hxxps://technvira[.]com/

Resubmissions

27/07/2026, 01:02

260727-bd52sstemc3

22/07/2026, 07:54

260722-jrn97sfk3x3

Analysis

user interaction
yes
max time kernel
82s
max time network
82s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 01:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://technvira.com/
Sample260727-bd52sstemc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3400	msedge.exe
3464	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134295877728859105"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{17123CE5-3306-4614-BDD8-B7CD7855E32B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{3446EA31-F2CD-4930-B632-02F767289A9F}	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 5020 wrote to memory of 3096	5020	msedge.exe	87
PID 5020 wrote to memory of 3400	5020	msedge.exe	88
PID 5020 wrote to memory of 2496	5020	msedge.exe	89
PID 5020 wrote to memory of 2496	5020	msedge.exe	89
PID 5020 wrote to memory of 2496	5020	msedge.exe	89
PID 5020 wrote to memory of 2040	5020	msedge.exe	90
PID 5020 wrote to memory of 2040	5020	msedge.exe	90
PID 5020 wrote to memory of 3324	5020	msedge.exe	92
PID 5020 wrote to memory of 4900	5020	msedge.exe	93
PID 5020 wrote to memory of 3324	5020	msedge.exe	92
PID 5020 wrote to memory of 3324	5020	msedge.exe	92
PID 5020 wrote to memory of 4900	5020	msedge.exe	93
PID 5020 wrote to memory of 4900	5020	msedge.exe	93
PID 5020 wrote to memory of 2948	5020	msedge.exe	94
PID 5020 wrote to memory of 4188	5020	msedge.exe	95
PID 5020 wrote to memory of 2948	5020	msedge.exe	94
PID 5020 wrote to memory of 2948	5020	msedge.exe	94
PID 5020 wrote to memory of 4188	5020	msedge.exe	95
PID 5020 wrote to memory of 4188	5020	msedge.exe	95
PID 5020 wrote to memory of 3440	5020	msedge.exe	100
PID 5020 wrote to memory of 3440	5020	msedge.exe	100
PID 5020 wrote to memory of 3312	5020	msedge.exe	101
PID 5020 wrote to memory of 3312	5020	msedge.exe	101
PID 5020 wrote to memory of 4352	5020	msedge.exe	103
PID 5036 wrote to memory of 4272	5036	chrome.exe	106
PID 5036 wrote to memory of 2828	5036	chrome.exe	107
PID 5036 wrote to memory of 2828	5036	chrome.exe	107
PID 5036 wrote to memory of 3464	5036	chrome.exe	108
PID 5036 wrote to memory of 1248	5036	chrome.exe	109
PID 5036 wrote to memory of 1248	5036	chrome.exe	109
PID 5036 wrote to memory of 3052	5036	chrome.exe	112
PID 5036 wrote to memory of 3964	5036	chrome.exe	111
PID 5036 wrote to memory of 3052	5036	chrome.exe	112
PID 5036 wrote to memory of 3964	5036	chrome.exe	111
PID 5036 wrote to memory of 4116	5036	chrome.exe	113
PID 5036 wrote to memory of 4116	5036	chrome.exe	113
PID 5036 wrote to memory of 2640	5036	chrome.exe	115
PID 5036 wrote to memory of 2640	5036	chrome.exe	115
PID 5036 wrote to memory of 2644	5036	chrome.exe	116
PID 5036 wrote to memory of 1932	5036	chrome.exe	130
PID 5036 wrote to memory of 1932	5036	chrome.exe	130
PID 5036 wrote to memory of 4416	5036	chrome.exe	132
PID 5036 wrote to memory of 3800	5036	chrome.exe	133
PID 5036 wrote to memory of 1600	5036	chrome.exe	134
PID 5036 wrote to memory of 4844	5036	chrome.exe	135
PID 5036 wrote to memory of 4844	5036	chrome.exe	135
PID 5036 wrote to memory of 4948	5036	chrome.exe	136
PID 5036 wrote to memory of 4948	5036	chrome.exe	136
PID 5036 wrote to memory of 3200	5036	chrome.exe	137
PID 5036 wrote to memory of 3200	5036	chrome.exe	137
PID 5036 wrote to memory of 984	5036	chrome.exe	138
PID 5036 wrote to memory of 984	5036	chrome.exe	138
PID 5036 wrote to memory of 1324	5036	chrome.exe	139

