hxxp://google[.]com/

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
420s
max time network
418s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/05/2026, 16:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com/
Sample260524-vftlbsfs2x

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4508_922719622\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4508_1929615392\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4508_1929615392\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
816	msedge.exe
2444	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134241153999727115"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{71913ACB-11FA-4549-B6A8-62CF49E3C411}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{6207C58C-0442-44A0-AAF0-D076F266FF25}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{BC26A8EE-62E7-42FA-AD78-C6910F5BB9BD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
4732	chrome.exe
4732	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe
Token: SeShutdownPrivilege	1056	chrome.exe
Token: SeCreatePagefilePrivilege	1056	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
4508	msedge.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe
1056	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4508 wrote to memory of 1488	4508	msedge.exe	91
PID 4508 wrote to memory of 816	4508	msedge.exe	92
PID 4508 wrote to memory of 3712	4508	msedge.exe	93
PID 4508 wrote to memory of 3712	4508	msedge.exe	93
PID 4508 wrote to memory of 3712	4508	msedge.exe	93
PID 4508 wrote to memory of 4188	4508	msedge.exe	94
PID 4508 wrote to memory of 4188	4508	msedge.exe	94
PID 4508 wrote to memory of 1448	4508	msedge.exe	95
PID 4508 wrote to memory of 1448	4508	msedge.exe	95
PID 4508 wrote to memory of 1448	4508	msedge.exe	95
PID 4508 wrote to memory of 2216	4508	msedge.exe	96
PID 4508 wrote to memory of 2216	4508	msedge.exe	96
PID 4508 wrote to memory of 2216	4508	msedge.exe	96
PID 4508 wrote to memory of 2184	4508	msedge.exe	98
PID 4508 wrote to memory of 2184	4508	msedge.exe	98
PID 4508 wrote to memory of 2184	4508	msedge.exe	98
PID 4508 wrote to memory of 1636	4508	msedge.exe	99
PID 4508 wrote to memory of 1636	4508	msedge.exe	99
PID 4508 wrote to memory of 1636	4508	msedge.exe	99
PID 4508 wrote to memory of 2368	4508	msedge.exe	102
PID 4508 wrote to memory of 2368	4508	msedge.exe	102
PID 4508 wrote to memory of 4468	4508	msedge.exe	104
PID 4508 wrote to memory of 4468	4508	msedge.exe	104
PID 4508 wrote to memory of 1884	4508	msedge.exe	105
PID 4508 wrote to memory of 1884	4508	msedge.exe	105
PID 4508 wrote to memory of 1884	4508	msedge.exe	105
PID 4508 wrote to memory of 4732	4508	msedge.exe	108
PID 4508 wrote to memory of 3572	4508	msedge.exe	109
PID 4508 wrote to memory of 4732	4508	msedge.exe	108
PID 4508 wrote to memory of 3572	4508	msedge.exe	109
PID 4508 wrote to memory of 4816	4508	msedge.exe	111
PID 4508 wrote to memory of 5160	4508	msedge.exe	112
PID 4508 wrote to memory of 5160	4508	msedge.exe	112
PID 4508 wrote to memory of 5172	4508	msedge.exe	113
PID 4508 wrote to memory of 5172	4508	msedge.exe	113
PID 4508 wrote to memory of 5352	4508	msedge.exe	114
PID 4508 wrote to memory of 5360	4508	msedge.exe	115
PID 4508 wrote to memory of 5352	4508	msedge.exe	114
PID 4508 wrote to memory of 5360	4508	msedge.exe	115
PID 4508 wrote to memory of 5888	4508	msedge.exe	116
PID 4508 wrote to memory of 5888	4508	msedge.exe	116
PID 4508 wrote to memory of 5288	4508	msedge.exe	128
PID 4508 wrote to memory of 5288	4508	msedge.exe	128
PID 4508 wrote to memory of 5288	4508	msedge.exe	128
PID 4508 wrote to memory of 744	4508	msedge.exe	129
PID 4508 wrote to memory of 744	4508	msedge.exe	129
PID 4508 wrote to memory of 3460	4508	msedge.exe	130
PID 4508 wrote to memory of 3460	4508	msedge.exe	130
PID 4508 wrote to memory of 1456	4508	msedge.exe	131
PID 4508 wrote to memory of 3896	4508	msedge.exe	133
PID 4508 wrote to memory of 1936	4508	msedge.exe	134
PID 4508 wrote to memory of 4660	4508	msedge.exe	135
PID 4508 wrote to memory of 5184	4508	msedge.exe	138
PID 4508 wrote to memory of 5184	4508	msedge.exe	138
PID 4508 wrote to memory of 3348	4508	msedge.exe	140
PID 4508 wrote to memory of 3348	4508	msedge.exe	140
PID 4508 wrote to memory of 3444	4508	msedge.exe	145
PID 4508 wrote to memory of 3444	4508	msedge.exe	145
PID 1056 wrote to memory of 5016	1056	chrome.exe	150
PID 1056 wrote to memory of 5236	1056	chrome.exe	151
PID 1056 wrote to memory of 5236	1056	chrome.exe	151
PID 1056 wrote to memory of 2444	1056	chrome.exe	152
PID 1056 wrote to memory of 6028	1056	chrome.exe	153
PID 1056 wrote to memory of 6028	1056	chrome.exe	153

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com/
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7fffde1fc188,0x7fffde1fc194,0x7fffde1fc1a0
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,2424442011896054987,6854768132678443835,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - System Time Discovery
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,15478026483569846262,3125615108165861023,262144 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,2524165333781851808,1966024594081783449,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,12992205260988591924,11148319877764707332,2097152 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,18213707136037144593,188340579423057217,2097152 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,18195710769264602670,10801223161735857403,2097152 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,6596045364459595644,55887338914970150,2097152 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,2229268490724435837,11328402673630973048,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,3498973649218000035,51798242697862830,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5344,i,1287649095726162322,185803395892307334,2097152 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,18146424062567117420,763491753580139511,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3832,i,3864188389807796159,14189142127131631656,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3828,i,965863732437812449,14861993553911468396,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3828,i,965863732437812449,14861993553911468396,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,14169199085893385661,1311829035337379189,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,16741015691587086531,3489464749278541944,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3956,i,15664933728705222911,12760972413881748446,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:8
