6f0838ba970a0b1081d6e8ea3600775cf325c7e517455786d108c752c9d01338

Resubmissions

20/06/2026, 04:41

260620-fbkejaet9y8

20/06/2026, 04:32

20/06/2026, 04:31

20/06/2026, 04:17

20/06/2026, 04:17

20/06/2026, 04:13

Analysis

user interaction
yes
max time kernel
259s
max time network
262s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/06/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

Reason

Machine shutdown

General

Target
ReShade Pro Forza Horizon 6 (2K-4K)-246-1-1780245579.rar
Size 7KB
Sample260620-e51g6sc19l
SHA256 6f0838ba970a0b1081d6e8ea3600775cf325c7e517455786d108c752c9d01338
MD5 b188b652db71d243e115bfbc7ce6d353
SHA1 b879b3ecdc71640f9558899c783bd9b05ff30450
SHA512 b5a17f5a8b3a741404c58291df34e2903813fc1eb9a089d35fc2c2b1d3ef883907709183a5ffe2f251312c32e4794c2c1f9195c9a8f955afddc5ff6c944d3e90
SSDEEP 192:DmDXwhUL6AJAOqWdsS4iXyATlygKeUdE5bQvF:SsS6WAyd4+yATAgbSF
TLSH
T193E18E6866CA4A21CBBD032AB385972829550BBBE3DF6CB4446712564B51E20C7C2FE3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence ransomware trojan

Malware Config

Signatures

Modifies WinLogon for persistence 2 TTPs 1 IoCs

persistence

Winlogon Helper DLL

T1547.004

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = "C:\\Windows\\system32\\userinit.exe,C:\\Windows\\winnt32.exe"	NoEscape.exe

UAC bypass 3 TTPs 1 IoCs

defense_evasion trojan

Bypass User Account Control

T1548.002

Disable or Modify Tools

T1562.001

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0"	NoEscape.exe

Disables RegEdit via registry modification 1 IoCs

defense_evasion

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1"	NoEscape.exe

Loads dropped DLL 1 IoCs

pid	Process
3788	vc_redist.x86.exe

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Public\Desktop\desktop.ini	NoEscape.exe
File opened for modification	C:\Users\Admin\Desktop\desktop.ini	NoEscape.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\noescape.png"	NoEscape.exe

Drops file in Windows directory 25 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_932096481\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_159335932\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1707732156\automation.js	msedge.exe
File created	C:\Windows\winnt32.exe\:Zone.Identifier:$DATA	NoEscape.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1942715339\manifest.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_159335932\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1563156632\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1963284253\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1963284253\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1963284253\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1942715339\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1963284253\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1942715339\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1942715339\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1707732156\extraction.js	msedge.exe
File opened for modification	C:\Windows\winnt32.exe	NoEscape.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1563156632\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1707732156\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1707732156\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1707732156\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1707732156\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\winnt32.exe	NoEscape.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NoEscape.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vc_redist.x86.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vc_redist.x86.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
392	chrome.exe
5808	msedge.exe
1660	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 19 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365268"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "250"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292114432"	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = 99ebff004cc2ff000091f8000078d4000067c000003e9200001a6800f7630c00	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4290799360"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292114432"	LogonUI.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264036007303491"	chrome.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365268"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe

Modifies registry class 18 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2824035265-2271499813-2042964211-1000\{2F59D7BE-1CD0-4B6A-BFE6-3B30816E8FD3}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2824035265-2271499813-2042964211-1000\{8167BDDB-5ACF-469F-A16F-638F16D3412E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

NTFS ADS 2 IoCs

description	ioc	Process
File created	C:\Windows\winnt32.exe\:Zone.Identifier:$DATA	NoEscape.exe
File opened for modification	C:\Users\Admin\Downloads\NoEscape.exe-Download-main.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
2000	msedge.exe
2000	msedge.exe
1832	chrome.exe
1832	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3828	7zFM.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs

pid	Process
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5512	msedge.exe
5512	msedge.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	3828	7zFM.exe
Token: 35	3828	7zFM.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	5616	chrome.exe
Token: SeCreatePagefilePrivilege	5616	chrome.exe
Token: SeShutdownPrivilege	5616	chrome.exe
Token: SeCreatePagefilePrivilege	5616	chrome.exe
Token: SeShutdownPrivilege	5616	chrome.exe
Token: SeCreatePagefilePrivilege	5616	chrome.exe
Token: SeShutdownPrivilege	5616	chrome.exe
Token: SeCreatePagefilePrivilege	5616	chrome.exe
Token: SeShutdownPrivilege	5616	chrome.exe
Token: SeCreatePagefilePrivilege	5616	chrome.exe
Token: SeShutdownPrivilege	5616	chrome.exe
Token: SeCreatePagefilePrivilege	5616	chrome.exe
Token: SeShutdownPrivilege	5616	chrome.exe
Token: SeCreatePagefilePrivilege	5616	chrome.exe
Token: SeShutdownPrivilege	5616	chrome.exe
Token: SeCreatePagefilePrivilege	5616	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3828	7zFM.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
412	helppane.exe
5512	msedge.exe
5512	msedge.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe

Suspicious use of SendNotifyMessage 46 IoCs

pid	Process
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe
5616	chrome.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
412	helppane.exe
412	helppane.exe
1780	LogonUI.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4164 wrote to memory of 4204	4164	chrome.exe	82
PID 4164 wrote to memory of 2536	4164	chrome.exe	83
PID 4164 wrote to memory of 2536	4164	chrome.exe	83
PID 4164 wrote to memory of 392	4164	chrome.exe	84
PID 4164 wrote to memory of 4708	4164	chrome.exe	85
PID 4164 wrote to memory of 4708	4164	chrome.exe	85
PID 4164 wrote to memory of 1192	4164	chrome.exe	86
PID 4164 wrote to memory of 1192	4164	chrome.exe	86
PID 4164 wrote to memory of 1884	4164	chrome.exe	87
PID 4164 wrote to memory of 1884	4164	chrome.exe	87
PID 4164 wrote to memory of 2808	4164	chrome.exe	88
PID 4164 wrote to memory of 2808	4164	chrome.exe	88
PID 4164 wrote to memory of 4480	4164	chrome.exe	91
PID 4164 wrote to memory of 4480	4164	chrome.exe	91
PID 4164 wrote to memory of 4340	4164	chrome.exe	92
PID 4164 wrote to memory of 3656	4164	chrome.exe	94
PID 4164 wrote to memory of 3656	4164	chrome.exe	94
PID 4164 wrote to memory of 1152	4164	chrome.exe	95
PID 4164 wrote to memory of 1152	4164	chrome.exe	95
PID 4164 wrote to memory of 3648	4164	chrome.exe	96
PID 4164 wrote to memory of 3648	4164	chrome.exe	96
PID 4164 wrote to memory of 1932	4164	chrome.exe	97
PID 4164 wrote to memory of 1932	4164	chrome.exe	97
PID 4164 wrote to memory of 5104	4164	chrome.exe	98
PID 4164 wrote to memory of 5104	4164	chrome.exe	98
PID 4164 wrote to memory of 3560	4164	chrome.exe	99
PID 4164 wrote to memory of 3560	4164	chrome.exe	99
PID 4164 wrote to memory of 4840	4164	chrome.exe	100
PID 4164 wrote to memory of 4840	4164	chrome.exe	100
PID 4164 wrote to memory of 1432	4164	chrome.exe	101
PID 4164 wrote to memory of 1432	4164	chrome.exe	101
PID 4164 wrote to memory of 4836	4164	chrome.exe	102
PID 4164 wrote to memory of 4836	4164	chrome.exe	102
PID 4164 wrote to memory of 3656	4164	chrome.exe	103
PID 4164 wrote to memory of 3656	4164	chrome.exe	103
PID 4164 wrote to memory of 808	4164	chrome.exe	104
PID 4164 wrote to memory of 808	4164	chrome.exe	104
PID 4164 wrote to memory of 2000	4164	chrome.exe	105
PID 4164 wrote to memory of 2000	4164	chrome.exe	105
PID 412 wrote to memory of 5512	412	helppane.exe	107
PID 5512 wrote to memory of 5544	5512	msedge.exe	108
PID 5512 wrote to memory of 5808	5512	msedge.exe	110
PID 5512 wrote to memory of 5816	5512	msedge.exe	111
PID 5512 wrote to memory of 5816	5512	msedge.exe	111
PID 5512 wrote to memory of 5816	5512	msedge.exe	111
PID 5512 wrote to memory of 5832	5512	msedge.exe	112
PID 5512 wrote to memory of 5832	5512	msedge.exe	112
PID 5512 wrote to memory of 6004	5512	msedge.exe	113
PID 5512 wrote to memory of 6004	5512	msedge.exe	113
PID 5512 wrote to memory of 6012	5512	msedge.exe	114
PID 5512 wrote to memory of 6004	5512	msedge.exe	113
PID 5512 wrote to memory of 6012	5512	msedge.exe	114
PID 5512 wrote to memory of 6012	5512	msedge.exe	114
PID 5512 wrote to memory of 6136	5512	msedge.exe	115
PID 5512 wrote to memory of 5008	5512	msedge.exe	116
PID 5512 wrote to memory of 6136	5512	msedge.exe	115
PID 5512 wrote to memory of 6136	5512	msedge.exe	115
PID 5512 wrote to memory of 1704	5512	msedge.exe	117
PID 5512 wrote to memory of 5008	5512	msedge.exe	116
PID 5512 wrote to memory of 5008	5512	msedge.exe	116
PID 5512 wrote to memory of 5124	5512	msedge.exe	118
PID 5512 wrote to memory of 1704	5512	msedge.exe	117
PID 5512 wrote to memory of 1704	5512	msedge.exe	117
PID 5512 wrote to memory of 5124	5512	msedge.exe	118

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ReShade Pro Forza Horizon 6 (2K-4K)-246-1-1780245579.rar"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3828

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8e601c728,0x7ff8e601c734,0x7ff8e601c740
  2⤵
  PID:4204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1592,i,13408115321053478206,12056400605457517989,262144 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:2536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1460,i,18421503938158264017,1994773601891851110,524288 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:11
  2⤵
  - System Time Discovery
  PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,4482504966738371658,17815657665925667342,524288 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2496 /prefetch:13
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,5456361850831428873,4660023898124180302,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3308,i,7983177694920998395,4469293692572789615,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4300,i,7479291644861017719,10612773535517147716,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4324 /prefetch:9
  2⤵
  PID:2808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4748,i,7742418881249551363,5982207914599814592,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5544,i,8883078223196594703,2676014070484160228,524288 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,3362372182663607922,14857738943683713495,524288 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5864,i,7908640615932503695,6767571181055827097,524288 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5816,i,16872914944598630123,15318166341368044136,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5956,i,1766849155322754490,9120704739497987368,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6080,i,10627792242033220526,2384440766453077089,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6260,i,2615709817917027802,10330816133526972628,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6420,i,1230909416878218799,9537397103644306892,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6540,i,6535273337407781568,758100656216782996,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6556 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6576,i,6418510570238317230,8515733322076915255,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6604 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6892,i,15242237845497624226,1320539367423059879,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6912,i,6067035567987051474,9049516200841716487,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6960 /prefetch:1
  2⤵
  PID:808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=7328,i,14584976069620735275,10650912496297138749,2097152 --field-trial-handle=1960,i,1101699565137938249,7410990651112043536,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7324 /prefetch:1
  2⤵
  PID:2000