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://technvira.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fffe1c8c188,0x7fffe1c8c194,0x7fffe1c8c1a0
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,1620559481091518457,10556872886734288373,524288 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1860,i,13290952552696650153,12011508785281747014,262144 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:2
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,15391791635465541457,8195283184932521865,524288 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,15588058198467841610,3017160730608781723,2097152 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,3461087508248762918,613304030386372875,2097152 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,4012457960387849259,5273300147284666086,2097152 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,4713120817655678846,6754989722731514161,2097152 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,15413778310023466048,7199620087988716264,524288 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,12792310347718732935,16467924811967730763,524288 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,11929116513612712894,2275136528800933671,524288 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,11929116513612712894,2275136528800933671,524288 --field-trial-handle=2964,i,4640552822288525503,925359341070636317,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4352

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1636

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffe256c728,0x7fffe256c734,0x7fffe256c740
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,18038504940357142642,14195240168138975504,262144 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:2828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2292,i,17045038960710591371,7843831710040361193,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,9400098660272590532,3259439886409260602,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,13991346654865453063,9351863834951137717,2097152 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,10937705237962717606,5414823255244014834,2097152 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,14800297647953428995,3349577667783104094,2097152 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:2
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4728,i,15783409846420338030,110350516567769717,2097152 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,13265053890675551415,8576025233326104166,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=6072,i,8680144277944946829,6079245089072603143,2097152 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3448,i,14823202967888879362,17326457937314421443,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3464,i,12861367879718265694,13283510845057602448,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3428 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3380,i,12688853543952984286,17014257537242432100,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4488,i,9653446110478969371,2761596857155327134,2097152 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4460,i,3425519106474344001,9075717221226947684,2097152 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4624,i,3054241665422296562,3586972782923245987,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3928 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5956,i,1101608664244646299,15635958966064892185,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6180,i,11938585125859650423,8127828727369015785,524288 --field-trial-handle=1916,i,9051768785570076689,17548221377343653901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1324

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1880

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2556

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 814110ff327976f9d85420d0cd5cb31c7d9040c6d04cd100e86f9cfb23ea485e
MD5 07dded634f8e8bf7624f86f2f991b775
SHA1 66dee58b29b982a22e03ec4a9339b38de257db15
SHA512 7a642c7c5b30bde30662bf0cb7eed18acc3a024874d89ba08ef7e29ae6355ae470cd6404a7d688726dce21996799d58d2ad5c294fab07a64848135df3abbdd6b
TLSH
T1A3E02BAAC831EC2B1CFD572D50504A49EE1113571760885B3A3C850C8FB07770A859AC
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 373KB
SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
MD5 ad6388a08d35f6d67db1213404b7f81d
SHA1 55cb415cfa760fb4beda8422d7c635cd4caf1915
SHA512 1b92070f13725fbe34b18dce86e09ee76536ef7dd7190f2c11d54f71b91acdfd40f03c8972a85099b988fae24eaec038be967cbe7b57783340140481b9362248
SSDEEP 6144:qm2dRYZtgXkt4w9410UKjgGHjMaP8RVkqSRhP58OU5R67u4nORWO7lQ8E9:C8tg599lGDBskZP58B67znOwGQ8E9
TLSH
T1A084232C983F6900BB0252741FD6C76E4FF40988A2C0D4C28254A193F9B7EA7F5A7779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 22KB
SHA256 c227a1af6376674c1ba6fcfda203a3787c1eb57bc222df372e44d3b5c10e4c7a
MD5 ddaca517aa78bda12c46cd18f983247f
SHA1 97d3b62839c115320c87cb1a7657b468ad677209
SHA512 b1d30a037cc1d04104866c7a139be5fe222c5e5321fd3485e54deb2c3a7957488f1f1583a5d1f7a065c368737bdc86af4b4c81e765e12e5e014d78ace7e5d8f9
SSDEEP 384:Q6mV2icYy8AWROuoHtKvhHztIB7L1afig99vKLxVa8ijbMRQJRMvqXPu3SXO:GV2+yNyOust0hTtI9aV99vYarjQ/aui+
TLSH
T180B2F108976F184F29A74672643E193DC104E87AA59D1FDF9877C82F312BBF814815DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 34KB
SHA256 7fd55cb3eb1b4640925f976f995f37754ba88fcf13dde8bb6a3d6f43ea0e597e
MD5 db404b68c22a53ceb7cdece9e9e5225f
SHA1 7cef4f24ff0278b3d60d8fed58f21267669dc39f
SHA512 8eac65e42d938bca678bfb338a891c5055e23f555cad33c470021e5c657abb45ed4dac304a9af7c1e585ebcd8da92e5c8f223d74bfa0c3a6b4e63d3e1b300839
SSDEEP 768:KZePSnmR6ZdKmtxZ0+90L7tGl6FMQyxg9KyqzX3FydRyu4iNxLl:KZePSJdwI0ntlOXxgH64e0xZ
TLSH
T11CF2F1C136080CE8EAAF21DBEB345E117131FB7C71A25A51537BA520AE673329544AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
Size 280KB
SHA256 b0dfc85844c8d9b6ec5ad174c2c5c4233ca827ad347f7dee2ac5fdbb4f66678b
MD5 786f539d2792cfcb33b12605446c0a9d
SHA1 1bf29e7ff14b6ee0feaf0b2267eae5c21d37b4d1
SHA512 d39556a90a1a1f3f873cfd840fbe5860ada009b7c0a9d646f1675101b7a7d434525045491c199ad4e005b1e2821f75bba8c443230247f50defdcc41a7bc5c8c0
SSDEEP 6144:6Dg0Ss4K7OWvYbChlTzQyJ0ti/U5jdX2zTA6x9ooNeShEM3VhZdPgN1:6DLSs4hWIJ5ZXECghEiVvdPgj
TLSH
T1335423CC7B1BE3597B1CC96A72AEB33C4D61B3F49A83A5C0CE1A3363C925512442EC95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000031