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,464847182161746664,12207648842333182213,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,1320838406389471113,1691992979010138135,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5104,i,4998943486124383879,1651115509549849617,2097152 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3848,i,14655923057351126046,1926395000588775106,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,11879810694652625034,772966794560271561,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,12514758025571190051,7275369025673070376,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7068,i,4063991440007837441,6614312324759693628,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7064,i,8401707476750039562,16398868345219160826,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,10308803411089387556,16064018207672617489,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,7257634700454202045,17550970361433613912,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,9157825012319447283,767671987318934385,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,14440558543153540992,13974254141151984099,524288 --field-trial-handle=2384,i,3058004545289449139,1340409925851960151,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  PID:3444

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1284

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffd1eec728,0x7fffd1eec734,0x7fffd1eec740
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,9900593560272394968,2343753919945007282,262144 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2012 /prefetch:2
  2⤵
  PID:5236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2288,i,13037605852685317195,16891453092198604288,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,14737215674045108568,12037728018721943925,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:6028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,16521006815419676096,14629655002337926867,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,9227342456360540112,6183008492836085244,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4456,i,9217130532394146444,9805149554970236709,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4476 /prefetch:2
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,14033322137262437807,7246411680284547246,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5520,i,16399275228024399712,7456025625197398413,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:5444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5744,i,3953607093580672534,12869259426585382582,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3672,i,15878073860628352657,13719682393520508612,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3556,i,14993874397649029519,14321277293246518048,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3600 /prefetch:8
  2⤵
  PID:5464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6128,i,11429122118799455458,13651598335598748887,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3688 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3264,i,14010393437861926437,2950216700769373450,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6176,i,3069443452399401359,15823201602222587918,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6172,i,7937983221798343583,4857031145104001512,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:5372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3952,i,15159327853466416835,12212534819035667490,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5876,i,9421883497478362467,8999003079208461868,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6412,i,7926417837955405475,12327565836058720411,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4512,i,7530062495214019643,4555852894999223280,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6324,i,16910153106919487043,4120916558098348791,262144 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4660,i,15497921558645809606,6017227029818815123,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6392,i,9695270820539971030,11779308964547200760,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3604,i,10644509839478839730,1445351028889925474,2097152 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6460 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6448,i,15320570507653776642,14398841198170744982,524288 --field-trial-handle=2016,i,4022166270144552110,947137229957685052,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:1040

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5256

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4508_1929615392\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4508_922719622\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 b6ce3e6ead4cffa9d6f1ed8158c623b358d03d61cbebab147fa86823d8ab7538
MD5 76f16d0ae70b669eb4f17358ed0a499b
SHA1 6f1eb933ad209fd54f537232966600c0f8c03951
SHA512 7c22fb7eddf621c86eec3a446c883f33010b6e5632227a0b791bf255b7137390e3d5a6b526875120204ba5a7f38896e5b18c01fd72f05185a46cd798831e2bf7
TLSH
T194F0F9AAC8219C2708FD1B283094074BF75513672B80C84B3A3D820D4FB5A7F8656D2C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 81KB
SHA256 74bb87079ed46b17750701b528befa2b52175b25c1d42714f62c98799207c3d0
MD5 51258a2c2fec7a175e798cca18405036
SHA1 e1d50bad3dffed6a1418efc2453437837b53d18d
SHA512 b3d0edbd1f4704b1467dcddcba01da13ee2c15c647d2cf829072a5cd66c6e33f8e4a018d15eaf2c120bcae765a472b63f78fd3745acb5e6158814764f0c9bb65
SSDEEP 1536:yCe8ROKClMoKUIFJ4CI7T1KRJwErK1bO3tiu/avDAyfX1m0Z9:y4RONltIFJ4CCZyVKtO35/YDAy1
TLSH
T18B8302CD81A2F6305E6B3C772DC56CC20D3A2A5E3A0468F22B427C19A2FE86769D7545
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 271KB
SHA256 805d63c53db1638155e5fae66df52e779a684438431f00e4b8e6e219cca9d2aa
MD5 3952ffa3d7f2dd968c891861fb199c6a
SHA1 2a62bad801be0e12d2b9c2da5b16b325bb4123c4
SHA512 38faae3686ef47759fbc79cfac938448366a82c694d8d8895bb33142e2c668df58945526a5bf220bd981a81b340813a11bef30d752af81147145b9651d562dba
SSDEEP 6144:wTaHW5kFWVKixuNnUauJBYjGtGawsRyA8K29hRfSzSsc:xfMKTUnfuGtGqJ29nfSzK
TLSH
T15844237C05464AC0EB655FAF8619940C8CBAA8B30F95BCD5735ED39C868321A6DD08FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 57KB
SHA256 2747644ba821da5e2e77993408a94682b8ce42b30660f816e0ff07366c0ff66e
MD5 8395a757edaaa154343b98f88b096256
SHA1 49557acaba0650e0a2b3c32133042129d5a77a50
SHA512 ea9b05e8c9e2de126db5342b024a9b96f0f0716c662aae7f3a1f3cd5957e8cfb0bb7b55737eca982e5bff7cdf0989ca067e20acd42b193a538414e1be67af473
SSDEEP 1536:lrjx4c+45YMN6l3higUAaiBQ277QE+EpNQNUW:lXOjS5gUpg9QE3pi9
TLSH
T14B430277D7E1499E2750E4EF073AD1F9CF859E07A1DA0E2096C98D3238B6937A10069E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 646KB
SHA256 61e762d7dc34235f1068f093f2670e01cdeb87b366328bc643794166fb6d1b5c
MD5 0d2f3a2e617b6e686c5280aa350215d4
SHA1 e260aadef9892bafac39f0dbd26aedd5f6e6cac8
SHA512 af776d3543081f86b182af0d0710fc020f99636fc1db3b2b5a218f2aa8990cf59ad935f246ea0a35af0f3dd5c5591f034d71e052e912f13a53f9162ef2dc5a1a