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1788

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3376

C:\Windows\helppane.exe
C:\Windows\helppane.exe -Embedding
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument microsoft-edge:https://go.microsoft.com/fwlink/?LinkId=528882
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x308,0x7ff8d606c188,0x7ff8d606c194,0x7ff8d606c1a0
    3⤵
    PID:5544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,7695040138932478558,2926791244585278730,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,4948698098242780649,17793242301701467361,262144 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:2
    3⤵
    PID:5816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,10761905771431102244,14103579091666256915,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:13
    3⤵
    PID:5832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,8629660102519381149,3051123871191867415,2097152 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
    3⤵
    PID:6004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,10682032354692845522,9793579822428310317,2097152 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
    3⤵
    PID:6012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,242073424837961363,16296029623669448817,2097152 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:1
    3⤵
    PID:6136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,8755877188335300191,14687762604746061778,2097152 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:9
    3⤵
    PID:5008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4152,i,337768454968880771,3976388096025364989,2097152 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:1
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4164,i,15748980551685560836,9964478664621028559,2097152 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:9
    3⤵
    PID:5124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,15105483428971190743,2680555621837433776,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
    3⤵
    PID:5020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,14024849040622723044,18052577773324059529,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
    3⤵
    PID:3104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,7754030212420434630,5290774092890124189,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
    3⤵
    PID:5004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,7768333009713289273,4055416598084471338,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:14
    3⤵
    PID:1520
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,15281887250554220293,7875591034749583586,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
    3⤵
    PID:2448
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,15281887250554220293,7875591034749583586,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
    3⤵
    PID:2752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,13017201277878723411,1603947374571059463,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
    3⤵
    PID:4488
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1124
      4⤵
      PID:2552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6444,i,8794032616612579680,8101426670482284553,2097152 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:1
    3⤵
    PID:5592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,13651416975613897639,7485595161268573892,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=3984 /prefetch:14
    3⤵
    PID:2168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6744,i,16771108299117884685,7774255405371052306,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:14
    3⤵
    PID:680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,4866647134021651069,10512051030816974306,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:14
    3⤵
    PID:2356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,2763339635596746231,7490716431408935818,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:14
    3⤵
    PID:844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,18108718242508193054,6977234901280239422,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:14
    3⤵
    PID:5076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,1018849446573684824,8112016536830313551,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:14
    3⤵
    PID:244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,13612634836175258249,17738874717843271534,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
    3⤵
    PID:4016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,1912645762203915366,15581469701539311359,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:14
    3⤵
    PID:2124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5400,i,16739401534698538002,15315150235520913213,2097152 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:1
    3⤵
    PID:432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,7309326176102967761,419312540029685933,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
    3⤵
    PID:4968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,12047185313001518493,2089439508265456070,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
    3⤵
    PID:5592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,5800604463340465893,14352617276118775979,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:14
    3⤵
    PID:1392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,15821725525839748753,11767040520219297790,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
    3⤵
    PID:4604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,3377362708017401462,18039165675527333600,262144 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,15240067629006300619,6441007505224149315,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:14
    3⤵
    PID:2676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,14225863207560718166,14800289291819369894,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
    3⤵
    PID:2488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3452,i,11007310616943781130,7679793433211735590,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
    3⤵
    PID:4916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,15650299397676382159,10226523522894334235,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
    3⤵
    PID:3740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,7707283045318023459,5415013539402294844,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
    3⤵
    PID:5096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,4869686089535638183,15668119237926443474,524288 --field-trial-handle=2164,i,1935014059698476955,17049087889419117273,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:14
    3⤵
    PID:3604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5800

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0x78,0x108,0x7ff8e601c728,0x7ff8e601c734,0x7ff8e601c740
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1628,i,13239985472969410363,15402974911177706743,262144 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:3280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2056,i,6587260292798977276,1574001554168198920,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=2192 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,11212057162617550780,12549143367481976109,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=2312 /prefetch:13
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,2712964058604926137,691087529551462903,2097152 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3496,i,4140534795761385596,17606176536452011935,2097152 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4340,i,11317555649846543941,16385510285817147138,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=4376 /prefetch:14
  2⤵
  PID:5436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4460,i,17688308276754247434,12613678817371843739,2097152 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=4608 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4744,i,17422764357542212289,1667517438249345759,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=4756 /prefetch:14
  2⤵
  PID:3888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5224,i,16557824179729627630,14255577830062158017,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=5220 /prefetch:14
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5560,i,6012868196881837400,15430631336058594072,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=5620 /prefetch:14
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,14568131738897875790,8034023616280147567,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=5624 /prefetch:14
  2⤵
  PID:5248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,13783531634923285382,3413907872408482879,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5220,i,16346633093075722667,11604304794975037914,2097152 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4628,i,18396224747140007086,3524197239753778228,2097152 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:5716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3408,i,5113161367531827490,11377542587753620191,262144 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=3488 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4632,i,168864279507160450,276524177686305461,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=4672 /prefetch:14
  2⤵
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4708,i,1486596821703471079,8450120313991767279,2097152 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3528,i,16947325947431462338,411567239063636952,2097152 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4656,i,18030851476611594622,4819330957748458068,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=5728 /prefetch:12
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,12046232532218127027,11980602030553444633,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=5952 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5112,i,12859178165824972663,8949194937204540571,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=4384 /prefetch:14
  2⤵
  PID:1920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,1768160531251101616,6311628757123694232,524288 --field-trial-handle=1920,i,3971097587008614139,18403910911199838256,262144 --variations-seed-version=20260618-170054.182000-production --mojo-platform-channel-handle=4632 /prefetch:14
  2⤵
  - NTFS ADS
  PID:3200

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5380

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5128

C:\Users\Admin\Downloads\NoEscape.exe-Download-main\NoEscape.exe-Download-main\NoEscape.exe\vc_redist.x86.exe
"C:\Users\Admin\Downloads\NoEscape.exe-Download-main\NoEscape.exe-Download-main\NoEscape.exe\vc_redist.x86.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4044
- C:\Users\Admin\Downloads\NoEscape.exe-Download-main\NoEscape.exe-Download-main\NoEscape.exe\vc_redist.x86.exe
  "C:\Users\Admin\Downloads\NoEscape.exe-Download-main\NoEscape.exe-Download-main\NoEscape.exe\vc_redist.x86.exe" -burn.unelevated BurnPipe.{C4B9B00C-D481-4D37-A2B3-C6DD5C0A4BFB} {DA263C08-884A-4636-8EEF-DB2E2078FD3F} 4044
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:3788

C:\Users\Admin\Downloads\NoEscape.exe-Download-main\NoEscape.exe-Download-main\NoEscape.exe\NoEscape.exe
"C:\Users\Admin\Downloads\NoEscape.exe-Download-main\NoEscape.exe-Download-main\NoEscape.exe\NoEscape.exe"
1⤵
- Modifies WinLogon for persistence
- UAC bypass
- Disables RegEdit via registry modification
- Drops desktop.ini file(s)
- Sets desktop wallpaper using registry
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- NTFS ADS
PID:5072

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa39f9855 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:1780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Winlogon Helper DLL

