hxxp://filmeXXXgratis | Triage™

Analysis

user interaction
yes
max time kernel
1800s
max time network
1795s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 15:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://filmeXXXgratis
Sample260702-tfa9baet2m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

System Time Discovery

pid	Process
2536	msedge.exe
3280	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

System Information Discovery

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

System Information Discovery

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274815936348512"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{8E4B70F9-480F-479F-A80C-52D721EABBF1}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
3144	chrome.exe
3144	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 33 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe
Token: SeShutdownPrivilege	4892	chrome.exe
Token: SeCreatePagefilePrivilege	4892	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe
4892	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 2424	4908	msedge.exe	85
PID 4908 wrote to memory of 2536	4908	msedge.exe	86
PID 4908 wrote to memory of 1440	4908	msedge.exe	87
PID 4908 wrote to memory of 4268	4908	msedge.exe	88
PID 4908 wrote to memory of 1440	4908	msedge.exe	87
PID 4908 wrote to memory of 1440	4908	msedge.exe	87
PID 4908 wrote to memory of 4268	4908	msedge.exe	88
PID 4908 wrote to memory of 4408	4908	msedge.exe	89
PID 4908 wrote to memory of 4408	4908	msedge.exe	89
PID 4908 wrote to memory of 4408	4908	msedge.exe	89
PID 4908 wrote to memory of 4308	4908	msedge.exe	90
PID 4908 wrote to memory of 4308	4908	msedge.exe	90
PID 4908 wrote to memory of 4308	4908	msedge.exe	90
PID 4908 wrote to memory of 1604	4908	msedge.exe	92
PID 4908 wrote to memory of 3752	4908	msedge.exe	93
PID 4908 wrote to memory of 1604	4908	msedge.exe	92
PID 4908 wrote to memory of 1604	4908	msedge.exe	92
PID 4908 wrote to memory of 3752	4908	msedge.exe	93
PID 4908 wrote to memory of 3752	4908	msedge.exe	93
PID 4908 wrote to memory of 4136	4908	msedge.exe	97
PID 4908 wrote to memory of 4136	4908	msedge.exe	97
PID 4908 wrote to memory of 4136	4908	msedge.exe	97
PID 4908 wrote to memory of 3856	4908	msedge.exe	98
PID 4908 wrote to memory of 4596	4908	msedge.exe	99
PID 4908 wrote to memory of 3856	4908	msedge.exe	98
PID 4908 wrote to memory of 4596	4908	msedge.exe	99
PID 4908 wrote to memory of 4952	4908	msedge.exe	101
PID 4908 wrote to memory of 4324	4908	msedge.exe	102
PID 4908 wrote to memory of 4324	4908	msedge.exe	102
PID 4908 wrote to memory of 4324	4908	msedge.exe	102
PID 4908 wrote to memory of 1400	4908	msedge.exe	104
PID 4908 wrote to memory of 1400	4908	msedge.exe	104
PID 4908 wrote to memory of 1400	4908	msedge.exe	104
PID 4908 wrote to memory of 628	4908	msedge.exe	105
PID 4908 wrote to memory of 628	4908	msedge.exe	105
PID 4908 wrote to memory of 628	4908	msedge.exe	105
PID 4892 wrote to memory of 3220	4892	chrome.exe	115
PID 4892 wrote to memory of 4640	4892	chrome.exe	116
PID 4892 wrote to memory of 4640	4892	chrome.exe	116
PID 4892 wrote to memory of 3280	4892	chrome.exe	117
PID 4892 wrote to memory of 4716	4892	chrome.exe	118
PID 4892 wrote to memory of 4716	4892	chrome.exe	118
PID 4892 wrote to memory of 1848	4892	chrome.exe	120
PID 4892 wrote to memory of 1848	4892	chrome.exe	120
PID 4892 wrote to memory of 1528	4892	chrome.exe	121
PID 4892 wrote to memory of 1528	4892	chrome.exe	121
PID 4892 wrote to memory of 2724	4892	chrome.exe	122
PID 4892 wrote to memory of 2724	4892	chrome.exe	122
PID 4892 wrote to memory of 1928	4892	chrome.exe	123
PID 4892 wrote to memory of 1928	4892	chrome.exe	123
PID 4892 wrote to memory of 1440	4892	chrome.exe	124
PID 4892 wrote to memory of 1440	4892	chrome.exe	124
PID 4892 wrote to memory of 3576	4892	chrome.exe	125
PID 4892 wrote to memory of 3576	4892	chrome.exe	125
PID 4892 wrote to memory of 628	4892	chrome.exe	126
PID 4892 wrote to memory of 1224	4892	chrome.exe	129
PID 4892 wrote to memory of 1224	4892	chrome.exe	129
PID 4892 wrote to memory of 4340	4892	chrome.exe	131
PID 4892 wrote to memory of 4340	4892	chrome.exe	131
PID 4892 wrote to memory of 2436	4892	chrome.exe	132
PID 4892 wrote to memory of 2436	4892	chrome.exe	132
PID 4892 wrote to memory of 1620	4892	chrome.exe	133
PID 4892 wrote to memory of 3868	4892	chrome.exe	134
PID 4892 wrote to memory of 3096	4892	chrome.exe	135

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://filmeXXXgratis
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff85a47c188,0x7ff85a47c194,0x7ff85a47c1a0
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,11180037648336017113,5418103225077059193,524288 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,17928830087830014320,8453915150770835766,262144 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:2
