WNUvVjZ46Yobh+iB/AkwrXYLpQyIsnA/g4:FY1mzOSiKXy9cwriq+TLUZ4
TLSH
T12A32F81EAD586E7B0CCAD319FA217F5AD7F5101161802E88EAFC8B2C24D76DC222B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e22fd2a59d3d733f6044d351d106f947ce044d7387938a6cda994b2ea50ab7ff
MD5 aada6b4819aec67e5f0c3e06a23a3c90
SHA1 176c4da95721525ac1c049cfff5c0d381ee441f8
SHA512 47827811a51c7dea6b714fee8b719f0fc478eb047269a5c5cfead71b99e28f4f18fd36b46222bf8e9f3476fe589675ee829852d55062fac61705f385a41528fc
SSDEEP 192:FY1cBzcnSiXA0Z8PRptZk91NHS+WNUvVjZvEK+6Yobh+i/r/AkwrXQLpQyIsnA/p:FY1mzcSi6XG9cwr54q+kMLMZ2
TLSH
T1D042F95BAD586E7B4CCAE719FA117F1AD7F5241261802E88EAFC8F1C20D76DC1227447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 15KB
SHA256 68e1116f21ef5bc4a80f5fc2128aaf146fb8cad0c296735fae3e4f6102c509cb
MD5 2d1612178eee892815881de4f71292b8
SHA1 d6ee4c0be72de99b0aac0ffef4bf97504d6135d6
SHA512 b0c959cba5418aebfaf781ca28d41084a812b436021217b48c54584667ac717cc873b0aa690aec12ee7f2e1fc1f707083d39c5d3101d2ea50249d4488333b8e0
SSDEEP 384:J5z/7pLuLcSjBYXWnPkXqKf/pUZNCgVLH2Hf1NwrUohHGGptDAn8wVM:JR/7pLuL/FiWnPkXqKf/pUZNCgVLH2HK
TLSH
T1967209677C4C9A770FD4D9CCD9267F4FACB6024B65ED886443FA582503D4EDA010A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 18KB
SHA256 5e4c206562b27a1f19fe4ade05477f7437e98c866316c7616f59ff6823bf7a33
MD5 bd19b501ca216c381899c4e992f746d4
SHA1 94aa397d1ae0d713d958f0d550b5257689c737ce
SHA512 032eb4d3b5b3d80dc4f9f1e05f18bc12d4285ce5bd03058cd634584843b04d97009e9b34b31846a4f2335a18c2d69f3bf2d2625e3e3523852378886681603b88
SSDEEP 384:J5Pp7pLuLcjq7pLuLceiBYXWnPkXqKf/pUZNCgVLH2Hf1NwrUohHGGYtDAn8wVu:J5p7pLuLkq7pLuL7siWnPkXqKf/pUZNw
TLSH
T15C82F9A77C088E770F90C9C8D92A7A4F9DB9124B55DFC4A583FA983603D0EDE01091EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 d97aeed594fd6829ddebc455398efd97e079f4ec4b4fb351b24bf704fef3ad72
MD5 4c04d16da115989e678b591dd6722403
SHA1 a4f8248c25a6c364c40c0d0a6b358f5ef62d9542
SHA512 ef3b597c76e0b4e5deeeeafc671faaeb75f6a1df2e701ab4721a25fe111c1d6a12a91b59f0d82aabd91902b2e4a0b5120943e1c69dccf3f1dcb8124fbbb3f897
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 6d1675a3a5b52296f98fedca3228a3accd306a91bd5ba2a97a9876e1852bac46
MD5 da467ef13e0036faa2f743dad233abef
SHA1 12c7d11820f8418664a63641b4ad3d528fb0a7c1
SHA512 4fec3d3df33a3ef6253f0aaf374e6283485668598bc7c7861348855c4559ca912af66aa066a958f0822f34edca6d2c480fe426aeec15512ae951a67520f0bd43
TLSH
T16BA0021801491221C8440671104E268423745D2322060709D4E095999CD11F2E2875DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 0b65e23897999247a378f469f3cc149ce984cc6a575ebd909887a254461d1822
MD5 3eb70d406cfc5dff955bea735122f312
SHA1 06dfa791aa0af691b336addcbe504353b13df921
SHA512 d4dfc0372298b2c814e8c22b44b69b0c7a43f07bc73cd93a76de897af53d28bf1a94aab948bf02bf3f14f39a72ab0edce7718646b4f51611713151bc4c08bd6f
TLSH
T14DA00251925859D2C80147B4AECB55C423105C329126536166E8B475BC58240C95B815
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 206KB
SHA256 3d71bdbfc381c03e1935d33c7638cf0d21051b42a51a479cdd01dad49d7b39e1
MD5 098554da767fcf47251aa8ef6da51bb2
SHA1 2e6048052e20cc05fd51c075b649103ef2832582