T1547.004

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Bypass User Account Control

T1548.002

Boot or Logon Autostart Execution

T1547

Winlogon Helper DLL

T1547.004

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Bypass User Account Control

T1548.002

Impair Defenses

T1562

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 fec59f19ff581d9565689a431b276112e2f727f74c5c3411a324a32ee19faff6
MD5 c200c670afd7e3b43b707d42d3cc7509
SHA1 bfd0ee5bea3aba14b390f82888325fed88cd379c
SHA512 755ae4c2a64857d82d554a12ac6a2ae17846aee222b6f3ee12a7c2e3d15ba42977963dfd2345d87977eda9ea6604423d1d094ae47465b49e55902ccbad6b7fb4
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 846096fd0a1700c974b4487179f038ad5d1d98d15d4eff4df05e906621207200
MD5 3ba05f53eadb581748ac93b34a91d9d5
SHA1 db2ec9f9884b146bfa0726a2c619c8432e8efcfe
SHA512 65e18b43f0a050eee01ac07b43dd4b865d74fc91f22904322bdfc755b117178fc9c008f530eaf2a9a38b37ba8ce4b412dc62c9449a881700c4d57fd1ee38f439
TLSH
T1A8E02BB6D835DC3708FD8B1960954646E711135B2B80898F363D46098FB077A41A6D1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 20KB
SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
MD5 8bd8220ca4c1c9bf2756086b9cdd2737
SHA1 c4b09065bdb49f26cb911e6c724d49cdaa771b6d
SHA512 16c22bb9f89d11df3db453ab71365fd27de31ffe97b1159b5ba940932773b0c4fd02903d9ed55cb1f05eb88ede1b3561ee555e90a0a592abda4f826ebe5eb691
SSDEEP 384:BoikZS4VhesCQMQABVDUA+6SxKg8Z848u3eI2Vci2jRYxqEafv:dGcsCQMQCVDUA+VxKg8Zv8VGi6GPan
TLSH
T11E92E17988A32D89689D4E44A3FF6B5A5E09C94B1D2F05FE59181CC863D4E8BFC2C45C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 17KB
SHA256 83fee4517622c3b1bb5326ffec9effee52fd24041f8335b336f9f6ef6c68bd13
MD5 a858ed1cef53565d1d11f7796ddf687b
SHA1 44b305d2f0c4c0dee999533de8289b3f97078917
SHA512 3dcb8c7af7fbf0dbb2a2b7d4928544e0631c2b765640f45c2048466fcdc4424b6e2144f7ae89c31a40f4a6944a247fd2bac7cb9040bc42d86ab2ea0f77958558
SSDEEP 384:Kb87FeyMuog8wp6FPZCNpupMKjZjzRrQJSlSoswdSk:NFefuo9saOpuh9jxASl37
TLSH
T19082D13359CCE2281F9461B6E774B98A80753F8A73F95D9903E12294E79098047FD798
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 147KB
SHA256 b0f4c677bf2e5434bf9b5af60fd0cf24cd3cc389abfe9c9235a26e8984b41bd4
MD5 e4bd7b2d7ab2a96821e690809095adff
SHA1 2da36ce40d438f1eec665b3d18347eef6d52ec63
SHA512 5da050672da51cfc73dd13ae9ab6efb9e035313207e4502b49457d4335c6537f4445f9ed93d801e993c85114724cfa07527a8f7285a64ea0c3ab25bcaa800ad1
SSDEEP 3072:/BuS/3etp+18ja/tAWJGOjN/xnnlPYzxz4vm+5/K1mNcyYL:/T3etpg8mqUG+rYzxYdm
TLSH
T124E3129DC97B143F626CC8265C9954C2E80FB864C5EA1F78B845384AE1D1FDCC4EBB09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 21KB
SHA256 76bb772510b6c189f97315d7de2cdd0e669bc7a42a870d59a883831d235fd60f
MD5 aa4fe962088acec2ad7e93bb7d2338df
SHA1 148543b99d0b43a648962ceab5125dbba7d7ded9
SHA512 2bfff035f4e2991abf4dc8340a656e2acbc5612dfeed35392e1ab871c1a423cc28f8ee1934a59d8aba9c730cfd087346c3436c719f7860f07eaaa7127bd3e4b3
SSDEEP 384:pKv55X34hwPK1flApFufoE5YNvsktHR4JYuZssrfX35oOHMVeaZfzPvg2nZ:wvj34CPK1flApF8dOlh4ekseuOH2FzPJ
TLSH
T1E7A2E10209C28564A7532CDD74F4FB3AC32E031615E6850BFB4A7A75EAB501D43979DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 21KB
SHA256 1cf04407e728ea1ebf82dc1c6b45d12632cb3202ff8f4556f380b16e57484f27
MD5 ea2c3cf1be388bd3fbe9d0cd8afee11c
SHA1 6647cbaf7bfedd842f806549f5c3433a19eab1ab
SHA512 2b260f63cd6bd0c75a3e6ee9eb5fa5b477f1ab2e107f682165c8a4bdcb9a6cfbfd21ab172ce165a3c2ebf451ab91d27070ef5e4d985ef3105ebcae964c6d8870
SSDEEP 384:sPsBjS050+6ZPTO5MZcvt18lQYjxHe+YeXIY3r9mgNRb4PBvCrdYq+sMM:sPMjX0Gj8lQYFFEY3JmgTbcqYo
TLSH
T1D6A2D078730F6274EC9909F45228B23785BD75EA6F5E5CD2121AC38399B41D7E88D0DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 22KB
SHA256 a98d0d4af945bf8ffa1b1c1158986d30b5204ed4f3f5f246ee45a24c1de4b276
MD5 0792a0dc91da66e261c54b80e50b7698
SHA1 72e7c4195ca1d2200d28d59b6ea647f3febe1407
SHA512 a728b4e4d128e61de91de0179c94de0d97e7705b0664945b092ef8f587f3af6c1a3b5eeb06d64ddfccf4e68ea9ed0eb44c8edc3e1957aa892cf83f8ee091cdc4
SSDEEP 384:w3LIVxO70VzWrIIGEvMT54PF7dKYLB7G8FDIua1SAs05u68LXaz0Wx8MY:w3LIVxO7iarIzQMT5CbBpFI8Ax58CY
TLSH
T156B2E19D83B65AA1A683637AC12006176F70C87858FDE3DB2873CB288055DC3738BC58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 22KB
SHA256 0dc80caec9066a2aea3d969f4e24a21aa7d0c3be7a3ba8fb6b23b6f63569f099
MD5 4fa7f083ec861cb358a6628248521d76
SHA1 69d0c575d87c0ec13691ce1ebe2181782c7a26c9
SHA512 d75b86554e884d83e064fecbc2127b538cde5468def7315da23ef8dab94b04b0cd9596f5d5844c7c2a099afe7541bda7c4f5e8ea45ed530db54acbba0afb9e72
SSDEEP 384:xjMBAs2GpmTmlHsXBil3kOg0SqqPyp6ZCMvVlO2V6z/W/ix9TYGa+pDZAVzGLWLq:xjMf/pmTSsK0YpQq6MMNAo6zucjpDZTd
TLSH
T17CA2E1A067E8B19CB6F59E55CBC1D3FCD745931ECD3E126168C26F29A5013C2A259E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 67KB
SHA256 ef6533156bd941824c4332033398792f4e105fd531afcd71d71cb09c1f784ff4
MD5 82b6b2583d41ea48302aa3e30a23f4a1
SHA1 e39494f1a309409586b53644c9f1caceff9e6506
SHA512 82fd5ee61213a93e99f8c6277c521cb3c95dec57edf17a11cefe277650840a852f3593e9da86d24e3925700f1ac6a88bf1232078513f4700bf543968a3e1d51c
SSDEEP 1536:lDPR7dSxFOXAVY9tCxfw1ptY3ZBg6aavIqQtCmvygWuvUX:b7jXAekJwnupB1zvkCQyruvM
TLSH
T11463018CC29F2C1D68554DB248ECE877F2AF564FB1D1240CE0724F85788BF62D29E219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 39KB
SHA256 ac85e23c550308bad09f3e636e6fd254d98d316b2b1d38df585683c023e1a344
MD5 3110e73c33777000cd778bead26546cd
SHA1 8d873cbb1fed3a8572feb5d209c562f3c3014fe5
SHA512 d2b94916ad76795fa0a8767f5ebfe9897988487ce678322ecfcddf925aa3ca3fb111bf42373584ea9522a2c10022575e789544424e9f0dcc951f7cba34505387
SSDEEP 768:E+R1LylL8xB/j5opXXBfKgNcZpyp8T4/nH3WrzHi3OhoDV9lG:EMEe3/j5opXIgeZu8T4er7dhopTG
TLSH
T11703022D5CD515E88E9B51B9A850A5361C2CC3E37ED585FA7E233E18ECCD8902303FA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 31KB
SHA256 8fafc2137a8d78536ebb0c955828535c1f453300b06f185e85ece42bdbb002aa
MD5 1b299aa737f94186b24aef679c11ea28
SHA1 e217dfc6b1ca3acc0f4e89e77060ab1c3fa204b3
SHA512 3e9f3a723ea7ea588c4e8eb14556ee34740fdf73e9f6dcef291e366034a47dd3fa7e2e0353718c8b366bbcfffa7727797653a5be730587d7322660c5b6ef5df9
SSDEEP 768:DQmqLX9oKhx9mcPPKlRBcFDcJU/D+ts1/K9:DGLXdL9ZbFDcJK1/Y
TLSH
T119E2F1B1DDC22CA86520D3F5C971488EC255698BF922FB34C9DDC710BDC4692BB2B58A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 21KB
SHA256 f2c761ee3ce27469f940a05b64e38a829a400427727cd0bdbb4e36f1d572afd7
MD5 d4ff90db5da894c833f356f47a16e408
SHA1 30606044507d81b996c992895ab16b8a8d68be97
SHA512 85c6305ee6973ebf449efcfc95bb10a66e5cba92d026a2ec4f1072dc8ccbc5b4a4a384fe425e53e2dade2180f37cca56243ed354033cfca5821cbb77fb8b0fa1
SSDEEP 384:DfspV407P6+jGlbMAA2cdv92Dg3AuGZ0KGKBb2ZXdWgb98JmSKMrN:D64Ei+n2c19NuqKuZXdWv79N
TLSH
T10CA2E1C54E78E174513B1D35E23A41DC930EFA6AB7DDF34896CB16525392A626C00A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 42KB
SHA256 fc18d32838518ad0124b8ee48969de6677b3e05fd7b8e95acbb20ef5148b3baf
MD5 74913114e5d0ced97ee98dadc4f14f1f
SHA1 17a3c9a1df51ee71f107b3e94c248cb354bb3216
SHA512 49e5011e1e335644e805fad0ff3c100b3084207b7bbff571b9b8c3e9120da5a515f9a4a057d76fd246369477abcedcf63fc36eabac37bb13795975907e77fff3
SSDEEP 768:xOQ46X9LmWRUFewYrUIfZff70NWDTWb1MTS7roihK/HV5gSSXW:4Q4o90/YrUaffoNyAWWlhWHLD5
TLSH
T1C413F16CED63B2FB49EB253EEDEBECF05BA5153C6901910BA568739CB011C19CCA1B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 92KB
SHA256 d3f84de0918d5ee7866a6cb2c9e1f1cc15e5ede66f780ffc614fe4d46a266ef6
MD5 c0a9bbdd9f9257b169fb883b3db69a6f
SHA1 f283439b11acc269f46c7ba471b6e520a71a457f
SHA512 6eeefaf94b03fc7524bfa5a334b1b5a23fe9c4351d7d73246fc988fe5f0f896529d4722c21cc606870d427f29c4a6d2b34c5a27948e041965e2c1ae4ddff0f8d
SSDEEP 1536:hgmnnO+eB4w5jRzGQX5oCZkSkgQAvlNpBuqQxNzKaWAJwZ9X6BC3obHD9Z80Cp:ZO+CP5RzGQXRZkSkbSlNzuqEKaTw9X6i
TLSH
T1479312C3EBAF40E1E91D0B6DE3B6162DD18708888EBC786B96E172C15671E561349C33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 117KB
SHA256 69499c1b2503f706d13a9299b57418b0ddfb31ef35568e587d722b346268f61f
MD5 dc107eeef356c38f1de5881af081dec4
SHA1 aaf3f4c0bfc742c8be4a2fa0c95d0ca39e779a5c
SHA512 e7935ef2e10bff6e211d5b1faa2bee505a81f7b220faba7d876f1d9a4a6ee933e1fec2b62be675838ff4dad963657a9e2c8762dabf3b5854ac78c3c877ba2390
SSDEEP 3072:CZwnMcLSUQyjaodcc4hUOs0SbPdKqN2EsGE:CCnMcLzTjagvOlSj2BGE
TLSH
T1F9C312D194A79AB1E348874AD6DEEE03DC0B0FDAF075721D628BF7582615532BC92E0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0deb5117cccb4dd1_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0deb5117cccb4dd1_0
Size 473KB
SHA256 2f92a850843b287469b80605e840158e83376953805e191e2c05ad85f0aa6af8
MD5 f92984b5808c8ed9050ffb085b1e0686
SHA1 9697c8e75077f23fbd923baae63e7e37e242f4b2
SHA512 f9c94987512b5ff8c46bd48f02c1ebe6a83c50e7b968447578927fb660ef62c8a6d6bc5a52728bb63f3f47d8f16a4003cfdb722c420c9f0f309894bc774927ba
SSDEEP 6144:Ll/SkmSsB3/isZGkEin4VHCqb5knIkAa5lDlU7SPvUe1ZkQ:p/SdBvzaxVjNMgWPvUe1ZkQ
TLSH
T117A49545DF817F61CBF652F586D3C5A73235418E2E92814362A0AE3A2C0E1D92ED7E4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

157ac5dc69855318_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\157ac5dc69855318_0
Size 270B
SHA256 5ab3747732c69adf2e567fdb90a839e5b82331ba5513825545bb2c79106df0ce
MD5 28b9d9b5ffc243cf0d7de28aa181a778
SHA1 63546570729db4b4e8528bb7f5989d72e389df37
SHA512 456a02d9e7b81034f507eceaa888b0c2f13d3725cb7b9577a86288bd8da7627fe3e2e9355d05e88f72a191d6d250730578214ad710bc91e4991975372145bfe9
TLSH
T18DD09573C1025586FF15EFF0DA5B2257C69D66C604EDD2A5D50510B34414537D640C03
MD5 SHA1 SHA512 TLSH

Submit Download

159fd335a7d81e06_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\159fd335a7d81e06_0
Size 106KB
SHA256 fc0cce9daa684b5b64588d91536b3b53ae89da9c1400a047e0e8d8ec9d2eb3f9
MD5 7895331f7b4066e7ffb64d9fdf8eb444
SHA1 87c99d464e371db11764b2f0605f09873375b995
SHA512 91794ade6a45def022e55300c14a598ba0089976a8a5b40ccc164847b9c82a588d66e28c849f043370587d201d676b1d0b61fffdd08ed4701b6c2215cc301ea9
SSDEEP 1536:TN9wvg6P6m0fMbCxCuC7IwtrcHCBgSIy4LThDjC05pDLHwoeLTjPNVy:TN9wvglz3xCr7R+C55+5DLHwoITjPNV
TLSH
T126B36365EBC1BF7DCE3693F40215CDA7B532449C2A93A21761F0D3291C4E1E55EA2C8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3dbe54b7c92541c6_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3dbe54b7c92541c6_0
Size 250B
SHA256 5e2c1ef7671de9a7f683106f920531272d683baaa8e9b0739e2bdc3808cb1127
MD5 c99cc33b9af505913bbc95a8ceafb601
SHA1 0e534cd2f74f3f1b4813f370a6523a7f9eeab0ea
SHA512 8408d9d217b395ba289a2bf5ca598da2375db89e6de9651107f7fa53ceee50f99ae51db452a09889aec01157245d2f7d14b987764b247a8b2b963b023daf1b19
TLSH
T1B1D097DB18203D0DC11BC6F2DA31B774872386400CC8C8F6011510A32644D206E432C2
MD5 SHA1 SHA512 TLSH

Submit Download

6f723812f6f9e6c9_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6f723812f6f9e6c9_0
Size 279B
SHA256 c726b82b5e744ef93737aa04c681e9f99f4304378e1006ec5e41832a84a15498
MD5 57dcf38a8269c950bc5a2f2bdba2d1b1
SHA1 0b57aee870e5910b54c6d8078b36ceeca21b03fb
SHA512 73ef5fa054cc69ffb54c5867c2bc14859518065ab1c7b507fbf4c51588b810643d0bfdd2ba08d7692977c0f740cf2da964a56b9e9ded96993186e69600d49794
TLSH
T12DD02B9789181802E819FDF5A775921B97B3601098A4E09A2428D12B605392A6D01D31
MD5 SHA1 SHA512 TLSH

Submit Download

8894a2bd0bde592a_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8894a2bd0bde592a_0
Size 40KB
SHA256 6ac8fe966d12caf59cbc7f7120ba3840e6df75d8a17721179adb355dd6c0f09b
MD5 daa56069bdcb79608effcc4d2e4d16f0
SHA1 dcee3d4d8b41cce6c5c9cc18b54d038a9f08bfc4
SHA512 7ea36f40469052c9b275f1b77b78825ba5e3ed6eb9f9b9e26ff63816e6d0f1ec870d363c6bccada858e1be0cf001b2a12b7eddf56961c79393bbdc2cffa467c3
SSDEEP 768:h6rFl5XbLUnNsDKe18HU+991X0YNdty5n8rlodnfehXGG5J:hSXbwn62e18H1TXTdLqdnWFL
TLSH
T1A013A5196781FDB5CB2B53F492228856B73506CC7DE6810323E1F32A1C8A1FA5ED5C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91b0bffbd3a2a323_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\91b0bffbd3a2a323_0
Size 261B
SHA256 53d3c423a5dbaeb1ce29263c70b617a103e9f9bdb86d6d866554e0b2e9815ffc
MD5 f2f6bb299a4c6163e47a8b32d8de5f36
SHA1 bf6f651c5542d9d927f4b8d4e7e342ae051e6bbd
SHA512 133187a5ccd9735caa35eb7fc0821f0efde654a083bf1fde1b15a9f32b91df943eb35befe1ea3d99fe699e9a62a76e8cf546c34802638ef2703cbce69227c948
TLSH
T192D097B300172286CA0AC2F0A39AC20EC92E21860C9EF88800A0047EE2020FBCF004C3
MD5 SHA1 SHA512 TLSH

Submit Download

aeeb74f31b0594f9_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\aeeb74f31b0594f9_0
Size 503B
SHA256 4c130af2384af58fa0353ed7a5ae989a69239a345fa3512954e4890a378c6a0f
MD5 6db34f04719c6022658a1ba2dbcf1d95
SHA1 18949c28a7a6f9ae9e1c4dfa826e15065d5da210
SHA512 6f7694cf1ed71b867cfb2a84a4319e662cad736918e52fe524759fb521de30211506bd820624c1d81f62bc75bd016721658c5d3810e13a202772866ac2305be0
TLSH
T17DF09EE30545CDC0CF2AEDB0DF5901412E32EA521D6ED977EA0260711A9C4D27C1AC50
MD5 SHA1 SHA512 TLSH