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,12328421251489092970,14775410196817722379,524288 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,3665126550155019359,6384615011437144229,2097152 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,3184597279335205852,15536392450405129668,2097152 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,7274319303144057328,14159945731085923938,2097152 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,5164992399597305225,8487172745388638043,2097152 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5112,i,14346946671334263424,4420611715130712421,2097152 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,2338380723404726410,18243341221693849047,524288 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,14215391628172397172,14826773475452802035,524288 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11862533589339494871,10150306137964996835,524288 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11862533589339494871,10150306137964996835,524288 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6208,i,9894885641406250701,14031184400305567437,2097152 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6420,i,3686358958342466881,18054740145524747390,2097152 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5156,i,8198683208884811535,16376305774299385508,2097152 --field-trial-handle=2400,i,6381962868270001498,10765047938822201333,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:692

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff84d96c728,0x7ff84d96c734,0x7ff84d96c740
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,4018741017879918991,16185694520386016618,262144 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1984 /prefetch:2
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,4328544526195734468,4107260755689439885,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,12421438886160388676,5075105551159082576,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,8632681302143324229,16630227073440447963,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,9857924815884427967,7131638846178512460,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4364,i,3773260495086565484,1343922655039735538,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4384 /prefetch:2
  2⤵
  PID:2724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4648,i,6476705988866131289,15278776186193994493,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4872,i,8050980967083765496,5618424650772525375,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4916 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5064,i,3907338553348624341,17571155743644557161,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4940 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5564,i,3810802966755144640,14660218982807858085,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5804,i,12704877559133391743,5885666933106853987,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3316,i,7464846374448888447,2463076558258470627,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3368 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5904,i,6330261184224031604,17716545379158383767,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6000,i,5498985895811601751,14020288605518553217,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3944,i,14259613048863853270,3187077314079954556,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5952,i,13593012105373336652,9841106515630158435,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4412,i,8638305438196789224,15930438113045680550,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5956,i,18159262164194360094,3505409234214886754,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6136,i,10029517551376283953,926122639391378028,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6160,i,11664394965565325532,17405394677287079927,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6368,i,7263728120489392212,3851028518548289657,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4392,i,1302261329414706186,861589318563462418,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4408 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3308,i,3553953532619902446,3238596117879993828,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6720,i,10677594074187002152,18243508818034881322,262144 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6700 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6820,i,6533968886439624042,14123399005404018398,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6696,i,16157169594949254685,10704080279928363150,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7148,i,3771542215662179177,6809064936173939637,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=7364,i,8147001470534272790,13060632346796498879,524288 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6884 /prefetch:8
  2⤵