SSDEEP 12288:+g/RDc3zNUOX1y6xQSMh3yfIfYH0W9ft38x1aie7ScvNLfyHvr88tip:LMNUK18Nyg40Kl8xYie7SK4Hv7ip
TLSH
T18BE42321ABAE95535C151BF23CCC43F172FA45B402A2AD18F948983134ADA69FCF477E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 22KB
SHA256 a714c27683064e544b8223edd10038c798cbdc5a885cb2e29848fb9d63e18c18
MD5 41329f19225f74034a7c037e133dd3e9
SHA1 251b9d30edfb6f90261d24429656bc56f3981c5d
SHA512 5ac871c9a58b21c450e3ae0673059ea216dd4dddddc0e8e9bdebbdd741d19e8b78735511d5e9a924a95f7455d87520c7d9f4cffe63a0cb477adc1bc0eeac0c0b
SSDEEP 384:gLZXQ078BWdnMqnbb4kKdEj0yHy8AHwoWJ4Ca8iLaw+9f9yxdTcnfCuQnB:An8ARMK6dEpEHwoG43bx+9f9yzYfpu
TLSH
T197B2D0410CD6AF4EAF754D60771C38C13A068A1584A89BB78AF1C33D6CA44ED929FEC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 34KB
SHA256 c18b72dbe9b389d04fa1e3c738b15b0438726edfa2d5151e24bf2123d4954d55
MD5 05afa4cceb3612d17f4b25aef39680f9
SHA1 4c77f3bb3b6a35e5af02bc653868ec90039d258d
SHA512 598437d4514e6b1fec42c3603acc3f3300ec03d44c51119fb2eb4c1aa94aee24c826071ba0237fd5a321498634c4951d69ad02c4bc12b04aa81e581d6692c740
SSDEEP 384:4izZMlnpRik1usM3sNzQpwjSPuxNEq/jsvwpz89AI6d5OmY9kK2OS7uIyQNoLJfh:4MRiELI4uUvw982Iu5OmY9F22SoLJf6C
TLSH
T1E4F202205FA0EA31E4F35A0F1DD2C86265CE40ABD76B708BD8177A1FC056504B72B634
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
Size 45KB
SHA256 85369a1cf6e7ff57fe2587323c440ed24488b5ed26d82ba0cd52c86c42eec4a7
MD5 c2cbb38ef5d99970f0f57a980c56c52d
SHA1 96cff3fd944c87a9abfd54fa36c43a6d48dac9cc
SHA512 50371320c29f0a682b9ae3703ef16c08f5c036e84d5056e658f5d9be7607e852adf72c13bf2d0b63fc492f5c26d330bdeb2ba38bfd8b0d4567f0cc6b0c0f7bd9
SSDEEP 768:1K2BRrR4XIVak13goSJqmpurWdw+DwwpLwZrPbZMJGD4uxVDzzR:jrr4ybcwQ5pLkrrVrfR
TLSH
T11523F1BB902E19CF2EDD35A7CD1DD2143914BEB3C4053426755FC00AF909AA9D7A0AEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 c8feb75cd1feba85a5fe2fe57bd59d009bdf97221fa7c1ba2e237e82e3cac87f
MD5 0f7c5f17af915886c56d5c71da1319fa
SHA1 e6e541fe66618d4c4ee561c873e0148d39bdbc69
SHA512 2c25dc6cb90fb4d1b33db3af476d4312aa42aa6aa605d326d8ed19e99346dfb98d993b679d6f831f46494cf40c10f278a92def64c57682e9dd175a4042fdd5b5
TLSH
T1A8118926C2EF6854DB7C067108447ED5A1221CC7DDC56B371358D4611C3BEE7A14B872
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 78e83617fa2771407fcdaed0095bf26753c08a076d86eff92ad9fbdbe7d98722
MD5 fb1332f8d49d2b41eedcfe1fafb90de8
SHA1 7032922ae043d23cacf1cae86ace867c97a2c8b1
SHA512 a09e56e889ee9150f26152e0cfbdc115aeda5906ea3baa820ccabfde3fdef002f0d73bef42edeef4cfe839d18e6ed396c10fac00dd45f96037d99e0f72753b7c
TLSH
T13531C02782EFB901DB78067209643EF4612188DADCC61B33075998311D77FD7945B973
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 96fda40a5e5ec29541fba67bd805bb1e287056988b23870b0d307466ab1238e3
MD5 2f488250ba800428624278f66f8ecb55
SHA1 43f6e200600c4438c36d004c154be2ae410aa753
SHA512 0c733353786b0e7eb2283fcf0a5c9c818dbed9964f9e5f846bbcc1f793394affd805ad1d976e53743e0113539fd72e719c2b124c98c8689853a598968dc9fb5b
TLSH
T1D711452A82EF6C54DB7802B019947BD571651DC6E9C62F321368C8611D3BFE7910B832
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 121e3e3afc377a63b3eb4ab108f660be73a95b5989fc65aec92db906f83f4f66
MD5 3d4c6b07e416f6eb8c51971d591f5211
SHA1 c6bbbc8a947664fd3c2d93f9b35648ee200b37b3
SHA512 fc13d640f1b2c3e1f92584819c6d27150dbd5eaa2d78dadaf96819bfc7afcfc3cf7780c7f373a7840ccfb4d036007d7d107bc4317cafd2bf9a8db51daea81390
TLSH
T1A531CD2A82EFB801DB78067209643EE4612588EADCC61B33036998311C77EDB94679B2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 76a95add3eba523a82d25570a24acd248111dfdfe111e5225025a927c3d4858e
MD5 3822884afcc0158794c08f05b2306f28
SHA1 37e51b08a773d7112dcb5e768ab836d51adca56a
SHA512 93f13e88e8c81bef4d7bdd5a751c5a886adb4d7adfd477365f676ec515c14e0bf3d2de58cb05fc12e7c13da4543300e57fdf7806a4c6c0a0b1283c2f722a430c
TLSH
T1FD31BE2A82EFA914DF7C063209A43EE4712189EADCC61B33136588315C7BFD78857977
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 223KB
SHA256 54d7a2ae570437ddd8e5d2c7440d2f507aba3d8fdf90351e2b4360a0c8ed389c
MD5 4c1024c92d066efd9b22015be5401121
SHA1 301cbd052844de9891f2eefc4da38a8a2913ba28
SHA512 520ce1a678509e333afc0203f37e809be1c8e1b7a30a02653de21021f465cc95ae26ff55769f45ae2b94fad64dc7878a526d0edc61190bad05c9dc455aba5c61
SSDEEP 3072:7nM2YK+OITBPaFaAaPavaEaPa9aLaja+aTa2aCadaXa3aCaZafa4alaVaLaOJajc:Or8IsTq414
TLSH
T14B24D5247295A38AE16E833B0526AD17D335AAC8558C30DAB8B33F1C27FBF55365071E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 12817dcb469e66cdf0756dfa06a3803cda5b01df5de9dbad89a29d13ecae23c2
MD5 80a0d69c78e526120c44ce41bbbd5e05
SHA1 fa4ce97af4a67d3ddf13b049d3d8d297119563ad
SHA512 f53b83fc288f728b16a572e41e3daeb24ed17f210c01e0a99cf1d5128a73c9ab79c42da3a343567b24c724db04a0e61e6a45dcb51f451363ef084ee7aa6b4039
TLSH
T1E7E02079D5CDC5BF166480EB5634BB0ED9D6650CD7CDBC650F05D41474C940C546D290
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 aee545e9d2b2505d8e22adb2929b013903179389af46dbee64995504524fa0a1
MD5 9c0f2040f83d8440b321e95661be3596
SHA1 89584fbd635baeda1b1a34dfcf6333adf193b378
SHA512 24dd3c922c6c9f89ed9483befe8b664d6028c9a42e7182dcc07198de9d240430aadd7274544c7f777326d3dc214c3337be529a2449a9ba1258eb4f0e2760dbcd
SSDEEP 384:DFTH1ruBe4QKECAN2giZY10ElQaG2QexwtVkUghwkuSdRjmBE9qRj/F2/4rE7H+c:uoJd
TLSH
T1F972AAE3C3D8822DD82116F4AB247D2FDD7A1E2883283C39D8E5AF4A63E5171E21575D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 82a0b52daaf2fe9b94a716f5da2acabb8689c8d7d2da48af11b464c1373a8d55
MD5 b81db9cabcf7fb04471b9283b43eff43
SHA1 1dad7044da2b9872e588e78b7b7a0d642cacb2bf
SHA512 69c34a09b9e7ebfedb7a15d3716824a7b19b859bc57b01713cc83e7f85655457b7c139708614b2da9d6c728de05172d0a7df06c36371e13761b25d56ffb2c3f7
SSDEEP 192:4RccBzd7ItQ8rZPAv7cpAPRp2qFt+oM9BHsb+WNJYgB4qv2l+28eIdBdVyIsnAUI:4RcmzdsxUwUXlErw3Z2U2eJ5V
TLSH
T15452C62FA920657B8DDBC31AF9657B57E3F5102265942DC0EAFC8A2C15EB6CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 be751a7ab5935f7d16a5b8b0cc405af3a3c1d2d42718e235415780789ace6789
MD5 2f62f5c709956270e385cbb715617dcf
SHA1 a2d152638c3f53d12d09857f1a5cb5bdd51d5e24
SHA512 3c8f086e8a1221b7813adf96cd3b4514af8732e65e3dc983304430722d02c8fde5ba37bc67dd86c35d9213dc72cf3455f42101df71d3e0517cd2b7bdf7274949
SSDEEP 192:4RccBzd7ItQ8rZiv7JTp6PRpQqqNt+oM9BHsb+WNJYgB4qvUTY3TU31+28eI+Bdf:4RcmzdsxuNeX/Drw3ZbU02HJvV
TLSH
T12A62C62FA920297B8DD6C21AF9657B57E3F5102265D42E80EBFCCB2C15E76CC220701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 08561158292fec2ef5f3ef4bea61aa090d7a6ed3d6cf88f1e20c4b39b2c67123
MD5 bc530f4bbd02d0406fdd24edf61e377e
SHA1 dcd182f6d045889fac2d11cd53865ab9ba195c17
SHA512 292c225fd0f190086baca8e3335e6214084daf68c6204393ab4439921c54136eacbaaf863ef4c99f28905b025568a66e1aa635083afeb0d9e269120da91caa4e
SSDEEP 192:4RccBzd7ItQ8rZPAv7JTpAPRp2qqNt+oM9BHsb+WNJYgB4qvUpG2e+28eIdBdVyi:4RcmzdsxUNUXlDrw3ZZ2l2eJ5V
TLSH
