Overview

overview

8

Static

static

3

DR1_us.exe

windows10-2004-x64

3

DR1_us.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    78s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/07/2026, 12:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    DR1_us.exe
  • Size 3.3MB
  • Sample260707-py47wse19m
  • SHA256 4a5ede8b23a192b6fc23b1271246d7fbb9c09a7e0fcd15a7094a6de36d6482c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistencespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies registry class 37 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 46 IoCs
  • Suspicious use of FindShellTrayWindow 54 IoCs
  • Suspicious use of SendNotifyMessage 45 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 24 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DR1_us.exe
    "C:\Users\Admin\AppData\Local\Temp\DR1_us.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1508
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:3356
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5996
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\ApproveInvoke.mhtml
        3⤵
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:4340
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2cc,0x304,0x7ff96fa4c188,0x7ff96fa4c194,0x7ff96fa4c1a0
          4⤵
            PID:5716
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,11581082022660329363,10148294813674572975,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:11
            4⤵
            • System Time Discovery
            PID:5916
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1968,i,2100574364782117791,422101602776753951,262144 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:2
            4⤵
              PID:2968
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,18223467947128536917,3337273877432489718,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:13
              4⤵
                PID:5592
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,17431486229564738333,15957728538723860600,2097152 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:1
                4⤵
                  PID:1884
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,12727865899129300711,5340664011714558684,2097152 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:1
                  4⤵
                    PID:2464
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,3759571069854751956,185069493689925633,2097152 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
                    4⤵
                      PID:4080
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,7980582071677362038,15462799909159800968,2097152 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
                      4⤵
                        PID:4932
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5148,i,8788952216642979252,8944225375168254372,2097152 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
                        4⤵
                          PID:3212
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,1826559991377522288,14083009327524334094,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:14
                          4⤵
                            PID:5392
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,16445389965341742621,8271091874250681558,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:14
                            4⤵
                              PID:3352
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,1620399423970864704,8438138418366767607,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
                              4⤵
                                PID:4108
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,7319802010121109644,16131354287461576924,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
                                4⤵
                                  PID:5048
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,7319802010121109644,16131354287461576924,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
                                  4⤵
                                    PID:2656
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,13990087946881011472,15510633637571942293,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:14
                                    4⤵
                                      PID:3820
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,3260181207856483644,16806477325737519283,524288 --field-trial-handle=2544,i,15199983160787549903,13725564337414567106,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:14
                                      4⤵
                                        PID:1844
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                        4⤵
                                          PID:3168
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff96fa4c188,0x7ff96fa4c194,0x7ff96fa4c1a0
                                            5⤵
                                              PID:5056
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,14700449278922248785,17660311692741400354,262144 --field-trial-handle=2320,i,11864240120806090648,7895801469784897735,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
                                              5⤵
                                                PID:1536
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,7776907805211693524,8630226548422845576,524288 --field-trial-handle=2320,i,11864240120806090648,7895801469784897735,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:11
                                                5⤵
                                                • System Time Discovery
                                                PID:3388
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,883095069934766658,8094402205587770845,524288 --field-trial-handle=2320,i,11864240120806090648,7895801469784897735,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:13
                                                5⤵
                                                  PID:5776
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,5754929208609599588,12177720213233576008,524288 --field-trial-handle=2320,i,11864240120806090648,7895801469784897735,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
                                                  5⤵
                                                    PID:1112
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,5754929208609599588,12177720213233576008,524288 --field-trial-handle=2320,i,11864240120806090648,7895801469784897735,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
                                                    5⤵
                                                      PID:1876
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,11028697569773180794,2042308012262119354,524288 --field-trial-handle=2320,i,11864240120806090648,7895801469784897735,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:14
                                                      5⤵
                                                        PID:4476
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,10528374067244933885,11984548290517330494,524288 --field-trial-handle=2320,i,11864240120806090648,7895801469784897735,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
                                                        5⤵
                                                          PID:2148
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,3942312159666895608,1323205643590749967,524288 --field-trial-handle=2320,i,11864240120806090648,7895801469784897735,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:14
                                                          5⤵
                                                            PID:764
                                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                    1⤵
                                                    • Modifies registry class
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:620
                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                    1⤵
                                                    • Modifies registry class
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:4256
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                    1⤵
                                                      PID:2448
                                                    • C:\Windows\system32\svchost.exe
                                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                      1⤵
                                                        PID:636
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                        1⤵
                                                          PID:2500
                                                        • C:\Windows\system32\svchost.exe
                                                          C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                          1⤵
                                                            PID:4624