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031
Size 21KB
SHA256 3bd6ccba749abf3b5cf9047984e83454e80b38086b5eaaeb2f0ea9662c6041c9
MD5 d3a809a1323c11ac8bb6b2292a23a1be
SHA1 21b5d8fcbf4cfde4eb05d4cbc95a9958ef36aa73
SHA512 7d242b18c0b6aef1ef3da2c64737ea72cd2f91a6067dd644131949662fad3f7f4db616d8353e3356f7043acb1c49fba46b1b0b4e9c0c98e12a0f8c76dea98f50
SSDEEP 384:z5XVD/9ORbchb2Sn/C/e/EG1GUHiASthxEgsAokrn90JaSKKuA3cJzIjPHwnNv3j:dXVL0RBSn/C/gEUHHWhxcPkr90JjJBEr
TLSH
T1B7A2E160D74B33F858C4053F9A9E36E35B65609110A275B91C4861FF68B22A8BF9DEC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000005.ldb
Size 107KB
SHA256 8f0ce725145dd7309ef299a66f6ab6f7978a84b6357fc9231787700b1fc6fe57
MD5 aceffb2dca01b59f8696ae238d8b07b4
SHA1 1e16d398724bf509adf101b2a6f8eeacb9fcb796
SHA512 dee6746e6ff11398494063e536699a4c2e6cd295f502d9138fa2241cb1b3cfa68b7b1f711b8a9c9f9b76d41756c00755ce56c1cbc8df314acf7d4dbed5b19d9e
SSDEEP 1536:/CVZhOws9cgjEm/9DgYwOpFMRY7Yd8xUyosU+/OCTCAZh5LkYTksO9raH:/kFp8sOpiQG8xvYKTQYTksz
TLSH
T159B3AE659EBFD416C90132BFA8FF42CEB6D8F4C956FCAB601B4CE10595C863C2168E94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000006.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000006.log
Size 34KB
SHA256 6aa20d9ecfa5089b8088b82b4816ab5aa8042f5884d321d6cf7e5c434e12fa58
MD5 c5ac7211c536289721af9d34500cb705
SHA1 9eb5c64cefdff1abbd5713aaf72b4c1c3e29010d
SHA512 305cd5e26b75bbe3dd7c2c01a50576d78c7589a932e497c8b0ec0b8b480fc2ce5067f5a64409fab33ca3bf588ab70bbc3e2504ce9d654d42b90237c634ca9295
SSDEEP 768:pEzrdHHc3SJ3v/TqOqrsoysAS/+4pc4ppmVV2VYuzTHBM:pQrdc3SJ3zoxpc4ppAN+THBM
TLSH
T172F2122B41D1CAD7C715C4F1497D0B5A9F3A2C5578E860EEF08A7A0EF5362601F61E2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000008.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
Size 17KB
SHA256 e57f9b06ff78d16ddef8a9b38f7e72875c9f020c5c17cd237f0bc57413c6d7bf
MD5 c320f7aca94457a5f71595eab6585937
SHA1 17e0f47f3f97dde4f7bed0c41eeaaabd5fdcb066
SHA512 87ca9c4b5c09811b065f1e9ae8e651b415b7d2983ff7ccd84fe7b386834be71593cfed9120604eaa22f2c20521877cedabe1055a3c3ff71817549990942a696f
SSDEEP 384:/yY+cFl8yZP6UH+I8W+Tic7zelFzIJeqeS939Px5ny:/HHQBuc7iHIJehSx5ny
TLSH
T13C72B0672ED9848BD07BA37BA0FE568EBF12780B3585F09C9593324C18226F7306DE05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 2KB
SHA256 da0bcc26a70c010bbebeb64643f4e4538c46d2bddc1fbe7e23aa67668a0dede8
MD5 72567d6a0c22e5dbb1a1c88a27328814
SHA1 0d29bebdc74e02b4aeed6721be6bf1eb3f55234e