  PID:876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6896,i,1527622474192783878,13999216321827397525,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7480,i,9360071107942509809,3232616260209052432,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7648 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7576,i,9857741006771619657,3046437338580477041,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7788 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7308,i,45575452637416004,16505102431733894898,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7532,i,905939236869016627,14662202006861666452,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6140,i,9593045558051106956,15846577753744293349,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7616 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7592,i,764530448314313635,8544372005423190889,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8152 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7468,i,17395181322883539120,772633618358256540,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6808 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8160,i,7192834956076141181,18315407517419129249,2097152 --field-trial-handle=1988,i,15295990081921552092,11766542628984678550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8316 /prefetch:1
  2⤵
  PID:1956

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4204

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f098f571d1e40c9a736f17e37b09e9679c05485e628672e178af8e5aceabbbcd
MD5 4f4ebfb8b3d9f8e405b2831a6923698c
SHA1 edc37058933b2ace691769e77091cf07ca4a958c
SHA512 be8b02f9c405b1ab7d89d69c3ded1704903d5cbf327e2237f6933da92350c8ab50f2643ba3c63714aca12c54d56f44a956cf64fffcdc9ad93f1c720b407a2300
TLSH
T100E02B6ACC21AC270DFD8B1CA4580786E755135B2BD1650F763D5208CFB0A2745C6C6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 33KB
SHA256 8c6497725f7c132cc26ef734a7c31ae17db4ad6930caa99a6617f74ac75171a0
MD5 d1e4efbb70af2cfae086fafbc1dba755
SHA1 f139c86f666501990ea822e1929a9f119e85fbb2
SHA512 d6fd40188df7591c0bb25be9fa24d890899367a367a03a4d5f8da594f0b608768d46c835de0b67694340b3e8e278ea8b1969852a0b49e80e6f5f65f5b6f8b75a
SSDEEP 768:5tHd50dIPvTjHyYl7u+408uiCgPT74ILevKBXk/UrZl52NVRFYUflVkyKq0Y:D9GdIHfyY408uycILevK2sFeNVjxfDK0
TLSH
T11BF2F18D33BE22A75F345B53259FC59A23DC8BAACC3DD394C8C0897A5810BD5734C461
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 17KB
SHA256 a27a77eec20961409adc7d1e419cb8ce3d23daf514cbedda470d38b8552c4e3d
MD5 31903baeca541c5e56dab9d544682f79
SHA1 73da504c740aa7fce483b2666e8209fd88794c03
SHA512 4d25601842d2eb54f27f501f0cd64730e0de7d0a40567b3abfb17d288027fde238cf93c46375378d74f4303e0203610ef451a61fe1c5f6033ab59e1814af90a6
SSDEEP 384:A1Dub1LmnNSztLcLuNhyNbwCTg0rQrlzrRieTs4edmcoO:AZ9sxL9EwW8V9ieT1edp9
TLSH
T10482D083BF4940474EC1AEFD2E79175AF512C54A35B1AB6057BAF58448021FBB128DEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 159KB
SHA256 11d07c91861ab9c5df0d1e47c897aea89da8d6a9bce1787d6ef909e26cefc7f8
MD5 ac9bd44cfa2c659a2a2caa0e61a003c2
SHA1 b8d30702dcb684914dc47e4a3d33f9ba77324967
SHA512 1a8864dff8227bdfd8e58eab8a7f5a471c354499aeb41e797daa9769dd9ea2e54264b5e3886b2e5fb5ec7d9684ba7993a37d08fe1307b45367d0bca67cb7b14a
SSDEEP 3072:L4znvoWfkOBZDuekxhr+cl3cD0fdMxMETl0uWgs715lQ1UuUUTp76Reo:yJZyeJcSQfdzETTUe1UFUZceo
TLSH
T1DCF3127E440B428480EED9361C0B60BA5F8117A2F5165D9777FEB2C2AB6FB932DE8051
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90f8ebd98c3329d5_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\90f8ebd98c3329d5_0
Size 246B
SHA256 62b5810c16425ecf12bcb52e8a1995c3b42b63e5fc09744a851bad692a168613
MD5 8db7cab7a27eba1e9cf2341858752b94
SHA1 0846733dd04d72e27a49798db08aeaa8fca62f1e
SHA512 74806577f39ef26dec5e165b07154b0790caf2869bbfc71c7344550d2b790090617ae6eac81337c0084b878b68c81883daf83b2594da1f8b1817795c66ab2270
TLSH
T181D095D7C4044C0CCA45DC7CD7BE3619C73952CC057E8030952544560FD417467019FC
MD5 SHA1 SHA512 TLSH

Submit Download

bec157b77f3fe9c5_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bec157b77f3fe9c5_0
Size 102KB
SHA256 0d3d346fb8fdee713988b56496b9c991c9082fc071eef611102b4e319caf308c
MD5 7a91e0f66296d9afad9d06c0a1051946
SHA1 9974070568fe6d158d4dd9446fc3016b9dd4b8c6
SHA512 d5b1fc6a14b9ed823943e221c988e087ad04b0c2f5843fe592231e041c56b818bcb0f4dffe292cd2f471f7bef6f2f48261bfe40ace27ddd4a01125c7ab6fdf45
SSDEEP 1536:4onGjiR8uN92kS6CbbNhlk977Q49T9RuaTWVNwjIGfewKh:V8iXQ6abflMQKAp8w
TLSH
T131A3B5745FA09D75CB3697F441638C2B6A31C44C3EC3930BA2B8E635184E6E95FE5C8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbd1dbcc0ec69ebb_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\cbd1dbcc0ec69ebb_0
Size 65KB
SHA256 78eb1e5a648698d6508920bfec92d5cee0657668cd5bd309efed99ec429c67c6
MD5 1d2682690ccaf92d27b64728558cf7c7
SHA1 9e22d4fc5795ba568d3fa87bba2cdc908c26b931
SHA512 7dd49d70ee25915e89ce4d5a91cf11c3174804b0f919331ac98fa9a5bb191d7561fd65f8d5a125666e92884c8c46660a4e232a6503c3b2d0567ed2c022671bba
SSDEEP 1536:6EbEMdjFItgh2NkjCZL0Pe/7lOZEMATfSGWHkUL4/:6EbE66tA2GjCZLLjQbwonL4
TLSH
T1EF631A07AB50A9A5CE2603FB91A38B67733481883FC3C30B52E677B51C257F5AD4588B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed8f2aaa186013e0_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ed8f2aaa186013e0_0
Size 271B
SHA256 cf8c69bcf1b981b1016b4b341b9f37554a34646e0bab8930fb3fadb7c6be6a98
MD5 3678fb9f14aab0fdc8c998a0e0c20bb3
SHA1 c2bac069ca06e4151be94e125737341318de429e
SHA512 65abd19a30cf58ddf970920301de0679e34910721d65d806197689cc706a684ce9e9c813e5baf7d1d238a55dd8a2a8b3150044d64edad240f3a1550312d5ab38
TLSH
T163D02B734011A494DC22EEB6DA6AC595062441C8178D8083C089A0EF5BB04FA7B5A088
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 480B
SHA256 e1d844531e337470606531f6a2897f97a2ac3af6a375827c01e7c5f6a65d6c3f
MD5 19652cc74a4df5861caec4640d9f6ea5
SHA1 bfba41629f4e46ba7a48948b4d6bbd9f31961c7a
