7628ecb4ccb673042862ec0db342008bf396af922522162b1aeab333b902d662

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/07/2026, 18:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
new 6.txt
Size 76B
Sample260703-xm664sbs8n
SHA256 7628ecb4ccb673042862ec0db342008bf396af922522162b1aeab333b902d662
MD5 bc5a31127c5896fed9a22f029a10c2c5
SHA1 1617f9778bb85a922ec37aa3db770b9f7e1dcf9c
SHA512 d5f1576775145aa700f14d454e01ad4d32353c9880f3f97067a397dc9016739d9e33c5f2dd76e69b39ed6cf0b0a09a180d32fa4b58db79238eaedc79458330ce
TLSH
T166A024F540717DD0D13C005310D4F77D1703C0043C5D30475D0C0D005040CF04330050
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 5 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4236_1008904695\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4236_1008904695\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4236_961913141\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4236_1728125969\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4236_1728125969\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1536	msedge.exe
2528	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275788083958271"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{0166AC6E-303D-4C27-8450-520E417F8ACF}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 7 IoCs

pid	Process
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
3716	msedge.exe
3716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
4236	msedge.exe
5088	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe
Token: SeShutdownPrivilege	5088	chrome.exe
Token: SeCreatePagefilePrivilege	5088	chrome.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe
5088	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1856 wrote to memory of 4236	1856	msedge.exe	89
PID 4236 wrote to memory of 3244	4236	msedge.exe	90
PID 4236 wrote to memory of 2004	4236	msedge.exe	92
PID 4236 wrote to memory of 1536	4236	msedge.exe	93
PID 4236 wrote to memory of 2004	4236	msedge.exe	92
PID 4236 wrote to memory of 2004	4236	msedge.exe	92
PID 4236 wrote to memory of 2824	4236	msedge.exe	94
PID 4236 wrote to memory of 2824	4236	msedge.exe	94
PID 4236 wrote to memory of 4836	4236	msedge.exe	95
PID 4236 wrote to memory of 4836	4236	msedge.exe	95
PID 4236 wrote to memory of 4836	4236	msedge.exe	95
PID 4236 wrote to memory of 4828	4236	msedge.exe	96
PID 4236 wrote to memory of 4828	4236	msedge.exe	96
PID 4236 wrote to memory of 4828	4236	msedge.exe	96
PID 4236 wrote to memory of 632	4236	msedge.exe	97
PID 4236 wrote to memory of 632	4236	msedge.exe	97
PID 4236 wrote to memory of 632	4236	msedge.exe	97
PID 4236 wrote to memory of 1884	4236	msedge.exe	98
PID 4236 wrote to memory of 1884	4236	msedge.exe	98
PID 4236 wrote to memory of 1884	4236	msedge.exe	98
PID 4236 wrote to memory of 4756	4236	msedge.exe	100
PID 4236 wrote to memory of 4756	4236	msedge.exe	100
PID 4236 wrote to memory of 2544	4236	msedge.exe	101
PID 4236 wrote to memory of 2544	4236	msedge.exe	101
PID 4236 wrote to memory of 1296	4236	msedge.exe	105
PID 4236 wrote to memory of 4836	4236	msedge.exe	106
PID 4236 wrote to memory of 1296	4236	msedge.exe	105
PID 4236 wrote to memory of 4836	4236	msedge.exe	106
PID 4236 wrote to memory of 2268	4236	msedge.exe	109
PID 4236 wrote to memory of 2268	4236	msedge.exe	109
PID 4236 wrote to memory of 2268	4236	msedge.exe	109
PID 4236 wrote to memory of 3676	4236	msedge.exe	111
PID 4236 wrote to memory of 4864	4236	msedge.exe	112
PID 4236 wrote to memory of 4864	4236	msedge.exe	112
PID 4236 wrote to memory of 1820	4236	msedge.exe	113
PID 4236 wrote to memory of 1820	4236	msedge.exe	113
PID 4236 wrote to memory of 3632	4236	msedge.exe	115
PID 4236 wrote to memory of 812	4236	msedge.exe	116
PID 4236 wrote to memory of 3632	4236	msedge.exe	115
PID 4236 wrote to memory of 812	4236	msedge.exe	116
PID 4236 wrote to memory of 5608	4236	msedge.exe	117
PID 4236 wrote to memory of 5608	4236	msedge.exe	117
PID 4236 wrote to memory of 5880	4236	msedge.exe	122
PID 4236 wrote to memory of 5880	4236	msedge.exe	122
PID 4236 wrote to memory of 5884	4236	msedge.exe	123
