hxxp://google[.]com

Analysis

user interaction
yes
max time kernel
539s
max time network
535s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/06/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260622-thmp5aev4t

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1620	msedge.exe
4080	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266178576443143"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{5048FB25-16E0-418B-8313-6A4F4CC84085}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
4132	chrome.exe
4132	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
4636	msedge.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4636 wrote to memory of 4836	4636	msedge.exe	86
PID 4636 wrote to memory of 1620	4636	msedge.exe	87
PID 4636 wrote to memory of 1372	4636	msedge.exe	88
PID 4636 wrote to memory of 1372	4636	msedge.exe	88
PID 4636 wrote to memory of 1372	4636	msedge.exe	88
PID 4636 wrote to memory of 1216	4636	msedge.exe	90
PID 4636 wrote to memory of 1216	4636	msedge.exe	90
PID 4636 wrote to memory of 784	4636	msedge.exe	91
PID 4636 wrote to memory of 784	4636	msedge.exe	91
PID 4636 wrote to memory of 784	4636	msedge.exe	91
PID 4636 wrote to memory of 5048	4636	msedge.exe	92
PID 4636 wrote to memory of 5048	4636	msedge.exe	92
PID 4636 wrote to memory of 5048	4636	msedge.exe	92
PID 4636 wrote to memory of 2604	4636	msedge.exe	93
PID 4636 wrote to memory of 1648	4636	msedge.exe	94
PID 4636 wrote to memory of 2604	4636	msedge.exe	93
PID 4636 wrote to memory of 2604	4636	msedge.exe	93
PID 4636 wrote to memory of 1648	4636	msedge.exe	94
PID 4636 wrote to memory of 1648	4636	msedge.exe	94
PID 4636 wrote to memory of 3676	4636	msedge.exe	100
PID 4636 wrote to memory of 3676	4636	msedge.exe	100
PID 4636 wrote to memory of 3676	4636	msedge.exe	100
PID 4636 wrote to memory of 3208	4636	msedge.exe	102
PID 4636 wrote to memory of 2968	4636	msedge.exe	101
PID 4636 wrote to memory of 3208	4636	msedge.exe	102
PID 4636 wrote to memory of 2968	4636	msedge.exe	101
PID 4636 wrote to memory of 3184	4636	msedge.exe	104
PID 768 wrote to memory of 3780	768	chrome.exe	116
PID 768 wrote to memory of 2188	768	chrome.exe	117
PID 768 wrote to memory of 2188	768	chrome.exe	117
PID 768 wrote to memory of 4080	768	chrome.exe	118
PID 768 wrote to memory of 4496	768	chrome.exe	119
PID 768 wrote to memory of 4496	768	chrome.exe	119
PID 768 wrote to memory of 5024	768	chrome.exe	121
PID 768 wrote to memory of 1232	768	chrome.exe	122
PID 768 wrote to memory of 5024	768	chrome.exe	121
PID 768 wrote to memory of 1232	768	chrome.exe	122
PID 768 wrote to memory of 2328	768	chrome.exe	123
PID 768 wrote to memory of 2328	768	chrome.exe	123
PID 768 wrote to memory of 3236	768	chrome.exe	124
PID 768 wrote to memory of 3236	768	chrome.exe	124
PID 768 wrote to memory of 4848	768	chrome.exe	125
PID 768 wrote to memory of 4848	768	chrome.exe	125
PID 768 wrote to memory of 4572	768	chrome.exe	126
PID 768 wrote to memory of 4572	768	chrome.exe	126
PID 768 wrote to memory of 3088	768	chrome.exe	128
PID 768 wrote to memory of 1720	768	chrome.exe	132
PID 768 wrote to memory of 1720	768	chrome.exe	132
PID 768 wrote to memory of 2228	768	chrome.exe	136
PID 768 wrote to memory of 2228	768	chrome.exe	136
PID 768 wrote to memory of 3024	768	chrome.exe	137
PID 768 wrote to memory of 3024	768	chrome.exe	137
PID 768 wrote to memory of 4780	768	chrome.exe	138
PID 768 wrote to memory of 4780	768	chrome.exe	138
PID 768 wrote to memory of 4704	768	chrome.exe	139
PID 768 wrote to memory of 3088	768	chrome.exe	140
PID 768 wrote to memory of 3344	768	chrome.exe	141
PID 768 wrote to memory of 1316	768	chrome.exe	142
PID 768 wrote to memory of 1316	768	chrome.exe	142
PID 768 wrote to memory of 3540	768	chrome.exe	143
PID 768 wrote to memory of 3540	768	chrome.exe	143
PID 768 wrote to memory of 4808	768	chrome.exe	145
PID 768 wrote to memory of 4808	768	chrome.exe	145
PID 768 wrote to memory of 552	768	chrome.exe	146

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2e8,0x7ffebf02c188,0x7ffebf02c194,0x7ffebf02c1a0
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,11449298438645804064,9987429864482677823,524288 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1780,i,14732310171388530752,12231422631358831671,262144 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,9587983274901980364,2103156654031614208,524288 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,14449516267531018066,1453780762458659611,2097152 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,12830846594764060622,15709484400064734526,2097152 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,11350542461607335572,13926865201244953390,2097152 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,4478319787903583194,8040435041901074558,2097152 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3476,i,9264099869289701133,15402870448813889819,2097152 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,9076941269703823840,5867810847651450740,524288 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,13432691473850593406,9048428579117401082,524288 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,17518831493794592991,8833250963156238241,524288 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,17518831493794592991,8833250963156238241,524288 --field-trial-handle=2304,i,8289813049097159025,4516501326864062464,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:3184

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:836

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffebea3c728,0x7ffebea3c734,0x7ffebea3c740
  2⤵
  PID:3780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,422196076565473759,1585484394759341272,262144 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,295610765115703297,6076214116651167599,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1616 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,17011034234370866344,13682720566080362616,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,15417613447671494759,16720051466804827051,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,18417584484247062595,7871159626707215220,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,13765133974263821700,10814905153392100359,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4432 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,5731804191518997472,14700073580197962103,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4856,i,4249340992270063158,13282110454049352811,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4912 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5048,i,601302161503592309,3342522565469523802,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,5376845034636147505,14433190316608653193,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5848,i,16067837653512600710,424590236913360397,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3568,i,11132837626019150455,15993652773215611038,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3408 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3280,i,14688747484639413955,4440442945517163708,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5808,i,6443928005627082849,3255426194288783081,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3544,i,3413929667445648486,16563822139311885442,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3464,i,15444797154042927358,32687585769492698,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3568 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5872,i,8239738232745812990,3701484824102185059,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3528 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4540,i,9953410726459087472,9398355344387925185,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3308,i,2263611431260021680,16291351122896077772,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6016,i,9925442035956609895,7037465553075785418,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6020,i,10869211426343470487,13507925025469293838,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6020,i,7788870875124291797,12454515654091608852,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5224,i,10786683306295107798,5827790916429283582,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,17739567421482040871,17715446458640085971,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6104,i,1932496989502519284,1162905254045488598,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6388 /prefetch:2
  2⤵
  PID:4392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3508,i,369574673434940688,13876045294241247037,262144 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6300,i,5588241894017451400,9519706634649860413,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:64
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6628,i,10921133608840259165,672396172476890168,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4656,i,15697335326440516568,5969155503859997510,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6376,i,7520784017445223762,17205250811740488632,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6736,i,17340051121361217074,12153531796622293290,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6588,i,10058564608831109910,4436535758534168078,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6412,i,11566115781880468642,18295049194889577127,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6572 /prefetch:2
  2⤵
  PID:3524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6756,i,8547008946459907082,16090014418147337794,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6720,i,16147804666941081521,14224424140042945688,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6708 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6792,i,15076372726767824237,12544660860794393733,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6780,i,12327560933347494392,5205784707602789536,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6772 /prefetch:8
  2⤵
  PID:3592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5992,i,6627300246443624582,6394831062751938908,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6120,i,4467149264172411762,3285833453714466628,524288 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=6780,i,18441306493602186098,4684922826870692521,2097152 --field-trial-handle=1924,i,4233108743908456912,9238710792420049240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6428 /prefetch:2
  2⤵
  PID:1500