SHA512 4866f50f3da08e0715061d39141814ff1c9f5ba339197077d6ae3f8f08998b877d1456480268c7d1cd496c27120e6139b3586ab103c915b855f2d35461ca41f0
TLSH
T175F022F5A2C3C183EBE4563178A9AD3E204108909D12E768BE84A0A51D3AB2D240054C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 4df24d89f1dff94dfba7f7344f72681bdaafa6b6b20b6302816e123cff2e79e2
MD5 a0b59a4caa1f727195aa59129100b41c
SHA1 f1b9481739bd104b1d8c5eb497383fa7c7b7e77b
SHA512 d0d103dbec6e0bd04eef672fb77b5b5a167e09360eb1f04fbd5d8146621ffa5f8b18fc1d1f39775a90357bf0a21c515641da6a8d53ddfee1d3f1f66482b06c11
TLSH
T1DEF027F962C2C283FBE84672B8E96E3E616558A0DD16E7247A8464A81E3736D200190C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 875e5aae80ad98b064f6aa58e97868350a0d64cef35abe887be6f6f886a12bd3
MD5 6fc86b1bb652d3d9e0b1b021fa641287
SHA1 b302aa208cc09b7497746f1694968c68656028e1
SHA512 83ef879aa2601901108f75828e1803dbcf00ffbc8c95c0a3edc00d7955e3645ca5d6f53d4c31d542cef7e886b8c544db302a96e9b6a3c225fa2a2d7247cd44be
TLSH
T1B2F020F9B2E3C183EBE40671B8A86D7E655555E09D16EB28BE8060A84E7A73D240080D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 b757e8afbb1768fe28f7de139bae9d5ef61b3b0658464bdd6df35034736ffdfa
MD5 52745774832c7b6d4f491b452b8518ec
SHA1 ef4a31a4686c2238dae733807b89ea69fed3bd04
SHA512 5c2769f23bf3df0541fa010aa114df5c4c00ae2525c5dbf1eef626b71d8a6231c820cef221f9edeeb880d7c56f6015bddda96085db3bc7d989b94aca352628df
TLSH
T1B3F027F962D7C183EBE84771B8EC7D7E755054E09E16D768BE8060A81E3677D200194C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 058f51c688e968bcc3ad9dffa4ef7866cc8ff802f3f7d81984f7e9ddf56046b1
MD5 d454f64a0fd70f12c163182656f09863
SHA1 157502398c9aabb4662ab6fc0ea49e13678f23bc
SHA512 a75f9b424d9c0c814349b47ff8a89664278743c97e7a74da747c4794d91b4db338485914f676abca37a6d2b351a264f2d13052255cfbd2640f365f11aae3779c
TLSH
T1F7F027F962D3C183EBE84732B8AC6D7E661014E09E16D724BE8460A81E3A77D210594D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 309106316ee19e4ec73680b5162aca9c01ebed28cb8acfea454fe01681cb040b
MD5 0a6dd18020fcda6f478411802799f505
SHA1 a1c3f1e36a945a52d5ae3e823ddf7f14b98f6051
SHA512 12b4631069856756755f732a709905527f87e411405950b4b1c2901c35837b73b070f73f5d3c545ababed7f96bd905dbe388d6f32545da2cffe1e1dd218f4583
TLSH
T153F097F962C3C2C3EBE80231B8A92D3E211044A0AD12D724BA8464A80E3633D200090D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 ccd9e88a6ce6fd2a05dfbeedb1928f6babfb00d45f02281bac223197e8b5772b
MD5 65416e72d07cb5eebe752f392a924d34
SHA1 ff2faa4c000f12c5f86d9133f43600639e7af3d1
SHA512 561cf508ba3f44cbc3098aefd67161f685124772f8511eef5b22a45e354e1c7f6e9fcb3aec60a6eb9606a1934f7187959189e03c5d2ee342e6d1bda941ec3b62
TLSH
T1F0F027F972C3C2C3EBE94672B4AC6D7E791454A49E17DB287A8060A81E3737E240180D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 9c22958271a6fa8c4f4acb0cf9920c011c659826547b725388beda8496be8aa3
MD5 9fff78d6a190b151c33dc53aeae408f2
SHA1 7a54c3c54aa50391c409d212aa6282ec374960fb
SHA512 bb6a1a87bf0092db1c05fc6cbd03f9df95ebdf064d9a09f28549c86066d53974767e450dc440767d2fde19741966263cd4819a95cc9ac1760cefffb52f028ad6
TLSH
T196F027F9A2D6C283EBE84631B8AD6D7E615454E0AE16D7247A8064A85D3637D200194D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 f1bbef54bb4f726be42d53776d51efabeafd7e273bac43a7b45be1f7a4b9f959
MD5 efec0a883991faae1d4cec7f031d7db5
SHA1 66b28f454507f4b8558871800bfd42a81e069f23
SHA512 41e89f1ab510ede1da2399a726995e8ef7af5afcde95a18beaeb1205e5db89e9045878ba2fcfddc4fcd0b2abfb80fecf6a0e98582bfc9dc80b4e1bf15a756fca
SSDEEP 192:D0uBitxwnwyyTsaaeiEd8vMkZqxzNPbaPefPi7vN8jhn3b/Fl3spC7uZspb:D0uBitxwnwyyQaaeiEd8vMkZqxzNDa2x
TLSH
T17102B0F7C3E4C63D895196F4AB156F1FCF2A0928432C3D66C5D4AE1B93E2871E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 f9451f96e6fb3cddabe2c4adef7528381f25930adbc4fafb7a2789ce95dde75b
MD5 daa37c2ddab28a311403595f5e548a58
SHA1 a5404ab7ea991a94861bb7b66e5ebdf1fb866dea
SHA512 7a4e2f01fb939d7b44f6a7a91d5a0edbd680a18eb8aca54813f71f13d57ac19aeff560ad519976d7d81cc309210a51728462342ae60db58467e14465e2eed693
SSDEEP 192:D0uBitxwnQyyTsaaeiEd8vMkZqxzNPbaPefPi7vq8jhn3bv/FlkpC7uZGpb:D0uBitxwnQyyQaaeiEd8vMkZqxzNDa2i
TLSH
T1F702A0F7C3E4C63D895196F4AB156F1FCF2A0928432C3D66C5D4AE1B93E2871E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 23774d1ec495342ca2ac90cb9b88efe3a1411a1ab514be2b9fef77b798eb470f
MD5 fe0bb400f35a4e255aa553d6920ba83a
SHA1 08c0dd8b73892f27556bce6ec5d00926274d36a8
SHA512 6d03d557799d278ec75bf516bf669b570ed0d319b4fd68f1776e2151a4eed51a2a10d56edf564d670b8af23a5aca6cb42b8eed6b1ff4be1336c08ff925f97216
SSDEEP 192:DH6yKFCzfaaeiuW8vMpIzxzNPbaPefPs7vmZ/86q7XFl6:DH6yKFCzfaaeiuW8vMpIzxzNDa2f07+5
TLSH
T176F17FF7C3D8C53D895196F4AB266F1FCE2A0A18432C3D67C8D4AE5B93E2871D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 c883665c31209fbe9dff0e12c424161a7274097c77a325a5fc30fd1b23c67fec
MD5 02ebd67fdd5dea8fd513d913e58cdbb9
SHA1 7cfd54368263cd6f0813ca3bcd01f3a552d874fa
SHA512 c3dda8e472921245989b5b9aa682e939d33b552904c60ccfc0c2d94ad26d91e88c926ac500e6b727286c0fdaf4c100e08e81ad8d5025caad91d7696eb7cc2e05
SSDEEP 192:DH6yKFCz7aEsaaeiuW8vMpIzxzNPbaPefPs7vppAZyEpfjhG/FlcH/j7l:DH6yKFCz7aEsaaeiuW8vMpIzxzNDa2f9
TLSH
T158128FF7C3E8C63D895196F4AB266F1FCE2A0918432C3D56C8D4AE5F93E2871D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 1e7f5d7bd20fd08e3e2703bb1aa3f9154c3c853424e5c098ac04a9c1b04dd4df