T1D552B62FA960697B8DDAC21AF9657757E3F5102265D42DC0EAFCCA2C15E76CC220701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6853c55e4188a2e301abef1e6ba3a2a9ad9cd3d76346e5df6fb410a5581b63ca
MD5 e58740ef1a399f113787699c9a47c3f8
SHA1 337ecc4c7dcbb4f1443db9feada4f30464a06be3
SHA512 e869fbe957dec0da870a5d084e0240036f653f07261ea55f3bce1d24268b4e590b2338919fd817b594c430eff5cfa086dfef28ee0cb5b3e5bdd521cbc400f078
SSDEEP 192:4RccBzd7ItQ8rZiv7JTp6PRpQqqNt+oM9BHsb+WNJYgB4qvUt0xH8xR+28eI+Bdf:4RcmzdsxuNeX/Drw3Zc0H8xA2HJvV
TLSH
T15E62B62FA960297B9DD6C31AF9657B57E3F5102265D42E80EAFCCB2C15E76CC220701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b709c44cdbb96a135e0884f3737b50dab41e528f0f4b6c22c053d2841bef61fc
MD5 c27bfaeb1d9b42d78161e06267bc6515
SHA1 dbfc7e6230d5a2a5c7f62d0ff62bddc21c74c340
SHA512 1d98767ec81002c57b0896475c1407b1f5262c06e92f3f66e740cb8828c47f1c16dcc04e0af80a89af8b17d92ea71d91bbf1d7ec819f4e92a8b32792894372bb
SSDEEP 192:4RccBzd7ItQ8rZ2v7JTp6PRpQqM/Nt1xRo9BHsb+WNJYgB4qvUn8ui+28eI+BdVx:4RcmzdsxCNeX/Frw3Z/uZ2HJvV
TLSH
T13962B72BA96019BB9DD6C31AF9557B5BE3F5102266D42D80EBFCCB2C15E76CC220701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 36d13a97502d12873ee6cda919ed3cd8db7313201a6309a547f5f803b0b12325
MD5 3c0f5d81c83ddd4b3713cc266960ea75
SHA1 4de36fcdae54d95dcc070832175ffb8c335565f6
SHA512 78df5c32d2b8f7f63241e9e298388fdde67b7fca16683553724088094627a244913c031f38b33714e202cec089b3ca237483ec3569375658b0f4ce30ab95d572
SSDEEP 192:4RccBzd7ItQ8rZpv7JTp6PRpQqM/Nt1xDo9BHsb+WN9JrOu91gB34X+qvUc7EP0j:4RcmzdsxpNeX/7rwx+ozTEPD2HJvV
TLSH
T1A672B56BA96019B79DE6C32AF855B75BE3F5102266C42D80EAFCCB2C15E76CD2207047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 1d53b5670115e27bb5758a31b888dcc90e619ade6335263ab87395c4252b785b
MD5 2fc6c026889754974c132e16067eec96
SHA1 b63c6b8e58e790ddc1df916d2f8acb860f8f6107
SHA512 8373b954dd1e63167de53c2fc894d95db475862f37d00592a471995a318d1bceb873bb29d0d534a9a9e96781a44503d2d434e4a9396531c63935c926a85c4b8b
SSDEEP 192:4RccBzd7ItQ8rZdv7JTp6PRpQq/4NtQYQxDV9BHsb+WN1XJrOu91gB34X+qvU3c4:4RcmzdsxdNeX/TrwV+oz/UgD2HJvV
TLSH
T11872B55BA96019B789E6C32AF855B75BD3F52022A6C41D80EBFCCF2C15E76CC220704B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 bddae71a7933d85fd650b4400b8e6cec24fe60cc473c92fd30e352b6a7ebb2e8
MD5 e33353b914a685c15bc7aae1d52e8431
SHA1 9317efc557e5c71e2b10cd51d4b3699854e3dc0a
SHA512 9b4f4d79ba8a5a5084b0bb700a28af2a6539fe6544e7018b767d24cae3ef7829ef880fc03158acc5db2fd9fece658e0295da19782249d67b34274dac9682fb28
SSDEEP 192:4RccBzN7ItQ8r3Tv7JTp6PRpQq/4NtQYQxDV9BHsb+WN1XJrOu91gB34XpSB+qvX:4RcmzNsfrNeX/TrwV+oSz/UZD2HJvV
TLSH
T1F472C66BA96019B789E6C32AF955B75BD3F52022A6C41D80EBFCCF2C15E76CC2207047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8e9a2d3e-f646-4ea7-a504-bab0f8d637e6\index-dir\the-real-index
Size 2KB
SHA256 ebe444dc096ce9bdd659d8994d7eaf9d79db8941431f1ad0cdc3bd3f5b904db5
MD5 da8a9101457435ec1ba2117d30369586
SHA1 6eb17320e5fd68d75db667985ec80b86b0a8d63f
SHA512 e15913d9606816a703ed7c415708d29700a3fbb1354754f30e57ae0f83533e25c097470682e48b24d80234cab93fda6d830d732e8a454907fe12c1e689aa6f7c
TLSH
T16451730CCD80E7ADEC7161F91D9415F263752D38FC58C3928554B2B53883A680B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8e9a2d3e-f646-4ea7-a504-bab0f8d637e6\index-dir\the-real-index
Size 2KB
SHA256 c6040ab771152a55a1041832a0e9224b32d0807cc96e6abb279136d308a2242e
MD5 7a93ac64d15598bea72b43827c976d11
SHA1 34e8d1a906b51f95b874084c1f98fe43fc40e6bc
SHA512 52cbc90010fd1769b0037ef20cc542394eb61c0d6ad2d72d5bd1f388309bc6a314fdfcee7dcd1fcc3dfd2cabc5132ceb97a941b13dfb574a78880f3013ad96af
TLSH
T16051B64CCD90A7ADDC71A1F91D9418B293352D34FC99C7928594B2B53853AB80B43DFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ac5a3.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8e9a2d3e-f646-4ea7-a504-bab0f8d637e6\index-dir\the-real-index~RFe5ac5a3.TMP
Size 48B
SHA256 91a14d006d0c476ced547a5f8bf716e73ecc726443a74859671eac6a51c5a682
MD5 87c22476e2a14f3f20cb55c7008a6653
SHA1 4342bbdb9dd787df16d307f3bc9cdccbf12105b1
SHA512 91a37a279d45c62d319ff24db609c72892791d8a3bd048e714e105f2e02fbb3e9da3aed9bd7d706897b4f865b5fd760316ef6311bf70c948e0f3145a80399858
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 276B
SHA256 57d6c40f9d4c1ed3fb760f524c2108f19cff2465c2f1c8b7d2f9243d7adf17a1
MD5 8328faf2c3a5b27b62f975e03205463d
SHA1 7f3686102be2af83dd1c773ed5ea6190d54402d2
SHA512 d355a9988e8ffa2799ea7d625736cb87a9d8dbed391dc24ab29bca5e95695922541a14dcddfd351c88adac5987156a3ec7f6c31446c43b21b7490335be1571f6
TLSH
T160D02B976C6345DE9DB7EFC92831649EC775E1484C88CCE8888A108D3078F15AC02E3B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 283B
SHA256 9c49fc42b60e7dde9ae5cd180431518b0ba838d5b9ee4c30d7be419699ed7aa5
MD5 74295c09faefabd505f23b689ff97adc
SHA1 46307ca512d592c1871e3b28a57a86dcd0b61dbd
SHA512 990bd10d76508b4c7afcf6ea3c349de59e9e1ff4718000ba8f26e26a679b8d1babbd018bece09ad9757718474362f1f7ffa82f3e4d2cc1fce23e7390882562bb
TLSH
T18AD0CD56686205D69D73DE89242114CEC775A84448C488E4584630492178A059801D36
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 b8a2c8d01e335cc6ea4935d09c93e4622c8671c1f0549d930930e6911a309867
MD5 3f1fc53e49b8b87cb8e52fa0aaa26705
SHA1 2b08451d4da6bbdfe7dd4c631fd09e7d41cbfb08
SHA512 76b013c583d6a1994d064254843f48ffda6d7646c72427eebdc5b50a0bff53347d2e0893d301ab3feb37727bca79bfded92b5c65cf302e3503cc3ca9f76a629f
TLSH
T101D022DB58339EA6BE34EB846838408D923A8E0AEC8CC8EC5844B1D2347C523D002F74
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 d238ba0737ea11460a977d817779183349dbc0bb8e2414c24ffccf358d75532a
MD5 d8a3a2045a8a7091dc0c972b32e320ad
SHA1 cd3aa3d70185e2d4bcf5784f1c0162258e4453ba
SHA512 7f593b2af1afb654aa1bc6e88eb7ffd06ad51e79e5f1fa27e31808f672766f180096b63c8204aa24351a6053c1ae2e342c9062360ebc269ba58f4c8bfc8555a0
TLSH
T160C09BE71C124AD74E74FEC42438565DD63B824C9CC5CCEC5408518634389139401E35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 276B
SHA256 fbc7c110be3f57b25e8c33c5611da3ca236dd598e843c393f5bf1161f8ec2343
MD5 61b54cc914b5679a081dc538472efd19
SHA1 984754a5b87cd9840f65b95c785b5f4b9ac66322
SHA512 91caec05d67d0ac0060aaddb9e29f7154185e845c1c0d859e7cb62437c6387a79fc5895395af365c283db4d9abd6d2744ea92a7c786eb7546a05011e279e359d
TLSH
T1EAD02B976C6245DA9DB7EFC93831649ECB75E0484C8C8CE8888A108E3038F05AC02E3B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a4bcf.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5a4bcf.TMP
Size 137B
SHA256 b6936479e83c119806808a9884137301b4a36be79ba43d6dd8038bdf25f608c9
MD5 fef0144a878ebec414b2ca94bd34057b
SHA1 2f03cbd69f41e3767ef3201f90e76a619b85a797
SHA512 f2535203a10cfd5a33f2039cfeded35114039c9b2fc7b5241019794f6d1406e3e64814d4b4e1c9199ab98e3aa43e838de989b49756c52995803cf942099412a7
TLSH
T1E4C09BE71C2246D74F75F9C52438569DD63B8D4C9CC5CCEC540571863038D13D505E35
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 f6ce7f2b6cc75e760bbf56530a9ec133b4fa88fecda33b0cfe9a4e05112bbbb0