Submit Download

db6b0d4173a88bf9_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\db6b0d4173a88bf9_0
Size 216KB
SHA256 72b67adbc497db89469cf76c45a246e2c27ceb1c53411c95cc48cf21cbeb37ee
MD5 12610f43ba7a2ac5e04753e2b957cdcf
SHA1 3fd7a3f6bc2e2923dde6c24d4b36b8f7f0adaba2
SHA512 8ed5abe200f36c0413ea690c2de6dfb9ff53502f624608b7b06a9621e9b58b02a119d477947d39b5a2a576d08d5acafd5d4891821771886771cf450f182801e3
SSDEEP 3072:LX9qRBpD0h/+/DoPxCu4YNtG8CC/V9o7a/g4tNhTHNL5authwJGJ2y7MkLKG1UlX:LSBG/cDkB4VGjNL5begJN7Ft2Z
TLSH
T11024A45593D96FBACA2793F907629FA73231409E2FD7E30761E1D3292C092D50E52CCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd6ccac7f804c71d_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fd6ccac7f804c71d_0
Size 438KB
SHA256 1a3fbb62156eae6c9dd75f9e6f891d715007262898fa7c37ab7e8504ce044702
MD5 32bf33f40b0303a9d7e792cf305d8f51
SHA1 997e7f298e183481e5f7369c342511f3c3f35f94
SHA512 f9be6cacc24456ae6e9bc799007c843882cfba238f6b4b96e394580b9a41e8d8dc87dcced6edaf40148ce56252373f0d8242abe50915661b1a9adc7da15f75ea
SSDEEP 6144:HLI5SYBF10AE+kTdWyGwSS4pXDTm/j7D7tGaBpJcbdz97KpDVj6RszFZ1xadsyF:HL3sFSFTYlZS//YaX6ptkrVOF
TLSH
T13094E941AB91BF72CFE653F612538A673632815C2FC3D10322E19F6D2C0A2E56F56C5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0f73a93c08088a4074021053827086eb533f7eca50eda676f96168e2ea31927e
MD5 e69f84c68422ab4c965f998bcc041782
SHA1 b6298e2ea96bc64e1cd3708a6977b12dfd18f41b
SHA512 0af49d2673efc595c4e464cd515171719d3d10363b761ea8bf9a2a1d49ccac77c71e26794833d16ffb81f055470c9e91086fd0b39ca02844b3b7c0dc61d3b33f
SSDEEP 96:BmAt3nWDEtGu01W9lkJDH/68+nskQDciVKViQXWHcdth5VEQR3JGFtNSVi88ov2R:BmAt3WDEMu01W9lkJDHy8+nskQDciVKo
TLSH
T11AA1C77CA1899001DB75DAF1B5EDE4803FF0BC0D621FCE8D5695407E69CAF8B6216532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 156f0705da8eb06d21cb0fbf792701dc1b820c4b431183cae31b259796951208
MD5 04da05aae1d6c5e2dedc34bb4bd151ac
SHA1 ba148321b142d62feb9c795cf0692d9124b58350
SHA512 8ca7d070957f5111a79864d5457b969814e660ffe20d5f8c13766414536fce235d0d94beab3634bc71e391b27ed2e4c1635756736341155a90affa23d8a8958d
TLSH
T1FAE0CD5045C45115DF27ECF5B99574C55360814D4303FBE679E598704473A56DB11714
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 eedb905e3b567ce324d3cb0b3d88e2eacb847061be262b0d17681f94d5e1d364
MD5 14c694c9d2f5718a5646a1e35476852c
SHA1 e07b4439e2c6fad7c7ac5e420aaf40ccd9620496
SHA512 85671f3967d7d774e4515951b03b8135b2cb6984e8fc76600555ae1b07a5c3f394276b8a82810d726e165e7da73b0c2eb8a47b3cc1eb68ab60608c4324ab6333
SSDEEP 96:czbAt3UcGDEtGu01W9lkJDH/68+nskQDciVKViQXWycdth5VEQR3j3GFtNSVi78h:cHAtRGDEMu01W9lkJDHy8+nskQDciVKo
TLSH
T11DA1D93CA1899100EF75DAF1B5EDE8843FF07C0D611FCE9D5A84407E64CAF8B6259122
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 24KB
SHA256 4f2f433ea0bf3d43d33ae20d46c711a451b4609fe0fcc874882441a87b41646b
MD5 73da024e27ecd8060a6230ab5103b1b9
SHA1 0e6bbb0e7dd43a71d2f7b5066b728ebcb520ba3e
SHA512 5e70168bd413bf7ee0d04a0a53138f401d3dedda2e7aba3c05747ecb0e84a3074ec7d50680a92890441c500d697b841d07ee7e0d860459a208c62a460a4476c0
SSDEEP 192:CcJv0uMND6M1NC76L8Eoc6nCgex5A42qbv4sDfoDmUw:p8uMND6M1N2ZEGCgex5A42qbv4Ifmmz
TLSH
T136B2F8E32D3A3012DF441DBE21AB08BADC3BA2045F98EC857030C7651DB8682A96D5F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 999e11c992ef0b20e2aa080300982bad744dbce2eb6685ea22ee18c66f289136
MD5 4d6800b4c3672ba812476c9a664cc50a
SHA1 384f00f72c955bb6242c30b910e873fe689e4d0e
SHA512 bfba542200315f3ce186c66ea2f9fb3dda0a860510d793e22c897aa9bc217dc5f58d61c1c2b1574ef12bb3b758f50897380deb4894a9f02489b84f04d530855f
SSDEEP 768:RAN5a/pX32d64irkq2KGu8v2Z8g27JqK2PR:/AiL
TLSH
T128F375AF7F343216CD9D817578D25CA35C6EF1BE4B07A9C5A82148A8CFE2713601C9E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 226KB
SHA256 8b8f9e825e3b9584e1af4f4caaf0895633e64a5fd1adaca339b3ef0a5aa56f04
MD5 73b69a0d994f6c2d5ffbd2febf39fa2c
SHA1 b52b019a978e0e91f13b10b8f573fc2d33ac8db0
SHA512 b74432b5702ef0fbec687f7743b6336b6709bd2ab4554b3b812feeb882403dc428c268c27b917630d7e6a3b361a554774e26b368e9c0c89ebfe0b4494958ae62
SSDEEP 3072:7rtRZkts6IlKOchOF6XXSofy+I+1lXFAOSPSafy+IEKhrMhURHi+qb6hIKPGtxcf:wsHrDb6h
TLSH
T1A3340A0C526262C5E43FC37716124E57E335E9C49E6971D6BA70BA0D23BAF4C3A2672C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 349B
SHA256 8e2d90141c259ecf045b824f38f3f3a09584b4ea52eaa40d1d3c6e299d829a7c
MD5 25e074764653a6e19c6e4066e82df47f
SHA1 ab53b5b64ab1193c3b39a4b445b32f8bd9fc6dff
SHA512 1829e3d69b5dbe66c2235263bcb1809708cf2b84449737e90ca445e9c528f00cf79f0678d044ef4e4d62fa8758678dfc160b56054ec95384f9094fb28bc6d192
TLSH
T1C1E0202898C9D26F516481AB5A70770ED9E6550CD7CEED564F47E44470CE41CD1B8250
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 9ea18a8d5efb0f9d6c52260e5766884c49349ae044fd7c0ffd7d76da7c57793e
MD5 489fa6f960d3535783b3b758acce18e6
SHA1 35796ff8b7687d69b6fb6ee675b8e2a5b4b5728e
SHA512 efd116f7eadb3b99da0c3c29398a42725d86da06e2f2d908ef77dee967f9855a99817d92ca865845496bbfc109047f4cca65639db28edd01026cfa77ada6cdeb
SSDEEP 192:DHrymDb9yOSXXAmymIAuhPSTz2aI9lDdrgMH2EubP8O17m+EHrqYGLm3vZHDjhUZ:DHrymDb9yOSXXAmymIAuhPSTz2aI9lDW
TLSH
T11F429AF7C3E8C62DD81156F5A7157E2ECE2D0A2443283C6AC9E5BF4B93E2471E21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 6f65e7eefbee54f03686f81369b5c48be6b6d3698028e12897cb338d05323060
MD5 51ad92443237bad31aacd4621fe00497
SHA1 53e0a6a1cbf2265acc44a08412efea0de176a557
SHA512 dcc2a1c02ca5ab6ac11c52b61c430744eaa541b40c7519ec40ae79ec63b1081a6f0a964bae4c3db1d266c2af4f40260b26f45fa488fbdb8d58561c168c0d9a48
SSDEEP 192:DHrymDb9yOSXX8aI9lDdrgMH2EubP8O13/:DHrymDb9yOSXX8aI9lDdrgMH2EubP8Ox
TLSH
T143D19BB7C3D8C52DC80156F5A715AF2ECE2D1A28432C3D6AC9D8AF4B93E2472D21574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 818130a34da77cffa84cbcc3c0465bf053a81d37ea94fdf4255ecf63794ce63c
MD5 1e8c59b95c0aa52bb33b1abab4d818b6
SHA1 b180cafe7141d77c2dafe7092875d8d9203b680c
SHA512 126bdab77d044b5926a8265a7aad65758f4b016514137373bb161fb01bfa9f93b777ca29e256a71d407ef2d4c8abe0880340aca4e02aff3e7d4676b887651ef5
TLSH
T1784159B7C7ECC97D89015AF4AB156E1FCE690E1853AC3C66C8D4AE0B53E1971D20059E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 0d05e1e309a050f960d5b6609b81bf4e63ba940e0ec1fe58d86bbaa49af7f377
MD5 80e001bdaac6498e1e43a12b643174b7
SHA1 022ae6feff6a06ebb20309a770b63c51fe0d301d
SHA512 f30ce6c89e95b14d28613d90998d56888fa73a3a6bea9285bcd72b97a5d43db42aa8499c6ac1c1ac4f2687ae7d03d4cfc87a61730aa22f72771e55d713510d3c
SSDEEP 192:DHrymDb9yOSXLaI9zBbpwDdrgMH2qDubl:DHrymDb9yOSXLaI9zBbpwDdrgMH2qDux
TLSH
T195D19CB7C3D8C62DC81156F5A7256F2ECE2D1A14432C3D6AC9D8AF4B93E2871D21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 9d32f6805788652d0bec9c7f7c5f392e4792f61e60ee5f27428fb07746654ec0
MD5 5f0f74f2b3bfb7e37f33ccb47beef730
SHA1 79a53e5c32ca903ad5ee048cdeddab748a302d27
SHA512 b315b55f8852ea787fff19d1e6bfa31c728deba9e98465cc2463f167966a6c6875720eef6f4c53812989f2e3691ff6b77640b8e784685d3715c3965e94814e17
TLSH
T1642191AFD1BEB45721384CAF5D447C09157B74321791A5E4DEAB816CB0C14F37B16427
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ee087fd55604305531caf3327ff4e55fb39ad55e787f54fbbd086bcf32af1bd0
MD5 ecaddd5be01e048077b02ef0acaf29a2
SHA1 e9dfa4a9a7cc62e8bb5f32d372bc6af3f0b3d957
SHA512 5abbd82170a78d8f8c5d76960c1856e4cc273b36d00bad72b081757fead6982d47be6b5dd3b38ead7dc2492d24c246228347d20b79f105a61a3bc955d6984266
SSDEEP 192:ARmlvPXWDsWaHv7H+hAPRp2tN9WHsb+WNnAmcZ30CB29k866kwzkVyIsnAUgtaJ:ARmVbPi8XmUwAzZ3v2i866Tg8
TLSH
T1A242C52EB950657B9CDBC229FE213B53E7F5202175911E84EAFC8A1C19E79CC212742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 cccc9a790baafaf39be4536b60dc84cf2ca91a6751015ac7ba9fce091be44dc4
MD5 41de9f5ab0eb381703e2077bf6f17ba5
SHA1 47c604dd537a3ee4c97a2a46637c20efa98d22a4
SHA512 cd70b351a914dfe6189864c8715fc70f2e8ce4a6c935268e793f8fb25bcec6a0a18cb05fe6c05ca940df67af7f35db0f33914b45f518ac17a02544b850dfa92a
SSDEEP 192:lRmlvhXWDs9OVVv7e+V1PRpR86e7kI9WHsb+WNyVmfDIs+RGAe0Q3wTk866kwWlj:lRmV2VlRXXwUwyWhAeTwQ8662l2e
TLSH
T1E062D72FA9502ABBDCEBD229F9117757E7F5202179D01E84AAFC8A1C15D7ACC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c978742569dd7f5c3d890ded4d34b869eb51b3c31d82c646c084799f350090fc
MD5 0e94c80fc35eb0023f806897ba8f9595
SHA1 0b88f13a711d4e1f2d755d6a8c7badc4fee7d284
SHA512 0d0cbdf0a0c48e48c3e6854bafebf99941cbbdf3c4bb4425c4590384709a4f667f605c31bc0254900a8a9ce5587cd75ebdbeb1d7e7c1c3b7ea4c0d710abac73c
SSDEEP 192:lRmlvPXWDs9O9v7H+V1PRpR8RtK9WHsb+WNAmQIs+p2x0Q3w7k866kwWl+VyIsnB:lRmVo9iXXFUwAPJxTwI8662l2e
TLSH
T11E62C72FA8506A7BDCEBD229F9117B57D7F5202175D01F84A6FC8A1C15E7ACC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b00a52ab353c78421e6fa4c29b812e390dd4c6d1110d7206ae21255ec8c9f503
MD5 faca15ae6c5750d17b208d73cc69357f
SHA1 226c44a3460fd70a5f18dfb032eab5d1932f1784
SHA512 14ccd7b3bc281a01b64f7290f75b2b61d09f5f1a415e9acbaff13bd345d23dc07647060531138ca90e1021c28b45d32402082e4fb164af785950c6539e4d051f
SSDEEP 192:lRmlvPXWDs9OVVv7H+V1PRpR8RZWK9WHsb+WNAmQIs+74Z0Q3wxk866kwWl+VyI6:lRmVoVliXXwBUwAPxZTwm8662l2e
TLSH
T14662C72BA8506A7BDCDFD229F9117B57E7F5202175D01F84AAFC8A1C15E79CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 41997d3fcc32cdae5c15c7b471c1e3036633cf7974fe5b06715e786b35a7665d
MD5 fe59c31a8eea0396742313aac0cc642e
SHA1 3bdcd1dfedb8609b0a482bd0fb5bd8192d05f6fd
SHA512 2384f66426d07773486d1da8e0a791bdbf079d4880bd3ce0e27294bb94ffdbd194885cc437e00bf0c59448d8a1a8a1c025508f7a06be49a166aaf0e8ee5d0bd2