MD5 c7bc6c472b80316ff555566851669ebc
SHA1 ee4eed51b472dde71932181706c0ba67302aea65
SHA512 72c31d30ca074befd28e43e376b7900650240dae1745cf8bd40c11bfb4509a8d7d6d7f586134cf671de6f3dbc46dc20382f5a6fd27b8895c2edb7ee8d9fd1d9c
SSDEEP 192:DH6yKFCz7aEwqaaeiuW8vMpIzxzNPbaPefPs7vN8jhs3K/FlTZlspR79hpb:DH6yKFCz7aEwqaaeiuW8vMpIzxzNDa2w
TLSH
T198128FF7C3E8C63D895196F4AB256F1FCE2A0918432C3D56C8D4AE5F93E2871D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 1cf0c9a09f33e23584b13247bdb7afd914562a7b849f98d8fdee319ff1288b46
MD5 ee1a73ebf23bcb53ac17b5a79d78fe29
SHA1 07123caefad13048b4d9b8359044cccc98c05212
SHA512 527509cb1ff1fd073768089e346b1bb0623863bc2c267fecbe2c5156111a4004e2092a370c89e93de2681a7da4e21a601fe6dcad09fbd2dabd7f0f700b511dda
SSDEEP 192:DH6yKFCz7awaaeiuW8vMpIzxzNPbaPefPs7vxabS/FlkpS7IDZNpb:DH6yKFCz7awaaeiuW8vMpIzxzNDa2f0g
TLSH
T1BA0291F7C3D8C53D895196F4AB156F1FCE2A0918432C3D56C8E4AF5B93E2871D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 856B
SHA256 307c464089068680a7a800c35d26a3ac30a246050ee6370ee09d9364e2b08e27
MD5 6821ac104bc53d58e0efa7142b69469d
SHA1 c96016d192a0200988cf1c0fa74bffcb9913c2fb
SHA512 d20f53dd046e69f04c7248a150a7abaf87b1483afecf76c33bdd8f3f6fd5344abb17f6b514a73847980e9dafbdb8150abca51d56e95d54a3633e4ed8afde2c78
TLSH
T1F1116B67DB7B7437906899AF0D14BC065DF7B4310240A4E5CB6E82BCE0954EB2B13467
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8f859a78220f1e614a3dd29196c18dfebebc69017737268dba02ebab69f6e865
MD5 4d22abbc61f979bc4c3d34c810339ed7
SHA1 50c48dbb30804e8b435a00a03fb71e9b643bc41e
SHA512 3025c165c5e2e3a74c5ec866f6ca691ee63d791f4f982994fd1a1c6bd126beb58459b1bb021caca9a5832b419e1a3bcd26f2c55b765bf6311167f05ec18c1507
SSDEEP 192:gRHcBzlDWSyNHHy2L/v7spAPRp22mbvs9wHsb+WNBTLis4fD2KmHaIF8qVyIsnAq:gRHmzltyU2LXYUX//KwRL62ra0e
TLSH
T18452D52FB914693B5DDAC32AFD227B57D7F5103221942E84E6FC8A1C16E76CC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 49a6bb93bf984d72ad38277251462fa8bc1704c77e6386d7f45245b9a249cf7c
MD5 c560a0a4ad41cbf49fffc80479190b55
SHA1 823a59d7ab4b1f867f78e9af587ba02d635787d9
SHA512 adfcf1a357f65ae6d7c97f09e4f4f6fa678fbe402c6340bedb7d8c4fe49fe9c6db8d8c8af893dd18dafaae0876efb70603b0d0bbbf28d53bed5a781e9b330f84
SSDEEP 192:gRHcBzlDWSyNHHy2Kb/v7spAPRp22mbvs9wHsb+WNBTLis4fD2bmHaIFxVyIsnA4:gRHmzltyU2KbXYUX//KwRL62maq8
TLSH
T16252C52FB954693B5CDAC32AFD227757D7F5103221942E84E6FC8A1C16E76CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c6977a336480fd074fd779e52e80832bd5f85db8d68e2a051001e9410196e56b
MD5 6dee6591fde3ba9a30d1ac4ebea11dcf
SHA1 c925533ef2e8172075eba1177df829554239aaf3
SHA512 4bfaef925ce63da8116d77be66c1b6b0c7d9fa93ddf0cdb729094a4bfea7338da3288a3d105de35376cbff9795acb64cd44a183961f917ecc53392345f97ae34
SSDEEP 192:gRHcBzlDWSyNHHC92evv7sp6PRp42dObws9wHsb+WNBTLis8JZofD2rmHaIFGqVx:gRHmzltyk2enY6XlQKwRLUq22aIv1
TLSH
T14D62A42BB854693B5DDAC22AFD22BB57D7F5103222942E84E6FC8B1C16E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 2e7b574961208f5b9fc8110da255fa03229c22b6e03e4904e6036feec9bcb0bd
MD5 66a74dc28b4e99de6fbb5a10aa57f386
SHA1 0d005bdc07225f971b97caa742d60bcd7f9d256b
SHA512 5b3e6e1b19d53aa2719cb6ed49de2d90cad9ce39a842afafe3596766ada4abe0b88f930ff2b223a418323e97edac4d1245911b8e6c8fb2af093a70e4e88f44a9
SSDEEP 192:gRHcBzlDWSyNHHy2t/v7sp6PRp42dmb0s9wHsb+WNBTLis8vz+fD2ZmHaIFGqVy3:gRHmzltyU2tXY6XlQKwRLuE2saIvy
TLSH
T13962B42BB854693B5DDAC32AFD22BB57D7F5103221942E84F6FC8A1C16E76CC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 92f82dd506cedf9b78d6dd4abf564007e114f1d6e9e9e378beecfb5925d92eb7
MD5 10598033098ba097c52000ac13e746d8
SHA1 5bc40372588a8da06448032333c68e456cd5b9a0
SHA512 f6f6aa14e08c941c87ea39af1b3d42c845d1b46bcd1ac34027f4376ccd077772d6b844183a6448a8ec4b079e82f6b20941b0a3b3e979fb3818b90856d752b217
SSDEEP 192:gRHcBzlDWSyNHHy2O/v7sp6PRp42dmbos9wHsb+WNBTLis8Oi+fD2gmHaIFGqVy3:gRHmzltyU2OXY6XlAKwRLQE25aIvy
TLSH
T1C962B52BB854693B5DDAC32AFD22BB57D7F5103222942E84F6FC8A1C16E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d509725adaaaaa391f6fa456dbff4189785c366043f7a96428820d3c3bd00235
MD5 ca092f7627d013c7aa237396c057cb21
SHA1 198c9932f037cf215c7eb55485b2b02137b6581f
SHA512 d17f2f1199122ec542fda979610ebfd3be6662f3a5bfced4235d32873aceb543dd911b3ac5d88292e05442c917d06f7773a0ebddbf93136dbbd7b683abf6f98b
SSDEEP 192:gRHcBzlkWSyNHHCr2fvv7sp6PRp42dxbxs9wH6DHsb+WNBTLis8HNkfD25mHaIFk:gRHmzlWyG2fnY6XlSHrwRL2G2MaXvJ
TLSH
T1D962B52BA8146D3B5DDAC32AFD217B67D7F5103225942E84E6FC8B1C16E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7fe5cc659a64c363e76a379a7c6b89a7677a87db5d4a0b3de61d105f9c8b1d44
MD5 4d7f0793951d18a29eafd78a2944e081
SHA1 d51803428362f95feda81abf9cb316660e58e983
SHA512 b0315e50817d4488f130f92538b0c3d88c15af349b93651c0a30d5ec31df5b685b606f1cc00d4176d02e4eb071606a74c19c0f7126a9db63f3fc045d7492dc62
SSDEEP 192:gRHcBzlDWSyNHHy2D/v7spAPRp22mbvs9wHsb+WNBTLis4fD2bmHaIFxVyIsnAU/:gRHmzltyU2DXYUX//KwRL62maq8
TLSH
T19452D52FB954693B5CDAC32AFD227757D7F5103221942E84E6FC8A1C16E76CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c48a042d4ed7b5afb52dd924a7f8cc6e3ca5b5ea142b87d6f5ce4b8c04aca4f9
MD5 e989b6c398b35ca8e68866cc50b82d98
SHA1 65e65a52b59138879cfc265c33e1218f86cef560
SHA512 1da90c51346b8eff645213c99c7346025e914c29fdcbf5b7c11521eb543917a0c86e00a3bf94a2a2bbcafceb5bdc0f17791fb54122f523a12bff739a6299aa8b