MD5 38babf7e74b4f56585e98fe3e54dceb6
SHA1 54c83c6364e2781fecab965741d7dbc2e192cfe2
SHA512 751fd6532cab2efbf42f88180656d3d1e7f0f7892662eaf0b1166dd52185146bc55bf7b14362bc422d07dc6dd04919bee6a3602ed78c5169e37833cdfcf323ec
TLSH
T1BEC01206C401B301C00E03F46842949CB2149F71E6AA23EC82F86D92AC34525802A575
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a9a7c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a9a7c.TMP
Size 96B
SHA256 af9a69e4cdc0b26ecac1036c7aab19e4132d6c81e749f6abae3447eeb7d7c758
MD5 5c2d407ca146a82ce717ab74493ca278
SHA1 2f2b5214c1a95b51d72e20e11858209b1886194e
SHA512 f360b165b8ca3cb369cc585a4cfde40de2bfd29b89856d3363cd99dba1e9a9fee2c2e3e8a12522d62f5b1e482d811508f191e6b6646e7ce6642aacff2b8cce56
TLSH
T17CB00255C2027622C44217B435A6D5D87261EF36CA4723A2DEE42A66DC356754635170
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 5e9ff369627520e91426a189fbadceeea63c5b561eab925a33069d80e5e067f1
MD5 1c45a36cb243c7989846628b834775ea
SHA1 d7f5bfe56855516e4aeb4b7eb1171e44ede68155
SHA512 c47426143c388182f6ed78271caf36b21352f151204e5bc0e29a95c31d94cef3c9fa0ab717b589918b68fcecf0714430ff0fc64374e92ea3f7bab187797c3787
TLSH
T1C2A002A006F49C02CC9002F016C111D1E3A44914A341D33B40E0656499B39524501660
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 75B
SHA256 5bf57c6b71acc348eb3dbc97e8747c5c43e7bd696d84f9797c6b56e041197208
MD5 4e24b6d33bdc574611c89f8d1259d860
SHA1 161947a69c5209090077c56c003f4351d00666ab
SHA512 d5b9690f079872f2aec9b90b890c9e634b1883a475c0a3d8937d5b3f4756d9c4be41e95d3ffeac74b803867e2e0402e910576fcb45c94ee258839024059d83a7
TLSH
T1D1A002FB1940849E0F34B8F83035B31DF04B92ADADC5CDF0C41880822279E32000A810
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 156B
SHA256 91b8bf683348209466cdd87624719ea78d6273d533b62b7ebe44709ee45cd2cd
MD5 881a9f72fba707b5902896d0c9acab57
SHA1 5b952b46fb3747f4f8879d68b3f9285970ed78dd
SHA512 10cfdb0580004e86d5f2eea39a63e40cc57f792eb5b561266871986f156fea050d34a5962a0ed68c11d849ca635795668afb5184757bf8ee9411fd9c4d524a9a
TLSH
T125C08CE702214A9A4B30A9E82020BB0CE12F6D2A4DC4C8E4C40870462236A234808A30
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 149B
SHA256 5a8da66102a217449711374377f1a209b5fef169d2161e0a83fe4203308242bc
MD5 e191c7defa18e2577b47d116b2871aca
SHA1 5e18c7c4d2ee603d6e9ab3ccdd5b7e39f0aa528a
SHA512 43130dfa7c65ec2c0b7198fd585150546f3db54a2c25cf1ebcd78b59383f6953f5f872ffc6d663a18aa66b167032f6b5bce71348207b7722ca88b3dedd8434b1
TLSH
T1D7C02BF702118EDE4A30EEEC30107B1CE11F721D4DC4CCE4D4084046223AE230805D30
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5d1ba9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe5d1ba9.TMP
Size 159B
SHA256 0a33427fff8bcbf656c659d8d671ba3ddbea12c7e5493daf84e9e1ad098f0116
MD5 0ea713c966c17054c2d2d0c44737c393
SHA1 687048f211eab4a49e409f28eb8792de3cf13ec8
SHA512 589e5aaaa023039be70a2d12283ed20fde37edcb1bf5fc2090dfb506e51c0649b00b5b8885c311b5403ac23ff7f83f62da1cb001b12ed9746d760ff8980b65b3
TLSH
T1BEC08CAB1232840B0620A8E02030B2ACD0239C19ADC9C8F4CC98B08226F8A228209420
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 7782a1ee9f0ecb7463b7a9ac788bcf3b698086adc6b2c6ab1d2fb13002a6b81e
MD5 3d6f11d65a115d5471ce2af208673b6e
SHA1 796314d2e3cd308785e42f040a0fe2278ce883c0
SHA512 00f75d71726c52f5bb5204de14b0b8879a53c9fd7b95521c1feaead45ccab7c3ffae9d0fdab806ad13aa922ffdc08c6ea4cce9b34ada6e19df0fb07038bf5a07
SSDEEP 6144:bA/m/kPmN86MiPEURFgI1PTDFFmUi21rSm8uUVNSlzYF:xcONRsiXfi21b8j8zw
TLSH
T1B8342331AD5BBDB26E3D33407BCD731A8D64A5578B868E4982854FC28DAD1832F05E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 231KB
SHA256 3f846868b1185f115e44c61e2abe0a4a71523ce9ff6e755fb7ee2085fe626412
MD5 a4e0ab7e5105164a75c63076926b5cad
SHA1 2acd7fcd422ccda673c59b7ee664300ea609a46f
SHA512 ef393c09812d365ac7e604663738ba6bcd782fc0c47e326010a4865fbc6d9070dd0695f7c9c5fc8e352700ea43e00fdb6a81b0db60d03cb71ca62bed91a7ffc3
SSDEEP 6144:O/m/kPmN86MiPEURFgI1PTDFFmUi21rSm8uUVNSlzYF:7cONRsiXfi21b8j8zw
TLSH
T1D0342310E94FBD726E3D33507BDDB22E8E60A55186868E8543968FD2CDAD1832F15E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 82dcf24b2f1141e76cd632f20e94b08c9fb1d020cc014ff1c1cda157c74a7497
MD5 43141fcd22610fd84e7faf3ad6c16dc1
SHA1 8ef6434a4a1ec6e33990e63944b4ae8db092832b
SHA512 00e9f2c081eeb6956924ef041b749c1f58b0ffb7c8b59b9238a8bd74bc8d0c88147cfb0f60b1c3898b83cfc33f32d4a81c4102d4e942355aac9c1dc031537b24
SSDEEP 6144:sA/m/kPmN86MiPEURFgI1PTDFFmUi21rSm8uUVNSlzYF:OcONRsiXfi21b8j8zw
TLSH
T128342331AD5BBDB26E3D33407BCD731A8D64A5578B868E4982854FC28DAD1832F15E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 9d16d02e8c556fbbfce45660a48051520a401834e17fadde0d8fce064d1c0e66
MD5 51ea1465f1ecf066da40ff08c21dce70
SHA1 34abb32095c0b26603cfac9c32d1cfce57e4a4b6
SHA512 0a27b35465480fecc6a7f9f7caad61e09ce15fed0f1b3b1bc185bae02779213903684b44f95159aac68ba0cf1255f7f4b9c51854d456e06c249677e4cf72cc2b
SSDEEP 6144:GA/m/kPmN86MiPEURFgI1PTDFFmUi21rSm8uUVNSlzYF:8cONRsiXfi21b8j8zw
TLSH
T1A6342331AD5BBDB26E3D33407BCD731A8D64A5578B868E4982854FC28DAD1832F15E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 092d780141d888996456282cbf0d8241764cf56047baff03f1665fc400f345e7
MD5 44a6b6fb60d842ac1b5d4a23efa09e0f
SHA1 51f24d99956436341cb7a7ef8c86f4da6c13a616
SHA512 f4687aecd5caba6e545fb57acd22c7b44ca23ca3d52ab03ef42259a338b8f9fcfed9224cb6c4733c78679f6cc1e0c919b1824490d38a143ad66c7667833b9555
SSDEEP 6144:iA/m/kPmN86MiPEURFgI1PTDFFmUi21rSm8uUVNSlzYF:wcONRsiXfi21b8j8zw
TLSH
T14B342331AD5BBDB26E3933407BCD731A8D64A5578B868E4982854FC28DAD1832F05E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 076cfd9b3525f89ad50875a34910797be0f2ea79705c081c1bd80faac4c20dc8
MD5 6d39a7db7d3af7a9fe78554b83cc306c
SHA1 d1525b99c8c4c72fb4b73838fcfc0ac990b1d50c
SHA512 ce1bfdfe0ba6e7bb356c4c14467cca89cc51e8c46880b6577c1bb9a0ef32999c54d26dc1c269c3de86238e30642d48eb8682a7c844e0f492369188b42ab069aa
SSDEEP 6144:AA/m/kPmN86MiPEURFgI1PTDFFmUi21rSm8uUVNSlzYF:KcONRsiXfi21b8j8zw
TLSH
T189342331AD5BBDB26E3933407BCD731A8D64A557CB868E4982854FC28DAD1832F05E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 231KB
SHA256 8c0e5248a18b4279d8b7b0fd5f46852f10e1e3eae4d6532fd758c1f5f2ca4d3e
MD5 e97a32017c548b151498b4037ff06f17
SHA1 281f8f1469df0ce20e7af8557d657a257e1be7bb
SHA512 af6c8a900b952a4b74bcec4f401e0cc43d2f78c89119a8e87a76f25fffbd9e718cb2b8ccffb694d7728e2ed2b8844031fb4a649f068226353c8ef1b9baf53693
SSDEEP 6144:z/m/kPmN86MiPEURFgI1PTDFFmUi21rSm8uUVNSlzYF:KcONRsiXfi21b8j8zw
TLSH
T1E5342310E94FBD726E3D33507BDDB22E8E20A55186868E8543968FD2CDAD1832F15E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 b674f061a44237749088a3b92841cd9a5c404d612cbad30d9d55ee53646b7359
MD5 eff852d165a6858a451fba13ddbfb361
SHA1 e7557af27f7d73a237f68d1fea03b9c18b23e152
SHA512 ca26f843f28091c597c2acf7c84d6179c7f62724dcac1c5357b25a0774df46fdaaad94a06ab2232f5953612509aa027e308d00dba6cd9ce0f8e805242ee04b5f