SSDEEP 192:lRmVvhXWDs9OVVv7e+V1PRpR86e7kI9WHsb+WNyVmfDIs+MDn0Q3wmk866kwWl+M:lRml2VlRXXwUwyW9nTwv8662l2e
TLSH
T1C362D72FA8502ABBDCEBD629F9117757E7F5202175D01E84AAFC8E1C15D7ACC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f31f1643e123d3d92450aff6cf84d6f9824771e1b79f827b8c5960fab2cf5ee2
MD5 be54801cc0393d95ee862fe4a99da7f5
SHA1 0008419865f807409379eabfa806059cb9ae59a8
SHA512 db13debb13de621b99f23a5558d9940489187dbbdd779d02ce07c10ae13347519ce557b126271ed7d89caa2b301bec608178ae1b19675e922f52605177eaa30f
SSDEEP 192:ARmlvPXWDsW1/v7H+hAPRp2tK9WHsb+WNAmQAmcZ30Q3wak866kwz+PyIsnAUgtK:ARmVcXi8X1UwAYzZ3Twz866Tg8
TLSH
T14052C52FB950697B9CDBC229FA217753D7F5202175D02E84EAFC8A1C15E79CC222742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 012af2345b532e68d3325344b0d28180b6722b42ee593d7bc480f7487a02c664
MD5 7239535ecf2632b2bae36ecf548e172d
SHA1 73fb7beb9b33091f8f51992c97efd0ed80f3f3ed
SHA512 97d15c603598c4a6de81ec9d42333e9af6472dd28b40ba5fb01585716e3e82b344d56569104ce933ad9d9f6dc068822fd81576dd08834aee43f1e7ec1496a379
SSDEEP 192:lRmlvPXWDsLsv7H+VAPRp2tK9WHsb+WNAmQIsy0Q3wvk866kwQl+VyIsnAUgraJ:lRmV34igX1UwAPyTw8866wl2e
TLSH
T12E52C53EA950667B9CEBC229FA217B57E7F5202175D01F84E6FC8A1C15E79CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 582e54960556a9a53f4e27dbda06b262467b858ed2fdc1197fd8fc13545fbce1
MD5 c9563f8b3d52bf1511ebe3f1c0109b85
SHA1 50ad58d8774a6a99218fb7a77c05b9b1fd5682b4
SHA512 22fcf09ef8607e2c08f5626425c8115e51abec67d4deb47fdf6bf874e23d83ecb7ee589ae3d5115da20e2bae3ad676346e9168e7da6154db735c47f87b220946
SSDEEP 192:ARmlvPXWDsWa/v7H+hAPRp2tH9WHsb+WNnAmcZ30srQ7k866kwzkVyIsnAUgtaJ:ARmVbXi8XgUwAzZ37QI866Tg8
TLSH
T1DF52C52FB950657B9CDBC229FA217753E7F5202175911E84EAFC8A1C19E79CC212702F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 690fd5ba14dcef2405c9bd4dada57424a55ae9e1ba7c5e5519775164da881b79
MD5 1347d423ba80af7f0fb7896f6c989e39
SHA1 631520d04b269b7fe2d4a58d1df0844f2ab70b36
SHA512 5bc037f6465c587bbd57de867cbeea218bd698dcff86b028bb53fdde50268ca3c001aaee7a48d4d4a3fbef5ecbe95ccb31635f918d1d862e5d1e887f3b873ca7
SSDEEP 192:lRmlvPXWDsLbv7H+VAPRp2tK9WHsb+WNAmQIsy0Q3w/k866kwzl+VyIsnAUgtaJ:lRmV3jigX1UwAPyTwM866Tl28
TLSH
T15852C63EA950657B9CEBC229FA217B57D7F5202175D02F84E6FC8A1C15D79CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 a487a90aa586ffb722bc45a76d1e954f5a6f5ff4286551d2445a524e0f1cc25d
MD5 a6b03dd39d632b77a2b691136935ce1e
SHA1 660afa8fb43d4f28bf93dfee7ad6659850a1dd80
SHA512 fd42fd771a90c2ac5460f1c04885199c7f6c1ae3796cb236a749714522d06dac63689becd9a9f638977639774ddf2dbbc07689355940492b636644edffad801d
SSDEEP 384:6kj+F7KxkXqKf/pUZNCgVLH2HfgslzO7pLuLcSjsNXOD+F+ErU3JbHGvYKD0S:6o+F7KxkXqKf/pUZNCgVLH2HfgsJO7pT
TLSH
T15F72F867684C9E370FD4CACCED167A4FADB5024B65E9886443FA582503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a3ee900b-7f8a-4f72-8e00-eb5d81297149\index-dir\the-real-index
Size 168B
SHA256 058de9e75a8a33136d1f617f87c76c42eea5d1d3d70c10a66f1d5accf7fcbaf6
MD5 207302a7140d59b0a68829665c7abf8f
SHA1 daa31f43b4251938eb32a2f4b38fe56c5959fc05
SHA512 d88d993b944353c5311dea0e0fbf27f69525332b0a2b0102a53c2feed04ef9ba1fbc05fac59ef1d97342b1554ce3b38ca08a51876ba12ac9e7d093a5c3ea4b42
TLSH
T1BAC0921CCA211351D102A1F89ED24604AD34AC78FC060505C190B0A9FAB8247A00F0BD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b7b18.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a3ee900b-7f8a-4f72-8e00-eb5d81297149\index-dir\the-real-index~RFe5b7b18.TMP
Size 48B
SHA256 84e85742a065f79c17213b6916b8b075178d589803c297193f5138efa1d9adb0
MD5 820013dc9b1981aa2db5d5044bb34998
SHA1 d94e841acd7153bef5dc7d997a6e5e5cd45c4e3e
SHA512 2ab232356e5fa74b17b109874d58dbe7806cc49c43f1cf3ad4ae2d90283b1d655a8d3581af7cae2da9d08ef6c2af965601dde5f2e36cb86bdb80edef9d6595a8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c9076983-855d-4736-a5dd-f9c2d0f3e659\index-dir\the-real-index
Size 576B
SHA256 68bd8e21ccdf3527dba861b802bfb05bf3329bf770914fb2552865dd4b0d07fa
MD5 31e251de37e9b37e13cdc3d296f2648d
SHA1 1c133941de7386a36e5163a2802015c10e20f692
SHA512 1f2e765518ef88a31e1b1ca121d1341bde2f7efdb47a78ef646311d4b84389d1b3ce37307267b37cf927abdf246fffaa805b429413c155fa050683a9569f9444
TLSH
T198F0F113E7A5062FED1958FA02534C743364995E368D2723242471976D6F3670DE1AA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b8327.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c9076983-855d-4736-a5dd-f9c2d0f3e659\index-dir\the-real-index~RFe5b8327.TMP
Size 48B
SHA256 12bd9e1d42bcc193e41f0c1cfdab8a9f9362b0b855370f0e0958415d47dbf6bf
MD5 cb99e4951b73b02e5c06f4a521ad8aba
SHA1 6e6cdefd7f8a46a82810a29493eb2a45ba130ce5
SHA512 b079d3ea81384542dd38f4d184883098ca12b4359c76c024d3d0a8f2029372af2ccb441c153273383b2630d6eb454979e1a7f7b7bab9ccddefed57a0b4d4f487
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 cd6f261875f06788afd968c0f286c8591d335a93fc1fafbbeeec5981b9960e3b
MD5 5b2aa8de17a90fc7a581b5db98764482
SHA1 e7aec048aafa1f4b5d338f6f3de189d252e3ad35
SHA512 8fb70c6114c87c6a0ca611c52647b9f33ede0e835b73c64419a8f3a92288dd6a87d23676a7188c2ff9bc9fdc941f24dd5f62a27e17b33ac4ccd3451c190b1727
TLSH
T138D023C70573C8571670ABC73474519E90274D4D8C81DCE4D90870423974603C023D34
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 241B
SHA256 a7d13470e5a43017f3b30357881a646048bc73ab31e360766aeefd27845ebb57
MD5 06555e1952551bb718f4cbd1d177b636
SHA1 a8b1ae4221ede29f4cb5a48ca0ba5c7a85c9f2ec
SHA512 96ed5c445199a482b0f9307490389d045a124bb3c3ef27001fc703490f59fec28f0d62c084b375a699fa50d15a23668da3a2f6b0078180d31b19dc7822bac681
TLSH
T1F6D0A7C3196280071B345ED83474E3AD915BAE8C8CD2DCB8AA4872143175917C032929
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 5c49c20293d39b0f1687171cdb1d97de22d04f30930c3e62d9230c44af78fb9e
MD5 c0d3c90cf723893df8789d3b31a04d8d
SHA1 7bdf34abd9152134fce75d5de76dbb696c6529d3
SHA512 768169c47762d77c6053aef03f315387bbbed7699b4b3b11e28c4853aa2a63e2b7e07bcaf9a532cbef891fa66c6d0f1a09f768a4e84e5b1b63955ab3feb126a8
TLSH
T101C09BD30912D5574970EAC934B4676DA11B458C88D1DCF4B508640534759138413935
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 238B
SHA256 14da595b58b6652dc93459e99b34e2290b73a4f4ebc82d827aa4ccc873f03500
MD5 feb1d404d09ccabc96a39666e8faf07a
SHA1 87346dee6ff7158ce264587c1f2bfe3ecb28fdde
SHA512 74b424086165ed7161de420d3abc3d56fca7d4d86f5b114ef0a32fa7c5fdc24f0d38249d53677afa3aaa40ecd96e5e6f24cd69aef66061b0e663745496bcf067
TLSH
T131D0A7C35E6240031B346FDC34B4F3BD915B558C8C92DCB9EA5852142171917C032D29
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5b1f3c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5b1f3c.TMP
Size 137B
SHA256 9c3e8323324f270ce95d4042cb261fa63da24ccf757e3458892ffd5cdb4be176
MD5 7146d491ad126adf7e49fc86c2f57f72
SHA1 94cfb1fcdf49f646588cebaef8f5ff3ffc6aeb1d
SHA512 c9bca0501db15da03b020417cfa44749c1a377754a7a93391ed6dd14a0e0a6e9006431847fbb1538fbca36ea390a71e083e77dffc1bbc23606425ed591879af5
TLSH
T114C09BD3492185474B3065C574B4679EE16B4C9C8CC1DCF4B50975053075913C512935
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 ee20fc018bd1ded808af0626f36874f947aeeb9a42e5472593f3dadc16f34b9d
MD5 edadbce88edb773520e51d578075a30d
SHA1 b69b08a9dee70c55b075bc36ddf4bbd42c57f2b6
SHA512 adba952d95ffaa341341535c25b61789b8090797bd710319e5b7316347003d19614c316f79e680a111fa8bbf964b730e1abbf7f03c63aa9635b2981ace3eac9a
SSDEEP 96:F1mKDoMZRwcnDh1Jrf+kLXbXFXKXTSFXSXTkXFXKXTLxhXsX5i0XbXNXKXTtuZXr:F13hImDhzBL1ajsCjk1ajf8nL9ajm4Gx
TLSH
T151A15B6EB90A184EE4AD493ACD78571B5F6DCF0C27FE3767A9DF8A0405B0A5701086A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 336B
SHA256 be6d1a154849fa7064f3201db4ebae922bde76db8de849f16cea4b9943d5242a
MD5 62aa95e41b139c6a2afc997b3ba1896b
SHA1 fdf0c4459def4102af6dd5e4c41ea999c4b84a41
SHA512 94090ddc640da8b70db6f4336b5126426601c14ad3d6928fd66ec2a316361251fea6c60d2115e2b59c3c76dc65fca3abb546dcad7705b2ecce55206516af729a
TLSH
T1C5E02621EAC8D3BE51A9D00306B5A30DC6F8B80FF3DEBC462FE0EA4412C5E08B0D1641
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 168B
SHA256 df85005dfae87a3238a9ced35ea1e6c223de52d81fd712e7a80012aab35bc3e9
MD5 da6c6d2c4b331704690000bfe6091902
SHA1 542dce2ab0ebc019c5806cf2bf86ecec24b8f182
SHA512 5a24f8b6c0c0542b8c70df2a99a573fecce7e1cc75efd23315a684838c265c991ccc849dff884f721da3cbcd104dd5acec25f073ff2eec353f15ff33bb350f75
TLSH
T133C09B818555F151C41903F41955759CB15CDAA88A2E134551F429DF94371754159251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 9298be71e6eb78200168be97f420d289dcc4a831a87bac02c9f788c5da02c826
MD5 8b45c7fe88e9f340becbe047112ba73f
SHA1 e4bed7eddac2cea55e4f0c2be3dfe0cdcd38818b
SHA512 9993ed8132620a9d69b4c05f7f967b2329505990cb3b70e99ea18e555b687952618194f6e27ec128d2bcbaa6b05a11bb00b6950e7508d3ae73a979bc2a4c0e37
TLSH
T17DB0120080015115C04706F4224254AC71185F10AF0A1B0553F07A3ADC262A38014195
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58914e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58914e.TMP
Size 96B
SHA256 579aa0ceeeafb27033f41cd25ec02f27f75ced2ba7b3d2a6a84d4de8e0074437
MD5 3e4877b69f190229e3705f8caaf94d96
SHA1 17a7f0f1230cbc8edd6a10da48b308e997def15a
SHA512 1f65794bc1799a2741be9d1e8a71dafa21e1cb4c768257bb2a3076753a33dae0cbc77edecbf4ef98c50d8910aa0652ce077d9b7ed1c719988f570b264ff8476b
TLSH
T13AB02208C0022222C0020FF03AE0B0CC3020CF20C2032202C2E20A2EFE223300820230
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13426403621857098