PID 4236 wrote to memory of 5884	4236	msedge.exe	123
PID 4236 wrote to memory of 5884	4236	msedge.exe	123
PID 4236 wrote to memory of 5436	4236	msedge.exe	128
PID 4236 wrote to memory of 5440	4236	msedge.exe	129
PID 4236 wrote to memory of 5448	4236	msedge.exe	130
PID 5088 wrote to memory of 5580	5088	chrome.exe	132
PID 5088 wrote to memory of 2528	5088	chrome.exe	133
PID 5088 wrote to memory of 4444	5088	chrome.exe	134
PID 5088 wrote to memory of 4444	5088	chrome.exe	134
PID 5088 wrote to memory of 4432	5088	chrome.exe	135
PID 5088 wrote to memory of 4432	5088	chrome.exe	135
PID 5088 wrote to memory of 6132	5088	chrome.exe	137
PID 5088 wrote to memory of 2108	5088	chrome.exe	138
PID 5088 wrote to memory of 6132	5088	chrome.exe	137
PID 5088 wrote to memory of 2108	5088	chrome.exe	138
PID 5088 wrote to memory of 4124	5088	chrome.exe	139
PID 5088 wrote to memory of 4124	5088	chrome.exe	139
PID 5088 wrote to memory of 1576	5088	chrome.exe	140
PID 5088 wrote to memory of 1576	5088	chrome.exe	140

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\new 6.txt"
1⤵
PID:1808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x25c,0x7ffee814c188,0x7ffee814c194,0x7ffee814c1a0
    3⤵
    PID:3244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,2189525059700616670,7916864997289485797,262144 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,2730232104465345325,1991985249097254370,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,16541311072110231741,1320540622246725383,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
    3⤵
    PID:2824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,3069828753352518408,14552828493138176181,2097152 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
    3⤵
    PID:4836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,4589831720737855439,5872565658339316818,2097152 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
    3⤵
    PID:4828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,12063928206317465229,4550735684549944557,2097152 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
    3⤵
    PID:632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,16409933912930972700,7135080730992269704,2097152 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
    3⤵
    PID:1884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,15171223105347541143,4409518379162938839,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
    3⤵
    PID:4756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,11315365870344582714,9536201016523686915,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
    3⤵
    PID:2544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,1123890434243003099,15600976947529653309,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
    3⤵
    PID:1296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,18017902488563591869,4145302672049155434,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
    3⤵
    PID:4836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6068,i,3993480732174844286,16313389983188667625,2097152 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:1
    3⤵
    PID:2268
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,17896518670936255547,13822228086973302504,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
    3⤵
    PID:4020
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,17896518670936255547,13822228086973302504,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
    3⤵
    PID:3676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,6509883352303109663,10223262018654456338,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:8
    3⤵
    PID:4864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,16256357845569232979,8674863461921064212,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:8
    3⤵
    PID:1820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,6165380285326392632,11623395837165252136,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
    3⤵
    PID:3632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,16313103178231084101,8844547489744142829,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