SSDEEP 6144:0A/m/kPmN86MiPEURFgI1PTDFFmUi21rSm8uUVNSlzYF:mcONRsiXfi21b8j8zw
TLSH
T137342331AD5BBDB26E3D33407BCD731A8D64A5578B868E4982854FC28DAD1832F05E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 f1bd1809c908a37eaa185e6ea7990f09f7936e744f2d885546e36728087e5dc9
MD5 d5798290a710c06af1c0e67108c0b945
SHA1 4a5de658d21d7606e3a3cf31b0ac0f536ad17ae7
SHA512 2ffb9a01f7a545063acbaac411efef9c77de10026c5a82a96ac74ea45661459b8361a2f84ffa5151c415066fdc0f2c7efa63b645d091edf583a96633f15805b6
SSDEEP 3072:SCFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:/FmUi21rSm8uUVNSlzY/
TLSH
T120C31300BAE3E8F2EF5930447BEE2A145D6C0D818291C6415273AD419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9edc97bf-38ae-4714-a76b-3ab95c15cdad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9edc97bf-38ae-4714-a76b-3ab95c15cdad.tmp
Size 36KB
SHA256 16563e07c7742304ce26c732553d552c8c5511a2b822824531bda3629416e6c5
MD5 50e709aa35739b56e85280627d0563c7
SHA1 35f16bbef456eabedf655e877a5eca7a90b69c6c
SHA512 f29f4acff411f2b2fc42e290a3efde42fe6be5799629162907b6148f4a97a25dcac27c718d15588a9a6aea5f2a6c44887b77cd31fe3f8c93eebdd58e889b111b
SSDEEP 768:4FXjZbv5wg2XxhOqBlCkSsNqOo37zanJ7m:MDKB74Hrzw1m
TLSH
T15BF282F294D39DB6D49D97C7933EAD0259BCC163B5885488B7E8692CEC8B5BFC305810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 759ca84056c056849785a4082be7da8c40153780ce6329985fd3aec9d25d2870
MD5 71d58a2147fa57281670e21384065d46
SHA1 998a79684437b71d6cc6792806afc77a38bc5007
SHA512 b6506dd7cfb9dcc092bd9efe161dfd3858a487cc3dcd9cc7b66764370ead13c4b7caac70eb4ed66871211e48ce5792cb6dec76293d288a019963150f9f43892f
TLSH
T1BBD09730329AECC2D0281034881003022FCC89852083A20222008C0D8CB22C2B189897
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 c24a823e75b32556d0f8ab53ea95726c67e59f97a6433c556a9c84926d241643
MD5 25fb1188e198ae43362d4a6ffe8365ab
SHA1 72f7d1ff220aa4ec9709151399ead4f4fdd1c7be
SHA512 eebad636199a634d89e4ecc2d5f8dcc1d1f9deca0dce3ef4f57dbafd78b18e4e27a79f72ad5a605b37742ae60be953a59d065708a17770df7a58061631528bb9
SSDEEP 96:hnSc3t/pvMJEvXfPjYu8c7nl4GERZUeIPx:hnSewJmHj38c7nGVeeIJ
TLSH
T11191A5184261285ED37AD130C0E06A077E31C4FA88AB9F3A0354DC7F96273E79BA947D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5959ee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5959ee.TMP
Size 2KB
SHA256 ab478f98de32ea587baa5d2a026e070ffa40d9aa350c32c01a27fa5152b912eb
MD5 05d7c2b533f3d1f55d7a2ab1c3c4eb59
SHA1 b23d60bf0af9dfce27fa0841dc8f711c20bf5cff
SHA512 c648b202333f3f9e028826792fa57c1f17d31b902234f1a736b3d50d9ce5b2be7dcddb1da002812baf305c32106043866a9381b20ccb63fd671aad78b6b8c18f
TLSH
T16A514F180652649EE730D231C4E01B13BE36C1F9897B8E390294D9BF97277E79B6901C
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 c67d2bd238118e3f7a40d5884fc3cce7b19a6ab401d1c2fe002831264148d8ee
MD5 ae91e7b406b4c2016dab7ef7bd171c2a
SHA1 114e9d49639d5cc115f7adbc2750b57ad135238a
SHA512 151a04ee898d3ecc1e9d96b75263e3e74796f737dee8db584aae1740695df4d1c35a93170fd1d27a1af130014ba1f5575514a4d3256f5c47a21e7abb4f641554
SSDEEP 3:MsEllllkEthXllkl2zEj/gt:/M/xT02zE/gt
TLSH
T1AE4402186BC00805C90010304011C3501B60D4104A2197A3257146229D875820C00111
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 16KB
SHA256 e593f94ff1e2514d39659b3c093e6b8bf2abd4941a18bc41c26b87de6cfec7c3
MD5 ed853e4c9aa2fd2e64a34ece736c8d7a
SHA1 ca33558a3bdb6d723f1694edbdbeb2ccbaeb2bcf
SHA512 3fdc149f95a0e0d607244994dbe17298573ea6806d3f375ebcf6e93c8be8a3cd9024b7baef94eb0d0cced785ece8f575f8648690d1614de96367abd125170f65
SSDEEP 384:xhpIcj+VeI2UWRPCtu8QPq54agMNpWbsyywJeM3UFz:bEVbRtu8bGZMbWYxwJeMiz
TLSH
T1DE72B0A77DED5486D06AE273A4FE138ABE21A90734D1D0DCA583310C5479BF2297DF06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000015.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
Size 467KB
SHA256 f5f93ae859fddccffc7289884381e79b8a9f1abdb95db351e8eb16da56fcc43a
MD5 4b3e44632ffa2d6609dd9a19c863999c
SHA1 3c124dd3916a05034c5e1d62e7c24d98713c508f
SHA512 e33240b0780eb9cb44b371c2422cfecfa0488681385910c560a92fc8fa3eaa929d68dfd0a7c75891c025867801fc510e0c80b6ac48a9bd5b423768d211d50e83
SSDEEP 3072:dFs7J3u3XIz8I5SpkGPjT9y+qX3WGXa8yRVX3Wg3G8fWxmt:MX3WYa8yPX3Wb+P
TLSH
T1C6A45220B456D38AB03E839B0B1B6C1BE736E6C8CA6168D57D612F4C25FAF853D4931D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000017.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
Size 11KB
SHA256 31500c83707147bcf63645f8282511efba9757b7be9e6cc8d3ee206f0afec991
MD5 c9385e8604e321f04f749a3c45dfbaa0
SHA1 0988cdbfcd451dc93b6a159b5e42c4c2f673ebd7
SHA512 44099e63c28a920900e89ab923eb4d73a02aa4e96376d40d2c46f5700e72d7c6f8c8efd81d442c227a3a8105f0930c040a895aa4492493e85263b1bb36d8315c
SSDEEP 192:I1Zcye6EgwN5xDSrWwe3nQ2I+jIYvgmq+B6fdVXt8MFyDnyjwbtJeOJSLqLG0e26:b54agMNpWbRyywJeM3mF
TLSH
T1E4429F8739E8C49BD4B2E13268F623597D1279073005D5DEBA93100C1476AEB1D7DF87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 6KB
SHA256 c5c3d741ef2eb483e5ffe7d46d788565fc0f9552006271a2c34e34ae603c9427
MD5 0ae6ef89fcc2de735579cbab9597edb4
SHA1 68c22d029add04257a8892fb08475bfd6ebc0705
SHA512 ef811bc24b1537ef277a77d9f6b90fbdf45047d7d3b66c34fe10aac463f228adfe029684eef2594b7dba4f021c657312cae5f75711de67b42a048169530a5309
SSDEEP 96:ymKumKCQ7AnwJC99QdIC999iyBwBcO6KjWCXk+G3yB4XHgbJVAX+44uZA3:Ykiww99Qx99Nw703y0iVq+4BZA3
TLSH
T1E5D14ADF8A0E84F80942D4E2C72CF095C9A8A129574D9F5C79BCE68B3FE141B945F0E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 1KB
SHA256 e56e705d94aa2906c0fc26358ea04114754570151084790b57d080b866747548
MD5 b95de79f0601a174a7b0d86082fe4466
SHA1 9ae3ce1c0876c3b2ed58d0b10b7325542e592b57
SHA512 af93392ecc990216b7b188f39def7ad534bbce78875d666e139eadfde9891570e0fdcf1992ed8c3dd3826b7564ced9bf199bbfaf817e2a3035a752ab3fecfcc1
TLSH
T1C8215B10F7FAA482F4FE26B44DFF796A6F19B5CE090BC92F7049614D21A36065C6062B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 b7bc4af7602cec59c35c1f1f06a55cf7f244dacfafc1d4f6a19c41ce59d4b32f
MD5 b6172c29fe131a7d3b9f1209947187e4
SHA1 49a225f58f8b5330b273563f9f08cc1ef711d855
SHA512 cbec3315b68b931e3ec359fc2d4b30e0f1d85d98da2ad39559032e782702f01a27a3fc40b630ad02c9dda6a1232422ed9d03907a84902e41cb51a68696fdff54
SSDEEP 384:DYVqklQx235UvzLddVJAgaoeTutt+2YQaP3wt/GQ5AuIMjQI8d/EriKWRxisDVDP:fFatF
TLSH
T179629CF3C3D8822DD82116F4AB147D1BDD2D1E2483283C3AD9E5AF4BA3E5571E214A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4af36f215468d711c2917f4e7a9cf86b1e8349e02da6692fe7d86a10aa09cb54
MD5 60650a9bcdcef71a8b381b240a966cf0
SHA1 f04bf3012b6fc6205b210a28ab5a7663b205da85
SHA512 12bb0583b5e84a4eb0eacc6589cb664fbfad84f56962caa50f1c2a55ef773fd150eaa0efe83eee6d626cf2670593de089772e8763794fdeb5663933667425546
SSDEEP 192:sxZTRTyM/+K1Ml8M8I/f7smX7lOIdpqn3HW6+WNrx14/YwVJ+GIg4J:sxZTckI/f7smX5aHbX4/J3c
TLSH
T11C520802AB349977CDDBD209BA45BB13D7F9152392940D44AAFCCA1C01E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 baf68aac417f6632543172be99716d513613ce2e6e09b1f16c8617f738058eb8