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13426403621857098
Size 21KB
SHA256 bf80f39da68c8643f99fab21c28a3c9f2dbb2f365646072e638331945b611155
MD5 5bb72e16df3c14be71165e1325df13a8
SHA1 20cacd12ecdae22f3ff087fa51a4ce9c1428e131
SHA512 fb20ed9aefc71ec9ce6d4158d12ed433993869e766d9d687d8a947bc7f1c68cadba293e633d4968f19c0ba6839e47df9e2b5defc1d7cce9d6ba99b227b006349
SSDEEP 384:mFKYG/e2XA82HD824RR6c2QbRl222vo2cu6gGtbesfGt3e/atwe:Tte2XA82HD82436c2QFl222vo2clgGt2
TLSH
T1C8A25A666EF4053EE6BE8674C4F601B17F31B60255E4CE0F409092250DA3B45AF79FEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 be613ad53cd10b63339f5ecebde18de535fae42c0608c7eeceb30e75925c8ab5
MD5 9be4dc49f738d23d0be6828bde334b22
SHA1 dbbd11f7e495d04af3a388fdca1780d285e38d7a
SHA512 28b4bcd43290b1062925bb8eb3ca8802f29639dd5c8f313531ea884c2745091e3e86002bd056bca21dcdf46e050d0282eed9329ff15d828c377d2ee889381409
TLSH
T18EB012003B55F06AC8874E3006CC4BC463A5F042468148535824DB339E113DD3C451D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 348B
SHA256 308e1eaa7b009c5f26ecf0a0ae7ef00a3f8d7d1a7588a416a88651d75be80a57
MD5 a25fdee9233a6a6efab7bb4bded9faf4
SHA1 d813c9d73f0803ec1cfe21664760d1cb67ea6245
SHA512 12898f4427fa052766c8b0401710e243c1ec1f042a18ac4660427a2d30f87066cdd4c023e4f77f0bb01508308132bb76161cce93cc28b2022c94185670b6a5f2
TLSH
T1B2E02034AFCDC76F51A950575271F30DC5F17804F7EF9C651F14F5446285968B1C1640
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 7048d00c7c841ac1808fafa99c86d11c90617b248d39059f820f6bfc72236dae
MD5 00007d37ce5b2ec22a759873b7411b8a
SHA1 a0cdd1ca9afce85eaca6c69e823dd6393cc6ab75
SHA512 afa669676a8230f3a215d3a32447dc58e53521188929be0d0fbb2012662fcf0a9bf526a8f76c2a06eabb951c3d3c0a42744f67a4c722803d09be74dcd1550157
TLSH
T1A6E02671BAC8C37E40A0D08342F0F31EC6F07C1AB3EFB98A470460846180A14A1F0280
MD5 SHA1 SHA512 TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 4abe89eb78ff5c7294602272ae0d43f37576efa15bdf4abb864cd7d254a8e67b
MD5 dbd9111d6bcd3342a2d31a8f8f26eb4a
SHA1 04fed6689ce4ad80f15950e6072abf1410e1bdcd
SHA512 dc1142854d9b722d78294fdd8e9b182940ab98a887a1e2102e2a9653d4c3a683ca74e90907f1b508697827aa6bf6fb6abfe816e76af839dd80d44028ca55e7c6
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4N+XvXI:7ZT0nzXggvf4
TLSH
T1C7034F8F562840F3D0F2C13EEDD245D2FC7C5608A7233AD819E907694DAC03790146AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 7b5b565d361459e65c781fa8d426f183b0595fbe482bf720e9b2ebd416e77acf
MD5 f00456f47523d236196bff2e0ed9aae0
SHA1 23f59aeae8bfbfc8ac191d1cb25a2d0290a47836
SHA512 44c084d5aa6d5117e04115e86d95058a1c81787e20774973c7ca3847528970876bb49e8cf7b920a35d7d689a08d7d3f46ad39d97057008a1497cbc34dcc416c5
SSDEEP 6:/mqVkDdvNyt+Bcc/XKuqHKu42nJmUkICc/mLEJOgLEJLtsu:OqVkZvS+BXXwX4UkQmLULItB
TLSH
T16B02484F6454444ED865013DC5AE55966F358DA43B62291D39D9490C5CFD12780047D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 338B
SHA256 956b0f419ddedebbb46442941ce8aef8f01500b3ce5880d74d3f6d207e732dfe
MD5 fab78071cc7a394c8ad81542bd43af2d
SHA1 0340886b8997c6bb64c46676c49df6682f36923a
SHA512 8d0c835310100f04f2dbd61f25857f95a7f6bbc9355a3b7aea410796ee3084aa40abf9527cebb6fc1456bf39954e0f54c56d11fa350859e031a7d1106b1cc15d
TLSH
T102E020D4FEC4C6DFB124401311A5A74E86FC3C4CFBF91D451F04D84C6285148B2C5341
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 164KB
SHA256 c6a0416eb5e765d3217645b09fcb6c65176035d21912aad55e5509bed3610c36
MD5 956c885de7b96a70068d71abebc48b4b
SHA1 fb7ed6573358c4a115b2c2262ba64cc15a2cbd2c
SHA512 30cc1e7e3e0f086a8db2cb2c7f34c29c9cf91c6058930f86644fb85953aab22cd253ffab681037c6ed36ebf589092044bd84b65241e755e87a070871ee827ce1
SSDEEP 3072:5Jl5lw8VElI2Kkk8psuEzqa2qOZheOiIP8BMXJkSqAvdX6vAn+yOfB6:55lcfKkk8psLiqC6IPHXi0X6vK+1A
TLSH
T1D9F31272B05B8FD713F58204726B1B1E8CFC98D39590D99AD5F23F81525E8C5810FEAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 fe1b9ca2ba324409d955bc7c5074adad7ac5c85f1e635ed1edb8eeda00597dc7
MD5 1f1e764e24cdfc14ec52545f0687d47c
SHA1 c905ebaae7a9065ee919ac4fe3c388fbba2b3d16
SHA512 a50c1e21f4f46ec79dfd00a125eebd66885add755ea64b30eae81095fa5f0fb0d7ecac8f0afdcdd2b59e73d510b1ff29c31fb463d3672256fe797c4b37f5bf03
SSDEEP 3072:szWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAIToV:iWDfxA3OnjrYQ9EU0/hEV
TLSH
T153C302A15C36BD660DF8EE98B44D3A60BFF4AD9A91835DC361ED2F0C24FA5C81139970
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 65299f5d6ba31287b67f7046b9a3b1597bc8adb91283abd410f979ca4f171d9b
MD5 a6fe8be94f1bf6ea4a9d91acef9eea34
SHA1 4f1b093f6e6e1a572259d55a60ee1f0c96e0d728
SHA512 8055443a90b5565a8c7d66304888fef244023d08f9408f1b288a29ddbf6c991e8343a276d2cf3c1b2bd5d7b103141ed2c50d570d6b407e6e5d390a912e0a854c
SSDEEP 6144:upsLiqC6IPHXi0X6vK+12WDfxA3OnjrYQ9EU0/hEh:upsNC6cHy0IFfDfxjjs+Cu
TLSH
T1B83412916C3ABEE605F8EA54704E2B1D9EFC8C9290D2DCD7A1F62F4810EB9C5402ED75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 8d27ee92014770bdb026c52d282d1cff6375dfcc886c8f082856c4e35b0a4062
MD5 0f01596714057671f9ba7a507b59f63e
SHA1 679250c83e03d43f0e1f03d138cf64f9a288ceb7
SHA512 79c9a26bd0ebe4c0a5b4ad4087b82ff91c232a64210c774a1305bd42701fd48672db6d7d355586f9ff1d4f6a40345c2b5e7fa270677c12a21bf34c481638dea0
SSDEEP 3072:EGpsuEzqa2qOZheOiIP8BMXJkSqAvdX6vAn+yOfB6:xpsLiqC6IPHXi0X6vK+1A
TLSH
T128C31296B46A8FE712D4D214716F1B0F8CFC8493A0E0D99BE5F77F410247996810FDAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 125KB
SHA256 63c5fa6ec3c7755ef63e0f5e57551a12bc8dd0705c5b53cee5bea7971ef57474
MD5 fa51f7da8f37eababc0b2cfb761b4f82
SHA1 aab656db8d5755e807bb64645b4c806d7704bc66
SHA512 81ef71eb24d032f91ca732b5d8963cf19676d48d9ba456b778553ad3363fcc600e8f1bbdd09b06eed1dccef8be51a30524c119746539d4955714ea0df60f5c4a
SSDEEP 3072:YpsuEzqa2qOZheOiIP8BMXJkSqAvdX6vAn+yOfB6:YpsLiqC6IPHXi0X6vK+1A
TLSH
T16AC312B6B46B8FD711E4D204726F1B0F8CFC8493A0E4D95AE9F67F41024B895821FD6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 28e030d5868865547bc1633f360484412e86f82f67fc9ef6ee219bd93c9f0d47
MD5 a102f6c2e80e7994c99009f2767a75bc
SHA1 f7913dfd14aa818126d5223dbdf3275a4afb5fb9
SHA512 8df39fbe29e7867b6e971d57e2bdd5fa66f665c2ae5c2df4d141ee07f2e834d5bb388b81bfedf8648672f865b96550fa9e1d74a5cd7ad69d001f76fedacd9433
SSDEEP 3072:LGpsuEzqa2qOZheOiIP8BMXJkSqAvdX6vAn+yOfB6:ypsLiqC6IPHXi0X6vK+1A
TLSH
T172C31296B46A8FE712D4D214B16F1B0F8CFC8493A0E0D99BE5F77F410247996810FDAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 c72a8636db6648fb7bb41d410d9cf4e9916aa3e5c0ba245cbdc7f418d486d05b
MD5 48b8b64e3e97066b4ef469735593cd4e
SHA1 e1108bf064ca3c68fafbe7ef7f80a77917f7d6eb
SHA512 7087eba7093eacecac187364686b68689ae183ad35988400d8d5ca44163c71b9de2eb5a8142b1d4d77924adcb6164e2f08ab921ff0bfbb7e5b969b296d53a33a
SSDEEP 6144:ppsLiqC6IPHXi0X6vK+12WDfxA3OnjrYQ9EU0/hEh:ppsNC6cHy0IFfDfxjjs+Cu
TLSH
T10A3412916C3ABEE605F8EA54704E2B1D9EFC8C9290D2DCD7A1F62F4810EB9C5402ED75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 cb668bd32687547e9260f0ca60390674dd76b8586397fd3f39fa26e1650523c1
MD5 af5654aac2c03647af182cb8bab0e014
SHA1 258962ab88b2044462c47d6be220430eae65bd17
SHA512 0cdde66c939aa635352ffca2ed76d675c39678428d35a93a923683101b31727b3e8966b420eae9b56f8286938b17353fa791751fbd3dd1867971e9977733bc49
SSDEEP 6144:xpsLiqC6IPHXi0X6vK+12WDfxA3OnjrYQ9EU0/hEh:xpsNC6cHy0IFfDfxjjs+Cu
TLSH
T1D93412916C3ABEE605F8EA54704E2B1D9EFC8C9290D2DCC7A1F62F4810EB9C5402ED75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 12e87f86a3f1a67cbfab7b8247b8ebed31283a9f0f42a8092b979ed9be1bcc9a
MD5 40ec41f3f7667204369aef0b25f2495a
SHA1 01aa3d140e76dea545b11c076cfdb474185de936
SHA512 ffe7546ce8b667ea6c4d37f2e5f5e966a37ff203da6967a8b7c9a42fc3cee94058e14f102c6267625ea876673c02c66e501dd5a24d86507cba36c6c0981001c2
SSDEEP 48:TkkhCU2QB2zbBxxSKy7pmbhMwhEcOZTZwo:QUcfwglMwhxsTZH
TLSH
T10823DD8F1A2821DDD589483EFED34C527C7D1F448E1FF8D550E089BA4CD119A682E5BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 896ead17aaae26e234d3f0e50272720b81b8cb1930c705b0aaeec92c9d80810a
MD5 3aa04b80edf5cc379a682b71fccdb7ec
SHA1 24bceaaff512fc7e09d966b8efffd88da037fbb8
SHA512 544d4fa9dec604de507d1f38afca55a172502e003322bf13b3d2a0ad642d4e63d11499e18130672833585cb69aaee06301c7e123c9bb5e04beb001c7f1bae76d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7M:fwUQC5VwBIiElEd2K57P7M
TLSH
T115B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2e4c78c9d4b6915833ca44ba5f9b735c9d9e0bf49d6aa045c47aaaa63f1f9359
MD5 f7389aaad82eb86ca1896ff3c7af7a86
SHA1 a7833bad037b8c94d375310ccb5bf39c3f9df83c
SHA512 cdfd274480229d612566789a9d9cdf47643a9543e303957436e5121c790936878b1b7eb452100170489121bede724239183c48208033a8c70d6070e93b3f1226
TLSH
T1E5D080B23D4DB010D75B51F1F903D741121A85752853AB33E694C54C5DB5CD813C71D3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a4b35a6422c1c682176591bd42ebef96b0cb78607f98b3c5ee2c0e2d44e526da
MD5 63b4ddb137c55bd42461aacc1eb4cf83
SHA1 e41f99c448526208c80f1acecf1939a8e3f06728
SHA512 88b7f5970c19ff8d8362281bde3b29f3c7b018ff88c03d8ce082f66572704c79543ea528e6962172f18f1cdde2d1aaad0aca218b732ba8a673b844844d3ae585
TLSH
T125D080B23D4DB010D75B51F1F903D741121A857528536B33E694C54C5DB5CD813C71D3
MD5 SHA1 SHA512 TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 24KB
SHA256 2beefe7293101d64840c308506967e9e2a0b2a6c4500ccbb7871c1342f2894eb
MD5 dfcada20b4cda38d23f6fec8d0260763
SHA1 373ce141ff860592bfc61220e4b5c82480533d19
SHA512 d8b43808a8ad313a54f2418a2d74dcff9f02648519a7637d580e47fea6fa60e8a57c95e3f00643a33accd6479bf0fdba3a858818e38058775b9aa238761536b6
SSDEEP 384:3xbeyInNsrD5LZCzRFwiSmWR4a7tjVwlgtX/UC7duixIaILK7fjzUmcdq7+RCRHr:lRokgcvP7C7m3SBSIjsDkLYd9dL
TLSH
T1A3B2C6985582703CBA3B852167D8AB4C7234DC06DE3228EDF77B662E0FC67D642B3158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 38KB
SHA256 ee11fe732ad5cdd818ca4f82802658b72b435ddafd277862c5ff5e8c7792fc5b
MD5 c64471b4dbf32d24e99720769aa56ec0
SHA1 5980f3fc4223d8267c10aa9aeb52ec471dc5638a
SHA512 b6ea0c14f07fe4d75bf2b923e2185137a67a0a5e7c16a82e568f3570511e5d5911c3194f235c7002b3d8a88b33e493be2af609a243d9559041542be62470ebae
SSDEEP 768:JDR+wPn/YVmMX2czoWhAhyAAZ+evDxcKzv4NZ7gNiI6ZFTm:XPUmMXfbyyAm7xcyQNZ7gf3
TLSH