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1316

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 b0968b0106e5cfd203c5ecb67a3fc4952eca9e1d0d27874d8a8847d5127f31f6
MD5 21b78647f7b68c9d7d743b2baa0e0511
SHA1 aeba66ede1db79acce13d44e4f59b1cb3466df2c
SHA512 3d44eed1d8630564100238de4d6f533aef640ba04a42d5da08658ba703773da6e5710dfd56dd8e1bd6e5dbf959baba4bd5509aaba8fc8c2b4dea8c9b76a3ffbf
TLSH
T197E02BAACC21AC3709FD471860150B46E750135F2F91994F7A3D920CCFB0A3A52C6C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 768B
SHA256 f357384b3b16c0f179a0dd6dde1997a4546034a31347998f18f7b97ec71922d0
MD5 5462a8928443b60b109f640b2b17672e
SHA1 35b0467eea7f8191e1a97b33d2e1da25f0d428d9
SHA512 c0201a8b344886ca154f3c19b14cce8740c8a77f21b5e1def147a6d35e7824da3dcd9a9f9634483c2a85412c84b10319f558b4504130e30be1d8f0c53d3243c0
TLSH
T155014C58D4E051A3C357F676E1913C9047FF440C0091675243EB00B82A55A6A3717DDA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 f7f4e7adcdd2e4a2a6f3070deeda85779724a21e952e238d6c3c8fe6a4bdaeb7
MD5 4add04d0ac8583470ad9c1a4fb4d0e66
SHA1 c96b2e908094916cdd0dcc2a112710b105ff6ebc
SHA512 f646a2f58af7ee733ddbe9b92362b0341c5c237ffc82a313460f4fa36215f5ec67eb524dadee59a90c771676a43f5be5bfc33e850521fb6463999edadbd370f6
TLSH
T11D01286CD5E011B3C35BF676E1923C900BFE455C1091675642EB10BC2A95A6A3B17CDA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 61501f5ec6398649d9a88d55d2d8f74d2f81e968315362a991b7a5f8f3519d83
MD5 09251fb6bd229a27f0bf7a98e3ffdebd
SHA1 26bd33bd17a7df02e5ee164fb733f5ee7a5cf709
SHA512 979e5d0ad8c6a7bad6a2e329655dae660aba495e92a7083bbee4f80089bf4c7f52b6aff4ba0cfc717f7b6aa81571e3f07b8b11429900aad09b508f9aab41b339
TLSH
T1C821C094D4AD5163CB97F7B1E2C1384347FE044C03951B5246E7153C2695A6523E3CD7
MD5 SHA1 SHA512 TLSH

Submit Download

icon16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkjkpdjjonmobllfkdmdmlkabpomangm\1.0.0_0\assets\icon16.png
Size 234B
SHA256 d027e2d2dbd683f93ad4a12182221de731e7ade8f02d35e359115815185adbec
MD5 df7af034481a4a6928a16173cad4a90a
SHA1 864573b1852f8c5c10b380004bb19bc2ef8b05db
SHA512 d6de454a288b5caade46d3e9088fdac88ce085c3e4b4c38ac112a39b9c098d9c9256dbf51d3bece9c525b20fdccc75330a517603eb70d26cb3c05e87c1e155ae
TLSH
T1B3D097AAE0A6BCFCC8B04D2E1060701CFC22A2A40AA48979A50B85AA0DB923109E4881
MD5 SHA1 SHA512 TLSH

Submit Download

icon48.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkjkpdjjonmobllfkdmdmlkabpomangm\1.0.0_0\assets\icon48.png
Size 601B
SHA256 d05c796bfcff1931241d61594a3daf8b3d47b0b4ba746bdcac11ad175082b956
MD5 9e4b811d1d5432b878ba151d82ea9c2d
SHA1 495166b81bd6c1988ee8d6993e142fd5e5a5f684
SHA512 c33960d07b811105453b642bdbaa81d65307c759e0e03b0572200123b215d1744011079e24df7f5dc207cc5068dda915531fb868c1206f5504acaea50a3935af
TLSH
T159F0021E96133EA0A84B359134B445679E1799607163D8D2952A892C1D44BCEB134381
MD5 SHA1 SHA512 TLSH

Submit Download

worker.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkjkpdjjonmobllfkdmdmlkabpomangm\1.0.0_0\worker.js
Size 4KB
SHA256 95ec4b989b4543c9307fb9c017ae6cf176edca6e041533900a21942dcf3e4e5f
MD5 52b977119ca12310cb76df1d2ed12401
SHA1 752f9e335a6eaa53441cffe2d323e8a164db3d2f
SHA512 6bd74bf990a068cb9c6234e9565f6892e3e6e00509557b074e873ac0769cc16cd5a003f75c39cb08b91d44b3bf5bf180b0bc5153ba34922d55b9286a9151a377
SSDEEP 96:mQCjAGV+0HRgIdz7TBk0QAnTus1tFKhCq3CvNtirNyQXIF+6jmJm:3NWxbJBIMpQ4P6m
TLSH
T164A1ACAAE8E04C6F45A562B874AB55102038142F5D1D7D183FCD5BAC6F8CA7FD9B070E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

service-worker.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\background\service-worker.js
Size 3KB
SHA256 9b57276f26dcde9d3e6b2890cbb70b6752286b0497098268678cbf0c5c5e7bb0
MD5 d0a66e7b9cbad03c89207f3b2fc2f459
SHA1 6348b935b684f075f64c5d86d13d509d97bfdd13
SHA512 4dc1e54bdddc7cba2d283a95931e95f5e892bea1441184383aab6545d904378bef7b475467c173ec5f9e4fe48e97911cb5bbd7f23aac40b50df8476567af16c8
TLSH
T12371C99C14A1381D86B6FBB5F136811FBF1289311597A237B62C983D1F352640E24FF9
MD5 SHA1 SHA512 TLSH

Submit Download

ca.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\ca.svg
Size 305B
SHA256 471306f1a172323ae915f271f976b0b4c7a132eaa61b52cabaed1e74580f2f83
MD5 79d97d0cf8b1db3967d2923ca48aa615
SHA1 d57b173b8beda23820432d121160fb70a125d66a
SHA512 941306643684e4db2cc0bf5d642fc0d2f5f44a980f5831107b0f925561f48092ea83d8cbd5aebdef2234974d917ab361f93ddcc9c1d88feae21705b94824918a
TLSH
T1C8E026606208650CC6000724479851A41396708CA34A4018F8C43222C05A7EBFCF522D
MD5 SHA1 SHA512 TLSH

Submit Download

de.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\de.svg
Size 251B
SHA256 16cbf103974690c2c7ed8bd40cde0071ba4de4957c840ae2da69052557ed687a
MD5 5d2567b81bd1c937cb9d541fd86a3eab
SHA1 75132383a53cd8ea714dc162398853c29d0b5eb7
SHA512 832516b6a09d87be0ab1024407541d09e57bd2bf95cb051fda96ded12dc12f00b3cc09e0069e95fd0602d57a13eafb31677ce06caa1a4ad11dcc4d38bd995f83
TLSH
T16DD05EA0F188920EC700190E41187C992103E0C687790008FD883A33689E9A7BC392BE
MD5 SHA1 SHA512 TLSH

Submit Download

es.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\es.svg
Size 252B
SHA256 b3b217eadf5ceedf9f1023647443a2a2b9d7ef292caee10ec2b2091352eca939
MD5 2ef10758803c7bfc03bf67033d46cd4e
SHA1 f023b2d9d3ef9abe4124875598ef43f48fe3b6c9
SHA512 6d048f5cd82a5c518b2a3764f2039b47ad973e9e94285533d1e356ba282094d8c765564fdcad51c5c72035e1178db25f56f628fc67a58b3305aa92eb50d9b138
TLSH
T13CD05274F188A20ECB100D4E421878DA2003E0C283290008FE883A33640EAA7BC762AE
MD5 SHA1 SHA512 TLSH

Submit Download

fi.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\fi.svg
Size 257B
SHA256 c7e42fc48ec4f16e5b84fbac05c77e81b954fa856de9232198776b35d052b179
MD5 891def6c4f28fb3fedef09da92c7defc
SHA1 258c41e35d6bded66a7986405a6e662c1e6de6c9
SHA512 d0cd64eb8c2fb356bf8ec87bed91bb7e5ff2cd81e0836fb660d1eacc9a1dacbbfa1c934f942975b6dd672d08d6a28518aeaae0065beff6d9fca199eba4c1e183
TLSH
T148D05EA1F189210CCA409609825879E43113E0CA8779400DFD8C7A33644A98BAC751BD
MD5 SHA1 SHA512 TLSH