                                                          Network

                                                                MITRE ATT&CK Enterprise v16

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                blocklist
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                • Size 105KB
                                                                • SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                • Size 280B
                                                                • SHA256 3f51b0e24e52d8511f72e348c132f84b6b8edb54027a5c8c4fbe2a976322a690
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                • Size 280B
                                                                • SHA256 a54d1be6da491be16ecc22dac3ad8cfbe4eabb017451e32c26f2904977fde58e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                • Size 280B
                                                                • SHA256 5fef950a684ea83d2019c2cc668db3faa672ab4f949d5a5c6e70f1e4826b25e0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                • Size 280B
                                                                • SHA256 f2d70000d3d2164409b093e3fee8d7a3e7c3db56313020c88f846d360e89aebf
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                677e496a-5663-4ff3-9aa5-913f68296170.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\677e496a-5663-4ff3-9aa5-913f68296170.tmp
                                                                • Size 1B
                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                BookmarkMergedSurfaceOrdering
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                • Size 6B
                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                BrowsingTopicsSiteData
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
                                                                • Size 28KB
                                                                • SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                BrowsingTopicsState
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                • Size 414B
                                                                • SHA256 f569a614f54887be3b4e49af14e3cff3e864d77c6d9c44249666904e6a31ac0b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                data_0
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
                                                                • Size 44KB
                                                                • SHA256 0b6e6addeda1747ff5f99d1d0d548b9e2461d938cd232277e2c6bfd95884d700
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                data_1
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
                                                                • Size 264KB
                                                                • SHA256 248fe60cee29f11e864529d0c26e609bbb81fe8ae5dfb5c252bd7c4d9c18b48b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                data_2
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
                                                                • Size 1.0MB
                                                                • SHA256 eb2aaf66f17388d91f746c727e06022c2334d1053687cca65a3b66e07a854042
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                data_3
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
                                                                • Size 4.0MB
                                                                • SHA256 769438631376bdf608a7913d6831bdac23bc0127bad6b9c094730a2aa97f7d81
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 3KB
                                                                • SHA256 2d7258dfa8719130d3edbbf6eab57cbcc289299806f7092903cc6a93dfc99af4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index~RFe59edf0.TMP
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59edf0.TMP
                                                                • Size 3KB
                                                                • SHA256 60366247873db7b8a3fb4f279f92354fd162b07aa10a20cd1648c8ca23f17c5b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                SiteList-Enterprise.json
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                • Size 2B
                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Edge Profile.ico
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                • Size 70KB
                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                LOG
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
                                                                • Size 346B
                                                                • SHA256 9da1b3d21e50dbc4b29add781a40dccffc49b3b77de7f728ae67b62344655ffe
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                EdgeHubAppUsageSQLite.db
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
                                                                • Size 32KB
                                                                • SHA256 47ee5b34fcd215ffc405e27577974e40d3b5d6617522a47abb38ac4636adef1b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                000003.log
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
                                                                • Size 342B
                                                                • SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                LOG
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
                                                                • Size 322B
                                                                • SHA256 c632460e6d1bbfd4129b29a16839ecb4dbbca173255c7137b07880f5d56881a6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                computed_hashes.json
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
                                                                • Size 429B
                                                                • SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                verified_contents.json
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
                                                                • Size 1KB
                                                                • SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                content.js
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
                                                                • Size 9KB
                                                                • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                History
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
                                                                • Size 224KB
                                                                • SHA256 f1e283c3aa485cebb90751614bb154382c0fbba98f7351122d43a21c7ff143f3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                LOG
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
                                                                • Size 331B
                                                                • SHA256 7fee72fb19ace3e59aa7013cd7adeacea837c47d42e29f35ae01cb599bbe91df
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Cookies
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
                                                                • Size 24KB
                                                                • SHA256 f2b3e2defc4b5fc43da094792394b6a5f3aa6d2eddc4cbf268004a13b630bbcc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Network Persistent State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                • Size 2KB
                                                                • SHA256 75cad7ffb0be95a905b92cff73ae2ee998c4e85b85797e526f9033e4dcc821ee
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                SCT Auditing Pending Reports
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                • Size 2B
                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Sdch Dictionaries
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                • Size 40B
                                                                • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                TransportSecurity
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
                                                                • Size 186B
                                                                • SHA256 982b3dd8fecccb8c6ad515a7b23b5ae4beb5d4997b385acedc89f850e14c2c11
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                • Size 15KB
                                                                • SHA256 2fc39859e7aef5f355c52e76301320c7c872c35fe7d0315057982e2763fb3c36
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                • Size 14KB
                                                                • SHA256 9b008fb91e80cdd0a054d880e6b708a250ad7d5fc5c596e6eb94ff1ee3fe787d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                • Size 32KB
                                                                • SHA256 4dd963a1f18b493898cc928ac0ba3d048f242ad71e6d349a0043e2564a4df991
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                LOG
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
                                                                • Size 338B
                                                                • SHA256 ee56848b85254c878e5a068b798c845b31164de467a16f6090976d1833c30717
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                LOG
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
                                                                • Size 350B
                                                                • SHA256 bc13c4337937b373393a6a588ed961fc2b9fe9b674211ab7ca1070101b77d11d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                000003.log