SHA512 c267505ce1df7e639001e2a4ca9ff856371b257ebce0f16974289ff7ae75ecd1b91038e866306f2b8e60503a6482e0919721562dccf9e4da3a13c5c54615df1b
SSDEEP 6144:gG6yeY4d7reVXFTv6qMhuV/JrTnGfzF+TwMA:lPwOFT4YVhHncFSwMA
TLSH
T14824237369DD3EAA32A16164622F3ACB4DF903F3319112D955652FCB01CAC2DAB77107
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 205KB
SHA256 d5a7a3477e0523c1a9995a9c8e7058eaf58307c249efb703c757b55e14c0c8cd
MD5 9b8f64d0221f000e238795f9ee3b02f1
SHA1 c20f512f621294b45b51e3f54e8e0be7f0ad0659
SHA512 f1dbe80905827acd5f9535f1e0d208fa7229b0f34b8b402cb6623facd7e2e40c1d9d1e49758241bfb332d8df2406088dc19108b4a986c14368d4fa08f2525802
SSDEEP 6144:FG6yeY4d7reVXFTv6qMhuV/JrTnGfzF+TwMA:QPwOFT4YVhHncFSwMA
TLSH
T13924227369DD3EAA32A16164622F3ACB4DF903F3319212D955652FCB01CAC2DAB77107
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 83KB
SHA256 2caabc357ba4926621db7e58ff4d7e324035a05daac6590fc6fa59b3f275ea6b
MD5 953f93142bcc645ce2c6b3191a8dfa41
SHA1 aaade708469983c779996cb2fc0a5f36158bb9e0
SHA512 576561605da79c970bb4fdd3f2553243f483fe4eb80200c4cbf90d2feaefa87547f6ff8d5b1c6fb130e52c9b2ae597f7bc68b01d09fd31434756b440ef31049c
SSDEEP 1536:bSyfXj8V43bjn6ldz5eU1vkHzZYiVNoV8cWKNR+K7i9U39SK17W5HvTwM1:VfXjM4rTmN5eWvStRNoV8cWK7XF+TwM1
TLSH
T1E9830233A4DE3FE713645164841A3F934E9505F725C30AE09A793EE6279B8DC0B7262B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 206KB
SHA256 0e1aeaba4a99464d34667b305420ad5e09a8a4d2a89d75b149f6590e1e30d915
MD5 1e35ebf519426a91826784ac4a696204
SHA1 21b0e4fa462c238baa21c44d9a2352bb11e8df65
SHA512 c088e991ca71f5521e6a5f2218fc28955b755b6d51e09565e355a85fb2afcd71434a1528b5b8757af5447ac152fcd7b1658ca22ec3631e8653a1e874909c368f
SSDEEP 6144:jQG6yeY4d7reVXFTv6qMhuV/JrTnGfzF+TwMA:pPwOFT4YVhHncFSwMA
TLSH
T10D242273699E3EAA22F16168221E398B4DF507F3619112C965693ECB01CF82DEF77107
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 207KB
SHA256 8732244d91bff81b980378ffd387478df0a954ada41870008029f78edaa32102
MD5 348ba07e4ea8c27a8e32fad08b01afdc
SHA1 04eec788a1880b765814a11cea101e5276ca599e
SHA512 335925d120652fef30e25a4db02b406f67940ea331e700a126c96623eb3356443880ab610aadbdaa7b3d490b3d479d33d41b105872985e058ee5fd4899c3004d
SSDEEP 6144:vxG6yeY4d7reVXFTv6qMhuV/JrTnGfzF+TwMA:8PwOFT4YVhHncFSwMA
TLSH
T1B9241273699D3EAA22F16168221E398B4DF607F3619112C965693ECB01CE82DAF77107
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6847da93c0e8ba021039564b54e5b8340cfaebcc9903f353104c8db5eacedd99
MD5 57f6bebc822399bdddb50e79e5e43cce
SHA1 26bba59f93dcea4a564377885d4b44e85026706a
SHA512 c8f32f6c3d308532cb7953bfb3f9c63c9aee15eb26fd3f5104b23bbd976262872dd5f21342f2cd6757548b0e93d5779445f26edd82a2234a9f3c9577091b6330
TLSH
T12FD0A7D16B98C902F4415C31467AA5623F06E660A40A9361655005483815BDD6DD91BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92d9a7c9090d746ecb5052591099b6bf0b70d20b608c24a188e29f7a0887a34d
MD5 82ef7eff5592edbaeac68ffa5a1f3f5a
SHA1 783ef135539014a07a032cdb34bdefb9bbabb6e0
SHA512 63e91caa446eb654bd115f0ecc5eca178dfb3e4d41573d1ad077fc9165f19c039a552a1d049aa3416f60dd13a3bc301744a64967876e88512524c5e1511b3697
TLSH
T103D0A7A0268DD402E59648718D5EA7212E27A160604FD752B190484D385594CABCD5B6
MD5 SHA1 SHA512 TLSH