Submit Download

fr.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\fr.svg
Size 255B
SHA256 826a36bea92de9289379f4156e6f9187d716849962fa4adf14e1a1a00de87894
MD5 be7c409eff1f4c0df62a20a311439299
SHA1 a2687af19bb40d03a30394f43b67ae29b178f9c6
SHA512 266426760efe90f8aee6adc02b65ef1ca61b2eaf27cbf16e0005f232950d9e6a6e573f3b75c8e8f6330d5f0dc6d3249c7804918224ca519fe839ba354b3383e4
TLSH
T1EAD05E61E188E40CCF00590B861C28E62053F1C49B3D000CFA887F30A84EAEBBC7919D
MD5 SHA1 SHA512 TLSH

Submit Download

in.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\in.svg
Size 335B
SHA256 ad8abb55a89c2cd086351b7aec1b1d42f35823623516fccac145e26586c36654
MD5 85b4dd9dc31a80336da28bc42d89e1c9
SHA1 354a5a9d3095fd354dfed1df1456d5d99b51f5d1
SHA512 558c2be784ea9cd4445512ea881568673686a3539cd62a77456c6855212f5f179eee4f61464a84fd75ebc6f3c6a612dd26375b0c85e532173c4a95f40ba1fc31
TLSH
T173E08664F158A91DCB10450D522934A93113E0C6472D1158BD882937A89E5D7BD3A2EE
MD5 SHA1 SHA512 TLSH

Submit Download

nl.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\nl.svg
Size 251B
SHA256 4431c3f6eb90ed38d9b24ab29de279bbdb3705a5a4f10c04585e599c2439b6c3
MD5 b72cd88eb5a093bd1a7ec492cdbe2c1b
SHA1 9c5d43619ea69422030049cbd46ee171f8d58914
SHA512 5844e0477ed2dbb1076417e2576bd5799b6db9584f2490667361592a4f9f8fa757f9de43ebdae5c4156349148f0c52b9b92aa7d0aae68b78431715747e85ead0
TLSH
T1C3D0A761F188920DC700190E02183CD52103E0C687390008FD8C7A33688E9A7BC391BF
MD5 SHA1 SHA512 TLSH

Submit Download

tr.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\tr.svg
Size 371B
SHA256 1a12926d3f0ad719770662b1985fd0e75faebde4a3fedb2917160ebc6645cdce
MD5 06fbf45b3d53c0ba226bbaf3b61e8cdf
SHA1 4ef0361146ef8de74cdbe0fc68002a848ffd1ba7
SHA512 7d8b214e2f549f2a39a4c3e5e4d0ed13c635c03eec0de7c7fb500cf5972257a0472afbabec8099459943920efb434df033c479a42b6c6831b550ac44452f5235
TLSH
T1C2E0D854F05CAB1C8E51492C532A3466759BF0D4C334814CB9888E23E41B5EF64551EC
MD5 SHA1 SHA512 TLSH

Submit Download

us.svg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\flags\us.svg
Size 935B
SHA256 ffd969305852710e3b7619bafb1036cbe6184dc994e7f94c891d1f632cd7592f
MD5 4fba5fda1bff6648bfe3f3eb146f316c
SHA1 8f3a03b5554e9911d2a91cf65dbc76cc990abcd3
SHA512 8427ebfa407b3f29c5a13b362ff5051f2976e3a7312166a0d6a4c3389d6b16bc1f12d89d476b2e54528fe4728867a12ac465395692ecbaf4d89f4bcf54720869
TLSH
T1AB112E24A0FDB41DC750950D464B64983A17908B873E434CF548AFBF8E4E467FDA62BD
MD5 SHA1 SHA512 TLSH

Submit Download

icon128.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\icons\icon128.png
Size 26KB
SHA256 304a0aff49e1ab780ba462643847f9bcd9de3bd48a4ab22eaa371c457119dcd9
MD5 210585970820ff7660d4f7c950bd8a60
SHA1 d6c597ae215bde4b7545bba86ab786f9ef3c3538
SHA512 07de032444fdf96850ff76066836b003df598bd6a5c92bcb90b0677be6b1d0d4517cad93ba42c36102a669c28b83009e9123a1cf5e8bb2ee8ff47178dc2526a6
SSDEEP 768:bhHFCEJ34Jl5EtS2yTPdVKQarsSCZhoq2xSEdx5:3CEhyDeq4QSsSkhlKx5
TLSH
T1B9C2E05310836EABC3E6337209881FD17A18626AD799CD6824F8F21B6421FB13705EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\icons\icon16.png
Size 713B
SHA256 e283f048d183db2092121ebce447b0e382a1792ed34ec50573301657e6e20673
MD5 7a1beaa5c9e577995d0c0691bc6b8e75
SHA1 a85292ced8f68e7d7d08fc4a4602341784f4cee1
SHA512 b6354cf419787845497e41326669e68782236c3994ad5ee34f415dd72540adaeecd3d08bf149c4e5963bf1e9ff4f069fa94fefdaa213bbba53f59e0344f36daf
TLSH
T1750194F3DDE41D58D3ED231A25A188A9C43E065D4FED076515CCE82BB6B874045AC635
MD5 SHA1 SHA512 TLSH

Submit Download

icon48.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\icons\icon48.png
Size 4KB
SHA256 07ba514a4cf52badd467f06c2217ecb603b7d00b0f5c2636214d964845c6e0a0
MD5 afa224ecff7e1d85bf5e0a1a29a64016
SHA1 6103e1142d03637b393063f35ed05af7a6157ca0
SHA512 253757a39e570dfb88ce78bdb5e44f9507cf251bc76d065e683e47ed260eb29fe7f9075124b8aed0494bbb8968c1a4d295379637f16a2c9833237c47e2efb154
SSDEEP 96:wqbqwKh5Pls1IvS7NoteZgBn2JRa3C9RlWK1UDPkqOScg970cFJYs:PqxnPQQcNoKCF3aJ1UDcqOScUoeYs
TLSH
T14EA19F19C9300C7941DCC93EE45D48C139BF9670F5739142DE139C65696DFC44F86AB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\icons\logo.png
Size 99KB
SHA256 6ba5361b8ffb20e6e415b06fb948c8da8239fa2c81a849837091e871f76cd659
MD5 d8c9f99cfcd825f6dc25f94f8eeaeb26
SHA1 a5f816555adc344dbf6051b063355f4bd7bbb806
SHA512 0e73f0e10e10abeee2b90f2a9e67f6f019009a07230c4da0cdbc60fac0f6841b56a4651ae27de500e2331bb2630051bd650eece6f1fb51cd35a2763f84497051
SSDEEP 1536:XzfiSnFyDo8uSB6oOXMkyvIb9XSHN280k/K96QlrFrEuI4RHPZ0M:jfgXB6o+PyvIxSHNb0kEvxbRx0M
TLSH
T168A3128D0FBA4E81E0ED1AF0A9883F93AE65C4645FB01DD9A1F4D6FFA61017854433A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\land\index.html
Size 9KB
SHA256 b09301d19f71fcf65f6333a8231e7fa781c4d8b962e63e03f83aa125d0a8f51e
MD5 a9ed04265fd804d9e5a443e41d45e237
SHA1 324641781540d541f88d90b5c29791f791f5ff89
SHA512 ae0567052e4b40aa81a6b9636c588e4eba3cad0aa2d3cff55363f73807c40c093b3b71f5e21bd164638dacdc1f66f8184d78eec7af1c990e130380d20c6cd0e1
SSDEEP 96:dlXbKjl1WpWFeJZjAllRAX2YcbZkqX1cbru1D+Od27LXI9vAiqcv/amtU9TpABM:dlrKKpW8AlXAX2vxAi+DL494lXPD/
TLSH
T18612B721A29164AA703392B5DFD2C70DFAB95037D902537579DC21474FF7AA4827BF04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