SSDEEP 192:gRHcBzlDWSyNHHC92Svv7sp6PRp42dObLs9wHsb+WNBTLis8iHufD2omHaIFGqVx:gRHmzltyk2SnY6XlNKwRLV02RaIv1
TLSH
T10262B52BB8546D3B5DD6C22AFD22BB57D7F5103222942E84E6FC8A1C16E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 96fd588f64c8870607bb04184f44d4830e0f7a5ba30e9ef159ba87e766ea7942
MD5 e4187f7d774265c4678a5ac15606aa32
SHA1 279a6b36b338044404347fb756bf97b3d05a435c
SHA512 5461bcd006f5207a8a06f2e0d752cc9a3fb8c544c7aa3b0b12c6be1dd48705b585c7fb35231fd9ab221fad86555dea9820b160e6495fa0a296dbefa967e1e9c8
SSDEEP 192:gRHcBzlkWSyNHHCY2nvv7sp6PRp42ddb6s9wHsb+WNBTLis8di2fD2HmHaIFGq8D:gRHmzlWy52nnY6XlbKwRLrs26aXv/
TLSH
T14062A52BB814693B5DDAC229FD227B57D7F5103226A42E84F6FC8B1C16E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 2edc9001eda1e08cdc5cd3ef42e5886474a1768a74ab08ed84521f1a33e86151
MD5 736799081ae0e132e49be050f3c69243
SHA1 e0ca43723987b37338579b041f4deb2d48e47eeb
SHA512 c26c3cbf162772ac2ce3c8f05c7018737accb54f794461208178597348dfcc77993334fb24bac0100c496d616eb1e8fb1901388b1ee5c7772eae99b21c9fc643
SSDEEP 192:gRHcBzlkWSyNHHCr20vv7sp6PRp42d7bKs9wHsb+WNBTLis8+VkfD2MmHaIFGq8a:gRHmzlWyG20nY6Xl9KwRL7G2daXvG
TLSH
T17C62A42BB8146D3B5DDAC229FD22BB57D7F5203221A42E84E6FC8B1C16E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d6efcc57d156fd178911680db935d9e234ed7cabdab504a0209f6899648ac746
MD5 33be41ed39fa6115f2f4e58a49356373
SHA1 7311b1f52171155a4ca99f6a9cc9871bdfd03b83
SHA512 8d5035442ea9ac111a6e7f41a865aa16c947f462dfc9b74ca58f172e2c34e198bb3f6291e62cf1fefae54dfe62f9bb8dd4b60f25a94125dd0bcc2fbf282664fa
SSDEEP 192:gRHcBzlkWSyNHHC92Svv7sp6PRp42dWbvs9wHsb+WNBTLis8GjGfD28mHaIFGq8A:gRHmzlWyk2SnY6XlhKwRL582NaXvpS
TLSH
T19D62A42BB814693B5DDAC229FD22BB57D7F5103226A42E84E6FC8B1C16E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 dea7c32cb93e2c18a7398878f204d3b6cd0c1499791a5d3dd52ce341cf5ca32d
MD5 dd0287ce1066ecbcbefce324d293ab01
SHA1 e4718ac9b78f765382452e48c102ca3e073b6ba7
SHA512 4dade79e216d4058c3e97535cd5d110b38e1771ed2bc2699c4ce605a51b4566c95e7a572d7a137d12195deb86028f3d4c995efaa07eefa83dbdbd85d07b6f589
SSDEEP 192:gRHcBzlkWSyNHHC92Evv7sp6PRp42dWbws9wHsb+WNBTLis8GjGfD28mHaIFGq8A:gRHmzlWyk2EnY6XlMKwRL582NaXvpS
TLSH
T12D62A42BB8146D3B5DDAC229FD227B57D7F5102222A42E84E6FC8A1C16E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 1b7772f65ed857ff6e2793d047a897306b9543c69c70ef12da90faf704dad9d3
MD5 e66007573058c065876f1164e61832e8
SHA1 dc1725b0efdb1449880a3172686be9587d18ac31
SHA512 b6a959af28ae06443fccba30be6cef3adb73617ff2bad8c4ec5ab4652c2b28186744d1f612ac846bbd2de88288b091758fa81fe22f9c390fb572885c832f9406
SSDEEP 192:gRHcBzlDWSyNHHC92e7v7sp6PRp42dObws9wHsb+WNBTLis8ogMfD2SmHaIFGqVx:gRHmzltyk2eDY6XlQKwRLQe2jaIv1
TLSH
T1C662A42BB854693B9DD6C229F922BB57D7F5203221D42E84F6FC8A1C16E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 703448b6e9aac27f53b305849367016d0d4e4bc3e9b14c54bdbc3a2780391870
MD5 ee94439ff354fe529c8126b9ad44d281
SHA1 ef05f2a9b79baa5c24458854a278235057de112a
SHA512 1880c003700b87c24afb4dc5084d5a115b505e7943bda74d8a159caf2238cf839548676deacb6fbf9af29ff87e61a74ff2593509d709151e480f5d8a38b8cc01
TLSH
T1DDB0128080015211C04203F81143548871549F15D60A1F0163F0F932CC25150801D450
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5914b7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5914b7.TMP
Size 96B
SHA256 bf09baa9c9dade63deb492bb4344ac2c93761f5c9cad81e466b54317cdfd4fc4
MD5 1af8f09c8b96f5becba9098ccc44ea85
SHA1 3782d3fc29e253097b6fdd375f4b89b010979270
SHA512 351cfd576c38deebb36e49f06f3f7d168424feefe3faff0afa81a56cb4a9e47def172a2dc518a85ba72fac921665732c1aaecef701c91d4c4dde44439457c971
TLSH
T1BCB022C0E0022203C00203F22A8080EC3020CF38CA03220EF3E02A22FC283200222228
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 3955b5a9d0be8ffa9b759b454fa500956d23a0a8b5a9107a165587658ed9f455
MD5 7e8eb3a84c8da11ac750e64a92d6a98a
SHA1 a63c80eb9f97b9b93825837a54b033de571226f9
SHA512 1879c1fac52d08514c9b8d1161d32b7f27538fb130dd999beb3ec4e158ccdb06c0cb8971dddde7b1c03ff73709b1b662b3ddac5abd34e9987d8a3df4280ac4e4
TLSH
T16BA0026505C458D3CCA20A7526C192C46B114C642306DB4390E0109CDCD619A6203251
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 2880e2894bdeada43a3c4e0d0ebbdffbb42d0458b425e0556cfa122dd873c4b4
MD5 127743741bb71952321b96018ce7594a
SHA1 7322b39f792163f963da3f8f0891eb67c797d43c
SHA512 c1c32dd30fdea2f1012044c42d9489fca1fb16151b492059259196c16b4af88bd68ab970ce74c108495628797dcc1564a49433a1d88c614c2bc365cd463bf252
SSDEEP 6144:8omg1kQfATCFbzQACj3m7Rkm1tYpBeh2BAoz:3neAT9oBGcAoz
TLSH
T18934233F4DB05D7B1B651A5A608A1A2E2EF29F7BCE215D88D1DD1B4437DED890B06C30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 654bf7b0791016040a9a7db607ae4dbadb74e1eec4ed0f699bb5697151c50944
MD5 10d05371845df7e16976c79b2503ef0a
SHA1 14ae10c43dbdb5648f4e5b6980103eb5acf17e68
SHA512 f9742d1d48c5deda3810d9b7e042f4d2f46acbec7e32ca693fb027b0de0c3ee20e2026c574d2e9a6f242f6abdb01dfac3319c3f5ac5cb04f94f339cf707d0fa5
SSDEEP 6144:BPmg1kQfATCFbzQACj3m7Rkm1tYpBeh2BAoz:BneAT9oBGcAoz
TLSH
T13034233F4DB05C7B1B661A5A608A1A3E2EF29F7BCE205D98D1DD1B4477DED890B06830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 550fa9878f9201c8643a3f04415698aad46298064a15d4d14818de62211e0fe4
MD5 326320acf1bd3103860625c34dab7837