    3⤵
    PID:812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7140,i,2308042078025121662,16113606067249743391,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
    3⤵
    PID:5608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,9735110694465112375,8258054731904585781,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
    3⤵
    PID:5880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4296,i,12184649709542499112,1426799228296760389,2097152 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
    3⤵
    PID:5884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,9058620337454926986,736705351381169900,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:8
    3⤵
    PID:5436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7040,i,13681202824861913836,8502622688993577386,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
    3⤵
    PID:5440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,13045492150871947687,12477722580425414645,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
    3⤵
    PID:5448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,8880934364453451203,16977195892960661729,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
    3⤵
    PID:3944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,2921546712408218135,11399796993394485318,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
    3⤵
    PID:2960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,9855893011062242307,10779149715000451549,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
    3⤵
    PID:5308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,10265290608967637680,14059637604253105714,524288 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:8
    3⤵
    PID:4408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6604,i,11457672623398597808,2419533907278616283,262144 --field-trial-handle=2272,i,10351073813161698508,13780351488572048863,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3356

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffee88dc728,0x7ffee88dc734,0x7ffee88dc740
  2⤵
  PID:5580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,14682111186267107719,5137296780072802154,524288 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,8853928389527814357,2142478183688763305,262144 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,9663605357743439962,9000990076278282896,524288 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,11603421043619533471,7209182785088261146,2097152 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3460,i,2602017293639750031,16953419176434867020,2097152 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4468,i,12028085063319030243,3482526821968295910,2097152 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:2
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4620,i,1361962498847065998,6344959786960758161,2097152 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4864,i,13166947796603138073,14219033056364608988,524288 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:1436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5044,i,481989619275772055,5766894667797876639,524288 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,12278914973432574408,5479473455159440646,524288 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:5392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5776,i,11997850260062231663,10012958359997587468,2097152 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:5456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3692,i,14850841165264764376,851353735215783365,2097152 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3580,i,2814182913176401568,8973502635711177162,2097152 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,17148398101232273741,1623951118327348662,524288 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3972,i,7231528220214485620,8043436501663839961,524288 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3692,i,6625442108964946516,12135437609540888262,524288 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4472,i,8734212814404130240,4152754388633035945,2097152 --field-trial-handle=2204,i,2973639565410552267,9849646264524514201,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:3288