Submit Download

266cdafd-5132-4ae0-b088-f9aaa1ba7a9c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\266cdafd-5132-4ae0-b088-f9aaa1ba7a9c.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 9bf007b3a4e99f42b879502a1e9d032d4646400f4bd4a3308bd90d4c441a85b0
MD5 2bd46fc7a4998de41ed1388ddcc929a6
SHA1 65caa55137d3d692a3a765f2602f7a2f25574542
SHA512 eba2125ef2bddbc10278296762343dc5dcac5b8a01c348542cce016c7a0806a31f20867e08d9ed4f859491af1032ce392095c1a8a9108929c3370a32f3f65764
SSDEEP 384:bEh2o6uZvXcH99RbP0nzkpXuOy66YH6vvpj7Z7A787o7A7f7/70:YnVEJwngph6
TLSH
T1F3130A3D7A439D46C2DBC6BF82AB0BF2E7B5C5B1C8D1C91B8BB1B5504B61712A90E070
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 83e44184ca16c046fe6ab29c46cb121a79a37fff83091b2b1a2b6c2859f5adb2
MD5 49fdcfa506924522eb01e32d9618ca8c
SHA1 f9b168fc258b7dd01fac986992a02e6c4f774d42
SHA512 9a4535c0e7e4abe3a85d6bde359082b8e49921d07d88521041b50788c7272be220e7a5a7ec10011a11e5377655a178ef9d3d13c900754959a77ae605d7cee206
SSDEEP 1536:VkKtmVCZZkCiz2yRxbaWe/ymIqCpfBRovddWUfwPn8py68nrQP:T/OmCpfMFlsr
TLSH
T1D14471F70940A01BCBA892F6D2133A3DD27B455E6CD1F8E9E2784CC52C25B21B6BDB54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 26d0a7b459f493398a79700101f5e5409303b3c24c0537d7f650b374d6ec0e97
MD5 6727a4be2fa648ee31ff7520f5aa25f9
SHA1 179e6b66ac97f2081de68c45bb786bc0b5917790
SHA512 0ebeefc06bcf97a6917df10eebe855ac551c0940c3a57967679dd4a848e14c64ef4cd616c843d44eecab2bc87e0f3ce830a1dd15170e11cbe4147bc90f1627d1
SSDEEP 3072:b5mEC+HV0lyQQBEuHveZEO9IF/Dk9Zxr6ReH7FrZ:b59CvlYEcveCO9mcx6ebtZ
TLSH
T146258DEE9B342D42DD2A89B0B8E0FC22BCB41193755AF1D30C18C99087567C667DB6DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 96b55d102b502225caf8d69dbf4649094dde8c10c12fe63cc89592f6df0fea60
MD5 1557cf97740bff2f85f1549ff9bf6246
SHA1 f444d33b062869f14605c46cf6ad334baab17da9
SHA512 37e1bfa6c22860f4d2e7d2453f2968f915b768b72c21d27dd88a1e0f9a0df3f6d55bb0c310fc6dd83383a7d04c95b2482fcdf00038c954a1dba3cdc0a5809211
SSDEEP 24576:kZXjo8GbkmhAwVc3ZOdAlFPwE8FAT9ryFCP0RTHPEpmbIkNg2:kWbkmhji3ZOdAl+E8FeyF9TH8pmskNg
TLSH
T199868DEF8B741C42DF66CD70B5E0ED063DB11283B64AD0D78968C4889B8A3C576ED1AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 22KB
SHA256 37ae995a17f795bf5df82036c83d2fb8f94aa5479d24a527f7163927884064ba
MD5 d89500281177415a9060e9ef4e280f9a
SHA1 5b7b3b5769b569c607417f2026a8f3cf8fbb2439
SHA512 f4523e472c07a929eb1e228d35134167724e28e512d7d1888b660b572037953963e56601ec7a51efc5c8ff9d89e21d58fbe922850cd40a60f5b52d6e73cbfded
SSDEEP 384:Ppc1Qy1oDPvBszvgRSLNX7THESrLeQIMJwWOFJPEZZ:P6foDhszvgsLV7rr6QIMJnOFJPgZ
TLSH
T1BFA2D0A1C6E6B953FA5FC4888A7563D42B7C1CDA30D55316AEA35A14348F3D42788E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 188KB
SHA256 53cd744cde4a79d6931737dc6d388d36336fe94c415f2e816ae90f7eca9d3265
MD5 e7bb5584eb94692a1bd2c8e172654f20
SHA1 a251c150e10ed1d645a13455eb885ef954db9b82
SHA512 661e630596a5b98da3fc6c820a461f0293f964ac51dab84032e1582ba9a04f7d355df6aa07f43023ed62462f73d973e381f02a44ae7b2a0c0f79ff4ecd059c7c
SSDEEP 3072:IhMpMxr9/qhHLOglGQdEVeP5Ip4gJoK1mB8HHiWgu78WqpM77zdkOYBm92:I4ycJOuGQGVePXOmB8iW378WowtkM92
TLSH
T1FB1423610E7A6514C48BAEDF786DD59E060C4EF44EB6E1BF29E83396A4D695C0B38C03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 753f22f2e2caa9c808ceff3d6ea947ba75597ffa3d59be1c2abfd6de672cc312
MD5 85f5a4cfebf999d8838b4585fe93dc7e
SHA1 6e7ce33a9ad00dba10a4e149f52435ffe62db7c4
SHA512 e83c237153142e205f862d1e7a5c8967bb3dc75e2f926b822f2a081983500d519808839bd28b911a7cd61f8c3edce96c21b4ad055c86c1ed65f068e894c75f56
TLSH
T19D6152225ACA83A0C303CB7F94F17065F3B66A881113CCDAC5BAE8341D6471E9534736
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 f04c28337855d527c8f9b57041f5163a6f44dda9178b3afdd71c84ba2360b982
MD5 37671f95f49954b10f37518ed83cf201
SHA1 704adab264a6ff1d8006f65f9b7eb4412b27cd21
SHA512 c5b4517b531f08abcaf8b81dff14d33bcc8098479b7992350ef7616ffc22bac1d785a2c91f659164697ca5cd507133b74e54fba00984d614ff963d69e14b4c00
TLSH
T16EE0D894ADCAC21D5D1074CAC3249B1CD1C03452F6C67E4B5B00C8C87606001F7C7576
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 3b644b587cee6f3a6c5b412c3ff1b9be051c6f671aac513b2297f352c206950d
MD5 a91a228b8ba314659fd6d043b0039b00
SHA1 f75811ad55b4f94ca52a2a606f90f3e1badf7c78
SHA512 4631598d2597f62b5c22b81c57e4c8da67f9948bbb70dc66656094f01ced63f81f6f89261b414b89f5dccdf5c0a7fb522481546249ef656aeb77c20d0d498b96
SSDEEP 24:TLqUL2gVvb7OkIbzwDDNzWjJ0npnyX7y+jWpW5LfBm+RZOt+EcK5fc:TuUL+lfwD4jJ/BeWxZm+RAt+EcCc
TLSH
T19CE2FECD3E12F522C8ED733CA0D1C5E06ABC2A6C4A49B671413C9D72CD52662F49E54E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 570B
SHA256 99def1b557f19f04c1affc6f247d0451f33fc10ec42e73792223c3215ac98be6
MD5 d4ba0ae0bb0b9faff3da6f35fdbc3c8a
SHA1 fb3e9dec7f35a9b1d94e54a5659dd0de484055e7
SHA512 86fd07c34b9abd4c52ba19eae291936f92bc6d38a75c021edc1dedbc15617669876180cd99f959c62476d82ec6bb9f5fe4c6cb4d82cb037efb76d99a4d3d9c51