photo.jpeg

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\land\photo.jpeg
Size 615KB
SHA256 4a2a99c688a9caf23c0fc709dc67b6c80cfb7ba864aa2969692ca80c2fb33f34
MD5 8a0d404a647437fddf10904e4332d3b3
SHA1 853dce1dfe42b19b1f54d74b8be4d3b6537843a1
SHA512 1d6c809f929f28f62bf6c71cce84f7ad31e03112dd1a2e23bb6704bfb6b1b8c908c73e5d36d277ced88089d99fee2e6c16ce6955182a9ee88425ab2b850b1732
SSDEEP 12288:mF3JiKpzlKSwx9QeuyYhCgSWTFWx7yWNW0YJimYJZkvWfPl:mxJxpRwl3gbtWNW0YI+M9
TLSH
T1B3D423BCEB32060BE53A86BC74E78491B69176C0C9DA341BFBE5CC7CBC50665429852F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

popup.css

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\popup.css
Size 7KB
SHA256 01be7f42c6dcfcbb79b8ad5680efd3f35b3ffdeccfd40d532ee69a97f2ac7390
MD5 4847fb985c14f82be886d6ea622c141c
SHA1 521286e0f7646cba7c97fe1c8a019177e3d15780
SHA512 0e7a5e7840b2fee0207eb322ce80061a1a2b548d1da4209ede7f43fe2ad3699c1d2cf28e655987d2d0c7a7c000065b9d23756e071609899ad04b66eac0850d76
SSDEEP 96:+QNrkIJndVKqyDDj2+zuY/+nUCbLpnl0+wI8HJjsI/da84JX1w:XkIpyDDq+kVbLpnl0VI8HJ4I/dkJX1w
TLSH
T125F17569A9050005F237DAFDBBD16B4B7A6E4513E6230278BBF22445A3C18BD8331F9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

popup.html

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\popup.html
Size 4KB
SHA256 cdd96e00a2058e0510ced3103e6e15d223bf46e0dcc571ba9972eea8fd4931c1
MD5 2784e55ce04a86fc44436e929b0ca3c9
SHA1 b40b83d3cc53a155ab208ed1c52630a1322c8f01
SHA512 600c255e65f43c78e5b1c702922ec9b61f6f6531f304587e13d92ffa3a9f8ea336135058970781c8c2a9ca68367e2216958d6c9ce978aefb86da559aeac0a80c
SSDEEP 48:tjpmEXFQfnTmbEX8Fc9edUNDkvSrEV+Mo2vTbvvExOCm55C3KCyCwCJGCLkCYp5D:9N1QLtMc9eTGcLbvsg155pxP/ekDD
TLSH
T15AA1CC3252D6943B0173C0D689D55B38BDE1126EE7660291B2FD277B0FBBD84BA2381D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