SHA1 cdc12b1d3c8283a2d692908795251b0bdce44b00
SHA512 86b3df5bd1674448c0fe22e1b37a4426a9b7e71c49ac470ec287bae8cb3c019ed1297999b05d30f8986bfad399bc10096419f654408d1c09ae5a4b177a58f9d8
SSDEEP 6144:Womg1kQfATCFbzQACj3m7Rkm1tYpBeh2BAoz:tneAT9oBGcAoz
TLSH
T18934233F4DB05D7B1B651A6A608A1A2E2EF29F7BCE215D88D1DD1B0437DED890B46C30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 d6e981ca474572586b4ef9694d8d4b1b783d2b64b26c6e2b29bb65f39eca1a1c
MD5 fa73495ad780482124d5fa9e1c336e1f
SHA1 d9033206cfd81ce95c3b59d5ee44de2187740822
SHA512 59bb7a92b9cd5dceb58938f11220d173adb00eff50ce002324fb6469e6b338f8b751b4465a65929dd000e5008c1f2596abc69e844336f2c7e6ed3541587a87a8
SSDEEP 3072:7Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:im7Rkm1tYpBeh2BAoK
TLSH
T1BAC3123B5D65E9779979A70EB48E0B1F1EF149A2C920DE92C8D86B0437FA7C90A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 1fded46c4a6677f86b0c8a703124fb2ddbc62142436abfc2de20308fd7944631
MD5 e9321aeda0348b0000175fc31b1c4ef4
SHA1 ddf71f3666dcedab8536e9f3b1cdbb578b2de106
SHA512 7ee683b39c936cbcffb7e4ea2d7c78b24425e66ad83add98236c00661943aecc29a20d711d1d3bda0db195cbf58bbf3aed58fcbbbcb4edf1e8ce18d4c102129d
SSDEEP 6144:omg1kQfATCFbzQACj3m7Rkm1tYpBeh2BAoz:0neAT9oBGcAoz
TLSH
T11D34231F4EB45D7E1B251A6A708A0E3E7AF28F7BCE215E94C1D91B4437DAECA0745830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 f54f88389b728b2279bba7bb3d0fa54d96fe2e7af84994767cbc02f8a8034eef
MD5 2572989e7d708081accacd27d5fe74ff
SHA1 676aa71d3ee0771d34a0bbc026fa98a5c11aac47
SHA512 cbc709cbf4e2528593709711c35a498232f5b3224858fc33d880fa38469fd841ca60520a7374d5e2e7e2e1e92bc873611b153c8b0aeb9d82191ed3ebe099ecc4
SSDEEP 6144:lomg1kQfATCFbzQACj3m7Rkm1tYpBeh2BAoz:mneAT9oBGcAoz
TLSH
T15534233F4DB05D7B1B651A6A608A1A2E2EF29F7BCE215D88D1DD1B0437DED890B46830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 edc67b58fa9456f4ada8693977b7d01a03ad7b4b1bceedfb4a31fe6e6aabbe6a
MD5 c8bcf8ce4f439c4e82cc764f8a598d8d
SHA1 caaeb741888f78e488448df1ad7d1dd0cf0e4d23
SHA512 9eb6f3070b36d24c6724eeef413dfd1600b8f993bab02ec7602442f832a05e01137d1ad28be5a96b08e68c1b3950a110fcececa89fbbb151bf7cf2726964c51d
SSDEEP 6144:Somg1kQfATCFbzQACj3m7Rkm1tYpBeh2BAoz:JneAT9oBGcAoz
TLSH
T15934233F4DB05D7B1B651A6A608A1A2E2EF29F7BCE215D88D1DD1B0437DED890B46830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 9fadbefbe4ffd2f235062799526dfca87cd64b3c6f15af58426e7ceaa299ec30
MD5 a4fd72f99ffb1ecd6d354507394858e2
SHA1 288077801fc38d9b5d220d1663f10ef0e76f4578
SHA512 1a5b015f570ca353f8ebfa75f2e4ecee3c6bd2b8ceab8e080190202672f43eb9f1b963985f9d374dbbff8f7ee51c0f0af6e4ddf84c214b7da50cb28c7648e224
SSDEEP 6144:nomg1kQfATCFbzQACj3m7Rkm1tYpBeh2BAoz:0neAT9oBGcAoz
TLSH
T1F234233F4DB05D7B1B651A5A608A1A2E2EF29F7BCE215D88D1DD1B4437DED890B06830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 4ad2e51e008c74c92604d1aa9cf867f28d8402a3d9e12639ba993bd970c8f376
MD5 3ae1092d064dbbf57dcf7762f284fe85
SHA1 b0ac8714a835b3fcd674c0663de2cb67ebfff455
SHA512 86bd1fd4bfc816619f20429cef098ea1be3505a1b4e6c12c598e5bcbb4f5cc9ec84cfa2a3aa3e5a81ec3b027510d8cf505226c500cccdce3d04b3bfbdc211567
SSDEEP 6144:Zomg1kQfATCFbzQACj3m7Rkm1tYpBeh2BAoz:aneAT9oBGcAoz
TLSH
T1CF34233F4DB05D7B1B651A6A608A1A2E2EF29F7BCE215D88D1DD1B0437DED890B46830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27d61c282e4bf112aed3bd07eaaab8788d75224f5e199bab857064cbd5d982a1
MD5 46e65d035adc969e8d04500bca4c5db3
SHA1 fc81b055409d470ed84cfc8497034037eb5a1ee4
SHA512 26b4bf0615d85574c1a8017270ee3e215341811d6c55c46a00d6a9c6c2e6ebbca4202d7b57c225f8b253c27394d706b1e2825b17c78aa7a2e17599e82aceedfe
TLSH
T13FD0231076397AD3D23A147E54718B01B91581777377F3417151440D9D750C6F68B6D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 95457f78032933f7d473d75766520f84925486a12c43c63efd4a22ac8a79dc35
MD5 637d27c7bb8a176563e3d7f1649a1cbd
SHA1 11f61c16aed9fb8464351ab8f15bef3c1885b612
SHA512 ca00223a3ac395c7db86ffa65adb398e4fd95f39d3cf13abad938139f8b78c9d07efa77a96ebb64ebde8bb6dc8f36ff36aa372c9312a6e0a2951551fea55b36f
SSDEEP 96:DLBppotrAUSpZEpaKhqtLlDbyCBAc6YVk8T2oK:XBppWEUGZAhqtJnyEj6M9ir
TLSH
T149A13AFC024701A2E356A33954D2D5923CB04BD6F42BEEEA4124D8BD1DC63AD817AF98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58b457.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b457.TMP
Size 3KB
SHA256 6891e2753cce1ebcf2206cf27e288ea63a3622bd49f8292eb5e1d2ef155847ca
MD5 e0ebb17364e9c41a7511d0b7b3da8bcf
SHA1 ccb1c20e14f6f81edda7075861891e2f986a4e32
SHA512 01ef97dfd68bb96bc94b4399f10c92e8842f01c579e9e249b73825264aea6545c0ee113e37f685e3535c59839b1e088e531e7d656261810dd46150fd8d05f09c
TLSH
T1937161BC020701A1E352933AA8D3C1D63CF18BCAF96BEDE61110D4BE26D67618278F50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c18d2abe90455a0a4778a9fa9f84f3b92bb46421a62c6b1c5f13c8a175384b58
MD5 792eb48d4f5cce26f4faaba05312e786
SHA1 f413bfc9cab195393505304cfaaa8f200ec2d527
SHA512 e04384c2e3e05a3c3ed92623a7fa7b688a08e34183e33599589b9d087e7fb59c7465af27acb248e4958ae02a00934c1efb3534cde2eabef3ebf23907b3a7a4df
TLSH
T1AF415BF3C3D5826ED81252F09A287E1BCE2D094583187C5A85D4EF5F93F2071E151AAE
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 3fdea9c0758968a8b6db41f06c9ed028ba3823ec976d3f231b267dbf27cdbc4d
MD5 ed20185b5b778455fd962c5dbecc82c9