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5572

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4236_1008904695\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4236_1728125969\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4236_961913141\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d93ac23c92c6427088d54e115490a68b22036e26cd268a71642658a59ef403dc
MD5 dd0277ada7ad214c7b27b1c40c5ca25a
SHA1 b697b28ef350843f6a603a333a6e46cf68b3818a
SHA512 4fb6b334eddd7c592c22baa93a7cb2ec2c7826b180512815a8c8c6b325604a12baee85491410807bf23e20790331de438aea0ad6957e5b9fe0977cfb006ada09
TLSH
T15FE02B66C962DC2B28F90718B0201785D754235B2A41C94F7B3C950C8FB1A374985C5C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b38bb7c0e23c8ac37abcb8232166ebef6da1658f672aaebc4be9ea3e650cccef
MD5 ccf28bcc14d26962c32b7eec6a2ea886
SHA1 1a16f8fe0bb9bf298badf41519aafa564f61e0ab
SHA512 618c6442fd1769d964e8c0a5e556825a55004b8e1372f401ccfb2dc555b6697f926c3a048c7b8fdc43dcedadff7fd6e8e2147cabc3610aaa0fd1e1076d821ea1
TLSH
T16B51CFF3C3E8856DC91156F49B246E1FCE2D0A18031C3C66C8D4EE5B93E28B2D21134E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 53bfbb780fdf9dbbf83056a4e2374ef8034b700a01121d80a2aa2ab51439a51e
MD5 db82edf0b0e6df3a22c9ec409f22c5d9
SHA1 21e41e7e72d830750301dd5020e08bbc860eac3a
SHA512 3dc66e8504807851aeb56f329510093b0a61d9027f8d4837e2bc0cbdbb8c584f1bda415dd3a9e69917a679ab159b4ddb0261253214193feb962efa2540493f16
SSDEEP 192:fRCwgYRofArev70wAPRp2d9U9+Hsb+WNnMFtSX2AM/e2c/baJkqVyIsnAUgraJ:fRCw5zagBXv8wAi2AacjaDe
TLSH
T11B52B61AAA106D7B6CDFC319FD527BA7D3F6102225D52E84EAFC8A1C16D35CD222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 e8a42706a4f83204304965c8f1e089b427b58f626f224d0c199e8418fc3eadf9
MD5 373a02ea1826fbc1a477206ccafd3cd8
SHA1 b7c927a6b6d818abe5268ebe30527bef568adb0c
SHA512 f5c62f0100ece02685ece0e3b8aad52c4545db0ad04bcbb6c262aebee80a94a77468d362c94bdfaddd805cc865fccf04533dede1419d2d110a8ee315c8b1e17c
SSDEEP 192:fRC9O8SdgYRofArev70wAPRp2d9P49+Hsb+WNnMFtSX2AM/e2c/baJkqVyIsnAUp:fRCYP5zagBXD8wAi2AacjaDe
TLSH
T12F62B81E6A106A7BACDBD329F9617FB7D3F6102626942E44DAFC8A1C05E35CD321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 22eccea101e5e09333cac99adcf78b7ee547f055daa8e478752edd18942af5b5
MD5 67bf7858d8d694979f8d27bd58913d56
SHA1 3912a178d2ab9550af9194e88cbfc2412d023775
SHA512 8a471f14ce12aa8f6f0780e5f7dd4930e80b6417da264691fe7ab143369f4554f18ba0ce9753d18877adc783021b04e390ab8d90153e84f71525fdc6c0d8a3d0
SSDEEP 192:fRCY8SYgYRofArev70wAPRp2d9P49+Hsb+WNnMFtSX2AM/e2c/baJkqVyIsnAUge:fRCYW5zagBXD8wAi2AacjaDe
TLSH
T16B62C81E6A10697BACDBD329FE617F67D3F6102226942E44DAFC8A1C05E35CD321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5676af8f9e379cd31d6044445308753d3d8455f0bc7db8a51cc9c0c2c3966202
MD5 17ec83650ea87c539703d450cfb4f230
SHA1 25d04b31651811b849ae8fc9aeaf0466085fc9db
SHA512 f37428f2d35c031d677797ebd7f015878b6c8424cfab671e6f2f34dbca9a4264e7a3d55a7db2c6c36e2356730d305c258fde90d54a67ed6b7120baadced21370
SSDEEP 192:fRCwgYRofArev70pAPRp2d9U9+Hsb+WNnMFtSX2NM/e2c/baJkIVyIsnAUgtaJ:fRCw5zagUXv8wAi2NacjaF8
TLSH
T12A52B61AAA106D7B6CDFC319FD527BA7D3F6102225D52E84EAFC8A1C15D35CD222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 a1cb9191a275a04f681c10f0abef16e2db733bf079088b28511f603103033d4e
MD5 b2d8a0273d02bc3765f9ac051efaaa98
SHA1 01926381dfcf9d7f829a80b40a71e712e0541b67
SHA512 05decbec27fa04dd64e8239f6e7225a24d8148536ccf6e7cb5a26ff332d82277ce9682cbe4b22528310f730354635aa0a3a579d2dba9d348351eed836c30a170
SSDEEP 192:fRC9O8QgYRofArev70wkkPRpzfd9P49+Hsb+WNnMFtSX2Aj/e2c/baJkYVyIsnAq:fRCYZ5zagBWXzc8wAi2ALcjaPe
TLSH
T18272B71E6A146A7BACDBD329F9617FB7D3F6102226942E44DAFC8A1C05E35CD321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a3294587b0b4771ef9ec9975829d54a9cd10916341853c283d27458a15813de3
MD5 61ce8a5ac19602d0f9219ef3155c769b