T1FA03F134AE53235DF9175AB444B75AA1628BE50305E9803F2DA28BE93063FF526C4EDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 45237f131f521b4f2e0afdb4635ae6d90bf170b616f62f813124b6e72b223614
MD5 ccdde504f01dcbec1c9d9a0677c9f311
SHA1 a4caba54eda8e9ad253338b49bfee10bb1f4e724
SHA512 84f2890cc36f4aa021fd9ec2c100099ee1667b70a07ec86d9190b9c9536da9b8e06773b5b6f744ac4c65488259c3494fa679ec0f3974f65a66fe4a98d1def567
SSDEEP 96:u/SqwmOz7kkbTsfF7fHrOQMZRdNu17zvuWgp9VUrLJu1sutB1fyuGNhPGW7Vvnxm:u/SnmOz71bTsfxfLO1BNu17LuWgedu13
TLSH
T1A5C19626A641E160E317D1FAE3F80113F7F8FE479D3BDF55816828F617893A10476495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe598b2f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598b2f.TMP
Size 3KB
SHA256 e7643cb8212b1a8d831ed7fe30a29ece8c295222be7c81b785d9952a0a841817
MD5 59c88f821481c4537d747fde583fb772
SHA1 9f5ef3b8af522d5d51972a3b813f1be277aef082
SHA512 d754067d38681827db927d19ed50f9480a1b96b0f5bdaafdcd3b0c53241d65d5d5c70c089afc6ed8aafb762bcefcf20ed3721847113b666a858cbfec2dd2c3c1
TLSH
T12A711A190A82D690F7265233E3FD1627F5FDBC9B59376FA1D2A424F86B1D72104B6084
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f1428948b988e24f8a40fa629f6adad1580ab7abbc41109a31c1be2487cd6e05
MD5 527f46ec719d5b664044fa52861ddc0b
SHA1 ef4cc9cc1d0ce077564cb6fd7412fcf639d9090c
SHA512 8a0186ccb2a01845b99d23417d0b34eae846aa4b447c9f95f02d40c3309e60318903472734cdf76b8fd23b82fb0c086b6789f1e2920f2d6aa1cc4998d8c9714a
TLSH
T1A2519AF3C7D9862EC81116F0AA683E2BDE1D094493283D4ED4E49F5F93E1471A281A6D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5729a303597c414adcc982d73466fd402c3ef44afe0b2c6fd7870acb60c14a77
MD5 7a11d4e2de106c2414c44cb1aa884e97
SHA1 2698a9dea550460c6ce6e76c6b453d0a91095e74
SHA512 2ff7d28a5b6e4a41a0da11b8561d8796770020803131a1c56955d50bdb254f580b16728cb395fb9fb9c6a27587a954d3f21a0fd1056994b0257ecdee3f197af3
TLSH
T1C851ABF3C7D8862EC91116F0AA683E2BDE1D094493283D4ED5E4DF5F93E2471A281A5D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 53f6d3851b551a0d9859222f7f33fb925756c1c4a44bb907e14bdc0e4a4dee4e
MD5 1799bc197fca69cc6d70aebc9adf35eb
SHA1 7bbdda3794c285d544a84f25f1c79d9c385cccc9
SHA512 810f439c3beb8e9c14c063caf77592f1f060a696b5abf51fd78c57bfa9909a45ca0d4e4df135af4b4b224f116d36b0281b6ed6e1f78fff8b0a8fc12c752fdcd3
TLSH
T1F8518CF3C6D8C22EC81116F0AA687E2BDE1D094493283D4ED5E49F5F93E14719281A9D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 c5090fc6328339db49b38d20159abec638cf819a766ce327780647a9840fc708
MD5 1c4df676f1957cd91de2791b3fe5c4b5
SHA1 9e6fa7c8ea878abcb849b58745ba8001539d7366
SHA512 ae4dec09300b753a547fb7fa90dec773c3f7b8f1968dfc41a6ea3dd5650cc5ca8a1a47d56bb6c857c67499438a1198efe74c3197247f2a6a81f44468845c0b58
TLSH
T155D022231201F0B9E56E3EC1917AAC8FD32700204A13DEEC11E0A8EC293986D551F681
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 469f59a97bf9fac1ec58545e82d609b615ea595d4394fbaeeae3c5c4186c3bc2
MD5 8862ad0bbe96f46e03ef456215c6934a
SHA1 283e0e85969ec121982d9d6c26d1e60bbb829fa7
SHA512 fc370c9f9cbf72cefe4a873ee6904ed7ad04ec6e1503a76db30ec492e9d8385928290644b89bc6a5bc15f26f1a3b22df509f63d4455c98af97925ccf7cf6986d
TLSH
T115D022632201F0B9E56C7ED680BAACCFD32600214943DEE818E0A8AC1A3E46D151F645
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58fa49.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58fa49.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d3606b6c81451e9c78111398ed2023af0895636f893078dd126d9eb7927e22d7
MD5 026888b19327f33e856e8c8f7d24b280
SHA1 528157cf12a8e3b884558f81cba13ba20cad91d1
SHA512 68c5f1d6d2b977bd14b418f7e5edec55b0b920d54ec2225d21e55d2485bca3844b933be73c4ba9c1353b90d6167ab7a427cbe94be3c462f0684bdbf8679c44fe
SSDEEP 192:sxZ3R8yM/jK1Ml8MNe/f5s0scPEy4zjGdp8en/W6+WNi8F/Y05jMdgrfOIg4J:sxZ3O1e/f5s0scJ4zKF/bT/5M9c
TLSH
T100521B126B746977CCDBD209F9157F53D6F51562E6800E84ADFCCA0C05E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 0f4df2dd1994996470874f72d9d03c12cd2f022ee7720a01edff99c5e26a10c1
MD5 5faf52e1aa8a857939ddf5831db1fb66
SHA1 b1a3a6252a8225a59125fb6ea5871b702574a312
SHA512 c544087ea3fc3dbbadedd29bf5f01aa10eafa19a44bf144c65b592778b521118af449060b7dc3f838444df19810aad7439a24240d4a55617b3eaec0e10238b40
SSDEEP 384:sxZ32qWe/f5s6shJ4zKN/bT/5oYM074+L:svZWe/f/shJ4+/br5o273
TLSH
T19082F952AA24D977CCDBD509B9317F13D6F514639A410E8C6AFCCA1C01EAAFD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 b3bd2aa259a869e0299aeeeb1f77b6b17a0add4d5510ca6440302a01bda988db
MD5 e5439b35dc0640886d79a0d3ec568c91
SHA1 e25337c7a26889074b0a58ed1d20214dda0c863d
SHA512 486a19eb49d7cebc20bae966a8614843d7f4a5b240e90cf2712080db29a84ae90d1910e47b10b5546c6d6f3e221c41a093a955ba696e4899037ab2fe8757a450
SSDEEP 384:sxZ32qne/f5s6shJ4zKN/bT/5Mfm074+L:svZne/f/shJ4+/br5Mb73
TLSH
T12F72F952AA24D977CCDBD508B9317F13D6F514639A410E8C6AFCCA1C01EAAFD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 0255dbf9ce2e61cb2216c6a68cb13bf362d783c2d61b030456661bee9e40b33a
MD5 889f270b690a29503d39cbd813115907
SHA1 afa2beb3b70f42bb58d0d78eacbaab949243f3df
SHA512 6848fded7780c7c13e57665d6553767674863d71705318bcd7d55c105efee7ad081adb09f4bc827b9452373348945ce5ddfbdd2072d4605c5b5410b91c103701
SSDEEP 192:sxZ3R8yM/jK1Ml8MNe/f5s6scPEy4zjGdp8en/W6+WNi8F/Y05jMdgrfOIg5ID6g:sxZ321e/f5s6scJ4zKF/bT/5M9mCm4+L
TLSH
T1C072D852AA24D977CCDBD608B935BF13C6F514629A410E8C5AFCC91C05EAAFD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 74b679e6c772763100d8592a4a56a61e6e2562568c418d6b0cfd76392a8ec69d
MD5 bed0de00db31463afbfa6e406a0fa3b5
SHA1 734e04a22d924a2384db6be760531a70ce3eb1c0
SHA512 d0787120f4d7461c39c07b1d76bf95f0fcd81f457cf87909f706b99196942816167ed66bbc7ce228fc8705990fcedd6dc37b3f7d9e2a97bf04e6c52e2dd5a090
SSDEEP 768:0/zXl8pZ2Sw7pLuL7J1WRmsYQL08F1+UoAYDCx9Tuqh0VfUC9xbog/OV3gO1/Llv:0/zXl8pZ2S8E7J1WRmsYQL0u1jaKgO1V
TLSH
T12E031C7B284CCB7E4F844E9CEC267F9A6EE8018B5698899447FA480C03C66EF55174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 26edde08d38d810384ebbd72f9df9f0deae9e4694a4feacaa26d3f55657f7adf
MD5 f8df335887153bdc1184e24803e4adf6
SHA1 9142a6ffc9a303bb4dc994aaf3c31cd5237f40fe
SHA512 7838ee0ff00114cd29f7904a4c0badd53fa98b5ec4bb515d2e9a1c2b6eaf848afaf459039b4efb9c43e99f9f95cc25cf217640f7f18c855f48127013fb8132bd
SSDEEP 96:K9560KDqySywKbieUvqOsSiVpGVoLmVKzkLcVX0sNGiuB:zPvzUvqOsSiLGVCm4kLcd0sNGiuB
TLSH
T1CD91614576BA12113C3E290C87D29A6B568275B37019E83B3BE900F11E66E52CEFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd8d5fa1-c56b-4556-b698-45dbd5712db0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bd8d5fa1-c56b-4556-b698-45dbd5712db0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 cc4ccfb96f853db514280c941320e70544a4435889aa8809c05e73240c17307b
MD5 9fb24a362eb85df143a79130bdd3d130
SHA1 1361f95fd1f2499e176dadb55d4bea89149f48e1
SHA512 3960d8af5f71c9ef1460b877a61c7fed55bf6d58855d4e8f78f7e1781a77490c76f3f52e4fd78e4dc544ba2ad27caed19c0e2eb37cae63f9b3b17ef76bbdbe9f
SSDEEP 384:nJurQXjZxh6VV8Ngf2SxEXAvljEK/k1E3t6TdFxOOeBWvHz:Jur0h6/+Rsn/Uut6JzOjYfz
TLSH
T10C928D39ACF89C3A8AA7A455F5473A1B5FB410AB99C42F98D9DD5B0C01C67DC230FD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 176e310a5df01a9571110dccb899a9d2da88139fe1a1d8c41fb32fb032911951
MD5 e7c14083f01b66a9036e0c5416c09066
SHA1 360702600180113358ef8febddf2319ac4fb2a69
SHA512 959293aa4ec94dc9a784a526e5bf24449220e3b9896ef8e4d52de39772683dec969212f421ea639f8e9af4977d15c6c41539f74503f82916ce7ce025c234d5be
SSDEEP 384:n3iF1urQXjZxh6Vo8Ng8TUNTUlIlu2SxEXAvDjEjDfQc/k1EtZ6TdFxOOeBWvHz:yF1ur0h6y5wgfRq5c/UqZ6JzOjYfz
TLSH
T18FD2D6F598E7893AD9AE4783A73E7D469EBCC05374885994BBC91D0CCC821BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 6d88c1917316b837a578f1aea599083ffe01c524252b28bdcbe57794400c6216
MD5 237020377aac3bc493153f8cfd60e060
SHA1 7366499389e8f816a57e13a6d066a947cab14cf4
SHA512 d63d15ebb3b5e96c9b6051e7ad5de92b6e5e8c8b2880445d55817d9054637907991182003c55c1712a155de48566ca824405c233b0dbeee2f43b72b7e55043f8
SSDEEP 384:n+urQXjZxh6VV8Ngu2SxEXAvljEK/k1E3t6TdFxOOeBWvHz:+ur0h6/NRsn/Uut6JzOjYfz
TLSH
T1E0928D35ACF89C3A8AA7A455F5473A1B5FB410AB99C42F98D9DD5B0C01C67DC230FD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 13f133cbbf5aa0846e0c29f2306d630dee0aa9f0b93625f216426773d39b8454
MD5 3257b34d38baeec5eb646ddb131a5114
SHA1 30b6aa6978a8217dff6c77210f1e6c5b73e38ceb
SHA512 35d6f90001da4c52a9e34bcf3896e7312b3c8b0a7dacbf95c994b5ffbca23ab3a9d5244b75d2547883bf3ac7620a97ec2552a466c16a8989e90017b92c2cf94a
SSDEEP 192:MGNB6fNPQmiUyFqS5EL/GPTj1E0YYV3ZIrqGxU6:MGNB61RBYEL/k1EqL6U6
TLSH
T109121934A8FCAC2E8EE7A455F487375B5E652167EDC96F84D5E82B0C04C66DC270A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ab99a9a71ffc4d146c0828eab2f85940e63fd7a06c431f7a4a9e782b791c704b
MD5 f34f71311243616a00743d471642d62d
SHA1 0291d6f77a7ac6524cafe92ca7724ce9c974ab39
SHA512 85e160587fb2eb68b52e4d1a60b723fe973ff5b48697e7740c080658bab34b04f5f65c1ac902e1fcb8bf70a1125cc582654c45a64f6b6d55a8f09f1a03d6bdad
SSDEEP 192:7GNe6fNNQmiUyNzH5PL/GPTj1UV7qySbU6:7GNe61L6zZPL/k1UUBU6
TLSH
T1BF02F935ACB86C7F8EE2AD49F58777175FA5116BAA952F84CAE81B0C40C769C1307833
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
MD5 2012d4de563c653f56f62ccbf46db598
SHA1 fb24881003593f1ceb79019e52ce5ee9e94c889c
SHA512 c03d6584395c1c97c75af7dc6df57df358d3957035521bb6833c538679683aebe0410bb12586472b84dc98111e703984dd37868464fa9c66fdafb423e763b555
TLSH
T10CF00E829C3E25C086E90F7FE44725F840C46517B0883879088DE9D8813A40F11414BE
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 a5548ca519cf47ecb420c8f1299a8a50517fa463459a704ef2ff17c4db35117a
MD5 b2c40634bbfa57be0d4fad8adfbd6ccb
SHA1 6f8b9ba2f40d9aa42d217ed2bc6dbcdedd1763ad
SHA512 3cfbef4e4a4a7d8fa1530c69ea34fbc3b84627888361a9d201b21e6ead15f5d4e51fea8bc95edd07415b6d2d06a3c19beb1bcea3195e05a6d8af4939b95f77b5
TLSH
T1220110D29C7E26C2C5AA0FBFD08B26EC44C4A516F098747A1CCCF9D4823980E148243E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 98d9b184e4c7220b5aaf7ae412b0c1b3f32e3dc4933afcf852538b8082017b9e
MD5 c20138f2b92ee0645ce99eebc563daa6
SHA1 8e20392ea25dec3d3cef957c8ebbe1a0c589ea3b
SHA512 151098a27cb44d715d48210b12b95a9d1341beb7ca1de3096edc0434ba70c3d274e446604c7692d7a4d92af7b41872166747a30fd452fd0279407a6993fc02c0
TLSH
T15DF00CD28C3E21C2C5EA0F7ED04B2AF884D46507F0887439088DEAD4C17A80F118247E
MD5 SHA1 SHA512 TLSH