SHA1 18eae8d5f25a57b59e5fa7d7d2e7c5fe288c9be5
SHA512 b16aa36d195b4f8e80604bc939a24f4f1816adaf0f738aab58d0fd64f4d259650ead0571e53885d5a36935a24fd7713521d5f197f53eb8f2556201962c252b71
TLSH
T1C9D0235311067075A99D7DC940B5FC4FCB3711244441DDD470D455D81B3146C4617140
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0a271f3a812ee308366ad68e42a42d6b79c98987258d07a81da1441b2b598f15
MD5 b870f0041a4f6e6ed0801ee6516b3f32
SHA1 e62ebb90b711f0698fc98cf2d24d60132439d0cd
SHA512 f62cf48c349a1e9ce3b7c4478f492c2a8ebb4626d32c2f7810d020d0e9c6bcbbf3ff4ecdd8102d2666898d47d8ad3084534ac992646498e4660e859375a8267e
SSDEEP 192:sxZ4ARMyM/jK1Ml8M0cB1g/fes9gTSjdpTIwg02HW6+WNicB4/YIgaIrIIgrLqB9:sxZtasm1g/fes9USPpyHbX4/t3/W9
TLSH
T12D62D752662489B7CCCAD609FE357F53D6F504629A511E4CAAFCC90C05EB6FD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 61e56052f722261e1cc7dcf9d61643c5bb4a88836403ea096e5274e57555e5c0
MD5 dbb35190c091e034651bc7d9367400d8
SHA1 b311d354f3b9fa48a19a4c8095cf857a572b4ad2
SHA512 37a76404f7087b9157b27f05ccd559197ebe0ec751b5c7811bb1418969c008f2d870f68ce36fdea8353c124e43d72522d002cedb98699a0cafd293d2ffd94906
SSDEEP 192:sxZ4ARMyM/jK1Ml8M0cB1g/fes7gTSjdpTIwg02HW6+WNi0jXYIoaIrIIg53LqB9:sxZtSsm1g/fes7USPpyHbJXJ3xW9
TLSH
T12D72D852562489B7CCCAD208FE757F53D6F504629A911E4CAAFCCA0C05EB6FD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 bd37d34c0509975a9d6d6033862defe06d0df43a788019aab637fc2dae5ce3d7
MD5 0c4deecf696abfbf8be20f4895b77975
SHA1 03681c830b50a48729a7af054779152a84e6e202
SHA512 ee98d8ca8c0c5f745cc279aa88e9e15b1664606ab4c50ab05dc9ff7080facd25f44c09b04908a6c1a79a5a20285e25855e773946ae0abcc4bd5d67c339e98b75
SSDEEP 192:sxZ4ARMyM/jK1Ml840cB1g/feseWpVfgTSjdpTIwg02HW6+WNEA0jXYAeaZleIgG:sxZtSem1g/feseWvfUSPpyHbKX7mfW9
TLSH
T13B72D852562489B7CCDAD218FE757F53D6F404629A911E48A9FCCA0C01EB6FD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5d2f2af050ad7ea4c8a2b50ee4abd757be3d0dcb2cf4ee77003a5d822eba8948
MD5 8f46abe83e75d4bb6e78890a1815b3b1
SHA1 2f803903c3933a9d23ceb984bd5b2a249de2b5ef
SHA512 7399ae8f2e83315541205b09207124dc816df830d39957660b8c4df26377c5f4c52002d310823c356760f5133d66b7e08b43d03c16cbfb6b528bdf834d875af5
SSDEEP 768:1psqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9BroxpW:1psqxXlWvJD6Tu1ja54LAs96xY
TLSH
T1BAD21B3B694CCB7E4F840E5DEC266FD66ED801CBA6988D5447FA880C03CB3EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 c75e40937339ca3314b5388d50671943d8e5e91f6ea5e14284a5b5599474b352
MD5 d731d8374e7e557b28b2647d86c6e2a6
SHA1 196436cffec6af38cdb15747c644a0b6ef92f3eb
SHA512 238510d599902153561aadeeb273c39068348e5e06593489136c9cba7acaec121c2ebf757109a942e510ef4cd53217a8a2bfe410bd229d4fa2a254e26e4cca8a
SSDEEP 96:KYbaKYIKScgKVWeS8AKhumJqKaoyKWoK3qBgRC+4AR:ExbPz4h3UgRC+4AR
TLSH
T14EE1D516713E061239FE2988B2A685374F423163305CA86F7FB950650E6BE235DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a1bef6b525ff4a5d492f5300849ead6e61f6018503c3946da0bc8a210a29d0cd
MD5 53e886c99627ddd528c7d8ea760759ce
SHA1 f5763a9d728f802d00edb8303fe037f1a1a350e7
SHA512 5247ecd1b0f34a4a85fe557b036f6bbc3e9f222805118e4a1cb71be0ab88c433bb13193c24fdcfb21ca5a379640a3f2481f6b3827b210741450839e383f53aef
SSDEEP 384:AtNn/s3n9SfsNK1LzlburYVRNaEF/Kl8BhBTPLBliOD:Aj+9UuOHaI/Kl8BvTPaOD
TLSH
T102927D766C241C7B4EA3A949F94B25174EB4516BA7843E90D6DC2F1D01DB2DC2307E39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 367712171484f08d771a76627528f8143e33c975794aab9299bc80907492c564
MD5 a5bee24c1007c8d8aac04bb8472af332
SHA1 e575901af6e6223d4c5c3a3f65f481265b846920
SHA512 e75046264658c501c3df458742dadc265923904fa8c370942695d097100ace099d1cb372f6e22f858b83716bb57dfdd5c717204895be6bda2bfdcd09d5644c05
SSDEEP 192:tONC6JkRtQmiUyXtW+RNfCk7Omth3GRwU6:tONC6UriW+RNaETxU6
TLSH
T159020B356C382C7B8EF3AD05B48B27175FA5216BF9952F80DAD81B1C01D769C234793A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 8fe8da56cb0b5d5615bab519dc4e9d5c883c606e946268c96eb0ba11801d8795
MD5 bc1f0fae8860d2b0d3f8e3c91888d8ef
SHA1 a67465a8cf09597f23c9117bb55f727549e54a48
SHA512 a31824522b98862e342f22cfadb5fa377982437de9596b4f39f702dd1b6068510cf572340fa5a2e316ab54e6bc03af9d954e55b5fa1e11627e7a0136389b44bc
SSDEEP 384:etNn/s3n9SfsNKGLzlbuaYVRNaEFdXVStHeN/sT5mkcYKl8BhBTPLBliOD:ej+9USOHaIvSzT5UYKl8BvTPaOD
TLSH
T163C27CB2E8640CEB04A2E9C8A547E4172DB40037D68D2A5CE2FC7B3D309F5F85342A79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e9ac02cb3d516d4d3fa53fa769b88b686dd60c383e8164e2b34ced157e42340e
MD5 45c6d9760889867345004b45505974d1
SHA1 1137de11ddef7ec2079c0779e6164bed5c5db692
SHA512 95e5b611998a43af635655ec45988433a836f0ad0a89c2c52f259ba6ed6384adc2dfc5d44a9ef19c9674ec6e377e08a6c869465f5521e2988f7af18d511079d1
SSDEEP 192:XONT6JkRFQmiUycto+RNfCk7OmqZZNVc6qUMU6:XONT6Ujvo+RNaEB/U6
TLSH
T11B12093668285C7B4EE2A845F48B36135FB5916BEE897F80D5DC1E0C02DF59C230B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 86ef3ec23bd6a8ca3afea684154e3e41a6c62539ec8e39b9895992df4da11b40
MD5 114cac0fe501640c96960e37d9efb3d1
SHA1 0b7aeefe1975bdfeb14feaaa3347afb90cc44858
SHA512 5f47695690524aa90550f260c5ae0fe7570dd94e1270c8e17e4d87b37a856715cddd8721c433994cdedfab1c1b375271fa14c2f5bba7ad28b9ddd8d4525daaea
TLSH
T14541F858B6FE1148B3B76F5AAFFBA46E447BB9372F16D45D10010E4E0A22A40C861737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download