SHA1 cfbdba977889ca51581795ec54bbc2258090b32c
SHA512 3b9149b07e3c7cafbe1bc752b8608108ea24f12bedbe582e4ff96e5e5d61e2e2341f31eccc1e8d416e9f5152e8304a1f974c9204e0e74a1622a4cdad4a2a84c5
TLSH
T16AB0128484456202C01706FC134224CCB254DF11A70A170183F46A2788251508054051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597fc5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe597fc5.TMP
Size 96B
SHA256 a883b1fb971ccd2ea28dfaac4575e9f08647dfea8372555510a616052bb7b057
MD5 e5031639778eaf3c855a0221c849a9a0
SHA1 3174850d4ebdb21a66b34197776eadce32cd37a4
SHA512 4fc742ccac264c984ad5fbdb62e88b70433bb49f9c6cec9bbc11f42186a57d93b598ef1990dfc7d60ec18cde704d989a36a35303aaccec52266d53c9b45d00eb
TLSH
T1DBB022C8C002220EC00303B0A8A0E0E832A0CF23C2030202A2E02A22CC202B02820820
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 5d66c63747c568233ded57fb928d227b84b668da97e4c1dcd65e80b5a09dd3ef
MD5 42a164468c1e8e889b6861074a3d71fe
SHA1 5d77c7e776307f6f39584b548de9a0f6d5e2d1fc
SHA512 62f04636b60d5e50358411d98b616d82e253ebf882728e33953a9905a023f892fac5af0a1d8b51f6fe59900c4e87ac50d0085c53fd48a91831f3a1881f29c671
SSDEEP 3072:8c1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL53qfd7NtZL8cHQRZEQ6Spsd:Hmg1kQfATCFbzQACjSqZ/ZLW3Exd
TLSH
T17334127B8BD10E3B1F424A7075430EE9B3F64ABAD5315744A36E27FB6DC3C822682459
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 cb384b0732b06a22ad0c40e245aa0e382c82a9a14dcb83c7751b6c20e055f8af
MD5 18c6b94321b767e87aaa9e8f3ff0802b
SHA1 ff99e04d3b7dbd4e49fa20105034865bee88a879
SHA512 0d2d98114c5c29134d12ae1a369c29fd74a34ec9ff32d969b0d0c08d8fd56d7a61acac96c8656190f666038a48f5c5d342372544d8846d711ed49d2d9b165778
SSDEEP 3072:+c1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL53qfd7NtZL8cHQRZEQ6Spsd:Vmg1kQfATCFbzQACjSqZ/ZLW3Exd
TLSH
T10934127B8BD10E3B1F424A7075430EE9B3F64ABAD5315744A36E27FB6DC3C822682459
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 9c654d4346b7bc2794067a2bfb55632e37295ced97a9d3969be367588c4cc54a
MD5 2583a8919586fecb043b8f88b76c7c68
SHA1 59ba67896afb8f0efb26a059ff5aaf020f6f240a
SHA512 7c56c01d86e97b2998b75fd58ec85974105632b29c8673a45e69400d28f7e3e44fbedb828e919cc1c32c55a6405ffd9f19ed8208919c1d0af73b03cf809645b1
SSDEEP 3072:Yh1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL53qfd7NtZL8cHQRZEQ6Spsd:YPmg1kQfATCFbzQACjSqZ/ZLW3Exd
TLSH
T17834123B9FD00E3B1F424EA065431FE5A7F69A6FC9305748A36A27F76DC3C426642858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 6030cbda8a9c513e8a999b05996ed3eb78a14d34706d0d1da7c48aa2f8d7b11b
MD5 7afb5f2ae4b6a52cdf529a7c77028fd6
SHA1 5a6e326e910dbe1fc41085921d3a6ea47b10d485
SHA512 828c905e740390e5dfd73282dd6a9596e1a736f509cedbf6674e50ce19692c41a631fab1fd20d7ac803e4595d2928d4052293c679fa083c84add9c2073363d2b
SSDEEP 1536:bMLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:gqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1E6C30237ABC21F379E92CF64B9130FDA57B644A99030D301AAAD37EF7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 68afc1bc4ed2ed91735f763d75d1b4a70ebc3176735185ddea8e679ebdb6ac6f
MD5 b5607e1ecdf37257fcd2fa8c5be2824b
SHA1 85ce8e629b8ba759f065aa72695e58fc695bf5b5
SHA512 1f6f885278c0e5303562e163a74637665855c97bec2f0059b52a08eb4b3f8b8bf3ba0aac8924af98866b2339ae298e1d708550244cea4b7548721c122f324193
SSDEEP 3072:Yc1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL53qfd7NtZL8cHQRZEQ6Spsd:zmg1kQfATCFbzQACjSqZ/ZLW3Exd
TLSH
T16434127B8BD10E3B1F424A7075430EE9B3F64ABAD5315744A36E27FB6DC3C822682459
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 202d318b8c3627dd0bf94dc5ad8d8bf2b4666d68f26e2875f1adbd3ab8340b51
MD5 97e57f47d108e2a9350eb2da5aa84c22
SHA1 20c9cd4dcfe4701bb1814b262a81abd5d5ac2cfd
SHA512 c79fb3135c51f0621f1a7256941f9f5b51948a493a1cd5f2361ef7ef8519f5e07fc41ed7123cf4fbbb0293f94460b09de409957b7323cce38fb4c5333a92e42e
SSDEEP 96:Lm/R7yCSMrDOdw3S41MNRj6WlnnxQvlf/KDu:uyCSMrDOt4OD62nx83F
TLSH
T163C1C51463E524A0DF9541BCE9913E893978608D05275B5B0062E6BC2EFB7CE8C25FDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5918ce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5918ce.TMP
Size 3KB