Submit Download

b24c0970-5991-4902-803b-d38a1315c296.tmp

Path C:\Users\Admin\AppData\Local\Temp\b24c0970-5991-4902-803b-d38a1315c296.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9946bc2-43ff-45f4-9179-034d08ae2e36.tmp

Path C:\Users\Admin\AppData\Local\Temp\c9946bc2-43ff-45f4-9179-034d08ae2e36.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5512_220933515\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c508c62b-4396-4223-8b45-3afb888d07b7.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5512_918348903\c508c62b-4396-4223-8b45-3afb888d07b7.tmp
Size 152KB
SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
MD5 d2e80cd29c43ea745d16284dc1f58ea6
SHA1 53fe0165f9f303b333be9284865c8a74f3553c0b
SHA512 375fd3e65b12f80b92a63c1cf6f0ace9fe878c1a0cb5179d869c99aad0cfde14715fd1499eab22a04f353e5f292c19d6a5aeccb43ec2ff5cd6878a5226b005ca
SSDEEP 3072:bHVqfst2F+fBXzSKmg3n0OIH1iCylcLMLgaK9enj59Ah8MuBX8Yk17CF:b1qkfBXG801idlcLMLgaOeV9A2XdBkda
TLSH
T1DBE3E13C3EDACD26C21B20F97F287587C54D8F17A10BA50BE14A84015A76B5E17E2DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\logo.png
Size 1KB
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
TLSH
T1CF312CF34748B7A7D30581351471819AD242FFD8F9CE291E35CD5307664018115C75CF
MD5 SHA1 SHA512 TLSH

Submit Download

NoEscape.exe-Download-main.zip.crdownload

Path C:\Users\Admin\Downloads\NoEscape.exe-Download-main.zip.crdownload
Size 13.5MB
SHA256 7b55dfab141eb69abbe47267e396fe8ee6bc4054fc8d4a5d91049b950c7d84aa
MD5 6da84fd648c8811cc112f4fffe20a24d
SHA1 ba4f8d7fb51ee0a31b068cca51d5e5388c4b081b
SHA512 0ba4c4379b77b465aa13af7ec295a9e7cc1421cff76e735890f46228af2f500202f879468322ad59b6d6ab06710828536ffcddee23093adf82498a365fee6bdb
SSDEEP 393216:8mpOKhF/fEB5KyYEvARy5DiydlufgDaDh5Z8sJzOvhz9R:8uB3f7koRseynegDU8sJzQR
TLSH
T195E6332FA32CCF19C94B5462CB56B10983847B3BF5594DF5CA0827197EA614AA3393CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ἷᷠ⊇ỞᏄమᮎⶮᄃ╗பᡟ࿢ᄥᑙⓄ῿ᒗ

Path C:\Users\Public\Desktop\Ἷᷠ⊇ỞᏄమᮎⶮᄃ╗பᡟ࿢ᄥᑙⓄ῿ᒗ
Size 666B
SHA256 8dbd06e9585c5a16181256c9951dbc65621df66ceb22c8e3d2304477178bee13
MD5 e49f0a8effa6380b4518a8064f6d240b
SHA1 ba62ffe370e186b7f980922067ac68613521bd51
SHA512 de6281a43a97702dd749a1b24f4c65bed49a2e2963cabeeb2a309031ab601f5ec488f48059c03ec3001363d085e8d2f0f046501edf19fafe7508d27e596117d4
TLSH
T11D010292F2C309682B19FE75C76CCFBD4B5A12A58AB7D19F0D84034344C0611599D76E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1563156632\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_159335932\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1707732156\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1942715339\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_1963284253\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5512_932096481\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

memory/5072-2562-0x0000000000400000-0x00000000005CC000-memory.dmp

Download

memory/5072-2929-0x0000000000400000-0x00000000005CC000-memory.dmp

Download

Resubmissions

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads