4ed851010254b447e0fac35b5785682208fc81266071ba34ba2c3c8a3eb58c0a

Resubmissions

10/07/2026, 00:17

260710-albx9abt7p

10/07/2026, 00:16

260710-akzb6abt7j4

10/07/2026, 00:10

260710-agetcaa18n4

Analysis

user interaction
yes
max time kernel
171s
max time network
165s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 302KB
Sample260710-agetcaa18n
SHA256 4ed851010254b447e0fac35b5785682208fc81266071ba34ba2c3c8a3eb58c0a
MD5 8b08d0e0c8e35bdb6806d5800ebec1c3
SHA1 87d1431b237fbc8ef6df8c078f4a57b0607d8518
SHA512 5ec8ba049bc160dbeb9665b12602144164536a1cdd1c2a90ec8a2e27072117e4835496a37cca8fd71ef832c9e382b46f9aa21ab7cbcec51ece2702153ecc8c5f
SSDEEP 3072:J9M15OzqpPSUMIqawpFlrzz0ImThSzvi0b16Qa6tbIieXFJN5c14:J9M15OzqpPSFIqamzg0zJJ6ybIF814
TLSH
T195646B326340B53BA413DE90E6BF6F4E3C39E12BDC1646F8A692E470CBE2EB5140565D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery persistence ransomware

Malware Config

Signatures

Drops file in Windows directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4976_1847877718\manifest.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1780	msedge.exe
4876	msedge.exe
4464	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{B83EFEF9-7BAE-4863-B2B9-FC6A68D3497E}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{B3372D9E-2B45-49C9-80C0-A5C792EB2435}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{26F6427A-EF9C-42F7-8C6C-EE0DFB682DC1}	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
4976	msedge.exe
4976	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe
Token: SeShutdownPrivilege	1300	chrome.exe
Token: SeCreatePagefilePrivilege	1300	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe
1300	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3936 wrote to memory of 1304	3936	msedge.exe	86
PID 3936 wrote to memory of 3332	3936	msedge.exe	87
PID 3936 wrote to memory of 4876	3936	msedge.exe	88
PID 3936 wrote to memory of 3332	3936	msedge.exe	87
PID 3936 wrote to memory of 3332	3936	msedge.exe	87
PID 3936 wrote to memory of 6052	3936	msedge.exe	89
PID 3936 wrote to memory of 6052	3936	msedge.exe	89
PID 3936 wrote to memory of 1036	3936	msedge.exe	91
PID 3936 wrote to memory of 4632	3936	msedge.exe	92
PID 3936 wrote to memory of 1036	3936	msedge.exe	91
PID 3936 wrote to memory of 1036	3936	msedge.exe	91
PID 3936 wrote to memory of 4632	3936	msedge.exe	92
PID 3936 wrote to memory of 4632	3936	msedge.exe	92
PID 3936 wrote to memory of 4340	3936	msedge.exe	94
PID 3936 wrote to memory of 3432	3936	msedge.exe	93
PID 3936 wrote to memory of 4340	3936	msedge.exe	94
PID 3936 wrote to memory of 4340	3936	msedge.exe	94
PID 3936 wrote to memory of 3432	3936	msedge.exe	93
PID 3936 wrote to memory of 3432	3936	msedge.exe	93
PID 3936 wrote to memory of 3796	3936	msedge.exe	96
PID 3936 wrote to memory of 4260	3936	msedge.exe	97
PID 3936 wrote to memory of 3796	3936	msedge.exe	96
PID 3936 wrote to memory of 4260	3936	msedge.exe	97
PID 3936 wrote to memory of 5404	3936	msedge.exe	99
PID 1300 wrote to memory of 4756	1300	chrome.exe	103
PID 1300 wrote to memory of 940	1300	chrome.exe	104
PID 1300 wrote to memory of 4464	1300	chrome.exe	105
PID 1300 wrote to memory of 940	1300	chrome.exe	104
PID 1300 wrote to memory of 1948	1300	chrome.exe	107
PID 1300 wrote to memory of 1948	1300	chrome.exe	107
PID 1300 wrote to memory of 1432	1300	chrome.exe	108
PID 1300 wrote to memory of 4552	1300	chrome.exe	109
PID 1300 wrote to memory of 1432	1300	chrome.exe	108
PID 1300 wrote to memory of 4552	1300	chrome.exe	109
PID 1300 wrote to memory of 5404	1300	chrome.exe	110
PID 1300 wrote to memory of 5404	1300	chrome.exe	110
PID 1300 wrote to memory of 4912	1300	chrome.exe	111
PID 1300 wrote to memory of 4912	1300	chrome.exe	111
PID 1300 wrote to memory of 3040	1300	chrome.exe	112
PID 1300 wrote to memory of 3040	1300	chrome.exe	112
PID 3936 wrote to memory of 4976	3936	msedge.exe	113
PID 1300 wrote to memory of 5164	1300	chrome.exe	114
PID 1300 wrote to memory of 5164	1300	chrome.exe	114
PID 4976 wrote to memory of 3728	4976	msedge.exe	115
PID 4976 wrote to memory of 1952	4976	msedge.exe	116
PID 4976 wrote to memory of 1780	4976	msedge.exe	117
PID 4976 wrote to memory of 1952	4976	msedge.exe	116
PID 4976 wrote to memory of 1952	4976	msedge.exe	116
PID 4976 wrote to memory of 2652	4976	msedge.exe	118
PID 4976 wrote to memory of 2652	4976	msedge.exe	118
PID 4976 wrote to memory of 3904	4976	msedge.exe	120
PID 4976 wrote to memory of 3904	4976	msedge.exe	120
PID 4976 wrote to memory of 3256	4976	msedge.exe	122
PID 4976 wrote to memory of 3256	4976	msedge.exe	122
PID 4976 wrote to memory of 2112	4976	msedge.exe	123
PID 4976 wrote to memory of 760	4976	msedge.exe	128
PID 4976 wrote to memory of 760	4976	msedge.exe	128
PID 4976 wrote to memory of 4556	4976	msedge.exe	138
PID 4976 wrote to memory of 4556	4976	msedge.exe	138
PID 4976 wrote to memory of 788	4976	msedge.exe	137
PID 4976 wrote to memory of 788	4976	msedge.exe	137
PID 4976 wrote to memory of 5924	4976	msedge.exe	127
PID 4976 wrote to memory of 5924	4976	msedge.exe	127
PID 4976 wrote to memory of 760	4976	msedge.exe	128