SHA256 c535d1c4805c04c4b12de315223c2759525dd282a12f2310f1d506c2a19e0f86
MD5 684d8c9e1e82341c0d5e6ed1d7cfa92a
SHA1 043a317343f5f5cedc7d6e631a0413c040f167f8
SHA512 9a474d168ed4e9ddb2bafba0797758309017f4b2efbd0d62c1bcce0022495e10ba75fbecbf05dbf9dee29ab7994e9392fcf2cca08446d3c84cbbc08e14fea444
TLSH
T1F971C5653351A4B1EFE5453CEDD14AD979B070890A139EAA00705B3D2BDDB5F0C601CD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 ed57e86c2ffced5d8bea2c316fcc1d48ed47a326d2bb156b2e83f8b9aef44695
MD5 2567f16d114792b112103e7d16eae6ed
SHA1 b8eae2589ea14f00e1fb4acf009a2dd182e796f7
SHA512 303d90383800cb96290f6d987889aff4b6fdb49f941e30c691ea0752d37d99411c0cbc70ff145c70c619782513cf169df9ff66cdfb782a1beff04557f4ebc0a7
SSDEEP 48:YALlN+OCDPCDSSCDt8aEMWgylCs9Rst7zEs1fo7CnOChsVC7C+sdClCYCsVCLs4O:DcO0OE8aarA7zBaGOBGAGHLaUwBHiLac
TLSH
T1A5917BF3C3E9826DCD1196F0AA186E1BCF1D0955436C3D4E85E4AF4BA3F2871E15168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 adb14e679cbf309359e165e387cb3986a6f4a9453dd3072b0685bec9a22cf878
MD5 eac59a56e3b6aca00a690ed355b02c30
SHA1 cdc0aa238e6c545bef15a2002c3c1d2eb0df869a
SHA512 5084892600c5a5531977085967dfa68b09a9502f3bf29918107cf9682e3a608814eb5e583aae7beab154c930ca67d2873d6cfe19c3000bd446f9cc1191f59371
SSDEEP 192:sxZnQUnxROyM/jK1Ml8Mk2/fhsH545gDeWbWHhbMZUxMddpmX5HW6+WNsCNZ4qA4:sxZrnxAM2/fhsZehOWqHGHb94V/Lc
TLSH
T14D720A02AA34597BDCDBD319F9127B57D6F85163D6904E48AAFCCA0C04E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 2d7eecfe1aeffefd0613e4ae97a86884d2dd2faa110373826a73d0dc6a97a491
MD5 84d672649eb14ad87b536ee39aaf68bb
SHA1 5951505028cfc618112dd01f9305234c31ffae5c
SHA512 970180bf6aa37d251398417df1706f246918b758c11055d08c32124ce48f2849be4c517ec5324db2d98c46cf6214ad4d4785c78774ced55cb86a4be762e8f0a1
SSDEEP 192:sxZnQUniROyM/jK1Ml8UQ292/fhsG54hgDeWbWHhbMZUxMddp4X8HW6+WNsCXT4b:sxZrniAqQ2/fhskuhOWqHVHbhL/Ve
TLSH
T1F772FA02A534497BDCD7D219F9167B53E6F8546396904E48AAFCCF0C05E7AEE221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 7599336ecc478b404a69b161663b78b60d3b7b80c56bf64c57fa618ba18ed5f3
MD5 e935186a3ef0e8af9808488a76039e5c
SHA1 c870d4ae8ca8aacd7213d311c056658e02d19c36
SHA512 a418a53d7f8a9c752398662db4c98b36765cbc91fe198b6781eef80368e43b5817710c1fe839de1640d211ced2335756df5cc95f1875b02cbe6a5d0f29a0f8ea
SSDEEP 192:sxZnQUniROyM/jK1Ml8M92/fhsG54hgDeWbWHhbMZUxMddpmX8HW6+WNsCXT4APt:sxZrniA12/fhskuhOWqHPHbhL/ue
TLSH
T12E72F902A534497BDCDBD219F9167B57D6F8506396904E48AAFCCB0C05E6AEE2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 c8574a2b2f68834e765ef67818ab9292dd469bd3a3b32330420d79a307146ddb
MD5 b8a4757dd3c744333fff738b1012b890
SHA1 e07057003b93dcc7e9d29af3d101cafc05abd645
SHA512 c58fa506c52e7fc6e51ae19c2db7c2ee23007faf644ca20cc08031bfb69a167a630cf72f269857ce5ac1f5e633eddda6b1a77af017f7d80d4a2b7e4c86381275
SSDEEP 768:608iJZU7pLuL7xNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4KhALl6opdlros:608iJZYE7xNWvx76ru1jalKhALocdeq/
TLSH
T1F3F2EA3B6C0CCB7E4F804E9CEC2A7E9A6DE8018F5AD8895447FA841C03C66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 3ae01048096bae465ea61d636e9d2be3d3f158a9743745e31eb4010bc0a96fad
MD5 fa83cdf65b3fb47fa2c1ddd71e84293c
SHA1 1b57a17a831b98337ddda3706ff7260edc006204
SHA512 8823dd5a06e60cff1d78a54001fbb9ca18f90bbfc64ab8cc31f897764f97a09627ee559fa97aa3b5fa523f216e1c4419c60b949bf47e72fc34cdd0c0f62179a7
TLSH
T15DA002101380C1D5D02215F59D925345B300C9901104170740990058DC50C50CDC111E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 417967259f89b7920a84dc2fca2ac9079f869c64bc8c28cb00a79ea23e99cdb7
MD5 4657480b656f404d282a871e83000014
SHA1 e7073e0931c499b75e774d81a70f85dcf185ece4
SHA512 1b639a1e4e581eba75a2ad77d60219dc038a7cd726b3ad4d2527124f9780bd5e2b93369fb8e49a5ca82bf2bc30374f424dcc6466951c6305e392d8dfbf97370f
TLSH
T12BA0021456C03107D08B22B467D651A162234914E2212715C1A50348C8609A5855340E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 3KB
SHA256 76b981d7585fc75fd2ef889b2a57d7a671ceeeed1a7f5e713e06349ac241272a
MD5 75dfaf6a1ad3eb764d7acc8cd6b9a229
SHA1 1bf221862110fab0ce660048211b8b7a1b8b049d
SHA512 77bbaebec90deebaf246b2909e4ec64eb9275bbc113060d01141d0065fed540d28d097d75f843c4d0dcda0d60671ba6e3f65ec432e64f338c122432c2e003cd1