SHA512 527b47550abd6cfcfabfc4ec1141d3a57d8ee8ce1d1663fc683b14eeea959995bb16f51dca561efefd1d1a313950808fdfa9a934559147cd927add0c4355bbb1
TLSH
T1EB5157EB060D64A940C2D079C9A833A6CC9C6510565C3B58BADDE7DF07F250BEB770B6
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 262B
SHA256 6d52e84f3f7865b2ecb12511b4d3676364a378ba05c78acb23ceabd4810833c4
MD5 c117b3433e795eda2f53fd45be08caa4
SHA1 f0e3b1b4b8aa6a90dc41cab4b80d9ebba9d473cc
SHA512 79cfaf29b7b9b53ec9cce4816eee21a49162d6053d4114f29c2c048221be35ee6421963ee18809eca8b4de1712f6f6b54ad23459ae7f9a14177df94f9cf867fb
TLSH
T190D02B10FFB251C1D439483106B7B242977020CF1D81D11F1209E04590F20010D14627
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 dc663c826cac8e020dfff6d35ed9d50ffa6f23fa3c57640c0627310cb233127f
MD5 eaee2fa30fdc7d1f24e262285b704181
SHA1 25227111512afd0eda825a0debac2f043d1f7808
SHA512 cb5503e1af5f65844e3c40df611c860949ce5946adc496d15e856872062e9ec306f30f21344e7db20d41d96f62a28920914886e704fe55ae531f832ac5d21085
SSDEEP 384:DsPIMakHoROM5usoenbRVmFZc2aIcwCEPJDjwEwswxIyNAaUfHrfIRgSdGh62rrV:WefIFe+iXQ
TLSH
T19E62ADF7C3D8CA2DD81116F8DB153E1BCE290E2843283D2BC9D9AE4B93E5971D25464E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 95affb393c6d369fbed9b74f9a50fe37b93f7681e0ca7a3598c233bfcaf3588f
MD5 e3b7d118036a5c92520609f424458eb4
SHA1 71a5bc7ce6ba0496cc2d12732d693290b42a9c7d
SHA512 236b5f76c14537688cc25147d23feab4b60a23881604c3357e67b3ca2e818f1e119c3517d390a55e4528642c71293cda5707b56edb4b7d91d6d53db191cc56f0
SSDEEP 192:pRLGWO38vb9Wv7ApAPRp2G1b9qHsb+WNn4H/vU2Kt2S/0wVyIsnAUgraJ:pRLGYikUX5kwk0262Sne
TLSH
T1BB52C62FF910697FACDAD219F9657723E7F2102561902EC4E6FC8A2C14E76CC261B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3fda544f95d8be313ca640bf156e8dd6cb008b75d6d08bf0f6c9fc485698d688
MD5 2111cdaa102ed3a075a3c4c479eaec96
SHA1 544dd04cf5eddc0a507d4f2c50ad984a7f6f2abf
SHA512 5675fdb3fadf7d717ca9c6a02efc5014d345467d75605d5d9e71654073b50b88cee7c90d8b4bc6e9ab848c490bf62764f2f7db2ef9a2aba1e54e01b520e58d5a
SSDEEP 192:pRLGWO38vbRWv7ApAPRp2l9qHsb+WNnaJ0Ct2S/0TVyIsnAUgtaJ:pRLG+ikUXmkwY0C2Si8
TLSH
T1B542A42EF910697FACDAD229F9657753EBF1203561942EC4E6FC8A2C14E75CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 48983d7238d0eb6be7881474bca3cffe53e20e5d907c588cadf00b9ed054ecab
MD5 3367b4efe65f699e631d92a1a2600bac
SHA1 119235589a7c58b7bf5d198e75eb65d23d3bd977