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x2c4,0x7ffe1dc9c188,0x7ffe1dc9c194,0x7ffe1dc9c1a0
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,13695520167402630043,12069582152569219910,262144 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=2848 /prefetch:2
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,10793884948619081154,12180483305955692560,524288 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,4062050816950799703,9150095558994973606,524288 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:13
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,13391883116835089961,16911285052052876930,2097152 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,1298785437339308443,12057402161537594097,2097152 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4388,i,6933080983326804236,2061401558950460547,2097152 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4400,i,10997997712047730529,16818697103004413834,2097152 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:9
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,3270993190958092524,16770427618573605347,524288 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:14
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,1713765649490971523,2168914381429686183,524288 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:14
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,10576389245960307672,11440372209959950585,524288 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,10576389245960307672,11440372209959950585,524288 --field-trial-handle=2856,i,11145854421772119794,15630489597438930725,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x2dc,0x7ffe1dc9c188,0x7ffe1dc9c194,0x7ffe1dc9c1a0
    3⤵
    PID:3728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,9987601380919037998,3393177604797001777,262144 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
    3⤵
    PID:1952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,16481617240814311160,14325358870030554014,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,498055072852115556,11537634122730770196,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:13
    3⤵
    PID:2652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,18206090370710339155,9173759882601832771,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:14
    3⤵
    PID:3904
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,512391028520505523,18440194180858770768,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:14
    3⤵
    PID:2888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,15188990677285415780,2311644200920743142,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:14
    3⤵
    PID:3256
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,512391028520505523,18440194180858770768,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:14
    3⤵
    PID:2112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,17263831806372515672,12389215521024765942,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:14
    3⤵
    PID:760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4668,i,5007428696335301932,17161132670137894252,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:14
    3⤵
    PID:4556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4604,i,3764747479467685704,6284102105867015460,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:14
    3⤵
    PID:788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,3630628883808410034,4075781208261473400,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
    3⤵
    PID:5924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,11801404210887211084,17246019869297859794,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
    3⤵
    PID:760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,7275897931334607792,10308505789919887896,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
    3⤵
    PID:6720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,12053472557172430545,15447158708912893198,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:14
    3⤵
    PID:6372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,968787905921117784,6433794973388041291,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
    3⤵
    PID:6388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,13256742255741097121,4172172137349308546,524288 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
    3⤵
    PID:4400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3608,i,12449828782083720465,1379881372374822545,262144 --field-trial-handle=2220,i,781122919699304276,9096492469141237848,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5956

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2372

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3356

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0xd0,0x134,0x7ffe1cacc728,0x7ffe1cacc734,0x7ffe1cacc740
  2⤵
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1612,i,8792671622572454437,12122120610698891686,262144 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=1928 /prefetch:2
  2⤵
  PID:940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1852,i,5406588827192944615,1140859233523069004,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=1976 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,530611107333095061,12230548352810516930,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:13
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,2671547974329872441,2010318536434925718,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,1321295374084568512,16955755190069888201,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4720,i,4462757890987230352,17094568572665626276,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4856,i,3213841387502997847,18152792192846658881,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
  2⤵
  PID:4912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5008,i,5391030737723864343,1658736628740310229,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5172,i,5364249800057580080,18423201606778088218,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:5164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,304342609802311356,14349874450092831539,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5488,i,6650546826865018463,2977360353427058098,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5524,i,6639698017025407472,1244789755764346981,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5592,i,8461818963154433074,90561460942845879,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5576,i,9595278124174722271,10691112681543576914,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6072,i,10918504930998089864,12155534949470184026,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6076,i,4685307044696647260,9728751101655796867,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6204,i,8443607792978858175,7779509941285943216,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6332,i,1613246444716470700,842486549637183567,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6360,i,16061619328530792881,16077999283175756101,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:14
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5560,i,10355944805911417596,15333627374343962407,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:6316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6040,i,11962797803193718751,14704631600163387253,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  PID:6616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6268,i,5423562683831528015,8059417159029873594,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:6928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6188,i,5760208734783459147,10794289176754477763,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:9
  2⤵
  PID:6308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5856,i,5476042426086135788,12310324650322883691,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5696,i,12495909806358924475,15158207575890181387,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3720,i,8951111669340351657,14311062944506707417,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:6284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6160,i,11652994572670649381,5799647290592472459,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:6368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6080,i,11232926651433413318,2206902959038870106,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4704,i,8524292479805385296,17289091472350137786,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6364,i,11203853654719548524,18273215997709875917,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:14
  2⤵
  PID:6500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5796,i,10304898406971414870,15559242477295543451,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:14
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3644,i,14972077780331430622,13792037049201660342,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:6524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6676,i,11420318065190517951,6233735744579115882,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:6964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6060,i,16205794573824289356,16859678435566727473,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6156,i,6084952940575782217,14671850587587004248,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:6672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6212,i,14820580533702424138,10668103597373754918,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:12
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6888,i,11864939286368278285,3129624135155032520,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  - Modifies registry class
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6640,i,17774832780320848557,632208646266056392,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=5208,i,5190871648942614735,15704646423533870196,2097152 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5804,i,10679712738446200136,11399652045732841884,524288 --field-trial-handle=1936,i,14937857501281056020,11008482466073952094,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:14
  2⤵
  PID:4224

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4452

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3408

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:976

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6848

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k SDRSVC
1⤵
PID:1824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

24ec5adf-803d-45d4-946f-ce511407d81b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\24ec5adf-803d-45d4-946f-ce511407d81b.tmp
Size 11KB
SHA256 62dff21d685a8b16b79b55d7535de1ac127926a0e39d3b65af1686d394c6a653
MD5 94388e035e52b5261b44ba80898d581f
SHA1 12201e9d18f961aa2e685a6878301c41b2b69b77
SHA512 fb1ba0c90a6b76f54027bbaaf2f6219c9fcb49ea643327f46a6d9295b717ee9df0caee909145a4381a170d68903db60c0f067ef5591a856c7b23cc914a658237
SSDEEP 192:pRdbcBzH785v7+TAPRp2/oX9pHsb+WNnkXj4MXrejTAtVyIsnAUge:pRdbmzHwZ3XrTwsjvrew7e
TLSH
T1F032966FB914663B6DCBD21AF9667793E3F5002226902E84E7FC8A2C11E79CC7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 82KB
SHA256 f2583aafb9fc2980cb1258e8c3793d0742d300a8e39fadcbfd3d8e08d8ac1d24
MD5 3652a76dc3fb1636f920df562f70c04e
SHA1 bb574e66f2e1a5cd1aeabdb9da78a02b921ef95c
SHA512 d14debad1f36bc997f6e2ecf02d0748a637242097a37b0e6a880fe2683d46415354f2c2eb977266c60351cc3dbf1cee01309b612c1b2f800f476d52cde191ac9
SSDEEP 1536:W248HsAatptwxKNCW/B7v4gvEwzs10ZfvTYASj4KlVk1NNZg/g:WzIzwtwxKzp7vywzTrYHj4KlVkHbkg
TLSH
T1348312F4F7D4E6D9DAC2776EE3C4C184B0F219327DDC1B6A4D3289A49546E203E14E4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 2444d338666b2cb010f4021c1d6cd5164ed6fa9d112947ce4ffb58230afc4fe3
MD5 8d75a263660f213416028d7dd3653c24
SHA1 3ae4bcdffa1a93f883090f33b6e22b7dbf6f56c4
SHA512 57f79c930d645ed00cf6aaecbbc5b5b3b0761ad83bfaada3acb9fbeb4bc11b9de5133f8cef04131d265b078db0e204715b4a31b298c21a19718f992ba77bc208
TLSH
T157414F2DA1DFC8C6EF5C38B305978C715826784408F18B6782A38A8F67133F2E4F6412
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 6fb6bb3563a516c5f89cfd994743e0d2db1ea5dec8271a1cd45917bba711e065
MD5 92170dcbd32be2bcc832c11759c4ab54
SHA1 d2e5571e7f6c461c36716d2c1dbadbb11aabbff4
SHA512 5ec4484e094ee628b95f4b7a4b19139a68a085fc7c87708abcac65d9b545c66dfe3b912c845c9dc3135200dd8e13c80d225173a6a3af2582e2949a4f765db1ce
SSDEEP 192:Ds6PZfSfHJiJRJzMqBO5BeeL92PzPJaYgMDVUUaPULvvVICVIyRIjmII+fPiDrwu:Ds6PZfSfHJiJ/zMqBO5Bee52PzPMYgMX
TLSH
T157329FF7C3D8C52D881116F89B256F2FCE191A28432D3C36C9D8BE5BA3E2432D21565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 703fd3aa8e131268574ba61754f34c20afcaec216a8a3520eacf3a0c7bc89bab
MD5 7c3d6863d8adfea3b159eea95a4b540f
SHA1 ab1982be686b36f925e1cf6e4b7b86c7f26def1b
SHA512 67e8cb1821f4a31bfdca8d19b484a6e7032bda7804686ce7e80066fc2b5c306c3b08e97cff1576680b9d8802e660dd40097be9185411fe280bb26cd63a5a01c3
TLSH
T141217F97E57E7857207E89AF2D04B4066EAAB439069278F0DAD6816CF0D15FB1B12016
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 ef6b471c15ae4ccea6c8a3f544125b3ffb580ff1f9a231361ee7c5940586b9b3
MD5 fc91497a180c0694261541ad700c5738
SHA1 25f6a801f65e982fa029c73ede829ef25970e92e
SHA512 8a017901ecc7de9f3f238b11331cc7678d0039c2970fd12c7c1b4503d4629e601637c7d6dec6716bc3e1b68ea23e9a3296ad924999c10c36a2310424e243d01e
SSDEEP 192:pRdbcBzH78mv7+TAPRp2/oX9pHsb+WNnkXj4cXT2DTAtVyIsnAUge:pRdbmzHwS3XrTwsjLT2Q7e
TLSH
T14A32966FB914663B6DCBD21AF9667793E3F5002226902E84D7FC8A2C11E79CC7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 11ea4feaa1eec47de43db2b9cf3d9947774a8db6b2a279043940a1b3f0d9cf72
MD5 a37183c71b0f134465d890080b280ce1
SHA1 67d77d2f14603f49ed3ac359e2d233f4da036f7b
SHA512 2fcb88825c35b4e9f1046f7ecfa5a8a5622390effeb2fe8e5a107233f16d8164d7ead9b1eca053bdf7e3896ddedd0e02169c0400b43e81fc0cce90f4255cb3dc
SSDEEP 192:RRdbcBzH7ZFv7VTAPRp2/QY9pHsb+WNngXnBrXIu2TatVyIsnAUgE:RRdbmzHl1sXMTw4nlIu97E
TLSH
T12D32966FA9146A3B6DCBD21DF9667793E3F5102266902E84E7FC8A2C11E79CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 38c22c7ed20d04356e76aca1a14e762e9f2c77836e9ebbffc8e2fda7d325e89e
MD5 5f02696b2df718132f39773eaeb6ec0e
SHA1 fe0097f54baff02a16c5dc0c1c4887761a832b81
SHA512 f8449d87183fc4f83dac02654f2006918911be1d522d8c6cc2da3b8e41b2485ea13be2c4c86f816a4ba52912b1bb7f751a95d8fa41a93d890512bfc0c87fe513
SSDEEP 192:RRdbcBzH7ZFv7VTdPRpL/QMF9pHsb+WNP+gXnBCXZsgTutVyIsnAUgE:RRdbmzHl1HXJTw9nEZsF7E
TLSH
T11342A66FB8105A7BADDBD21DF9657B93E2F5102226902E84E7FC8A2C11E79CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 a44433e6a434b726c68b1c4c892720c7ce7bb4552c79e4af661d35d2d9d74fce
MD5 da244cfd763472e30d4719f47c07bdec
SHA1 97f314fcf229c2a81f1cb778fecfe1a7dcca2b34
SHA512 4624a1aa0693c5a407b696dd609f8ac45e4d22eca4a9952aa6e7fd48854a5082a3582581638e638492abae7ffe0fb3cbc599d9d2c937abffd2ea9120ac61bec7
SSDEEP 192:RRdbcBzH7ZFv7+TAPRp2/QY9pHsb+WNngXnBGX9EnTatVyIsnAUgE:RRdbmzHl13XMTw4no9E27E
TLSH
T11732B76FB9146A3B6DCBD219F9657B93E3F5102266902E84E7FC8A2C11E79CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f402e17f36bf9361c9c9d64cd3da4afbad0bf348e5eb48fbb2d5e22e43ca7643
MD5 a272c2d53db2cf25bb92cecdabb41517
SHA1 919dbe9ccc7f9110b2bb26438cebb678b1d460f3
SHA512 e0c61c49bb26b7fc89347334a8ccab10a3410264de90cda77a0657c03bef36434e2540a10f2de52a9fe0464ccc1e54b8937629db693ce311a53bedd34da7a3a0
SSDEEP 192:RRdmcBzb7ZFv7VTdPRpL/QMF9pHsb+WNncAA7gXnBCXZOJXe2+TuIPyIsnAUgE:RRdmmzbl1HXJTwBnEZUe2XSE
TLSH
T16142B86FA8105A7B6DDBD21DF9257797E2F5102226D02E84EBFC8A2C11E79CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a0002fc44cfb9f5440ef4c7d378e458eb21b01e993aac3fee2b5d0a5f90886f9
MD5 bf2c811a9b686ea6155f47b98836c1d9
SHA1 50bac638b4117585028594fe132eb65517f795e0
SHA512 e943ea14936c9d6894e43e027c31338c7bf1efa62f6e09d3183471d58caba456e247f11ae317d4dc0f2b09145d725131f0d67c157c0624e8cc98ab9b03db6170
SSDEEP 192:RRdbcBzb7ZFv7VTdPRpL/QMF9pHsb+WNP+gXnBCXZOJXe2PTutVyIsnAUgE:RRdbmzbl1HXJTw9nEZUe2i7E
TLSH
T1D142B76FA8105A7B6DDBD21DF9657B97E2F5102226902E84EBFC8A2C11E79CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 48651feb83571832e9234796d05ac1e9f55444a9b100460f77557df7cc109849
MD5 06f1f23ea67726271dab188fd3525892
SHA1 4539a3b6da03fd775e15e3b498aa42c87d682a43
SHA512 0d62ead15c3533bdbdb772f0698fb347535e5a0643145f3d64ce7189d05bef845d27ebe1ef544d73dbfe2557e930d0141c98d3fad0a036a289b51b28730c846e
SSDEEP 384:uEjEn7KxkXqKf/pUZNCgVLH2HfgslLtXODEL+ErU3+kHGqnSxLf:uIEn7KxkXqKf/pUZNCgVLH2Hfgs9JOwz
TLSH
T10C52F927644D9A7F0FC8D54CDC577F4FACB5025B66A8482857FA5C0803AA7CB124A2E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 376fb9559c461bb3761725406c827bc0a8092bff0339863b7b8707971f273543
MD5 320cc9a59108a529ca484a7f4bd4eb95
SHA1 f49c1cabaf3a1dfae3f190a8ca02594cdb6717a4
SHA512 9e73297dd3fa6225ee57579d147effd4db1aeddfcd3df4ee251d90f4b1c6bada839092c89ba815d25c2fdb189a086ff6fd4110a940c50e3fdf00e0ffae61f6f9
TLSH
T16CA002140AC14883D8541671568943C523205C5057B2C73781950054ACA33D2E245202
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 c51ee59b81ad4b2547b2d3eb663ecae4934f0d1510ce104cdf107d1677e7d7ca
MD5 b1c2897bacac4d3374ab757a6941d36b
SHA1 efd486a1c61d3834481dfc4f3e2a2df2f76a7d78
SHA512 e132a0842204b6990b78e24f6da116c9730c399030dd62c8c39572f45b30c16da70ca562f4563195843de8a2ca14292d1dd2efc1f4e7264031d36bc2d9b477ff
TLSH
T11CA0025452C40415ED00C3F46071068133E158543D57530794B624CE989B3C24235A41
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b00c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe59b00c.TMP
Size 48B
SHA256 e99f93d97a4d90300aec9b9ecc8f4453c7441116e7183ab3820b08c187f27097
MD5 966c69d32f64a374319e5bfa3165e3d2
SHA1 a81a4b560108310104645ce18f70ec1fc89b1f8c
SHA512 21f237c6dfb05b28110b136fb1c358a698e30dab03f37c5079da6150a388ce481006561dc1fcc2ac95e8ea1eac6a139931e47f559815359bb4f6c5f2aa16b1ae
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5aafc9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State~RFe5aafc9.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\508bcfd5-0b05-4e59-94f7-eeb734f5040c\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 150B
SHA256 9f5cac39bff639b5e7848673e1d77ff6c3fe3f57dc106689542f20305aac588b
MD5 6275da36f0b978756eac9e73045731cc
SHA1 6d3a73d9558873a10d610c9369045df563c37dec
SHA512 1e889a9da62e939521b1eb43721c65209fd5919e14c694d4c492286b29aa740d48daab8f121bdd1a119f2633bff348b8697099a302274b698ebe810f7eae0483
TLSH
T173C04CE71820956F967899D8206C761DD55B854C8CC5CCE8940551422578B63440996D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 234B
SHA256 e561498d150b5efedfbade643383189a4c789735ffee3e7da54f85717cef3669
MD5 2318798013e4dfab9de2dd69e3842449
SHA1 444cbd296a297f7faac37c3bee5c54dd70372eb9
SHA512 2fbacb381b8eae2c7b7dd7f317c98383a4663cf96ff6e8d9911dcd5128076f026159112c26672370f04030f092ab0689e70c7373227479db8c8af7b7f7efda18
TLSH
T1D9D0A9EB14719A2BA23CD9D82028712DC467ED0CCCC9CCD89804B28235B8B23804A9BD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59f737.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe59f737.TMP
Size 157B
SHA256 d4daf522c726e03809c434340954ebf05450ffa10f9cefaec4e971dd5ae1116c
MD5 91cb30f6aa5e569b01a3be4fa041a9ed
SHA1 e5d3cb98f5eab73886b0a5f00a073a4e4b021a4b
SHA512 9a157424fff3eb2d4b7838381e64fcea2bc70032c9de7449c230845b815221257f891dafe204557c0c317d91c236b044a7e68adc111bd9bef42311e3f4307efb
TLSH
T1CDC04CE71820556B977099D5206CB65DD55B8D4C8CC5CCE8980671423178B23454996D
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 e3d934f63b5f4941b836667252d65fbea21190c7248235cdb4e4296a3a37af68
MD5 4f60b7d81930e5c8148db2e6d3901172
SHA1 71f3901aed5532921ba50bb84b29b1c6c8db23f5
SHA512 cd9b83a73bfa6c382c39743e012d9f5a1c1de2dfd3ac1d63d96c36da97dfd37daee1b52861ff9dc6ff35aa7d6ec5f952353c944d74ad250e61e4fea955da0c0b
SSDEEP 96:mC67d+Ar2aetJRxW2rgj0+f+U+/EfezeRDotok5kVD0B6JGyvTNm6zj6+PEhiv4a:mC0Nr7OJRPrL9/EtDUDO49Imgj6+shM
TLSH
T1FBA12932657E5CB75AB7C449B5563B03DFA4616B6A21FF84D9ED2B0C20A70DC1382A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 122KB
SHA256 6e34867d5335b0095f0bfc4d3c38e355578eda865fc6416dde22742d02eb3710
MD5 b5c37d92135ff6e967309dd2bdd2001d
SHA1 216baf92fb48c7a79faeb913c174e663acb9a516
SHA512 d4ce02eaf7f9a71efcd0a026e52aa6fe1e3aa0b8b454147842a88928d1bb7f1b14549e24121148e1c1c4ffcd39c7ae6b78cc49193df04f7265a10397404589eb
SSDEEP 3072:MxLPVqcG/evTgTSAou8VOulWhIuEQDYNiHS0VqURvG:wLPlRvTo+OulWhfd8Iyio
TLSH
T19BC31274AC6F5D65497B8D2B7C6375020CF4AA7CD848C58DB27972CFC503CA803AADA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 121KB
SHA256 916baf6a9a97f3d7ff3037ce83ea11c5478335c5958c4eed4f52c7fc479f9060
MD5 89a4f93124410e989c4cb274ca43822e
SHA1 2c367aa36e0acc039cd80956044cda443db0d28a
SHA512 d96b6e9b6e62712ace730d9ca2dacaa1cdfdef26a147fe0da93c874f052e5ba547a94aff038bbf2676ab30e63e73828173a82532985ee3f40bdbb170222c0edc
SSDEEP 3072:ngPVqcG/evTgTSAou8VOulWhIuEQDYNiHS0VqURvG:gPlRvTo+OulWhfd8Iyio
TLSH
T197C31234ACBF5D66457BCA277C67B5010CB4993CD444C68AB2BA63CF8503CA503F9DAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 121KB
SHA256 95363e5371cfda02f79a1611c80e05601ebae6e41198f3806b7095b0c0a4f8ea
MD5 f570eb49a387e5ddc4516277d1dc57f5
SHA1 cb6fd5e0f2010340a63674e803b1017d43a302e1
SHA512 fe30ba97fe67ae7213d7b2c56cfa58cedb7adc8a5a1c99a78b29346290e5b1e195efd21e703fae7fa416c277503f909311113d57e856d7b5ab8e4b8dd8830ade
SSDEEP 3072:M/PVqcG/evTgTSAou8VOulWhIuEQDYNiHS0VqURvG:CPlRvTo+OulWhfd8Iyio
TLSH
T1CCC31234ACBF5D66457BCA277C67B5010CB4993CD444C68AB2BA63CF8503CA503F9DAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 122KB
SHA256 de6c337563fea5f30fa7346c2d0de976c7b6c99fbfeb6ba776b6d13dc4904c9b
MD5 384a35c60fa62c70a60d378da233efe2
SHA1 d342c4e3f7375c89f14e421b3ce8bd2e38266f17
SHA512 2a1a90305660269b2390935a13660da6516ae9ea0e22b94bc345f1702f6009d768131c92c0a49ceed7eb497cf3fc4160028e079c5cbe79867edf69ed1aaee5a7
SSDEEP 3072:MV4PVqcG/evTgTSAou8VOulWhIuEQDYNiHS0VqURvG:u4PlRvTo+OulWhfd8Iyio
TLSH
T1D3C31274AC6F5D6549BB8D2B7C6374010CF4AA3CD848C58DB27972CFC503CA803AAD9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 122KB
SHA256 fe2fc07f48765d8e68fd4e1fa664655465e8cd76c34ec341d62d85927af86b8c
MD5 d95a21ebb75ee75da29612e3a3155936
SHA1 1f00050a1572d186354ad62a0b088c2ef6ddc6b8
SHA512 a15328accf9a18f3ceaa0a0c7946dc4e2638db0de56d6aead8dc50ce8613aea194a5a468a0e4dcb81af9b8260c392251193b65db21ab47a03e43a005dd81555f
SSDEEP 3072:MV4PVqcG/evTgTSAou8VOulWhIuEQDYNiHS0VqURvG:G4PlRvTo+OulWhfd8Iyio
TLSH
T1F0C31274AC6F5D65497B8D2B7C6374010CF4AA7CD848C58DB27972CFC503CA803AAD9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9b4e5895bd5e70a19ec64e3d2313f1b3a8d07193630f8f85b4fa460e14fbc49c
MD5 cfa1e350547d0afadca8b915ca77d011
SHA1 25861abceb7b0fbb6cec277059e53bd24ce446d2
SHA512 65263f71152c9a5f9c8ccddd86167e2a2cf9aeddf83ef0b92bd0ce688e4693b76117e8d5424ec56a0824569c2f701c5ab7b012a0d7811f8e0184b459650c7862
TLSH
T189D02374773DBDC6C72D217685348B007629955379974317AA50980D8C7FC82DB867F3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 94e24b0f24e413e13cd89fd63325b50cbef762a7f5ec6584f9947eadd71ded6f
MD5 3e33ac5a8095eb96abc91f1266ce1353
SHA1 7c54e0247e1263335f89fc7846292ad076233637
SHA512 5d3145adfdb1cd8ca5255a0f077bcc516182c9487b506f57d43641bc527f752cac5e88b4b6bab97064b5062f644426fe9f65b5aba2b0bb800d78692c0f3d7b74
TLSH
T18ED02370333C6C02CB0B30315010C310335293007C4AC1338660500C4C3FC81CB4E2A3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c281c67c29adc6f9733e2ef4463c6aa5a4cbce44ae7928369bf1a09d867fff0b
MD5 84332821722ad7e0ac0420dfb7b5596b
SHA1 7c7bd429655ffc93132dd28e87c871332be045b5
SHA512 6b7e0e59dec189730566cac2e271fbd124c04d20c6433ef6a5354ed9495540b38acdb502e7e8a98a9ce44818927fd30c978a7d8ec47302d47f2ad70ddf333303
TLSH
T186E02BAECC31ACA749F90B1959644785F64013272B50854F7A3D91188FF463A064196C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 b1092918c50a56b94556bd0d0e0cd0a9e32aec746a465c3990e13292b27283d5
MD5 6dad24f7411cb74e1f74c812f81f1343
SHA1 46e5aab98729a6c0f66fa9ed621aea3231f648b5
SHA512 e85df4a837183d51c11edce1b605cbee0ecd231e89534f670ff3f18b3351e676490fdb5732baaa5e998945d8d06b4ad92f8a5ff46dccd2dc3f491e8c2e09e78c
SSDEEP 192:UriF1qJ0atJctUb97JfeYD9ozvP1Y/N0uNHon9UCFx:UCGtJctUR1feYD9QvP1MnNH2UM
TLSH
T10F13FBBE67649C75CAEAC9BD05174FB05BB2D914E1CA4C23163E71A91A25F40E8CF03B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 63cd5e0a0db68ce30bd6b0b9d9985f9589eb6c27e55a57aa4c0e7c5743975852
MD5 fc78bf8b2dcd75ae96f890c4bdc98f01
SHA1 e0c460e5240b0e6d97db89c1c55e94872fa4753e
SHA512 eede6c29fbb31ada652119fb1935621e51941a9366a5d953c94de3599b96dbaab3a94e10bf2d5e4129a4787ea96c9dc86897307da1b05f1fdb54d84536a19a2e
SSDEEP 768:OxUDa+jV+6g4O4NYL/YgrL/DynirMRIB79b3/BUKCLhEcB6O73d:OiBeL/YqL/D4IZBpcL3d
TLSH
T1C34462FB1911601ACBA852F9D2033A3DD177411E6CC6ECA9E67C5C822825F71B2FCB65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 7d11582464fccee36bb3487ef26c209a2a3a0f61a68163781859c496dfde4bc1
MD5 b8f42aa01ea06c0d3786810e86b4e980
SHA1 dc80b0295cf06072cf84c38e8a3624cb0031c15e
SHA512 95c767ef22e4eb40954bbcf312d89b0fd8613b1d2026e6eec6a827ccf0c55bec4aa6d395a02a679ee1894e1382e1ef51e1883c80fd502c7eb4aa27cfd6203085
SSDEEP 1536:3i49G+PNaMuA5B77b7w7CiH37G7d7d7c7Ju7H97a717u7zPDz++7v7y7y7EReA7c:3v9G+H5BfiHnUv3I00meJHXil
TLSH
T12B2539EEC7681C92CE6B867070E0E9077E712183F68CD0D3A944C5D997D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 2163ad177994dbcd38a7fa0e654cd882877412692c30b1dc2406dbffd9de5c52
MD5 99d29d6f68c3f96a3b90d2ddbc515944
SHA1 3bd77442883811666bacb9f260b422155fef69f7
SHA512 078a668a0dd8375a71e2884071c2ec6072bf1f9625aa0283e039eb470175bf3bf7a58d942fc1d3e4f72af6849f8f64fa60884d9c7d01b6069bf0513a16047290
SSDEEP 12288:lZTHpXQpEJsXbSJ1jLQWkj9IgpL0KfFH+pzn/qL/ELLp6p9Y86fzyv4gd45/S2aG:bHp0Q/TMNtfiDlSnWNlX
TLSH
T17F166DEDC96858C3CD639A70B0F0E9877C7413C3F995C1D6889CC584016BBC5BFAA62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 7261411ebee112381261c72c6adab210424d11ba0aaaa14917f04490e8da79b3
MD5 9aa3d1b8199099bb7c2000513bbdce01
SHA1 677a4eabfa53892584f97d5dea5ca26c82a28777
SHA512 09573329b94b7a10b3a76e2622d7b12da04232df236b27c1f76baeb889245331b762bffe0be1157460750404b8af0ff490f54cc53b85168168750b0b09bc266e
TLSH
T15831FB428BA032C1DBB694F209EC676632F0F479A5036E67759CAEB48B01FD2C2D0037
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 18f831bc9bb4383ee25ed2695fb409551f08089be6660d95eb41b70f1fb966e8
MD5 4ca68fcea462f04fbf258b49410b2f06
SHA1 9867e7c607189145a7a524465d1516896d46cf89
SHA512 b1db9aeec1170a29461a8011bbb9d31a29d0b7cc3edf1a053e3a2e584515f143161a481ee61d7a19ebd37ff11e5dfe32dbe436d4df4248cdfe9c4eb1dca88bfb
TLSH
T1FAE020F555CFC51D95F034D35174BB1C85C0358AD7996E031780CCDCBA42412FB96756
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 115e234f7245edef029e55b05bd4d82869929924e8fb80bbdf4766a2df9ed635
MD5 e7b914048de1c888b1905010e8be678f
SHA1 92b473ce105af73be876cf5c0b48ae4ea93d929b
SHA512 93bc5bce47b74e1dda0db78d8543d12819dc10335545ab037ad0c6225e5308ab72ed8e2948f2adb6791931fdf014b13771d6106cb7507b4a5909e989cc5c01ed
SSDEEP 24:TLJHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfjMFW5LGdFtI8NVqYpt:TtD4jJ/0UC+lf5cWxMFOcVTpt
TLSH
T153E2E08C3B21F511C4ED733EA0D2C5E09EBC692C464DB1B0923CA9B68C266A1F59E11A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 24e1fcfaaa10a3845a7b1a0db3ec341de4eeed59ee3de27432e431309c97ef41
MD5 db54a1bbc7077ec509a510ad94687bbe
SHA1 59b689bfe9dd4cbfdddd1aa48547ad8c6662d0e5
SHA512 a580194e2763604c2a004a042d31216a9e41e2b172bf55776c50c0d62800f232db126e7918c3d7d376bd18a162245ab66dde6b4918595110bce4bb9c55046645
TLSH
T177E0263404CBC129D4946897C269A74CCAD0B496A28C3F0697CF984C7501742EBEE690
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 f77afd67416eb0a12f3bdc46df1edd41f0181ba079816b7f8bb983c92a9fbb6f
MD5 c25ff49954c7ce856f13eac3a15fb1ea
SHA1 57e1eb71c542ca292b233fa42860dc72e2d630fe
SHA512 b8181fa8d6a3b9cf1cc752dc4613af5f85e5144748bb698a7f41f842133189a35bbb29e5d0539741a214ded0061d80d015141ded1f09e9b822c1ade43eb53d96
SSDEEP 192:rvxeWlcKH+bF+UI3iWGVoWN3qL/zVVV63:rvxeqbIkUI3ijVoWN3qL/zA
TLSH
T1A024110E5F352722CDBD913668E744A35C7DF03F8B5326DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 d519758708e30b471e93f2d3decb3b9b1656bdc5fcf14bf8ba9850fba6632ec9
MD5 58f0c7e3975582c6994be77a4542df12
SHA1 d519ceb67a68892989dc0096580444d204cc1ad9
SHA512 785ac6b45f6daf756ebd71bc8fefa9268bc4fcdb4ff5685af675ba4b52512c62471b89c5054961d1b2166f232f5564eca780870a29377c4c8dd4513999c220a3
TLSH
T1E3E0207449EFC11DA2542157832DB78CCBB03556E7883F051F46E958F541008EF951D2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 c54ef2975bd852618432b8f7e3b523d5e0fe8b57c2c73dabc0d107581d8272fb
MD5 4d7d9b6aa4029d0ea5fb7cb88aa03920
SHA1 d26692c8f439bc18d44dc011db9fa02bcac61177
SHA512 f5bbe350ef3aafe50f7f9888f47f4a9e0274f857ed8ccd3247c89568e2158fa6be9bed418a782709f48a070c2ba3e43f9ec43433c10df8fdadbbea2a51b2675a
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7oqw+/C1:qDeMatha9RA2a1
TLSH
T1B2B2314D1F306265D0F04B36EDD184673E7C111CD36336899D6460F2CDE36ABB5160AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 92011ee37179bb8af2cf8431112aadae180c465d19ad4766b12ee017959193fd
MD5 3e462109480d5ec121360cc49f6deff3
SHA1 dfbf1def1b74a8eaa1d9fb1503d4c063a40508aa
SHA512 a2d7e7552bc856b8b161146b977acec1c5127c47fe099bdc244679c3b0d0ff602b6eeee260f36aba17db675d5d179ad24bc708b269fba1728c48ffd5e8990d26
TLSH
T10861DDF3C3D4866DC81156F0AA287E2BCE1D0916432C3C26C9E4EF5BA3E2471D24169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 d5cc77bb9c4f111015e2a55cd638b5b44bd6fe30ddfb4cc56312a5303c5b5876
MD5 8ecf1ad6fc4a59682d4ae64dd652b665
SHA1 fff78612d347cef2f63cfd835dd005c8ee3d3e8f
SHA512 c7411d1524dde34974594127f793c4c1c712017ac15b44642b038639ae7c0bed4f818a64c93ea14ac57dbfb3fa8a82e257409936dc029a41309461fb624ae31d
TLSH
T15271DEF7C3E4862DC81156F0AA287E2BCE2D0555823C3D6AC8E4EF5BA3E2471D14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 8f632f40b8389245ed411ed4dc94ef65655d756be842f65f7f3cd00ecf4c58f8
MD5 b4e5eed957d24aa3878d3cdd6df1f710
SHA1 ef35cf4d72834e3da4d10d94d0bfcac1cbd9abb6
SHA512 25811492a586a52010de3110990a4269dddd65f64860ea5df58bf0650541ab10fd80b13fdefc315e591bdb11a0e5a3d68f00c0a0a6e2049451354fd5affb0f68
SSDEEP 96:eIEumQv8m1ccnvS69IF1iPiYf5nFGnGXl4g:eIEumQv8m1ccnvS69OXzi
TLSH
T1A4F2D1FB07236205D99444B0E0019FCEAF16011B46B6B6EC76D447F3F3A21E2B66979A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 e3d3598be328444e270d7d5ef4d0bfdb69fddd484fbb7737da48d0b9a64e546b
MD5 4fc35d32e698582498525f7b26775c85
SHA1 eb84f97a67290b34fafc29c7c66194e0ddb37f34
SHA512 1fb2ed0852559451dfdad0b114ac1236b7625c8663ecae3efdcb25ef87be6fb8cfea926e94dc1d3d713a7b51d290d419c754f32a09e0ba8b1e6bdcad6795a402
TLSH
T1DDC02212C0F8E8333028443D09C068906E34D036000084A0D8E4873CA1800BBBA0102E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 da8beee67600ec336a51ac502c5f69ec3b51738a13aed495f1487a2825df58ef
MD5 27b6b357b744cd4b69e404536237fa10
SHA1 8b6d4f5c0e92489b01e6a7cb7f5cb9462ca468e8
SHA512 a389b22aa46b1afb4ceb005d55cabb3c478bf0fd4a347817bdef6ec6bbd4b6b6d5bdff984e470b75fee83ac8fd657cda1e4b461b07891d9592ae5aee972d7700
SSDEEP 192:sxRwR2yM/jK1Ml8wbe/fksCJdQpq1z2MzoD8p4Y/g6+WNIYGlkkjGMIgIJ:sxRwIle/fksiu4Ck9/5ItRs
TLSH
T11F52F8156A389937DCCBD20DFA517F93D6F95433A2901E04AAFCCA0C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b1e36b419b90d98dfa82eb0d65b2e7a82936e0953302a3d788bfea02c344436e
MD5 27ca560a9dfdf9a8f8c8409964b1091a
SHA1 465863a638962665f267ce4f7a87ad2c3beb4692
SHA512 d1a246ad6c3c2793da9af0104a15821e896fb547d0a943e1b5487a5906ac766835629a8151b0dd08e3fd7b9e941c9bb3e48943b764193297c2ccd8552a46899b
SSDEEP 192:sxRrR2yM/jK1Ml8Qbe/fksOWpVqJdQpq1zqMzoD8p4Y/g6+WNIYKjGksgMIgDHJ:sxRrIje/fksOWvau4uk9/5IFml
TLSH
T17162D915A538997BDCDBD20DFA557F93D6F91433A2901E44AAFC8A0C40E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bac26c888a38521a7046f51942736ae60a843010506804178ce07ffdd90b5165
MD5 c95d1cf0283d2b7fe089167fda7cb8ab
SHA1 b84a957adbc2b14dd502aedfc38acf9a71c7b6d2
SHA512 c93444bcadd2e8abec038a3e48a79f3411058499550f44c29464d337760c99b58e245ef1f416d13c55d1baa8dd55962d503d16b405aedc613d7b6b1d5396e5d5
SSDEEP 768:UtiiWNWgv7fgJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPpN0eroYlY:UtiiWNWgv7fgJu1jaCf01oY
TLSH
T11DC2FC3B640CCB7E4F844E6DEC29BED76DD801CB5A984D5447EA890C03C77EB911A49A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 f0fb5de8eb8f134a0df8d6ac86e035600b26e87d7b69886bdefa3278339e50b1
MD5 e990060ca50bd789f3aec67c3223977a
SHA1 ff7a4e585ca454707d667547acc6118e8ceb0595
SHA512 844a7b33f9b85d7cd40c167b85c9a6084f517dcb8a2422156edf710c006876263d776fb2ca473e5f68cdd72613ca25d888bbd57e856934ad3edaa6bb1b2dc1fb
TLSH
T15EE0267015CBC17EA05620474225D74CCAE4F4A7D2CC3E066FC2D88C7582704FBE6190
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 27edd6691432c7582a0cdfb6aa6b35495a0b3eed8f067bfb6faea62b173e0cbc
MD5 57f3b02426468cc6cdad8e8584dd3ba5
SHA1 3a5d6316c915103c8979db08f6b073b1f2589e0a
SHA512 f1e81396087bcc96cae2fab8f6f15a5ca641a8bca662f0b639657681e2c37598b61cad3d3ed68b7795089d8b0391186fc197d4c922615f4519638b1e1baa50c3
TLSH
T1B4E0D87015CBC63AE18528874256F74CCBA2B443D6D82E152B4AA5DC6247240B757550
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 304eea407e6cea09852c8f9b22959e8a92f262ac7bf2f06f5fe878cc283f2bf6
MD5 8deccd96c7ca2a4f8ce1008f3faccbd0
SHA1 79ea95b56fabf3e6039343e378ae3574ce332227
SHA512 aa9a1aca9b76e9ea759402aa96b7e2a32232d853947574cd7658df824e25d3864148a5951485b1035e8543dc50bc1bbe2e1c6782661e1e51625187f2e4bc54ef
TLSH
T15DE026B045CBC639E18160874269EB4C8AF0B88A93E83F8A974D549CA502111FBBE590
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 913657dc987b068c2a9a822c5ab137d86197556d593a96489779cc4e2f52a8d7
MD5 3aad68d687aded4ee263d08ee57b5391
SHA1 ec439cbfabaf1bda89f82a594f248c29fcdea25c
SHA512 58750880b0dc125ef3d1ca7e2434955545eed54af103bfc26db8a25012fa047569782fcf71712a0a2adaa62c76c0bb2c94673d39a7d7f544a64aad25a19ca9d9
SSDEEP 192:Cm7KmgIIJ4tWGm7g09OGlkr0xFzJZQNi5tPUgD6LTqN5eHKvWK8c8VEhq6SfgAH4:MaNBjo
TLSH
T19BD1EE12313A5250387E690C91B68D6B96C2B4A33258E83B7BF911A61F77E03DDFD4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 498d4b8ae29a9e3c99f205363de51710fb40650eeb2f4f3e65ae17577cd36362
MD5 f5c7e58f07c09b47b6baa99b8cda5936
SHA1 1e00fe25e257803458ca375f8de7c2bffce030e9
SHA512 c1fcc7d4a849809c033c0bc88fe50ac940bc80cc2cb2acbaacbc4a1fb252719e1cbe656077853c33ac7d71b17563264d0a4b3ae19867e552df4b3d501f9c9ee5
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkr0xFzJZlWNiYgtlK4UgDlcLTqN5eHBoBZBsf:Cm7KmgIIJ4tWGm7g09OGlkr0xFzJZQNn
TLSH
T13891B356313A1250387EA50891BAC96F96C274A33258E42B7BB911B61F77E03CDFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 dc6e28c28e1953bce774916ba76fb08c8ae068e525bcb626fc23794a2e9468d9
MD5 4d4ec33e2f8a479af5ec6953ec034ee7
SHA1 4a1ebcfee26684f71dbad704ea0515b8a21e88ff
SHA512 530435b2879c657b97fd33d5de7c5a59a7f1547d75d1213dc951c5341498c95af31e8ce33f04d71ed8c827756705c68823148b29428e851ec81c90f0e6139c30
SSDEEP 384:DNrRZyCSDnxTICBDuMEhIKyll7svbFKfk7:xFZJSDnieDvyI1l7svbF9
TLSH
T1F044840A7B747001EDE6D9725CB080771E3C726DCF22A6915DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 488B
SHA256 1cfe2150f8c5fd9893ba339f89ebaabde7b7f1704023abb5a4c8e18ae23bd345
MD5 fe951a51214bb17c97425646d3a19a21
SHA1 fbb8c7325b41e3d677b3a8ac6c87b8aec8109dd1
SHA512 34776edf0c75ec79f9f0651109cef33b017cca5e34127a09be4bcf274339cd650f9b6d4408ac6c99aded2c1299420df98577a60bca0a3901e3fc7e1e0d13abb1
TLSH
T1C2F05480637A60947E89AA40C11A5D03F4D4FE67265D987533AE45A44F44C06DF3ED76
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 6be2e7037b6e17ed99445b324a9b4c62953a7a235b2e1e933a307db9d53fc247
MD5 24a18adab4f1eddefe5421ad11b3fb5d
SHA1 a71e0a2b1ccd79cf38a31845abead4926e5a4300
SHA512 5154123fdeddc40ca82160ba1ccde16565677f8d2996151c2dd1e2666a4635210a54fb8b5eef2f1f1b0967e3f89b66eb884c5e9160eace4b70d45955a1e3d546
TLSH
T111E020246DC7C1DFD05121C34175E38CC6913867EAAC2F051F52CCCC5505141FF5E161
MD5 SHA1 SHA512 TLSH

Submit Download

ecfc1e6a-d33d-41ac-aadb-d9daf9218fd9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ecfc1e6a-d33d-41ac-aadb-d9daf9218fd9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b2f0e4108833c0333b828de3878fc651d69b8e3d3afcb126eba4f6bc1fff0414
MD5 1f708d796e62b593e340148008f3d2f4
SHA1 bb90475a782f85aa32b582c926a0bd36207e4289
SHA512 777640b89ba316db50944d29dcf9a2ae7a11ebb118958b2829c3e68044e34c9661047cec954b7874296bcdfcb77210435d6a5d21a4fc5d9c9a14954e247f498a
SSDEEP 3:MsEllllkEthXllkl2zEfl4hqlt:/M/xT02zVhql
TLSH
T1364404147FC0040DD5003030F055C3501371D410051157C334D744335CDFD504F10404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 aef8800d1ebd44f3ee83c011666936eca065db1bfa65a6f307c4d122f08d37d1
MD5 c84ec50a8bc41a3ee5060e79ca6ad202
SHA1 e0f0bd1132db957568889821668c492e7de83fa2
SHA512 1b94b543754f5990367dfb4d8947c978e7fc880e97030805119fe75aebc44a3ceca35465dea31e2df2487ef76163edb370d840b2f9b5cb509cd7fa2dc46d68a1
SSDEEP 3:MsEllllkEthXllkl2zEflEUt:/M/xT02zM
TLSH
T1704404147FC0040DD54010304051C3701370D410057157C73CD154335CC7D404D04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 e5ba1701d1ca623a036eadb451aefdd7c4fe15412ead6d126dc23f46f832435b
MD5 fa0f6ed5df19a0b67d4753495e0d1b60
SHA1 5d91ac7f654449f336a1d870a7f6756b13e204d2
SHA512 b7150f13e93e71e005079b08e5bd1f4e97027a9823d79dfafeaf727b3fb9277bcaf0249d953f1949126d229ca69342609f07c82930ce4a16a036b1f371c16a66
SSDEEP 768:Mlj+9T3pUx9lYyaI7Hucys6BRvi82oP4/z6himo6Jb9Ml2:MQ9T3pUM3imOz6Imoyb+l2
TLSH
T108F2C031A8458E73DC97C699B1073F567FE0522746CC2D84DAEEAF0D06C7A6D431B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 67893da7ec6bf4a74ae831313b3667a2c1ea0d4c529307d3c90e485f8ec465ea
MD5 fd029520fa13cd64bc660dc9152838d1
SHA1 5968032e6584430e930a05e8548e1e2a1edd9eca
SHA512 e0fa9070c3cc1c35509234c9732ce7e7a3e29cb65a24b1fd945bd80fe5a350622f9f157f600fcb6d3723c179028abb8a5b3952937dd2d1c1834397a07ee2c0cf
SSDEEP 768:xGrv+4UNbdS3OwjlYyh7Hucys6BRvi82oP4/z6himo+f2bwn+h:xGbsbw3OT3imOz6Imo40w+
TLSH
T15203CF35F4588973ECE7C18874467A537FF8522346C91AD0E6DE5B0E128BA5E530BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 f3fa4f078d182fa8200ac3b3ca5777a6fc97038b048a977c98d39aad19274655
MD5 99068aac22c62525db3868907717f405
SHA1 61afad2d78d468a9b0c9fb2dd77d1ad634267d65
SHA512 a85891d9593e7273f35041f6b3da099d2397375fe523b376fd15df459567f0e7740c31f2f25d89a71db622695bc03e93b6caf79593ef6cab11ddb00c5bb57f8d
SSDEEP 768:Mkj+9T3pUV9lYyaI7Hucys6BRvi82oP4/z6himo6L5KQi4jGpb9Ml2:Mz9T3pUw3imOz6Imoe5KQr6pb+l2
TLSH
T146139E3CEC568D3E889FB74C620E2A766DE41237C5B84848E7DA4B0DD1B3A5DF306421
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 487543cd03124577a96deaa27b9492d79f0f38ad0846dde94897484ae69f470c
MD5 7ab52854c2d4efd8291c761e45f7c925
SHA1 444d38fff305d9c26fc55e8bcfc661328fd5f694
SHA512 327e9a70a231e04eac839f18605d6c40766740f6c99375043e825e60352965718d50dafe96262e5a2abfc602e23ad302a5c3164c5ef5a45e8ebe79bea2e8ceab
SSDEEP 768:Ywj+9T3GUx9lYyW7Hucys6BRvi82oP4/z6himoxGxA9IBBB9MlM:YP9T3GUz3imOz6ImosxNBBB+lM
TLSH
T18603BF38AC058D7BCCABDB89720E3F667ED4123B81A81C98D7E94F0D5593A5CD317822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 55KB
SHA256 7c94eacd8e2738b5d2f2e8c641df486d64f33eaaf135c1a0c5091e47003d001f
MD5 ae4ac7ae7a11b8da0d0c8d7e54b36266
SHA1 7098c6c6e1c84d44fa5bcc8978bd76e5a910692b
SHA512 ad2563344f3cfcbeb3336eb4e1a695dd6359430f9713b2e6fd198ff5dcaa4fe3f10176f063f6d99e1ba0ef710c75171d11fa4489c7f1a93fb03631fe368381f1
SSDEEP 1536:YU9T3YUr3imOz6ImoQ5oUjkkf95V4xNBB9+lM:YUFYUrtnBYkfDSNcM
TLSH
T1EA43BF39DC14CD7BDDE39785B20E7E6A5EE1527782ECACA4DBD95F0C10A35AC430A821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ea18861584e78b3d707a4daf35e2a569a8044aa080c61aa6c224376bdaafcfee
MD5 4d10d2593520c1dcca40fc1063e311c9
SHA1 3c3f9daa19e236c7730d1d8a1b01f5951e6a7914
SHA512 fdf77947a3c3275037d65f37acb1bb570f787739e521e92b4eea09e8c952f94e100b8d756685ce5b6739b87fb1027d066161681d2aa02b44ccc69e5976d15920
SSDEEP 768:Akj+9T3jUx9lYyaL7Hucys6BRvi82oP4/z6himoxkb9MlM:Az9T3jUP3imOz6ImoGb+lM
TLSH
T155F2BF34A8458E73DC97C699B14B3F967FE42277458C1D88E6EA9F0D15C3B6D031B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 2e561e7ff03ca49ef502e29b6a598c362477aff611277c244960345e3d0ffa07
MD5 cfe8314e7c99e8dbd2263f7db00b3917
SHA1 d578dc07b9957a3d692767faba32db0024333db6
SHA512 73d45a21d14bfff4ca105f46e34598850a9646d0ec1d5a8e4266c6adb3425092fef909e2778a6e4f09ad0174e3205875afd8c4a867ed505bf8dcb492768f420e
SSDEEP 3:MsEllllkEthXllkl2zEfl3eWKll/:/M/xT02zT/
TLSH
T1F84404147FC00C0DD51030344071C3D01371D4100511774335D104335CD7D400C05440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

0389ae77-ab3c-41c6-b074-de8a2097f54d.tmp

Path C:\Users\Admin\AppData\Local\Temp\0389ae77-ab3c-41c6-b074-de8a2097f54d.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1300_753439964\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4976_212094484\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eicar_com.zip

Path C:\Users\Admin\Downloads\eicar_com.zip
Size 184B
SHA256 2546dcffc5ad854d4ddc64fbf056871cd5a00f2471cb7a5bfd4ac23b6e9eedad
MD5 6ce6f415d8475545be5ba114f208b0ff
SHA1 d27265074c9eac2e2122ed69294dbc4d7cce9141
SHA512 d9305862fe0bf552718d19db43075d88cffd768974627db60fa1a90a8d45563e035a6449663b8f66aac53791d77f37dbb5035159aa08e69fc473972022f80010
TLSH
T114C08C051A0E9525E00B403827F99DE32A2C60DC08B1AFB8B18C30B48C6B4C90DFFF4C
MD5 SHA1 SHA512 TLSH

Submit Download