popup.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omhiplognfcppbkbamjgkeinomnchiol\1.0.0_0\popup.js
Size 4KB
SHA256 a81cf7068ad03b0e29aad46e2236eb41d1a823c66888e31736493265bab3f3ac
MD5 ec75878816e34570a7a184bb89cba8d0
SHA1 a8e057162f52494cbd7d3f49c648288bdda9045a
SHA512 42bd1f1992017051571af776f4faf0057825ec8bc64f660be6f3b5f264733e6c58da3c734264751b4b9110999f650c7d395bcde8524789218bca6b060e594882
SSDEEP 96:q4HhBLISLAXengmv6zR5QCIa6GSlpNv7OxieCjNVOStY3Cg5s:q4HXkKAungmyzgnrjDWCxVdtD
TLSH
T16D91869A10E6387B89B1FBBEC310A4157F1A48352603C37175A4CC6D2FB56A483B7EB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 22fae2b4df775079826e28459beb0fe882751faa3c99f0f0c6d2106160ecf845
MD5 dec8a6ac85bb4aabfc5a879cabe1cafd
SHA1 7607bab5c66a7ad94496d88fad8b2557cf60dcbf
SHA512 55db428fcfa415d4a594ba49ec5cf65ddc9e6876b6ae9b8616a1ad1d838345170991ae59b94c48cf51e0f83321630137d639ae85c0fc7c83ea4ac4017bb1325a
SSDEEP 192:D0O7aGlMgI50GYaaId3ivvnmEFLbwSwrkx/sgJR:D0O7aGlMgI50GYaaId3ivvnmEFLkSwr2
TLSH
T1EAF1A9FBC3D8852DC95156F4A715AF1FCE290A24432C3866C8D8BF5BA3E2471E21539E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 2ec1eb01c3196ecb3a754bee8852b024ee591a55903be86cbda6b45d63b8568d
MD5 89830fd550de2a7b810b33c09755ffcb
SHA1 c992c7199b69b58f73e3714eff4bc2e1d9bded80
SHA512 a247bebbe6e16d990ecd7d2857007e62a64db6b524b85db8f7941c51066eab01547a199ff3fcd38ff3728928317b2b36cd8466aac793db48ebb336957688c06a
SSDEEP 192:D0O7aGlMgI50GccEaB9ojobId7vvnmKLbwSwrkx/bxxw9ioBOJoEslEoKo1oaK:D0O7aGlMgI50GccEaB9ojobId7vvnmKB
TLSH
T15532BDFBC3D8C62DC94256F4A7156F1BCE290A24432C3C6AC8D8AF5B93E2471E21575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 c57afd2a745f5029f526eaae36fdee4109fc92c3441e468e594c1034e440a582
MD5 117037ec7826b7425ab9e9ba11071d55
SHA1 2e7239f4e5b745fd4c26404487dab17a4b1417ca
SHA512 102bf0988bf8c42d16313c2a84f981d321a0892d830c4bd169b2cff7ba85d2754e4573905487e1b9fce8ec16759b790fd046cd3fb6c6c7cd25fc9b0c2c338fda
SSDEEP 192:D0O7aGlMgI50GccwId7vvnmKLbwSwrkx/u3xIMw9ioBOD1efv:D0O7aGlMgI50GccwId7vvnmKLkSwrkxP
TLSH
T16812AAFBC3D8862D895156F4E715AF1FCE290A24432C3C66C8D8BF5B93E2471E21529E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 70976bf07d3cac632c3ccc2c91afda46c0952a44fc7d02470f1d988da76e348e
MD5 db0da74069de892c799d6bca955cd21f
SHA1 f85af9424a66efd4cb0438d89754bc8efaee9343
SHA512 97bf5472ff062fca5cec7d321f3b7822d2577d88d9d59f5bf84b037d194147a1d8bd4984c665655262fd9db7265ba434a718510af997780312719d340833d0f1
SSDEEP 192:D0O7aGlMgI50GccEaB9ojoneId7vvNKcwKw9ioCoEhEoKo1oakDD9wqc6jhi7ZtA:D0O7aGlMgI50GccEaB9ojoneId7vvNK1
TLSH
T1DB32BFFBC7D8C62DC94256F4A7156F1BCE290A24432C3C6AC8D8AF5B93E2471E21535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 dd1df359161483a0ac26d8880ca8b4ab2ce8ac968e04390b98555a4fccd374d1
MD5 7242a8ff7288ab88e44e1cf9934bfdf7
SHA1 f269d2b330e2ef9ba2fb3117d6cdf4242f323444
SHA512 2ba60ac05001c94a4edd848165fd18eeb1deecdfd79a6e77b39e0404720385c88b28d507d575931d1adc1e504fa48849992ae3a20f28ae80c6c3a7a4ce6889a4
SSDEEP 192:D8Oq59wtkU9lT81taB9ojonWokId7ENNKt2oEhEoKo1oiDPuKvjhn9LtTlyUaaFq:D8Oq59wtkU9lT81taB9ojonWokId7EN6
TLSH
T17622ACFBC3E9C22DC94156F49715AF1FCE290624432C3CA688D4AE5B93E2472E25535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6cf4f8764c5c181f505ef0a22d9e84347a79dee7537994c179590e4bba4714c0
MD5 7129d3b9740fb1e3c8e0ac3f306bff00
SHA1 b3dd0a0cf143425cb5350875bde5ad648212f236
SHA512 746c3a6ca77ae77eaeced5df51f969e17249658f7df737c1438532961e76263ca50c8a0ea38362b2f00b2532e20f6db5cf320d75b996fd54caae5525c1a101db
SSDEEP 192:iRJ0rYABIFZgwv7spAPRp22F9wHsb+WNNozo1fM0Zk0we8aasFVyIsnAUgtaJ:iRJ0r1ugsYUX/FKwN7a0+0/aY8
TLSH
T10E42F82EF915693B5CDBC219FA627B57D7F5102132C42E84EAFC892C25D79CC221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c19fcf5bf15f603e865a6fcbb2800539b51117cb0671750dee2379f92f2bb08f
MD5 2bc3d538974b5aa95efe03908f11abbc
SHA1 9e2fec5e4958951c6e6d2d76998d73b1bd397c43
SHA512 c5d25765c313a120c7c720751e3aff3de2517f786d7f1866d965aaa19ff3e09648563eebdba6d2658f5b8820bb2e652c6a2d8332989e5225eeed7181571dd7d6
SSDEEP 192:iRJ0rYwaXxFZgiv7spFPRpd2OFi149wHsb+WNtL1mobwtfM4qB2wk0we8aas98yN:iRJ0rl4guYjXA4Kwi7y/2J0/atvE
TLSH
T15962E72BF915293B5CD7D219F9227B57D7F5102122D42E84EAFCCA2C25E79CC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 94f5ea6c7f747a379ddca650a31f24e0c56e92f736d0e5d1469fa3ed5b0614c1
MD5 9df0c648b0d68ade12d6e5cf61a338e4
SHA1 e93ed60e65492a80fedc7b285239f8ebc7d50f87
SHA512 8b0de2fac94774d6169d25000f0d098caf759a3070ce8e0aba0e099cd6f3e1598c044c036e73ad9c68cef0b0450eea1c132584fff8303bf2271e188176451972
SSDEEP 192:iRJ0rYABIFZggv7spFPRpd2OFi149wHsb+WNtL1mobwtfM4yR2Qk0we8aas98yI6:iRJ0r1ug8YjXA4Kwi7yD2p0/ate
TLSH
T1C352D62BF915693B5CD7D219F9617B5BD7F4202122D42E84EAFC8A2C24D7ACC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 88cf1d56fa0450a17d96eacfdbb8a14b28883b5d984cab4216cd33b640f5088c
MD5 84d7d0fcbe3fe34788c69a1dacde46da
SHA1 c2f65b9776bac211031018323f1b88587eae7c87
SHA512 5367f221dfc09fdd854a46310082c4db61edc6f90085fbbbc5dbb6dfc122dcccadb061adfe3021c1635bd5b645b79daa0971dcdda9cab279c35185d80219a698
SSDEEP 192:iRJ0rYwaXxFZgQv7spFPRpd2OFi14/9wHsb+WNtL1mobwtfMsd7WqB2rk0we8aaW:iRJ0rl4gMYjXAWKwi7yu1240/atvE
TLSH
T1A862E72BF925197B5CD7D219F9227B1BD7F5102122D42E84EAFCCA2C24E79CC2213817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ddb2a84408111ae7539129507ead5f2a8e93cb7978f58c7b262f050fb6a18f5b
MD5 dce06a1b829fb6ec47bb685f047cb6a7
SHA1 c0235446db7cff89c0c6f302b88afde75f2a159f
SHA512 b6af3ddf2edee3743bb86033dc7f2ec9d6aee4b2e6d125d0a7960a0463ca180ce6747ed665bde732b3cde320b525501aff0159abfeff6c4236ecfbfe4820917d
SSDEEP 192:iRJ0rwTGFZgtlv7spFPRpd2OJiQ/9wHsb+WNtL1mobwtfMsd7Wgp86k0we8aas94:iRJ0rM0gtVYjXA8Kwi7yuj8T0/atvL
TLSH
T1E262D72BF925697B5CD7C219F9257B5BD7F5202122D02D84EAFC8E2C25D7ACC221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 05884fcb6ba3f1990d670e24f17c59fcaec8218d6e5519f4e039977abead3ca1
MD5 b4abfbcd86f18d27fc774f7d787cee7e
SHA1 993e38c0d40f8d921c059a23ab0905825c492b41
SHA512 2a43f8bf3fd4cd4d057acf9154ec5ba2c9a17c71484e8bfe92aecf7ac2cc4693e86125f7b152e5dc190551cf03a673e7ed7c88be614f1dd16a978e5bf6ab4793
SSDEEP 192:iRJ0rwwaXxFZgrv7spFPRpd2OJiQ/9wHsb+WNtL1mobwtfMsd7WE9ouk0we8aasJ:iRJ0rN4gTYjXA8Kwi7yu/oH0/atvE
TLSH
T10462C62BF915597B9CD7D219F9227B17D7F5202122D42E84EAFCCA2C24D79CC2213817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 143067325422c417f5d47683c50568caed671f238372b33800b7c09fec1670aa
MD5 e2167422ca146c88e37e57f8263e2705
SHA1 1f08273f0e73599289fca8757ac7b5ccecdc439f
SHA512 81bc38a7efd8160ce7725966f91859b61222c6555bfd8f422ddc4b2ffcb03db55b30fa14021155c8b601840adf5d4d62135c5d9867098b39ec40f51a20807d24
SSDEEP 192:iRJ0rwTGFZgrv7spFPRpd2OJiQ/9wHsb+WNtL1mobwtfMsd7Wgp86k0we8aas98w:iRJ0rM0gTYjXA8Kwi7yuj8T0/atvE
TLSH
T13C62D72BF925597B5CD7C219F9217B5BD7F5202122D02D84EAFC8E2C25D7ACC2203817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 53e2da8535837606e49143bcc0707f7a2c1c721c89169de779c0a821b5d0ad10
MD5 a8616b94f14f87a86444a4edcf295563
SHA1 ba82af093c20484c29efcf009993560ccb1c0913
SHA512 8d9a163dd06dbf88e5d148dc22f2bf097b1e8d003773e0d36b610ccc64475fa52611db5dde25254be4c857fa650eec35f18815e8a07e923f38bc702766186ba4
SSDEEP 192:iRJ0rYwaXxFZgGv7spFPRpd2OFi149wHsb+WNtL1mobwtfM4qB2wk0we8aas98yN:iRJ0rl4gyYjXA4Kwi7y/2J0/atvE
TLSH
T1EF62E82BF915293B5CD7D219FA227B57D7F5202122D42E84EAFCCA2C24E79CC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7a266bb4e283bef537088fc4b1bb8260dc70458ef82b8a49d58738b8059f8895
MD5 90d1315fedc63046e4f1bf33c5435485
SHA1 c42cecdec0bff0dc8b1ba2d1fcfbd340ded4cc74
SHA512 dbf231b12056f2a8516124525f4a5fc29e131fa687f239696859498f52c669e17498089fd45c32515bcaf679f14175bd39cf1d9aa6620ad325493de6de692d4a
SSDEEP 192:iRJ0rYwaXxFZgrv7spFPRpd2OJiQ/9wHsb+WNtL1mobwtfMsd7WE9ouk0we8aasJ:iRJ0rl4gTYjXA8Kwi7yu/oH0/atvE
TLSH
T16562C62BF915197B9CD7D219F9627B17D7F5202122D42E84EAFCCA2C24E79CC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f6b34f8866b791bf394f6983fa8c53ef3b99fd5030f544631ffce2c23edf1058
MD5 7cf3d82633fe381afbed0caa9047fa86
SHA1 accc74cd48502b3797ab11e7349b65cf75920fec
SHA512 f4fc77ba7d885af0605f57e7492452c57efa2b3812c92795727d9e9d4a9b1640671eda9d0b46808fa56074095e146075542c6030aebf3e25e4c6af66d859f087
SSDEEP 192:iRJ0rYABIFZg6v7spAPRp22OFi149wHsb+WNtL1mobwtfM0fk0we8aasv8yIsnAq:iRJ0r1ugWYUX/4Kwi7y0s0/aBe
TLSH