SHA512 708878e4697ee5fb0436a11b42f75891487bda496f065d048af06eeaad0d52b0629036653b938c3bd0d9c525fa1eec1422655478620eb2b20524a3bb77132c48
SSDEEP 192:pR3cBzGWO38vb9Wv7BpAPRp2NJVdYU9qHsb+WNtPz84H/2VeHt2S/0wVyIsnAUge:pR3mzGYiVUXwkwtP7ceN2Sne
TLSH
T15552942FB910697FACDAD229F9617727E6F2202561902EC4E6FC8A1C14E76CC261B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b20072b7e80ac334b963422b1a4cf29fa4a84e59b366862911fafbf960acd333
MD5 bed4e46e9b56c9a48ad6b7ef6ba87954
SHA1 eaf898881196a10b66c1c14bb75829d701985b14
SHA512 274c2d8f834923ea92b61b3d55ad78289a9e5a46ad06e4a94cef7fd3d50a389432cf4e55dfeedb1527a710182f0b28cada9a895bd23f6c4297b96815608ba65d
SSDEEP 192:pR3cBzGWO38vb9Ev7BpIPRpaNJVdYU9qHsb+WNtPz84H/2Vsjo2kt2S/06VyIsnB:pR3mzGYgVIXMkwtP7cH202SLe
TLSH
T18F62B52FF910697FACDAC229F961B727E7F2202561902EC4E6FC8A1C14E76CD2617417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7334c4735e483b0f442efc592e36eda3e6cc3885d1d1c901a540304cac9d7000
MD5 880116f60cddbe52bcfb5b0a40cafb42
SHA1 f3458e0576d259db321560b0032f7f4b10ccd769
SHA512 31558ab8e6ab24c24a3fc70784f3e6df12a594f42046804aa978533aaf510ac81a797f17daa2fed1ea50f14a1772bdd624e45b9d9ac087667b91c15a5e6af95e
SSDEEP 192:pRLGWO38vbuWv7ApAPRp2l9qHsb+WNnx+tJt2S/0TVyIsnAUgtaJ:pRLGfikUXmkwot/2Si8
TLSH
T14742A42FFA10697FACDAD219F9657753DBF2102561942EC4E6FC8A2C14E76CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ad79cfc1-1e8e-4c60-b40b-f31834933c23\index-dir\the-real-index
Size 2KB
SHA256 562b655270152cc0d4039a433bd174da707f18015ab076ede871a3b39c129e8b
MD5 e47e6c3f68c99dded265e91b3af7fd35
SHA1 c990f05c545132ebea74929a8252deca7a27a514
SHA512 7b8fc290aab76ac3dbe97832bac3625b7c255ade555747d20ac4c3465fa78cd74af8907658fd1111757829633dfff3cc1f008dbcc4bf9b0c91d233cd63bedcfc
TLSH
T12641864CCC806BADDC7561FA2D9415F657B62D38FC68C2934564B1A23403AA4174F9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591cd5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ad79cfc1-1e8e-4c60-b40b-f31834933c23\index-dir\the-real-index~RFe591cd5.TMP
Size 48B
SHA256 497cf9f64e794810491d1d9b47f824ff686f3b0f6492adbd7064346feed1c716
MD5 2bfa98b466b731bc1568c83b636d06d9
SHA1 75b207363035e6d4514cd4f94859193168245a26
SHA512 1f5991e5bab2c968b9ad4f8c8d9c623ad63972c7ef39c7ebd6131ae6e1783d22eebabd09f822344b8836b9d55221f76c44eddd379ee1f65c5c4efd00c88bce5b
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d5b4aae9-49c1-464d-b477-97f9d6f20a17\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d5b4aae9-49c1-464d-b477-97f9d6f20a17\index-dir\the-real-index