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 5a656b656f8e7931b324f1fa2fb67f4acabc058d30ac6121eeaa88b0ec512f17
MD5 76980d150ff49f3565f881eed43357a7
SHA1 23d4749d78389ee4c29aeb8786b1acb5bed2dc0d
SHA512 979d78898d770b3de6018c8fa1c1c861bf9c6c1ab0065b72fe632aaeadd201e82913f110404865328b1f723a03df34f79b43597173e5df54595fb85097a6a086
TLSH
T168E0865415CDC62EDC1578DB8B78A71CE3E17447A7D83AC29709CC58A311646E3DB2B0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 72ab589cbe494236735bfded3eba75adb0dbb6bae9694d12a0882fb062d08b3c
MD5 34a3eeb4ab9b4d5f83ec55c5d2d5b293
SHA1 162bfa4081927ef00f7b7258ea1aeb5891cda72b
SHA512 f3d7a2de31895b41e0c0ec41dcaf381fc67fd6ce0d26db56da71040d90cdbfcb2d97bf02c293cb448ac0f90b887394a06bc1a5a90f5141632317f9dcf442ed4b
SSDEEP 24:TLMJhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Twm+BE9ZW9v/3WOT/
TLSH
T140E23A2A5E7C7521CD66713ABC21A4665CB910DA977336F23EE000796F8268BC474CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 12e9cd1d77c6efaa13c23e5fba437bfb447a002c849ff7bd0b2278f158dd41c2
MD5 d31861c7f12db4387e73cb965ff789f9
SHA1 092387751595ab7bc278d4a93d3ea59045220335
SHA512 e08837effc86fe52fce16a1fbbd0f18d8c5501e9205079c3f364d007e7868bc9dce5ff1170d8e1f87fa62eec06a3f63a1917d54b79eef38e9550433c79fb069d
SSDEEP 1536:IfEEvnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BkHSRhPjU1
TLSH
T1FAB35327D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 3dbc12cb614367f1b39f8149ca1d450b91b0c4277abc87ed1308c1c78a8d9103
MD5 d5e7a7dfdc9e1f14ece85c4ed4f0d25b
SHA1 782e9df488690ae46812fd4bc708cbda466a3796
SHA512 472d03abfc9dbf4ba2e94cee570827ea3fe801d636582230f99dcf21fad1bea0de7f488e0965478bed455047d47f2986411745b6f09bce7ecb946e0e75086fff
TLSH
T1D0E0D8A064CDC21E6A0864CB4324A70DE3F13406D6D83F411B04DC4CB045004A7CB1F5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 b081d66fbdb2c7e6235c69675c20ec555f41090457330ddc218b23a03155e2d4
MD5 d1f66fa487ac688ffb4d71d189f777ab
SHA1 721182f690a9794a5d209d06fcc5adff66137c6a
SHA512 42334363c0948ff0fa28a05c8946874dc36cc2b675a6d6b1b973411fa652769c35a681c591b22916cd65af202a9502e62ae6a978b0f743dda93391ceda57f149
SSDEEP 24:TL6sLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfBLc5mRA9/3z6m/:T2CLopFMatSaw/auUOt8BLimRjm/
TLSH
T102920B4E5F306221C0F14B37EDD184662F7C212CC3A77A599E6810F3DDA299FF2094AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 81c7fef628797177e5a4ebef21091ba6faed3491f5d9db648f4cb03fd21ca793
MD5 328c2c62bba8bf4112454836e4524b6d
SHA1 603de6f79ecfc0e2aacfd9f7d793c2bcc7c223f3
SHA512 863ff481fcb28fbf95f438921fc70b43d13a07e1b341ae7870909006288316f030a1ec8da3ef63e7f55fa81543f93bd46e8dbe6ad4dc1c7044557a89db20f346
TLSH
T10141EEF3C3E4456ECA0156F42A28BE1FCE1D0910432C7E5A84D4AF5B93E24B0E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 c9f0d7062d2293f10fff569d2b247bdd826242eb8b1c6eaf3966baa69673b1e5
MD5 65875d97336fd154257b26223bd7fe9d
SHA1 8114d72e08f91b86a3531a32ddd4ef3df0cb74e4
SHA512 a8d864d85559343e5b3812a3fbfd95dd69171b93d715923dc8031e7f841d4f4673fc1f08e5473f6c5b50322e14348c5cf42b2fd2122154447ba3724fa4dd5d6c
SSDEEP 96:uIEumQv8m1ccnvS6rX4VkyDAfFZeNfAs840:uIEumQv8m1ccnvS6rAkcKZUJS
TLSH
T153F2FDFA07336206D99405B0A4045F9FAF1B400B47B2A7EC76E443E2F7611E2B7B9795
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 b730d45aec861195e740bd376a4a4777b5a6be2d241da7773a473241113ff8d5
MD5 52537727f7e99d04d37b808bb98eafe8
SHA1 c58df080e6b360bf8656f693cb1e198e8085f9c6
SHA512 071c1253c6d0bf9e40acb05a7367d53a3fb1f544f3833399c6b779755d2534825be74250219ef25a35615870e7356669b618bc92eea3ad8b34125554a8c15220
TLSH
T1E5C0221180F8F4B3003964396DC0BCC0AA3CD4300041A4A0D8E5833CA0800B77A0602A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 5d2f885092914987d5f1caceb5925804327c1663dfdf0e01bf4227b73b0131bd
MD5 c2411acfb07eada9b9029704947f6c80
SHA1 f77f5a51a646ab0d39e747b46c3351aeed42a2e2
SHA512 c1f3cf6736e17bcca4e858ee62ce1acb0fa98d2353cc1215230b3c9ab425329eb47b1ce9fc9a200aeb6de3a46ec11ad4957f669d10211e69aaee11f62a4f29e8
SSDEEP 192:sV0dRi/yMqv/Ky0Ml8h79ks4WcJSH1l21YZ6xILWn5SzoZ8pTUEJHY+WNrYx94zB:sV0d7pq9ks4WcJSX21hOTU+HSrrHJAW1
TLSH
T12072EA196A68997B8CC7D618FA417F53D7FD1523A2505E48A9FCCF0C01E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 42797896c56ac73510804440ca27694f557bc1f6780da95bddd5c8089bc141ee
MD5 636a002fd46c990c84281108c1322c79
SHA1 d64d9c380b98f680081b35952cf280454bb0207c
SHA512 ce00330cfc6ab6ffeed64420faa4cda693154dffd8f7f1051f97248484a1dd44252fd130d653ecc4f08c352fe5f7cb0584780187ca6b66a23e153e026a7d80c1
SSDEEP 768:iPZzfZL7pL/LnLXWFC6SS8F1+UoAYDCx9Tuqh0VfUC9xbog/OVoEZBLlcSqI9ro1:iPZzfZdDnLXWFC6SSu1ja3EZBLa9I282
TLSH
T18BF2EB3F6C4CCB7E4F804E9CEC2A7E9A6DD8028F9698895447F9845C03C66EB11175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 60193ea91d59143b66c4b8e5989421dfaa606fe1044a5d051b8c3a20ae58aea9
MD5 22cd6a0cdef7508679129d1558f11d6a
SHA1 f51b4508c84643d568885b8ecc5f0300b50e340e