TLSH
T1B751C98DCD492B8BCC6C51B3A8BA24C5377668DD5B848F075DACA538BCC333D1426659
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 1KB
SHA256 a68423eecb47224ba96b0fa4a24252efcce41cbb525fe0724d3b49a5a9e1aede
MD5 a93d80fa364efb98bbc3db17ad0c09bb
SHA1 4880ce53b638cba5eaf994254bd7072c2d920b07
SHA512 b4dbd197ba85df0c6d1c5dd7339dcd210d4c066629c17b5582a3cc23acdf5ac3aa9b90c77c4e79924a8ad4bc85487c3a2822070435a856de9d29704d5231db6f
TLSH
T1CF3142884DA19DAFFDA045F21272A4B073B184EC1255B7135C3C31327E2775A2A079EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bd6f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index~RFe58bd6f.TMP
Size 1KB
SHA256 674721f6060b6364bbfaf078af1aa69e88bbf4d592a871ce886b69a3d255b18c
MD5 16a2bae134a006a46cfa06b9130621be
SHA1 4a855080acac55c9c70860d55aee040287e0d0c5
SHA512 0502becdbd61ba94801a5f787d0de0b7696f9071ba0f244f39eb3ea1b05eb7dc48dc8847b32368c20bf7786c21f8ed4b61d6c62b0a4dd055946571d641b63f56
TLSH
T14831254E46954D0FE88490BB1967B4B8737198005311B393987C62395D25B9D1B4F0CD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 ddc437cdb20ca10739dbdc6d60e1d45f6253dbb7b428f95cee0a840ea672be9e
MD5 55e4ee107aba60e21dfe7360f57de810
SHA1 7fb69928acb4ecda79ac4df349ff3e592f436420
SHA512 8f2131db35ce75a0436740b16f8062f991db9a52e1fdd1660161d5c904216bff7bfa385292cc712cab84115c0a38278432a016d51379cde74426314a001318bd
TLSH
T17EE0C0F72EFB2844FEBF67E10570A8A00285B459D544BC8F141AEB832461352340AC22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 fbaaefa38e674710a5db59d3c5f95ada882731acfa924a71df6bd619f0c3d581
MD5 9134b49c4800755db48db38abb82de2f
SHA1 abc32dd648c5cfc6ad0c33fc494fa61d482e5773
SHA512 171a37a1fda0610ac81dd183abc37531312f3d203c9016f32b3cc14b82b71128682dea252cbec6ae019b0abbb2dbab5bc437c0874895cece1106564dcd9fae66
TLSH
T170A002A5C6570841E01206B0F8455188B310CC918A05631392A400A8ECFA5489512544
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591449.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591449.TMP
Size 48B
SHA256 42701b8f2cb0b5301d43730d9443b75b2bb30567d7af1a3ad02d71d5c3e7de8f
MD5 41815693762e363db38e41fb8197dc96
SHA1 5283f875416de4548b96252b9345e3c1273a926e
SHA512 8875507a5ff5b27fe1d91511b5010716e385b33d9273b994c94922488d80966f949f67b96f893689dda0f249731f8099851148f4ed011a8867b4965fc94475a9
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 68e8c2e9c431e573491d9d347f3828ab7bb3910e38e4f4d6ea776c65c1b7faad
MD5 ca971b484f076f4256e860cd5898e914
SHA1 ee3c2173b90371c1dd2740452507d2866abea575
SHA512 f22ac19ba62f364a01073c1d6d1e268610b400252745cf2f016481ab7bc775ae162ca0bafa745ab4b22cec147ed6d4d6ca7aa27059d473fc2f93ec7354105d4a
SSDEEP 96:KoZ+Ky06SCsKnqN4Jco6GKQWOTDgQQK4FgyQcAQjS49HBoBZBsB4BqB2B6BgWBe8:093w4Jco6GK3OT8QkFgyvAQjS49HKvWV
TLSH
T1DEA11042327F0385287E240DD1B18767DA82B2633154F92B77AC41A24E67E664CFD9DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599be8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599be8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 1a5b1763ebb41b6e2509bacc0ff191ebd82cfeb22f891f394bd9988192cc8413
MD5 3f85d1187fa82bcd96c6486022838c7c
SHA1 1699d8db045b92426e6de48e004d8c345c4169c3
SHA512 776df9c75cd9be4bde17a9c7517f5f1be7836f45f902aca64b96592c7e8e024e94f4c4f8efaff5a4b0bb21d4053b4763420f0304349d5687f46848f7b40e9f71
SSDEEP 384:njOwiFctNn/s3n9SyLsNW8TUNTUlIl9TAMalhb737s0DfcdVHtmKfOObjI9G6w7a:jOLFcj+9R/wgcbP37uoKf29Ma
TLSH
T195E2C6F598D7893AE99E4783A33E3E1A9EBCC15776885984B7C81D0CCD871BFC206805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ebe58666984f1faf1f63bf901383ab68ed2dc6e097d00c9ecad7da3806067d13
MD5 57399454e068cf367a4c1f148c38d81a
SHA1 e203db29b5363321520ae5d15199068ecdb94aaf
SHA512 a7e5db9ab05991062e11049285639fb3fca9e05d1afe2239a113c19de53966378b340175cb3ecdb16e866c79a45406d87469f336f4e4ffcb815ec9269822e1fb
SSDEEP 384:nrOjtNn/s3n9SPsNW9TAMalhb7O7skVHtXKfOObjI9G6w7O6Ub:rOjj+9o8bPO71Kf29Ma
TLSH
T1DA928D32A8795D7A9DD38655F047362F9FF4826B93C92F84D1EC5B0C02CB2EC5316919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8eb48c69f125f040f3e096f0b5daa1bfb47d5ac055353722a92dffe83b1e8d0b