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
                                                                • Size 175B
                                                                • SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                LOG
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
                                                                • Size 326B
                                                                • SHA256 b06062e66886a2721dedc46cb70b8f27545c025cfdeaf14315c42285d9f404bb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                sync_diagnostic.log
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                • Size 3KB
                                                                • SHA256 f944a4a64c10c122325c1cfa545283e9f524ce7636395cf432371eba1025b587
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                sync_diagnostic.log
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                • Size 5KB
                                                                • SHA256 0a330a6ca3040e15d8b8ab578c79edec35402238fbc5b88f6d911acbae12d88f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Web Data
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
                                                                • Size 256KB
                                                                • SHA256 157f92b301b9b9169956762b67f775027edf0ef8dc54e0ae84861b3a755ad906
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                WebAssistDatabase
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
                                                                • Size 14KB
                                                                • SHA256 99b45c0e9019884b44853d0b047c6dd4304471e996c5658ba39d0ac5ad9e2c64
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                favorites_diagnostic.log
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
                                                                • Size 337B
                                                                • SHA256 a5d88dc68b68a91505b4258faa72c7a8b1ae7c8ad7e6f8626357730bd705265c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                000003.log
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
                                                                • Size 12KB
                                                                • SHA256 253eaed6572d14190f1c7b76701eb3dde7d1b1daada9fc06818ff95fecb73c0f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                LOG
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
                                                                • Size 319B
                                                                • SHA256 c332f16a4913487a6f3229a3cc94106ae94da8557c4ea4da02c91236afc177d0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                000003.log
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
                                                                • Size 1KB
                                                                • SHA256 ae2f5178e49f0b1ef80719dd26253cb25e891d0fabe2047930f28a274591394c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                LOG
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
                                                                • Size 337B
                                                                • SHA256 99879cf422a1323e5b0dd24240c6f235b63e778d4b1d909d7f2de213872dd36e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                919a8953-e329-4566-ba8a-e95dbfe62b0c.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\919a8953-e329-4566-ba8a-e95dbfe62b0c.tmp
                                                                • Size 22KB
                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                OperationConfig~RFe5add71.TMP
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5add71.TMP
                                                                • Size 3KB
                                                                • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                data_1
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
                                                                • Size 264KB
                                                                • SHA256 81964f858b852563a62f881f9aaca2f30fb03b43c7b24a3d9c810144e49286d9
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                data_1
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
                                                                • Size 264KB
                                                                • SHA256 3f0311ca729a3b1a75666b4c69463317caea32d87dd31c783ee4d4b14250f770
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Last Browser
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
                                                                • Size 120B
                                                                • SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Last Version
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
                                                                • Size 14B
                                                                • SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                • Size 41KB
                                                                • SHA256 916dd5b8c7ed88251e27a3a387ede165c0cc48e60043bb17d4fba8f8a3f10fbf
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                • Size 41KB
                                                                • SHA256 8f19d1a9b4ad82f8975bfec29fdea64ad69a3f0eb69642c096b45f72f5518b93
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                • Size 38KB
                                                                • SHA256 27bc1385a16b8138db02f7c26407e6aa93f3395a31262ce7520ac15cf00eec18
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                data_1
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                                • Size 264KB
                                                                • SHA256 a7c764385a9c14f418b9d64ebf66a7dafac0092c2ea94d7e6c644532ff731edc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Variations
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
                                                                • Size 86B
                                                                • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                2b46d52d-0ce3-49b4-8176-d59804f1d9f8.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2b46d52d-0ce3-49b4-8176-d59804f1d9f8.tmp
                                                                • Size 13B
                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                prep_Activatable Class_Hermes_perf.cache
                                                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                • Size 599B
                                                                • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                prep_Activatable Class_Hermes_perf.cache
                                                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                • Size 607B
                                                                • SHA256 7c21835f01895c1ee4e12f81e71ef06a0f6e2b9281de493ff8ec95f913e9680d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                content_new.js
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4340_252860988\CRX_INSTALL\content_new.js
                                                                • Size 10KB
                                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                memory/620-66-0x0000027E74880000-0x0000027E748A0000-memory.dmp
                                                                Download

                                                                memory/620-21-0x000002765ED40000-0x000002765EE40000-memory.dmp
                                                                Download

                                                                memory/620-892-0x0000027E7ADC0000-0x0000027E7AEC0000-memory.dmp
                                                                Download

                                                                memory/620-736-0x000002765ED40000-0x000002765EE40000-memory.dmp
                                                                Download

                                                                memory/620-1010-0x0000027E7DF20000-0x0000027E7E020000-memory.dmp
                                                                Download

                                                                memory/620-34-0x0000027E744C0000-0x0000027E745C0000-memory.dmp
                                                                Download

                                                                memory/620-44-0x0000027E64440000-0x0000027E64460000-memory.dmp
                                                                Download

                                                                memory/620-32-0x0000027E64050000-0x0000027E64070000-memory.dmp
                                                                Download

                                                                memory/4256-197-0x0000020EE7770000-0x0000020EE7E01000-memory.dmp
                                                                Download

                                                                memory/4256-680-0x0000020EE7770000-0x0000020EE7E01000-memory.dmp
                                                                Download

                                                                memory/4256-1217-0x0000020EE7770000-0x0000020EE7E01000-memory.dmp
                                                                Download