MD5 254379f7715418ad943f07bf5048f561
SHA1 50c70ba187a8dbcb38709ae57ecf66d833183611
SHA512 746c026dc5a16da8dc9a7c4618817f3b4928a6c5fcdf8957b7dc6f18ab160a972a9ac43ff1e8b70d6165ad398a3f4c3f00557348962129863b4899fc5a57dacd
SSDEEP 192:sxZkRTyM/+K1Ml8MoOI/f7swm7l4Idp0EbEaZHW6+WNtFvgXmwsxn/BUg+j/NbBt:sxZkcQOI/f7swm/5Hbwbu/hF3K
TLSH
T1EE72D843A63459B7CEDBD319F654BB2BD2F9452296D40D84AAFCCB1C01F6BED210281B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 63af43be2f571da7acaa630183765e92dc3ea43da2c4c85de2dfc8542f1dc30e
MD5 6b97394fca034030fc9cd6910ed7e35e
SHA1 1931eb7fe093082d969b1f67c45aa1eeeabb848a
SHA512 779f68c3d8dd9e0eab33cf518f841327c942c89088abdfc3aedc6ba0c3170a98d51f2285ebb85aa7cf004c3eb7b16c24523543e8dc42b931579580bcd3b57322
SSDEEP 192:sxZkRTyM/+K1Ml8M8I/f7swm7l4Idp0EbEaZHW6+WNtFvgXmwXBuw+J+GIg5UJ:sxZkckI/f7swm/5HbwbXy3K
TLSH
T1E562E653AA345977CDDBD319FA44BB13D7F9442292940D44AAFCCB1C01E6BED220382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 d674e25058b6024c146b21a283b2ae94e632bcf675c4205c7cd2dbc7857f7011
MD5 94ce31b1ff1536d7a025fb53a6fcaa1c
SHA1 63a47bbbdba0209e36fda278cb1298eb39d0af0e
SHA512 60b86355c25109c07e4126a2c887ee61827ae7c06a48c6f25e589197b2f98fbe99f1e9f7207080e134422445b0aa6799d40f7c01f32a57e7fb23f9dfd1bb184f
SSDEEP 384:sxZkckOI/f7soWvimbbHbw5kidMpQmzRR/:ssUI/fDYim3Hbw5XiQmzRp
TLSH
T19092B993A57019B7CED7D32AF654B72BD2F9052296D44E80AAFCCA2C01F67ED2502C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 486ed5e9c710d07d2bae916f4b01f1a87e134acab412fc84f5b47d33873160b2
MD5 e3c1de4d088f385dffa42c18edbfe75f
SHA1 bbe14028fb143bb02f7be916e44c411da0be66ea
SHA512 49a297d3851ee70e1d1b5499357b9a2f927486bf1400e42954eddf0b50aff3d9f3e9b0e7517f69442be232f1a7d1c9575fefa28a6ed19199deb7d9d80bb0641c
SSDEEP 768:qH4jeM27pLuLXmmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVHxyPLlrZ+dOro4:qH4jeMWEXmmWvmKLEu1jauxyPLZQdFyb
TLSH
T1A9F20C3B280CCF7E4F844E9CED2A7E8B6DE8018B5A98895447FA844C03C66EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\109d2903-9bba-455b-a5f4-6990cb474cc0\index-dir\temp-index
Size 2KB
SHA256 37f5be39e26a4a72eada2257e22c77b081a7e394e57a0e261a6121cf13235219
MD5 3d2c9fc967dcc9e10a85e4a7fe2285af
SHA1 35aad33ad9dde72cf14b91fec4e4605b49a9e714
SHA512 9a89506f5856dddfc96df179823c0ea85bd22d6da2948a9a12aff2f84bc075a6feb4d5c4f1330984f998f2a94796ea8799566bf756f55b31d0f7c0bbcb569e18
TLSH
T1E151930CCD80DBAEEC71A1F91DA414F253352D38FC98C3A28554B2B53883AA81B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\109d2903-9bba-455b-a5f4-6990cb474cc0\index-dir\the-real-index
Size 2KB
SHA256 9ec339628b2dd41827fb144b4750d3f34a90b939d21c287985e8cc380b9c0845
MD5 c99b0b794629c17cc3bc4db6e8323678
SHA1 96726cc7a03fdf176a6266db731d7efc9afa4132
SHA512 c1cb72283e7ec6accc03b814098bf6bda038c7460304a097c9394120d85d3a52c48ea942d50a2d7109a8680302ab3730d7251320dd4710371c0cce95d13a9de8
TLSH
T10C41664CC894ABADEC7551FE1D9415F243752D38FC58C3A24464B2B534039681787DFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c2af.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\109d2903-9bba-455b-a5f4-6990cb474cc0\index-dir\the-real-index~RFe58c2af.TMP
Size 48B
SHA256 93b86b274051f7bfa192c85e1b1b6dc2027380684569bf3d87ab91bd1bd33ac6
MD5 9ffe28b8edf466d366669a74e1feeff2
SHA1 622d2dc1ffbf93d0f5ec34436333cd54fd0afb7d
SHA512 8342babf132771b842254d6efa5e806f151ad0e9be28a84c7b2208db6886ed115a3531cdd5c1809dfcbb476242ce03ef7292ed705c00fd4a6084b6c2e2c14903
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8466c9b3-9d89-4e6f-adb2-9ea13944d5bf\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 f56e24c9df51825f93336b92cbc4e0b6ec62421e9475eba9791f9f6b90a1fe88
MD5 0e18257bf687cc7440ed9616cb45ab19
SHA1 6dfb00f30622cf2f3383cbbf357af5dc06cf418b
SHA512 398740829d26ca71862f6eee7c4d56461f28e50a890e6babf41bafbd4c796e4c73995438cd65b74b20bc73a7f8801d078410b1c57bd0c807b985e4c665e04732
TLSH
T1EBD0A7C2413699861624DE47A534639D491B8D499995CCD4B501708330FC503D002A65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 6803c04f52cb16ff180f330521bb2908bca14947a20984b3bb6dcbec90725c4b
MD5 e31ec27d9da3321f56596be08400836d
SHA1 6b82bdbc1db52eb28a386f95c61c500fa379bd14
SHA512 ef8b620033f5160479d57c4d3fa0311fbb4e7d0ac6af741ebe949021c2c513c4125e892b7c1321176e43a33ce5ba682b143244fdfdd398b484887aece515d010
TLSH
T18AD0A7C56B7149C61730DA415138565D4907CD49D881C8E96E0CF0C639F86029002635
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 9a2f8eadd58f06c84391b1c2e49ac0d1b05117fafb00afb461a864684c7cf66f
MD5 3b9153c5cbb79f6fa9c79b8709b350bc
SHA1 9d9928ab8af69f8c9bbdd01e7da080d477041fab
SHA512 b3208ac2e39b1d873dbd3621c5ae740b68ab85e39f5def7a34ae3198e621fb2c8e8e5943f04f689e9ae84fe973424c0dca2f4cc04a0f31cb95effa2fd3e6f45f
TLSH
T11AC04CD25D1549C60A74DE866438A75D9E4BC148D8D1C8E9B645504625B99134402665
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 283B
SHA256 923a3ea36935193a8e43602a16c5483462f109d8298288d180ff73cbe29cf9ee
MD5 d58225938d4a776be06e306ad22f85ed
SHA1 f218e28eff2ab5b163b5bfbca9c645ef69a4b50d
SHA512 8f34aa315ace07bbd4059b167f24d7711fa07dee67777bcb6f40d577e5b71286d7e24696b074732e318de0dfcd0d070d53b46b609b9def7205e655652d2aab79
TLSH
T17AD0EBC2A02100898E378F86AC30328F5E27D80288C0C8E87AC9308A20F9B0A5416A2A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 7f6b0f29fb428769d3b27a08b395af52a3ce6ca51d3493ef1afedec2f413ed72
MD5 74836a5618fe2841b8b7ddc100741d59
SHA1 ad4f850cf28a1ab45cceea1e3cf201e7c43e52ff
SHA512 f327a65429fd40adf81220403556e7444a44566e1a920e5a335f27a562941c9fbb9a2dd4060807e7ead95eb44095114b14bc5ad11d64d7bdaf351bcf7df2a826
TLSH
T199C09BD3551589CB0B38DFC55438A75D9E5BC24CD8D1CCE9B24550463479D138402665
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 276B
SHA256 a7ffbaff4b024fa4f84cc8962698adaa56a5b1cfac3606f53c678933bad266c4
MD5 e50d73f87d9421994699c7a18e2dfbfd
SHA1 6c7bab5b1cf3c8e5f4283c4ed51af6b1fb161411
SHA512 b03ee8676565aa291441ddde770f4291ff706fa144aee7b4cb779f3fc382ad1806aecddd2167b7032b676abad0470193fc8fd9739662b677c734bb4a25674786
TLSH
T1D8D0EBC2A0100089AD3B8FC25C30324F9E17D002988488F8B6C0008A24B9B0A1403A6A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58aa93.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58aa93.TMP
Size 137B
SHA256 50372404e76212699fe8660a354145e5fd4d098570dac35438ad28981a71a834
MD5 1e6406848bd484cf22fd23197f862640
SHA1 9e9174e8a1c9118629c90ff6334e7109d462e0a6
SHA512 77d0b196762b32b0effb42c8879f0e1ae2c33344a71cebfd5d0b2d4cd885dcd8d35e6702763836615afa2bbd2eee1ada6ffbe38535d6ff166e97212406519be9
TLSH
T19DC09BD355154DC70734DEC65438A35D9E5BCD4DCCD5CCF9B24670463079D138505575
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e8f2454bc7cca1b856e267cca548940cd23783f9a8bc34be38d1d83758b0104e
MD5 cd1e1b8abc5b79290fe8a31efac77f26
SHA1 ee71d5b992c996bae9de8af04ff3c2c85acd6935