SHA512 8768ac1b8fe1932d3269f301210f8dce5739888de60942155c87e33a9d5b54d06eef2de44060503e016548eb561988f7e58fa7006213ef9386fdc11cf0d4f492
TLSH
T13EE086A019CDC67E6816209B0768D71CE2E4B457D6D83E423F45CE687162944B3D71B1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 411743c1b9e5e05ca613edc9e0dba1cb16d272153866efdf38b2603a8b5f0b31
MD5 081977eb573b728ef1df6ebed319aae4
SHA1 36ee64f8b9208ae7e5fdd4aa11f9e21766cb11d8
SHA512 697ee7f1c463589a82b6f6d410d2515a1d58a99858a8e959ec978b4b2f9e050dadb7b4d0ee8f43c989a632c2fd6181d546ca1ba06cf5b91f8220587d833d1658
TLSH
T104B092453B00861AC985093113808B806B15F01510006B93C918AF604D0E5A8FB589C8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 6c20f8c500a4ed7ce8bc00e8ce9e24f1f297e952f2fb4076a4b666e551b23a49
MD5 2899d5e79467865d0fe4bcd818348521
SHA1 e956d86e7899f4d6be56d37713a3b592affa22fa
SHA512 b7e0e6856eb561d098f49a1e4a2913301296a7b61ec5ea3e50bc27bac5802a53149bd79731bb073c0ea7263bbbe5382a377bea0158a494dde10dbc3077a2d7a2
TLSH
T115E0486025CDC73F6A4520DB4378D31CE1F2B456E6D83E52AB08D998621614573EB5B1
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ahokoikenoafgppiblgpenaaaolecifn\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ahokoikenoafgppiblgpenaaaolecifn\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 4fdd841d6231f78f0d58654410f36ffda0f379233e17ce758bc651111e69a481
MD5 f5707ffd6e3260138000bbb54d37dcba
SHA1 af566f06a7f32c60713f5e24c335c8057ffcf153
SHA512 235b414f0ecf580d80bfb374088ffb91ae78b08d5201aea9f7162d58c539d38eb5342d097fdd63c8d5ce9d25e5c7621efb3255f45449026ad8acb9a45c37b5ea
TLSH
T19CE04FB076CAC73E981570CA4764DB1DE2F0B84797E83A86D7088858A702544B3EB5B0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 22KB
SHA256 55107c70a4cec5680bd5cf1f59372c7596c4bc144418850e633b74042ca9d2dd
MD5 7388cddc5fe0b17e0cf85669e921936e
SHA1 a86c03565e846a025fb892258cdd997055bc052f
SHA512 ab2c16ed6c2086004023facc5e9436d712eaec640404032821db2d552ecf4f0f2af33db1c0c451a20bb4588c4b64e083f6becfc14d8d9e7dbccc6a99af200037
SSDEEP 96:JkK1gUjO6cGGdBy9GidKXa88lSb44Kt+cKEbK/KPK73KfO2KuMKNu6KutKz6bKfz:rgUjO6cGG3y9GiQa88lSbkG0bEkcnN
TLSH
T198A26E21757B664478BD695E21B8926ED24220B32011F57F3AA834E68F67E302DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 91e2087ae2fa0c44eebeba0e24609a430f6490d71d80ecd4119624976ba4c695
MD5 138ac89dfe73809e2dd7e2c91cf6e2d8
SHA1 7438fad970707e4077283bb18a8a423d91548e87
SHA512 68c2b0091821ce0375673395670f22ea26ed2963be0ba1bba51de5e6b956bda0fecc1660cfa8ef42f0720c8a2e84071c25cf5cf3b16a2f7d8d75b0b64fba4186
SSDEEP 192:rgUjO6cGG3y9GiQa88lSbkG0bEkcnSs5c9g8+WWbm/MccLuCcHyXW5:LEk5
TLSH
T113C25721757B26457CBD295E21B8922ED64220B33015F57F3AA824E68F67E302DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 228KB
SHA256 5695be5564b279c6f70c240a6ac89ec2eeee0db4901357d6c6d7d2fac611b940
MD5 edd9e32ea6020b28d4668719e0462276
SHA1 5643a74e84e1e531ed8afc0b117859c11e97e9ff
SHA512 7160e7a0f7d5d2af0c6880220643026d33e4063f48db264a9249dfc7f8f4c6ce53e161d7a4739285d88b9c69bb4a1c2378e1e07b0afae2a2d93a101d70237e7f
SSDEEP 192:51moNrfT8a0QQnGzaW6qt8K+dJIhPJyiqzX1i+VpdssMV7due8FPu:b7RfQrQQnyn6qt8K+dJIhPJyvzl5cYP
TLSH
T16B34640A7B746101EDE7E9721CB080771E3C616DCF22A6816DB254694DF6853A33D8EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 9KB
SHA256 46a4fa93ef367c78085673c65cc7f94410dc004a43a95d4d37cd36d668005a38
MD5 5f356692f3c290ea52292922a629de48
SHA1 629c8714938c5352863667ef2580528abb4d022f
SHA512 8a783c8c1bb3febaf12fe3172f0a9e6adf516f5d3a558a8e18028f2bebae5cf9e846d5f069ac20709e53f829282e9772db07d993b33a5064809bf132868dfc02
SSDEEP 96:n0MDDHmMzVQyv/IYjIYGbLMYjMYyIYcYeH7RLPPS3n4r89+YjvyxZqVOy+:lQgIIIPbLMIMVIYcYU9oBVON
TLSH
T1A02260DAA71E2F73C0AF1F3B825647A54BD8CC414175220DB929A84FECF2A9385C55F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 69a315399d650e84c61bd3fccb4638ec029014ec777af430e7a531a802b18d72
MD5 5eed0a7cc77fe885c6e0cffc26264c6b
SHA1 76a00c67dfa19050d6fc0418baf72847c262d151
SHA512 8ec5e09bdf2b43bf9eae3484fb70781cd9b6ff9c74826153337ce3fcc7e2f914b86e7b996b35e1df7a4902d12fdfe1d80d803255398c54a7ce91fed503d6ef6c
TLSH
T127E02610B8CCC26FA91620CF4224870CE2C43803EBD83E865F02CD7CB021500B3CB5B1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a21ae4f1a7697626665e5219b630dfe152da2f73bdfbfb0e1b3ed31ec4bca094
MD5 5566709a1e79ed99d828fbc87f624e44
SHA1 6097f9f3bb4f83e781f2e76ed1190dc3c4cb2026
SHA512 61ad51436905a3e6ef1db204ee53e636a2fe723a708fa11f528832b2a37a47f36209c410c396b9853e8df0c0af6e09391ec36e5367518db4d84c3dc5c5c11f0b
TLSH
T1AE217056F320C149E18A9739602BDB361378D942DFBCED0F44B924252EB2B051E8B6F1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 5719a7a167b47eb463e23bf73c5af7f991c9dbf49dceb808c7dae8d0d02d628d
MD5 c69ab2cc83859ae177e61e27d74b05bb
SHA1 e4017dd93cca6240f61a65b166baac04e1dc424c
SHA512 00e3e25407f69dd08f264a56c1d72bfc8a0e045f8400f0f8c1de4290a65e9a97f28874ac99dccc7897c556dcd1afb0f1da08e72a282bb4384a873f7abe43c834
TLSH
T11FE0DF10B8C8C2AF991220CB4264C74CE2D53802EBD83F425F02CE6CA121541B3CB5B1
MD5 SHA1 SHA512 TLSH