T1A252E62BF915693B5CD7D219FA227B57D7F5102122C42E84EAFCCA2C25D7ACC221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 daae3b7facf9f8d8f730b26a914118ea30f4f53726850c3832210525ecdc1cba
MD5 e7532056fee92814e065191a87c3743e
SHA1 9ea186519d8928f39f3c9c83d82fdb1437bebf4e
SHA512 c07fa9260383c6fb24ebe20c893be4e19b4548c71786ad9fd8887cf4a8e4e1e832ea8f5b71177418ddc32d0cd18d8de2796a72dcf24a69134d86f62a405a2c05
SSDEEP 192:iRJ0rYwaXxFZg8v7spFPRpd2OJiQ/9wHsb+WNtL1mobwtfMsd7WE9ouk0we8aasJ:iRJ0rl4goYjXA8Kwi7yu/oH0/atvE
TLSH
T16662C62BF915597B9CD7D219F9227B17D7F5202122D42E84EAFCCA2C24E79CC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 5c84349308822d06e2737e0de3f2c0a5a7c838ae34760f81b35248eb31636173
MD5 329ffbae40b1b3f771a127c8b1bfd3df
SHA1 123544fdc32fb0b79cd5da88d74c6c2c1b20ee85
SHA512 ea037e2599fb1a9a17ad0c921f44fb846cf957757c6f0b03f1aae9e51804ff1cf92057104b233beb085e42f51fe2608ee2b2e96bb014e35a3d5fb2b57bdd4111
SSDEEP 192:iRJ0rwwaXxFZgrv7spFPRpd2OJiQ/9wHsb+WNtL1mobwtfMsd7WE9ouk0we8aasJ:iRJ0rN4gTYjXA8Kwi7yu/oH0/atvE
TLSH
T16762C62BF915597B9CD7D219F9227B1BD7F5202122D42E84EAFCCA2C24E79CC2213817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 51bc5faedab4145a6412110cd977d0b7f077e93505a0345bf8c77aff60fbaaa9
MD5 d4cafb8c46ab90fd61f1c11f01dcb98d
SHA1 48239c3c81d28b6015639787165313a23aaf552d
SHA512 ca131c4a0d154de33e05d164438c82a31edf1f6edaae7eed0a1228a43f4547cf2707cef37d458922b4e1cd5c383cea6c8135f4195951f53fc3b6bb59c906d867
SSDEEP 192:iRJ0rYwaXxFZgov7spFPRpd2OFi14/9wHsb+WNtL1mobwtfMsd7WqB2rk0we8aaW:iRJ0rl4g0YjXAWKwi7yu1240/atvE
TLSH
T1B462E72BF925597B5CD7D219F9227B1BD7F5102122D42E84EAFCCA2C24E79CC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 7a0f1d05fdc15032c25cd4dca667e077e8b31dec07a00bc6271000ce5bacd1e3
MD5 e0ec24d5c10e5e9f87f2da72e3a2e58d
SHA1 a0588f7bdb2440363280527fe309363831c00fd3
SHA512 d7f484d1ad013e01d8b293a8d5da0af82c4d8b83735f4e646dc8fd4fece8c62708c75d36f6f26597a13090421e24105fd439ac1707cf76890de7b904acc9b208
TLSH
T188B0124080016201C4420AF4154A2488B11C9F10D60A170143E16A23D925950C038150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 3b654aafc22f2d1076ade4e220f3cb54d42d5e9374d0b1859b84ecc7c465cd0e
MD5 0a796ff7cb4cd2a98c05af978d45bde0
SHA1 74477856acb68411e495b9e91260d4948f8eb379
SHA512 d42de2f0a0328e4cb1c4fe9d70335d467786868f692e833fb80b650a8d5cedf7699c77d9c06a7ae16cc74d106acc0a35de105def57ab70bd51c2ad601bfa5482
TLSH
T15FB0124080026201C00602F812436498B218DF11960A170187E079228C261518218090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 b435704b4d7bbc9d06c1cae0ddad522b988c459e4ee8c51c212bf98733bc923d
MD5 7b8363801a03d191f11d3e073289d55b
SHA1 ce90f1fcfb562d5392c4eee95b2fec8be2086f4a
SHA512 aca67b8e618ac3ef67f7f4ec91630692d2ca3551fd6d13a819d51694d266c8400091043dd101d2dcffbcd1b0cf374b2882386dd8f32dd74cdbd2e2f309d72b65
TLSH
T1E8C01206D505B211C00A03B41143DCE9736D9F36EB5E2749D7F45A2ADC3662180271E1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 12a7393db33c90f5dd04b1aa43f87bb35416579ed54e41c0b225193dac2e5786
MD5 6c7fa858ed076ddd20901959039cf3e3
SHA1 2c53306eaa48b3afbc6fc363de3220cfe656d904
SHA512 8da3a59fa890e52d5d6f6de06b4914857c15970d890ff39d16404f014d702a643e9183e3d9184fee7139382893ff3262a17d5fb9d14788e76a2f5f86080701bc
TLSH
T193C09252C4019123C01202F4216AA488F228AA92960E230482F01D5BB8362258175151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bc17.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bc17.TMP
Size 96B
SHA256 aefc14cb000a5d7e3c6fb8b290de4212d20a4d40bd924985f3e0cf4e9d136ae2
MD5 2e1e0dd9ccf25e2c84634d79eac22166
SHA1 20d80c488137bf53041b0750600192c079f1bf83
SHA512 b01e4230c87541a3e3ee0264e6df60d92a93c49e767469773e2085cfd4238ad9328e863301b7a53a8c24fedd26a471d2260ab83d53d1897a9bb83e8f9f18b890
TLSH
T1E0B0228AE0022203C00303B02A80A0C83220CF20C203020B83E00A3ACC382208320020
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync App Settings\omhiplognfcppbkbamjgkeinomnchiol\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9b9ea3fd3f1f61aa27a4928428c9f075e7a104df157d9081974825717917c1d6
MD5 1b0549dd622bdf3d45f744306a280cce
SHA1 6b6de757001bb8eda14510048dfd2ac58d2789b6
SHA512 45afd5871b613b59c44b076a93df059e0343cc8723bd1922baf966e039359a4b69d212635cb649b3811a9c60d6aebf2956c68ceb358cff9eca01f02970eeef5b
SSDEEP 3072:YGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Tm7Rkm1tYpBeh2BAoK
TLSH
T17BC3123B5D65E87B9979B74EB08E0B1F1EF149A2D920DE92C8D86B0437E97CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 127082fa9a749e1f01bd96713ab00cd5f657020dd06d9233603c31b635adcf63
MD5 99586a0888ef99d847ab46f024880253
SHA1 c494487b752518a37b2d35903687f44c82c40059
SHA512 e83d01902cb4c436edcc1a726b082fa5c589622ca5a90098d36d101cd533b9053fe1491c23aec82c6757ecf6cf99e495bb7d242f1c8ba8714173e93d7d01ee15
SSDEEP 6144:kdEojpGqeGtHdupMZFKh5Pm7Rkm1tYpBeh2BAoH:OyqvHgpkFi5+9oBGcAoH
TLSH
T1053412378D3A2CB54AE5EF09754E191E1EF29FCADD29CCD789C6574463CE6884B08470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 502f1e8de01eb0e25d4c1c7f08e595b79c7bd107fdcc94410ddfe148a35bcbba
MD5 59ab90e45f6db224ca671dce5a6b17c4
SHA1 5a4a6b97e744376b427ea166e063071ec2e63aeb
SHA512 1d84a6989b2850c52e664fcdd0769aca52f798f37f20d642f5c156825d5f8b8542400cef305e6d8825a81e6ff4d9309eb981ed900783371b1d99cf9cccd52414
SSDEEP 6144:vdEojpGqeGtHdupMZFKh5Pm7Rkm1tYpBeh2BAoH:VyqvHgpkFi5+9oBGcAoH
TLSH
T1C63412378D3A2CB54AE5EF09754E191E1EF29FCADD29CCD789C6574463CE6884B08870
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 d59905f596208a20dc4cbbb7e392ab32eaf94e668946c06ee18e4ec6b862cdcb
MD5 bc64c699d54d3c7dde93465a7700a1ab
SHA1 bca54d72842f43e5988151c7fa5de39c7126f4d7
SHA512 e77091bfe79f46b91720185b4ba28fe704462b39e9d9c81debf41984d35eaaeeffd802735052d3460a1ab358980b30842509bbdf3395572af8b55e6d7e4987b6
SSDEEP 6144:NdEojpGqeGtHdupMZFKh5Pm7Rkm1tYpBeh2BAoH:XyqvHgpkFi5+9oBGcAoH
TLSH
T1763412378D3A2CB58AE5EF09754E191E1EF29FCADD29CCDB89C6174463CE6884B09470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 9603450eab0078b476f634c71bbd96167b1de3096fd7a1b263fe56296274b91b
MD5 e745e852ac41b09faa09f93bff53584b
SHA1 3a4344bef58bf99ef3d6a9d93b8155e713f30b0a
SHA512 e10b9aebe28fb81b33d9eb7b1af35d292ae3db079653355589803d0e5aa4b1e8ffa7e8a61efc6924d4c6ac2ff1d1df0356f41b09b8edf53a8b54eca1715d9c66
SSDEEP 6144:yEojpGqeGtHdupMZFKh5Pm7Rkm1tYpBeh2BAoH:yyqvHgpkFi5+9oBGcAoH
TLSH
T15E3423378D7A2CB54AE9EB09755E0E1F2AB39FCAED29CDD749C2474463C97884708470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 7486a883ab7d64080af3c80faaf4cba843bfbfc443007567904329bbe9f9bd90
MD5 dddd01afd6e3666b1c6d3d3a2bda94a1
SHA1 6b29155d116b1baa53dc3f2f2d20851d46cbcbbd
SHA512 030788a55c10d61ed7a31fa0182908177413ddb17d81c938e22610f65c9ab15a802048934594e112bda937058e6e0d4dc1ed96bd90ab49a9b58756179c2fc106
SSDEEP 6144:wEojpGqeGtHdupMZFKh5Pm7Rkm1tYpBeh2BAoH:wyqvHgpkFi5+9oBGcAoH
TLSH
T1083412378D7A2CB54AE9EB09755E0E1F2AB39FCAED29CDD749C2474463C96884708470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 aa015047b81b1b09aafa5ff52c3599f1dc964ac9b4cac35cf0c6ccf4a9961cc9
MD5 1e45d03d528df77dc67d522b51817eff
SHA1 44e43bae078c35b52491994d2506d5c9c4e2a1b0
SHA512 3d863e12a4794595b1a179efc55be7d5f3531b946993cb13151a3bae4efd5a3460737e48c61d38a7c30e5bd05f50a12a9422a1778761e72966c7d0923d67bea8
SSDEEP 6144:VdEojpGqeGtHdupMZFKh5Pm7Rkm1tYpBeh2BAoH:PyqvHgpkFi5+9oBGcAoH
TLSH
T1113412378D3A2CB58AE5EF09744E191E1EF29FCADD29CCDB89C6174463CE6884B09470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 81be910318cd28e61a4aaef2c29211d2ed01497892889cf1caf9eef0356366c9
MD5 f4827336baa6c80ab169364318c2ad5c
SHA1 7653efa2160691fd6c8f4fc491158a7df3371740
SHA512 56927642a5605dcad5084be4a4fe34ddb73d79a32ea468dc1ff10aade3c95db5f37907f9bef09e2b23a12827c55a897332dace1c16b9fd42ef16cc0fad9376cf
SSDEEP 6144:CdEojpGqeGtHdupMZFKh5Pm7Rkm1tYpBeh2BAoH:oyqvHgpkFi5+9oBGcAoH
TLSH
T13A3412378D3A2CB58AE5EF09744E191E1EF29FCADD29CCDB89C6174463CE6884B09470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 8a4dbc0a593a2547825dc294f07cab17da4df92b46c6b1d90e94f1b773ff52dd
MD5 eceea4f40661b4aa98090ffd5483eafa
SHA1 ce06197dd1749924b3b2111f2db0d3ab2b597fd1
SHA512 b8cb580b339621b6ea26c937712cd2d457ba8d0e627446d680bf58ea4971faff3ef687be64fb7bd1190181395c42129095e2cd296b75c72978a6c2963b9532d9
SSDEEP 6144:YdEojpGqeGtHdupMZFKh5Pm7Rkm1tYpBeh2BAoH:ayqvHgpkFi5+9oBGcAoH
TLSH
T1563412378D3A2CB58AE5EF09754E191E1EF29FCADD29CCDB89C6174463CE6884B09470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jkjkpdjjonmobllfkdmdmlkabpomangm_7052.crx