MD5 f1117310e67a009a5c0f8c8dcfd4d1ae
SHA1 75633c5e258c694fc074da01cef5f6b0e5411bcc
SHA512 2c2641119fdb079ca8ab5e82750db303a9c66fb233d15b687e9bb4044e70e197f951d97878db1b2bc059361fb24134540d87a524dc69af46250eafc3cf7f77e8
SSDEEP 192:7EON36kB+QmiUyXA78903YHHN2cRKlqjuU6:7EON36S6f789VHtDKfU6
TLSH
T13B121A32A8BC6C6B9EA3A545F487321B5EA48227EBC97F8095DC161C01EF2AC130B516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 623ea3e04e66a724c702d6f58cbd03c267dce6f3a108afaf8f1249546b8df44c
MD5 d95507df2010bbecf452fcd090aad2e5
SHA1 0ed25a32abbe9799589b9d2a9d6df24e7b5158a3
SHA512 6e18eb3a08ae973ad92d3b694810a8753be48961c071b78f9ba75fbdf9144f5f089bc94696bfe12e1ea2986f4191d11037603232f3f80a61a48c83451801d63a
SSDEEP 384:nLO0tNn/s3n9SfsNWgTAMalhX7F7skVHtXKfOObjI9G6w7O6Ub:LO0j+9UjbPh71Kf29Ma
TLSH
T1B5929D32A8795C7A9DD38655F0473A2F9FF4826B93C92F84D1DC6B0C02CB2EC5316909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f83a7a896a66f4afbbdd10cb30e705a729f1f3f1bd497d457c5c6d2b1d6fc1b5
MD5 040b163d51c54100a37462adec3aeeab
SHA1 1c7438e5823a9adb584d9636c4e7c0b2c72d8a18
SHA512 779ef8540c01280ed5322635eda7c1d1b907f487a2aeaf9cfe1666d44269858a75f52cfdaef45f8459804109eee62e3a5e29e924228f964186616e74b2dcb750
SSDEEP 384:nLO0tNn/s3n9S6sNWgTAMalhb7O7skVHtXKfOObjI9G6w7O6Ub:LO0j+99jbPO71Kf29Ma
TLSH
T111929D32A8795D7A9DD38656F0473A1F9FF4826B93C92F84D1DC6B0C02CB2EC531690A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e140bcf8c12ef3b58683ebdc865efb92e46104b7e562f5b957c6f10b55dd88b6
MD5 436bd46bffbbd723474c451218154cf8
SHA1 f21ae8bba7c35522b131a61dfd4ab9ad79db4965
SHA512 0668b007aca8971edc14fa358995977a50641e0635768e50776ee18780fa429680f5455c2dccccad9e6afcb0857ddda12bc55f944360073fcc48dfb503260272
SSDEEP 96:ZqONkmGQsjpfmUTmDK5ih/cIPURHl8h4otop5q5DMBhPwivh50xy0SFYKRAxcbsK:gONp6kDfQmiUy0AZ903YRQiKRQU6
TLSH
T1BD02E93568782CBB9EA3AE49B48737275FE5113BEBD52FC4D5E81A1C40D725C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

0a6dffdd-97f0-405f-b581-cb027db89986.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0a6dffdd-97f0-405f-b581-cb027db89986.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5d5dbbde8d6101d49954abb157b3029225ee433ff9e8b41fd0fdc7e0b43f1358
MD5 2f287d7996574fa26cac6a4ce496d4cc
SHA1 c53e0c925675e7346d369e93c91273ee86a71da0
SHA512 4d0fb63af592896aff689dfb33ce7c25b9781a653198f98f29d73781815600430c23150f8b37363516bf1030ccfa52dc271236bb698fd6cdacf93e5de4fe2060
TLSH
T13B412998B6E91158B3B36F5A9BF6A86D587F7C772F0A945D00110D4F0622A40C862737
MD5 SHA1 SHA512 TLSH

Submit Download

bbc694d9-43eb-46ef-b4ae-b9db64f61042.tmp

Path C:\Users\Admin\AppData\Local\Temp\bbc694d9-43eb-46ef-b4ae-b9db64f61042.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

d3ece834-5797-4fb1-91f7-ac3cf52aebc6.tmp

Path C:\Users\Admin\AppData\Local\Temp\d3ece834-5797-4fb1-91f7-ac3cf52aebc6.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1880643136\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1880643136\CRX_INSTALL\manifest.json
Size 962B
SHA256 5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a
MD5 e805e9e69fd6ecdca65136957b1fb3be
SHA1 2356f60884130c86a45d4b232a26062c7830e622
SHA512 049662ef470d2b9e030a06006894041ae6f787449e4ab1fbf4959adcb88c6bb87a957490212697815bb3627763c01b7b243cf4e3c4620173a95795884d998a75
TLSH
T1661121366E2FC4260AE00698DC51308AF92453ADD380850E35BCE42E5B744FA430631E
MD5 SHA1 SHA512 TLSH

Submit Download

ba4e84de-9eb2-4599-9e28-dfb2d0879131.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_518702599\ba4e84de-9eb2-4599-9e28-dfb2d0879131.tmp
Size 152KB
SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
MD5 d2e80cd29c43ea745d16284dc1f58ea6
SHA1 53fe0165f9f303b333be9284865c8a74f3553c0b
SHA512 375fd3e65b12f80b92a63c1cf6f0ace9fe878c1a0cb5179d869c99aad0cfde14715fd1499eab22a04f353e5f292c19d6a5aeccb43ec2ff5cd6878a5226b005ca
SSDEEP 3072:bHVqfst2F+fBXzSKmg3n0OIH1iCylcLMLgaK9enj59Ah8MuBX8Yk17CF:b1qkfBXG801idlcLMLgaOeV9A2XdBkda
TLSH
T1DBE3E13C3EDACD26C21B20F97F287587C54D8F17A10BA50BE14A84015A76B5E17E2DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download