Submit Download

CloudConfigLog

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog
Size 462B
SHA256 0cde7618aca3c6aa32cf35218780f23abc5522b1a564a56db8d4c23c20d7f8dd
MD5 0adb7cd2bd8f2cab91591663fdb45fc0
SHA1 802175df5d45edafdd43377ce23b2dea06c22d3a
SHA512 dd87fc0977b0f6c6ccd40bf20dbfd42887825e135a96c9b7381a175142aac5f770b7b1fc94574154504cdb8d7fec78c4b8070e314a44f6132dee5723c3ccd81f
TLSH
T16BF06163890E3DFB19B22264957326A1FE55134F4549A08F7EFC008C1F7AD3A05DBB66
MD5 SHA1 SHA512 TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 13B
SHA256 01a3e5d854762d8fdd01b235ce536fde31bf9a6be0596c295e3cea9aaf40f3dd
MD5 3e45022839c8def44fd96e24f29a9f4b
SHA1 c798352b5a0860f8edfd5c1589cf6e5842c5c226
SHA512 2888982860091421f89f3d7444cacccb1938ef70fc084d3028d8a29021e6e1d83eaef62108eace2f0d590ed41ece0e443d8b564e9c9a860fc48d766edb1dc3d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0d1ece80f6e4b75e583724525f4dff9ac9f9fd58674ed4fbd873bccc6b2083f6
MD5 bf45b673220a8d61d63d47f2f0d12e64
SHA1 9e18f05502787fc293e412f999883f3184ab4aa3
SHA512 afe3d2293554e70f8b6f49877008bf5d95b42aa72bc565fc642d19284067078d64a01fd6ee0db5f70908fff3443332cf9bd062a3635db0c7f963d9491c7647df
SSDEEP 768:4Fg0raxyp4sQe6WGfvLuCg177ikScj1Hwn07KwDHga1jRu8:Ab0e8fTw7TDd7K0HgiH
TLSH
T109039E39ACA8CC7F8CEE5F89E54E79279EE0426799980AC8E7D41F0D40872DD6306809
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bcd0bf92689a2cb74353972e6c306bcebde833361a9dc6688d6ebe53baa1af9d
MD5 d6c73a2691c77949273d0e4e767d869d
SHA1 231350fda8772c65c9c754dae9a7ae97d18d9dea
SHA512 19413b6637588868ac6132d65e0863dfcbd7e372135de9fec369f05f78555a1eb1b48f06eddf4b2ada85929dc1d621339b208e32782107b6930582aed3754ea7
SSDEEP 768:LFiE6esE8lDldUGz3rCgOPYScj1Hw78NKA+E7Q41jRdE1M44:CeB85d73VDcfEcUdE1I
TLSH
T1B3038D35E898CCE74C9ACAC4930AB5276DE04277D64C5BCCD6E86D2E308F1BD634B859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 46KB
SHA256 f14baf8e19169b00b8d6d4fb07401ea26e09247e6b3bfb018b3cb2f03539fa3f
MD5 f870cba28883135276117e61a0e5ca1f
SHA1 87ba1deb3ef47f682a32e79f3dc9956cf19b8d60
SHA512 94a468e9b2e7c5b86c5c19148e06bac0ed4583bf9e275c7c244232864225caa0b638a06b10947fa44be1000659898b0f42eb36c6fb83b06f61ccdb39b6bee65a
SSDEEP 768:yFg0raxyp4sQe6WGfvLuCg177okScj1HwAy+KOZ9UOolE1W1jRu+:+b0e8fTw7FDZNnIOolE1Wl
TLSH
T187238D3D9C648D7F88DEAF89D70D391B6DE40237DAA84588E7D01F0E806619DF707859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 46KB
SHA256 521de13b8d446b2ccc9568e2a7665b8283ee2c3144e0163f57a4c03cda1ecd9f
MD5 5b074d3609cb1c5610279bbd01fd0056
SHA1 4f7b1654fa32a320c8a86df942e61d687657d104
SHA512 736b6bd87b974c6e3b229b7ec338273abb651e312f84ce07d4efad68a8bcb860b9d9657fd64e874cbde0e8944b18851dc56460a4e6c103e15d9a950ce18fc703
SSDEEP 768:yFg0raxyp4sQe6WGfvLuCg177jkScj1HwAy+KOZ9UOolE1W1jRu+:+b0e8fTw7MDZNnIOolE1Wl
TLSH
T1C8238D3D9C648D7F88DEAF89E70D391B5DE40237DAA84588E7D01F0E806619DF707859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c2845e4204e91f6b4e33af1bd9f2e48bfe31fdbf9b66e007882ae2e43d3f5218
MD5 435261f88b173bedd47e4eb5ab18c838
SHA1 ced55d6660f1da29bb9d6cbfe5973d4d97f382bc
SHA512 24ae3ba5beca1a42a4c409b87202f89e7cbd042862519b146223ca252b180526e71c386c59b43328e49e3814fdc7ae775eab0d5fd8ea9f25620b93a581ee118b
SSDEEP 768:dFiE6esE8lDldUGz3rCgOENScj1HwAy+KNR1jRdE1M44:EeB85d73TDZNa5dE1I
TLSH
T15303AE35E858CCB39CDFCB59E34A3A5B6EE01263D94C47C4E9C95E0E208B1AD374B819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 07b3bb117a4033f2609d086facbc762c3b871f5af8763f8e1e0fe87b51e37f49
MD5 60a74b0b74cb0800a3bd0c39858a7d93
SHA1 9ad190717fb87c38154fee4bde40ac8846ea0167
SHA512 d6eb67ced28bc42a75f27396ad97656f0089cc5f86b2f445d828e67c871837e482c701eec94467b329ace9b52184e5cf19b87df16d6773decc52d62db7e268cd
SSDEEP 768:yF90raxyp4sQe6WGfvN3uCg177HkScj1HwAy+KNolE1W1jRu+:rb0e8f13w7IDZNaolE1Wl
TLSH
T18A13AF36AC68CD739CDECA8AE74A395BAEE41553DACC47C4E5D06F0F018729D270B819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 8b4f93579974fe4ae4b03eea572b0b53164e765fa37990a28394417d05e2557c
MD5 98f81553703ad375832a5fbd5be38836
SHA1 c916ed63ec99e48ab3bc4ac7bb38203ec454895e
SHA512 e98a83eb2dc0d66824e087b29c95286b2b6a0c85b77478d7ad24a1c7345c9fb1fa227ea592d6eca8b1cf20fc8fd818db6cb5e3d93d8424951f77990c47d66042
SSDEEP 3:MsEllllkEthXllkl2zEfliDzKt:/M/xT02zBvKt
TLSH
T1E5440404FFC00445C51454354051C35033F1D4100511FF4334D304335CC75404D00400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
Size 19KB
SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
MD5 3495430eefd1e96e8bd95b67ccab0f91
SHA1 54129d2d72e062ad36a66922331818e81bd34df3
SHA512 9197537719b70837ce997cd2b168c6bf6fe877811f81459a0c0f1363b7179960594761df147c85034c628b8e9a3463084ac26fb8bcc3fbc765089adfeea56f6b
SSDEEP 384:/jA5024xyUE2oAklQth8rYWepdFhgX/0lRwjTV2qh8NmrbijF4E5C65aNbC:q0WCoAklQcrJepdFeP0lmjTV2qSV9C6P
TLSH
T162925151887035622F2F50CEE0583F8E1199767540AEE6DE9FE48666F28C0F37494EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
Size 4KB
SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
MD5 db9a3dbc4820c8d84a0a569be1234dc0
SHA1 78fe9b49b800627cd2eb458cbe0251591a2a693a
SHA512 a6735713a801d28e644b31f34335e29d55a46d4b263e923cbec9b57fd18f8b0cecf9b78fab578065207080faa5e81156d04c8fbedb436b718893b6d17123742c
SSDEEP 96:2eHeEcb6eD0Hl1LJEmjwsi4RjBzGPeKkF7y5W4jNU/oyw:2/EcWeQ0d4OZkVkW4jNoo1
TLSH
T105817615A4A024423F2E5668E03C76F911E8253880F6F7D5EFB19975B30C0D778E497E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompatExceptions

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
Size 4KB
SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
MD5 26c006f350f70dbc8c18098b773c3d4c
SHA1 eb015f7010dd74c874675d0599e634027363b7b4
SHA512 0f56d119a5f89689d0e45a6163133048aa95255447c4156d4fb2565f45c32dbb95adc39666a833d2127ce57f3f4198ce45d2a174955ec088bcdd2f74f59b3f6b
SSDEEP 96:lApOOxO7bthcySBm1yJJzyEsQBCETe+yH:+xqT6mcJJz4QBXTeBH
TLSH
T13F91B8037E4409276E95D005C0ED209E2DB5ABB0C85DDDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
Size 668B
SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
MD5 95aa820d67ec466eb3444a9458eb7e56
SHA1 f93e178ff40310e071e4d596f0aff0514666f787
SHA512 15281c334f013f0200ca2d6faaaec81dc5602058cf3522b805e21ca5f031cb4ca68606d353e6745bfb86f07fdd6ccc892942aee5ad7cf0f9f0798a4d7f497a47
TLSH
T1FE01D3D7D86197676FE25AD1D02E73C9F04456F26050F7C10F55315857A8A432794CE8
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
Size 1KB
SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
MD5 3d90e5235a4bee8f1dccfc2aecf7c585
SHA1 5beb333084b3af33e7fbd8c83326e18650a87f85
SHA512 c81af723cadaa57f638b9dbc60aca5d2600cebb8282d78a7b86edc6b473bd3a1768c8fde1b11d50b6b967b2866495655de09577973778038434bf4b513ba74a7
TLSH
T180214F8685D038316E6E148CD55C3B9C12EA3A7040E6F6DCCEF486A0B50489F7280CA7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

TransparentAdvertisers

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
Size 20KB
SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
MD5 6959a6835772c67f4e72105e4be259a2
SHA1 72d1fe9070a5c0eed55d989cbd961dbc5442796c
SHA512 98085236a15e810642602e5dd475aa5a9532bb38917aef784e977bb398b3f9e39f7966370d39c1b554cf3e39858713e8b45bc27fbdb8a701b2a903e453a67591
SSDEEP 384:5z8Qpkm9jXUmEtMANAgFYNX8htrCoEeZCNyn9CbRqKi8iyZd0KE:1lb9TU/t9NAgFYNMhte1eZ0yn9is38iT
TLSH
T10292C261986035523EAF019DF1993FCD69A4633080E9FAE9CFA0C636B35D4D335948FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
Size 3KB
SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
MD5 e018dfa2df54c80ffbfd02c6d2ff5430
SHA1 de3f876b05355c6024d76f1bc24a552e532e2a2a
SHA512 b6d7886b4094837b271d1aa1f72b8c521970527552186604bcb83e17f85fa4a22e658628f79eca7d164ace781555abaa07c423a380fe87006aaed77f53e37838
TLSH
T16C61D918252024211F1B526AE55D3E8E69F4233904F8F7E08FF04EB5B10A4E738E5B77
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
Size 5KB
SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
MD5 dee2a727844dd3cea088941e82722406
SHA1 24ebec9b92eeb6af83841ab02e858f415580f719
SHA512 e48edf5f6dcbbd615f42f1b3181b2998bd700508094466009a6a48193a48c3e30e6c4d71cc43aae81d18a88ad9fd7e28eb50a0a52ca6889a270001fecdb64dfb
SSDEEP 96:PwYuGYJywH2R7pBBYy+wf0yhZ7RBJ1ja8nBwGhQmxpFD1Lcg:Pnf03H2/KwfNL7vNTBR
TLSH
T152B154B2855079922F7D01D2F9D6225088E482715CBEEBC747A1C61CCD1EDE735A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
Size 106KB
SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
MD5 751e7cc660220e7464935a9b90643274
SHA1 05a725af45c74a9e129839b2fa7acca5d83066d8
SHA512 bc879a9bed224b6abdaed2581f948fcad53361b17dc76d5b5df10607ac893db2f39bc5ce5fbbe86e6392ae66f29fc93ac1079fd2d029b9338697b004325c4b36
SSDEEP 1536:PYNbfqJF3b6wgb6hh2Dgf+x8GC2kMYdSKySPxVMRjAxUR9Wv:Gbi3M6hjf+W2kMk26VMRjaUX4
TLSH
T131B3E73C9F70C4295EE7000B6C28B95846142BD59E87DDC4EEBF7A090272AF536A85F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
Size 2KB
SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
MD5 5330ccc991b45c6f2777d23c7d8afe8d
SHA1 d11187c035458fe1201608a91062962903de2e53
SHA512 2db42b7a6b7f2170f6cad2a26a606ff6357cb8c707ba9947baab14dd7f566df04a274e46e36cee72c43ee87ebf4d455b4af3f6da973f29bdbefeb0304f1d6f93
TLSH
T1A3414422581030617E7D49DCF59A3F0D29D9613A84C9F6D6DFE08936722E8E734A4896
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
Size 198B
SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
MD5 7bb2f4076e4f47781b77d811b21ef1ff
SHA1 fc0feddf6f52841bbd780d21b8e0ddff74fd70ac
SHA512 28356614bc38576ecb37218f9f6f631bd9e55573206c3aa854b91956a33fc828c71f42c7dc7dc6aa86540dab8e345b8f88bf9c6eb56e49824f492854c193b27b
TLSH
T1B4D01250151A5B0D6FEA41D1DA8055241DA19DF474CFF8CC5555B032E68895729C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
Size 3KB
SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
MD5 fbfc314bba2160b09a3376521c762772
SHA1 3566357486c5d466958334e813c90c0a97bfc985
SHA512 e4383491ce5170d0daf4abee61484c62611dfc604549b537d0080f24bfb8cf379ec3efbfb6caf10e7c066ec06457fb077832d5f780d226f0a957f624e0ba9383
TLSH
T17161DD36C590A9932E5D0C41EEC55E700DD8157ECCA6F4D287B082F8F0AD8977D94BAB
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\manifest.fingerprint
Size 66B
SHA256 f96cf59ef5cdf10cdebb367e16c6736d188af934062a8721eb9d60539556a2a9
MD5 0f487a41f1bb9a49dfc5814815dc8b1e
SHA1 39e5af8034fab47bdfbaa2a66455c74185756f0a
SHA512 bbbd1619eead82c70cdc0f72867db2ffdd4a45cb908c81e852eec8c1293bcafb90c554bc3d51afab7fd7e478efc15aa9ad90fe1b56a01d0012ecee493184d36a
TLSH
T1B0A0024A47C1F51A80D137495D771D41C91755E1BEDF91481A929F2266379C0586C454
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