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Webstore Downloads\jkjkpdjjonmobllfkdmdmlkabpomangm_7052.crx
Size 21KB
SHA256 252eb5bbca2074c4c725f0e57efa2cc835d26d28f92729614272c4b2eae84b64
MD5 3f0bbead24ff91e4865adc473fdf2e6e
SHA1 c7ca010b322f21e4a68ca294eba6ea97e007380c
SHA512 5c9630efd9f51d277bb9ad0030ad356a0eeeac346a40539cebe60564f0b221572efbd6b2c466f38519bdf3c618365ec20a3137dbbbe160bfb35e4bcbda41f9d6
SSDEEP 384:xYeMazCYOSMOLtuDt7FXle2vQXgpSp2eovwU/JCekX4oTETSinnt6WWeq7Pkex3F:xYUdfmt5Xle2vQXgSpWwEzW4vTSkt6WC
TLSH
T19DA2D0FAB8958221E293E0B540A3FBDF3460D71DD61CA95B95E0093A17A1D2C0F07EF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 30e1096f806aee55cfa709223870c5b332971a3052b1201bab5246be5ce39fc2
MD5 0ac190db3b4a6b1aa1813034a94e2702
SHA1 667f68b8462af28dea5cdd7a7aef998c5b16d911
SHA512 fc9e95e4f9cce10679a8ca71d73978879fc8f25f032759edd58359d6432ed57923de135ad19ec15669e1aa3e69ac11a0a64e10a0c0907a96cfce7caf772403fe
TLSH
T116D02310342979C3D13B007E443047105808C227A373F3063111140DCD710C0F2C79C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 194bd131ab08abced324310f9f2b0f87451d79d51950742b414264e314b0bffa
MD5 0d997a2c1075e68a3ebfcfe19597b87d
SHA1 f25ae51fcd2226af4e3897fcdfb0a8505aa7317a
SHA512 c31c725f042039af4707d8d7776a439f99574ee51bb1099c824ecbd335765470b819b5b2653638e063bd202002d4a768987eaab26a106eb3707b0dbc53861e52
SSDEEP 48:wL/FwjdO2k2susYYe5U/T1klhvbJfYSWPN0g0dkqh0tbJHi73f+zycNkMN9oNF4S:guhbpFnI6zAkBO/XNS4iT2Tcn
TLSH
T12A81C63F004608B7D7910133C0F3338A7AB7AAEBF9236E161374BC7A6525385B88552C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe586193.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586193.TMP
Size 3KB
SHA256 0d6f2bbbe6194c7b4ad1eff18a01156f3b44a1179ff5ae2273a05ca904a2b01c
MD5 f87f4d7db5f33c95a42c2d9ecb45db8d
SHA1 950653877bfc5297209fa8a3bb265ca70bd7a513
SHA512 1018cfb8b74a4f8a729aee3b98b73b261a27de1077ae3c70ae6893e1527c034c0793134daf4614b0a09a4d9e10d21ebc80abcf9a3cfa1a3d474b5c8ab1e4d3f1
TLSH
T11981A63E110248B7D7921237C0F333867A73AAEBF9236E561374797BA525395B88912C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 47c79a1af0b4b4ca1431061dbbdc8d1e025591fcd585ecf64bdeadc34347952a
MD5 127d52428dd20166a71af8143157f517
SHA1 a9af4d9f27ae846b45877e94e626264425d2e93b
SHA512 8a49a27f7f6b7b7e822f3b7eb19e46a9998453a2a730076bc735fcc6e93c8f4470e3d7bbfb3eedb318088788e8d6c9080c8f73de201ca42ddda47f821b783f4b
TLSH
T1C0717ABBC7D9812D884156F4A7166F1FCE290A14432C3C6688D8FF5B93E2471D21565E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 26f5799b55fb14cc098481815f2e875ebe5e6de46722ce8aa7c803647880d35c
MD5 bdfb54dc77bc527498a742fdd0a0accc
SHA1 06e9a56e795363838f9cad27103cf7cbf660883f
SHA512 4f2e8fbc3abd95e2e81ed1b02613ac0413095871dbaa6b2579b3ae6876f2e643f25780602ccbc56a6d10c4867b66aac3dc5a343cc26996f4fda3b1f6113e8d22
SSDEEP 192:sxZbRAyM/jK1Ml8Mk1/f1XsWX8IdpqmqHW6+WNrw0/YIgHB+KIgrJ:sxZbCM1/ftsWXlAHbD/Cv9
TLSH
T15D52E8126B349977CCDBD209FA55BB53D6F44472A2940D48AAFCDA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8c4ffcc73fa121d67d689b1ccc0a7f77c469e961289e09dad4884cb8034d7446
MD5 92bc8f915b14efc40a3c8867f538fadb
SHA1 9bc497ffd04026268ba7f5adf5f0ae25516077af
SHA512 bc7f92f0f6475aafa16bd86fbca47fb129413642d718597154249d59f87137471d4d263385a0df17d60c449ab18fbbe2f422009aa63c8c1082c232a1bfab0909
SSDEEP 192:sxZbRAyM/jK1Ml8dk1/f1Xs62WpV8XuIdpqmqHW6+WNHLw0/YA6HaUrcIgFJ:sxZbCz1/ftsFWv8X/AHbD/QBMv
TLSH
T12E62E8126A34997BCCDBD21DFA55BF53D6F40462A6900E489AFCDA1C00E6BED2203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d068dabf4817f1ed49e3cf7bdad6e36a04c55e058cc1086680af5e96fb5f30fa
MD5 88100cf3638643ec8d727b632688d32a
SHA1 f5e077487b5a6ae8b4db3bf31fc00e9749644efb
SHA512 cd0967a872965b6c909c69d503c8e8bffd2d6214f0063062aa40542fa84e0059f3af1f102535aa6e01f1ee36f12133cb0fadca08e87591b463ed25a2f5970114
SSDEEP 768:ZpsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9iroL/P:ZpsqxXlWvJD6Tu1ja54LAs95LH
TLSH
T100D21B3B694CC77E4F840E5DEC2AAFD76ED801CB66988D5447FA880C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 e337af8e7108769cd3df43b7460c08bc97f6b08547471bdbb92f2dc0ea87e328
MD5 6d5284c03912bad4d79f8989deb94c73
SHA1 02ae4f6a856ba358886a7c3e546486ef8f1d5785
SHA512 7d22a6f59f0747819d93f0521c0b92712ecb12857d7ba0ce20c8c1e5b26c76864dee695454fa1511f0cd0059c9c326605a0a7d7198cec0019ebb5a1ff6affa5b
TLSH
T164A0025082C04825CA20357324DD09425349A811206C9B63A0BF4049CE6685DE11A402
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 250e5065b06fe9f0246b7f8fefea5b789e37aa69531f64b1a81409ae6b54d059
MD5 ef48ebee3011d4696034f14a24a5a307
SHA1 af07042717a2cc84d6a3e9f6c279ec2544f7b2c0
SHA512 f0a89edd918db029afd527b3911baca5778f31e250418c830b8019d6385622edd853c692a99fe746d7761674a0303d72047227543d5707819933f188f2601e4d
SSDEEP 96:KYbaKYIKCe0K3q6upKb6KMMWKCIK/KBbOx1jG:ExHfqZvKbOx1jG
TLSH
T1C1D19712713F0243397D6958A2AA89774E4275633418A4BF3FB854A14E77E125CFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 69554f9afc886a1c93b58486149e44b1d82c7d41fbea780cae596f2581c207cd
MD5 bb68f4946aa9c70fdcbd65465d5f76e1
SHA1 a1e6c1e13c0740a34bfcd6a431e50e3eda5f9265
SHA512 14f397417d1b4302613397b957788430c5d0f62e5cc63c765290db524de3d209a78fab120afb019e8f7c3faf2773bcdf48bba1a14332c8732eda7b3bbbb3bff0
SSDEEP 384:7tNn/s3n9SfsNhTF3jQ2bmwWuVRNDXOI+W9Zv8S82MbdbJ3mx9J:7j+9USVJH7OIL9+SixgvJ
TLSH
T13D928C32A9259C374EE2955AF54B360B4EB89077A6C52E44D0DDBF0D06DBAEC130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 c6700732fb785a6cbebfbb96626bcc874d817a29c649bd9a23616ada8b9d57dc
MD5 ac1d8ccedf0a2dba5a85068c49411a89
SHA1 e1db9366ee5abf2f71ef45c74dfe3722fe6f6bbb
SHA512 894ffa6565508f5d97c4dc1263b153ebc6ca87b34afe7df37ceabdfe982e44502c3c99800f98fcd92076b80d49c47e4047fd6680a318507ada7a12c55dd32573
SSDEEP 384:vtNn/s3n9SfsNhTF3jQ2bmHWuVRNDXOI+W9Zv8F4ASt4Z1ke5mkcJ82MbdbJ3mxP:vj+9USMJH7OIL9+tSje5UJixgvJ
TLSH
T1ECC27A71E8604CEB08A1E4C9718AF4072DB44137968E2A4CE2F8BE3D319F9FC5356D69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e776adf3acc4d2a1f260dcecf1d290eeabb2a78510029e444802150f670df41d
MD5 5f169442d45344740a1c88e1a3da313e
SHA1 4fb1192ae9b66b144e99217e56bf0cd8851bbc7a
SHA512 5ebf9e4bc8407a4a225283ddddd97f150fa32c2b6be3d191e767389302de11b8e9d7ae446287896ff4f4f4f62301c4c4fd944fb92e142af626eadf245179fe50
SSDEEP 192:tONR6JkRtQmiUy5WW+RNDXOmj+Oh3kRiU6:tONR6UrTW+RNDXOI+mpU6
TLSH
T15402D935AD381C7B9EF26D05B48B37175FA8203BBA856F80D6E81F1C01D769C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5003f9fb5e49503dcd9646cfb215a7e5ecf1f3adebf7e33dfbf30ac0195b1ffb
MD5 91b9bcb6f2cec935aa088bdcfa39b621
SHA1 602116c201740fcff54b693004502ddf2c323c2b
SHA512 36968701ccbfd8ea9509f633516a6f5405bc63b2ba782a894f91d1d60f61edc06f8b54d30640d2e81f6d4fbf4b22b2046cc9d47310fb20e6e815c86b88f94d60
SSDEEP 192:BON06JkRyQmiUy+WJ+RNDXOmj+P+9TFvoVcXrqOveLU6:BON06UuiJ+RNDXOI+W9Zv/SU6
TLSH
T17D120936AC285C775EE26855F48B35139EA55137FB896F90D1DC2F0C01EFA9C230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3c157204b077908969a30202614eb80548aa6a2614602d3c992ee146b895e33e
MD5 a828e328d3e74b81eab4a7d21c93e9cc
SHA1 27d93d26308485c8706e5aab346317c4dacaa128
SHA512 9bc3aa24eda13978ab4881b06a63079b921de257868c5161d2cd77e908a6dc7ef99bf725953ae7bbfb163557d7be9cfd147a4ddca245a04d249ca6a4e25e69dd
TLSH
T1F5411C5CA6F91158B3B77E5AABF7686D447F7C372E06D55D00110E4E0A23A40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download