SHA512 973aabd8596aebc4ff4be9e3d77e55bc90605c5e49e5e6077b2cbfb55328de8cb5333aef7032d3142ba1f022d7b9f15755af5dfb87e0fbe98548ff84011a626f
TLSH
T138A00265015A4052C86057F09CD2228C225049A14101227144ACC0A5EA50280659A014
MD5 SHA1 SHA512 TLSH

Submit Download

c86f0d70cdff6bac_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\c86f0d70cdff6bac_0
Size 199KB
SHA256 41bdcc4a13b31230c07dcef9c60f0cd69feadfa6361438388bb361cd3808b42b
MD5 a9e9e084831477d437e20ebd4f6599f1
SHA1 cb67729eb785be18328e3075d83c8879c518472f
SHA512 0036f87aff0b1dfde3316076d9a49705464f22a02de14f8ff50d5c0ff9d31dab62e3579d2a399b71e3bce48cbb36e5f05b6c84b3bbe26fcf4e734b8aae2763b7
SSDEEP 3072:ouLTF1cJ/zzBCXwIIndvPMbBmIBGXrhKlujW:oOTF1c1zzBCXwIIndsVmI+Nj
TLSH
T13D146D356300F43BA9139E61A67F7F4E3C35A15BDD0646FCA2E1E871AEE2DB60112748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 62300070f9bf846dfc7bb9db67747754128d5087ba61327311d42e342913c4af
MD5 376e73eb8de88d231652d78dbfb9e5a9
SHA1 1929c86c7961b3d0f34250cd679ff9dea693fe88
SHA512 2f892150260acbc10d543fba50640d2356e33da44e47588eeb57d8ea14458c7a09c706f11a446c0558acd143d3cd5eb3b95e1527626c82dd85d239f7fabfc58e
TLSH
T1AEA0029299C10831DC1047752682465066E18C144235C2976294149D8DA637142C74F1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 863668bf63de3de6f9aa2cde07dce1d940a1268746a14a138502834e68ef19d5
MD5 686ab59b584cb05b7528003f2df7f8dd
SHA1 156b6a350fee3b3d6521e78cf7e74800d0086292
SHA512 2b807596e95d7568110e0a6b67e96c0ad1cf75627f1b138a9ba3b10ec289483113cb672d5bd413017d4d9cd1f4775bd7207102c7578b3ece0674f63d78c7c79e
SSDEEP 96:KYBdTRxx89ssmlxKe4mzxibDUlxSWpKKCw1k4KR2qSqIKrCw:Wvdxjfr
TLSH
T1C7B1EF5A30BF02163D7D2509A2A4D7274F417AA37019E42B7BA940B24EA7E354CFCDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594145.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594145.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d27dfffbcb2e8d0e136e4c5769f2e8d319dba8532bed9873edbedf392b3b63ee
MD5 840df2162359d8f760c9cdc911a36d79
SHA1 97297d98fdef6ffe870c325c538cab2f1586dae3
SHA512 bacb7f645ced2813acdde71be3c3b97d67658d4f70f4689b90d88b0570d78bfb6519bb45ba407a9f48eab32f18383be31bbe6ec86c6b66c3210b3b4a6b7f9478
SSDEEP 384:nLtNnNnb9+sNrUOhXLVMSf+MOetB+2RFnw3nJIOZxdm:LjZbE/6hOqBlrnanJ7m
TLSH
T160927B366A79BDB39AE6AB11F14B32439FB811ABD4D43DC0D9DC5F1E018769C230B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2f1d0175bc0a07176021e90b8c95d7764f33531dd025a887dc66a4fe8aaddf08
MD5 cd0180b9744171650c8230579e43f978
SHA1 87effd1ece2375c10cb9f11c2fa9a9290737d8a3
SHA512 8286c79e1798fcba6de3e6a7d295017964d29dbac69ac8e21386f8c4b06df251dea31ee8404893968ba93194bf6a6ed0269a0cbf6ff80c2ecb36b3a850bc6784
SSDEEP 192:EONg6hZ0QmiUygrpc/+jVqO1Qz5wOZqOT9U6:EONg6o/pu+MOeK2BBU6
TLSH
T1BA02F83968686C778EE2AE45F48737235FE5113BE9A56F84E6E81F1D00C779C2307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 e0a930256f5ccf62704ea84ec24f1a14ac0d73ce61a73865c69aa411ac17f61c
MD5 228c15c9a11d93918b3af6af5da17af5
SHA1 37766239cd7c08ed751dfb49bf483836ecf93dac
SHA512 817dedf9f6fc6c5f257a3d79fc381d985c7df368b3bb7c950d5c12721ea8dae6c1475fd21b2150803f35475963d07c51db2b635bec0e456c0df68e3d635c58b6
SSDEEP 384:nRiF1tNnNnb9BzsNA8TUNTUlIlxhXLVASrDfQx+MOetB+2FFnw3nJIOZxdm:4F1jZbvNwgw9xhOqBl/nanJ7m
TLSH
T132D2C5F699E79976D9AE4743A33E7E429EBCD157B4845880BB881E0CCC825BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 46bcfaa538628da715d5d48950def94527e422e899408a27af955fa36a0998fc
MD5 baf1bb2597825602317549f61f5c6715
SHA1 ce460f65b9fa599130536d26ad5775ad899f167d
SHA512 703038adf406f02f094a320a59cb410c92e2131d6873959a1c19d76a5b04866dafbfddae00cab7d08855f57de3d3f05c0f67ae326365ca3fae5cd32620b7b8b1
SSDEEP 384:nvtNnNnb9+sNrUxhXLVMSf+MOetB+2RFnw3nJIOZxdm:vjZbES6hOqBlrnanJ7m
TLSH
T181927C326A797DA39AE6AB11F14B32439FB811ABD4D43DC0D9DC5F1E01C769C230B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ff9b1223c8943f3d8eba4e1d4ce7c0aa34ce4a9ed388ab38d556649dc190e3a6
MD5 9ae4eac4ed690f93d26be3847d72f09a
SHA1 0e396e68a02438dc4225f80098c1397d595fb17d
SHA512 6493a997c60d3d1da4dfc39d089d2b9cf27903d9307fb2fdad89e9bb9876cc797b401584fb0b74b234ab1cbf7ae3d451dc26320f13acd85e3cdbb0ddd55a09a7
SSDEEP 192:EONB6hZ8QmiUyq/rOc/+jVqO1QtB+2bo5cOqqg/dU6:EONB6Y/Ou+MOetB+2H9nU6
TLSH
T185121A3569686C678EE2AE41F48737134FD5116BE9D67F80E9D81F2D00C779C230B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c7b43278e1d989bc5076c16a633d73eee446025a6e0dc8b40319a579715e952a
MD5 886fc57936fdb00421f7eefb6c12b6e0
SHA1 feda2c93c2580c4289abd01f3332acd500840e60
SHA512 d7db6f106deb2f00c486a9e7f255aa96abc1c9dedb780fe9a39d86e946db03b70b7ff455524ae2c2d19f8c44db4eeb11981bc80f8694acc4dc0fd86594d5502c
TLSH
T110E00202D30442AEC0380331208B163065A2802452E34245091015A4EC123045F209D0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58f47d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58f47d.TMP
Size 392B
SHA256 c338a8d88948865316bd537cdfe7dc02f40e5f7e041a7c69d30b56f5242f80d0
MD5 bea9a60171d5c8c3f6e7cebd978d9ea8
SHA1 023151f95170b4fe70887499fa588e9048b5493c
SHA512 d5b7fc706abd0d25a7fbd31aa2069b73d5e96b33a17976e3616fb2b12e559316d4ad0c15ecff4443a7c7704f11efe8d53a5f83bf8c709a27334ad6e5df161328
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

37b212c0-a1b6-464a-9517-405bb1aa428a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\37b212c0-a1b6-464a-9517-405bb1aa428a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6077e23b4d67984c6edac31171ee036b7db03a9617ef50f4a95ef40d17930e6b
MD5 693ff31a373a8eea6b5d6597192aaca2
SHA1 f0e492287e71fd80006cd578a324d6d7cb3879cb
SHA512 dd63f4f665eb15144b300da3ea29719c945981f8674f25b2053be31353a573dc950a5a4ae3bafe24278fb519181275eec666a87ab0696f82d4d7c988ee4ed02b
TLSH
T10F412A58A6F91148B3B26E5AAFF7A86D487AB8772F06C45E10110E4F4B66B00C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download

443f5fb3-5ef8-42af-8200-4148a44288a8.tmp

Path C:\Users\Admin\AppData\Local\Temp\443f5fb3-5ef8-42af-8200-4148a44288a8.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

4f530e07-96c5-4f76-bb10-0e13c98f6b59.tmp

Path C:\Users\Admin\AppData\Local\Temp\4f530e07-96c5-4f76-bb10-0e13c98f6b59.tmp
Size 147KB
SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
MD5 a9f7675ff091bb15c88909424bab4a39
SHA1 90f753d8d7e4397de0f49631fcd9222a7f59148c
SHA512 ff1f89fb04ae9c9a4c6cf6b1475f5a77f1c4f90829acda95cb39889b6b15c3b4f0b3b822a668f8ec8520b002cc90dd397cc26d314ac8fd5f3e2c9826bd458df5
SSDEEP 3072:Ph3iICVe1DvTtr/3tOpPu8LdKBTJyU4AshzWnD7UVDvuZE4tkGL:PgTVWvTZPghwln0AD7UV8Eeky
TLSH
T12BE3E01D29E2846EC82B24F4BA4A718FC71ECF07910BE40F25D984A55C7474E17E2EED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0de042a8-a883-47f4-906b-f88f2aaf462e.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4508_1185252351\0de042a8-a883-47f4-906b-f88f2aaf462e.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4508_1185252351\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download