ghbmnnjooekpmoecnnnilnnbdlolhkhi_1.3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ghbmnnjooekpmoecnnnilnnbdlolhkhi_1.3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4aad80161de465dadc132e45cf6623852afc9a2bc6735551c25869bf8b26ae81
MD5 ce2756412dce4867403de8a405e09eb1
SHA1 7724dde172f58cc85eae189ebe8e13b73996674e
SHA512 99e696f8083cfbd415b37295f3d5d339ef0a4dbb02f4401b864a60542b08f57162c69e39498533e17233d870bf004b952fbc334c29d38985b40d405c9b7f4b01
TLSH
T177411C5CBAF91158B3B76F1E5BF6787D487B7D272A06949D00110D4F0623B40C862B33
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 459f2b9688aed595fa0cd8d7d3a09af6b41d0d3ad2cdb09ae534919cd069367e
MD5 8336fc36f25bed52f7533c3dd3f1198f
SHA1 8eca82a9e3b8151921b1d54de6d87f9bd572a16e
SHA512 d8dffaac81024a1689805927612dedc1323c7fd1fb4c640caa5479786bb67a82c9a3073f9550a327c988e4dd9d18e562e9c47275a8a9576c5b7d3700760a63d4
TLSH
T147512958AAFE1108B3776E5A5BF6686E897E7D332F07945E00110E4F0B23B40C962B37
MD5 SHA1 SHA512 TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 7f6391cd95fbcae1714707c00d033be7420915b0d207e8f9d88cb53441d75192
MD5 de21d27c4fd266617b7ce4a9f9e1a15f
SHA1 69a2d3d563a45f2f8c351b57dfc2901ae1f79930
SHA512 959b6bef43b4ac380fa7b43a28d9a82fa6bd51bf19802a8e611df9ef2aa375935a95001c1d3dd24c685fc932fb1663ce38e648e3275b6b6efbb98d2f375bba76
TLSH
T11F512AE13532A23F7BD347C890250CC55661F1A4432F564CEE4A4434FD5CEA2AB5E3C9
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3400_304059144\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3400_304059144\CRX_INSTALL\_locales\en_US\messages.json
Size 1KB
SHA256 4f70eca8e28541855a11ec7a4e6b3bc6dd16c672ff9b596ecfb7715bb3b5898c
MD5 64eaeb92cb15bf128429c2354ef22977
SHA1 45ec549acaa1fda7c664d3906835ced6295ee752
SHA512 f63ee02159812146eee84c4eb2034edfc2858a287119cc34a8b38c309c1b98953e14ca1ca6304d6b32b715754b15ba1b3aa4b46976631b5944d50581b2f49def
TLSH
T153213806EA14BB37825F6036BC657585A3300ADB2600FC3D7EDC941C1B059AA91BB3D4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3400_304059144\CRX_INSTALL\manifest.json
Size 1KB
SHA256 609995e8dbdba5ba968a6c604750e725059902b4e8c1f693851c738d3938317e
MD5 8afea622647be84467127ef5cb12745d
SHA1 dbbecddc500f406b199dabaa7cd38b1bd3d34557
SHA512 51e562c06c99d5a7bdc56df7b61d8b420a42e18e46d9d7ba182c07ac6fd671f68b9c65c0a2356d4ab17e7c6b4f22920d94f57514ac831a46d0fd60450a98034a
TLSH
T1744169F7BC00AD634BA49898AA1E710EFB29B24D55CFD4DB8298107342CCDAE1D601E5
MD5 SHA1 SHA512 TLSH

Submit Download

FC 26 LE v26.2.6.zip.crdownload

Path C:\Users\Admin\Downloads\FC 26 LE v26.2.6.zip.crdownload
Size 9.9MB
SHA256 eb8e17ada2565066a2c17fd9ccb62e3fd2eb33f0fcf7205fcc05905bb2d063c2
MD5 87886b88ad8f042c640540b948dd7daf
SHA1 1faffda7c7a45eb9a630401cf94af904bef6cfa3
SHA512 37baa3f62fd10de911dc1fe1ef1e26daf1893304d2d9648ee5c8278a5aee28be7284c9c6c66819ebc4c194222939bbde80e9bf2ff48ef1f9daf1ddbee620cfdc
SSDEEP 196608:MqKh0MidK/ybF2HnNnhxqY2R7RkkjOIOTHVnp20SXkg1Dhp3Nm4t:MFSC/yb03cRW1aPDhJs4t
TLSH
T10DA6334E6BAE1E5FF40962F739D8C20FA8692D413D82B5AFF1137858F864964B43D087
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

live_editor_launcher_08-05-2026.log

Path C:\Users\Admin\Downloads\FC 26 LE v26.2.6\Logs\live_editor_launcher_08-05-2026.log
Size 595B
SHA256 830ed9a017cd6c9855e2775263adb29888ac04b8a9ea576f48ce375e84326e32
MD5 d55f8652f59186e2254d5beac96d0d73
SHA1 d8495aa97c8480a62d16076b95df75cbbef7035f
SHA512 386b0329cfb9400b7aa47f377926a83487ccd165b6a13f64b0e3f39a413807419c1e3ef37084a178c54192b98f8c23ef56206c60513b7b0dbe67b7c338688123
TLSH
T11CF0AC96C44308335DAD7057A6013781BF5402CB16AD40DD3610058674129CCDFBDABD
MD5 SHA1 SHA512 TLSH

Submit Download

live_editor_launcher_08-05-2026.log

Path C:\Users\Admin\Downloads\FC 26 LE v26.2.6\Logs\live_editor_launcher_08-05-2026.log
Size 1KB
SHA256 5a88f4124f799adadb4eaa10bad62d22817059f1a02dcf2393ab0edd80b1ec33
MD5 5ca4f795432872e8d1a56f7b64b3bec4
SHA1 b16c52d23b15db6dcf8ecfb77a719fc279e19141
SHA512 a1c0a170643d81c6ba66e6dd671a35cfb3cecef5bbc18c3ffe701688b7cbfa8e487158d4dc183ca6af7802ead608889721016eb6111329e5286a560d30c898d4
TLSH
T15A4122CBC5870C37AEAE326235143B126F220DC7164820DD327406997923ED86F6EA9E
MD5 SHA1 SHA512 TLSH

Submit Download

live_editor_launcher_08-05-2026.log

Path C:\Users\Admin\Downloads\FC 26 LE v26.2.6\Logs\live_editor_launcher_08-05-2026.log
Size 2KB
SHA256 2c5dcd821cc74d53098a877340d16d5fa7149672222abf72bac1977fb5cf5bef
MD5 3c2fdd6496fe3b82e3a41a4c8336bc51
SHA1 92b33f368a68a17827700c6884e3756a0c3830e3
SHA512 374e3923e2e5b01a900147aa00f7c0d259f57602a11998c9449cee7e107f85634a54c17f2dfd197e3b420764f58d33a145cec3077272b2b302302bfd853000e5
TLSH
T1A65113E7C5474C37AAEE325335143B52BF2209C7158420DD326845A4B923ED8AF6DE9E
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2412-2642-0x00000220B3EA0000-0x00000220B45DF000-memory.dmp

Download

memory/2536-2228-0x000002518E790000-0x000002518EECF000-memory.dmp

Download

memory/2536-2123-0x000002518E790000-0x000002518EECF000-memory.dmp

Download

memory/4976-1148-0x000002A7D7800000-0x000002A7D7F3F000-memory.dmp

Download

memory/5780-673-0x0000029AE82E0000-0x0000029AE8A1F000-memory.dmp

Download

memory/5944-535-0x00000207D0E00000-0x00000207D153F000-memory.dmp

Download