icon128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir768_2010931255\CRX_INSTALL\icons\icon128.png
Size 29KB
SHA256 eba57c9cc4d5e8f764eae888eb75fd04970b673ec966597f2d3786c82f0d0a3b
MD5 8d33cef5a7008a4e657f0a87acfcc52c
SHA1 5c41dac68c4ffa5d5931e0d5c605829988ad32e6
SHA512 ede7bb29b06f452ada8a4c3f02fa29f44d78f905dfc565d9c641023735f45ddfea81d1c439ff9e6a1fd437fa5da7b8633794a38a9ff3e01b44d9b900a822abe9
SSDEEP 768:aCvna9qYvqCcZa8PCSr8xu7wet2gsAvy1tXi0HyHEsQ/LSbX:aCva1FEa/SIxueA61tXi0HGEsoSj
TLSH
T1ECD2E19286D3B783CA99483916552C6FF654F40D2C1E60AC9FF7F109E913A0B237B66C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

omhiplognfcppbkbamjgkeinomnchiol_26008.crx

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir768_2010931255\omhiplognfcppbkbamjgkeinomnchiol_26008.crx
Size 760KB
SHA256 d87ac519dd5d5d0911b0569dad585e082f9ae02a8d083c50036b067db0f6e162
MD5 75555c8231557b4bbbd690310d9daaa3
SHA1 1e380a69209740ff5ce8073a59363377a3860095
SHA512 ed57601a02f2daed8f36ac513ac58830e4ce37994d9a9a601c09b3c63530cf7c0c620bb017b0fdbf430779045b321f53c553f4b8373da34322a70c6d05c84cf7
SSDEEP 12288:LHxKjcNRuy73H/846Ll19QeP7lhqgUWpFuj9yWNYNjCeYjiFVaSvAfHKTP:LBueXiLGg9zWNYNjCeYGGSCqTP
TLSH
T12EF4236816375382E42FEAB35CD294A10664FFACDCFA246EF9C1DC9D3D1025583E9722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download