Size 576B
SHA256 f553ca3d6018841c959b1827730d16bba4d580b6532377e9b789529e4e229c34
MD5 69f3c6f65eb398852e42cbe4681bf216
SHA1 f8240f577b9abc586f09dba72db0ffaa5b5f0ce1
SHA512 271c437342242acd1acde649b9fc712fbbd9af843b64f7e7384a8eaac976518017790632f7fd11c86488d68413a4dfceaa87e8595a44347370fac9e05768b9af
TLSH
T13FF0AB9023D881AFCE25C6B98357612B133CCC2D0F899E870699E0A2499B70B0A50B80
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597872.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d5b4aae9-49c1-464d-b477-97f9d6f20a17\index-dir\the-real-index~RFe597872.TMP
Size 48B
SHA256 7cb8c5a8c926b9159941c6955942fd4543ca08e454e6765d3f19d3cc5c557a5e
MD5 a04e0159f2914eda1844f4afa371174b
SHA1 d1f0fa9ce18486a0b17a495fbd07bf9092dfcbe1
SHA512 12f99f79485ac6d582314c528130841e3b17650941e0fd1e4eeedeeef38dffd7a2e966d30e5eca3281b5a21f98a1455032223a8b5dcffc277e22a571b439d662
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 3cad5fa1e68d048f6fe425b8c7fa8999d2dc360235611a8f73a41b7a9d5acf46
MD5 a95ef81ee474b744e5811cf97ee43e4d
SHA1 d1241af6292c124210b0d62459c98ba09433b682
SHA512 7fe6d538a55aa214ac43eb56d3715fb9606195d210e8017474eb103e3ed98848f6e502dcb6adb1e893537b0f8b1e72ad7614dfd880853aa76fad8da75cd50f66
TLSH
T173D022CB64309C932E34EA886934230CA61AAC4FCDC6CCFA9884F506307C503C40292F
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 6eeb811dab30e8a3bd2372f406b1a9cdfde386d53325a0511c3331872c26d0dd
MD5 67fe66a9401bfdaef88cb4d57b28f214
SHA1 3e33a90158723b9cd50f84eea46086e49f99e488
SHA512 648163ad093cd1d8d78c78175773e7c98c476855e2cff1fc92672cae916a6f05e8cc448e52e059d27a11c79006a84a20f21bdd58cf70bda3f39673c54ef510eb
TLSH
T19AD023C5467044935630D554B035174CDD1DDC478CC3CCE98D8C754B30F8913C001526
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 17a9bad73a176f153d54381980ddb8a02442ceb463f7dcef421c710c87d94a13
MD5 b785aba598f73d7b5a215e4617197423
SHA1 024050748ff7c502b07775760d27a9e5013d21b6
SHA512 7abe98ae413d28ae3d110dd77852742d722931028171585b7c4ee07f0a58044259215858cef75ff2e136c4538119c50c725804e25cb60eeec832072a890d6df5
TLSH
T138E06845E951004A9D33DEC6793573DBD66A781C4C84CC7C95A5260823B0407E001F2F
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 3559d691ccb166dcfc334bbe37c825bafd7c1127e9d338bd9d07895352d7869a
MD5 da50e0d4d3d2ed0d8f3f911508830904
SHA1 a828e2f789a1193ecd0f2a3313f77a9931ce5735
SHA512 0972233607fcb66fddefd8cda78fd0818d9985ae50c41e5e4c247cf07090697472097e8909a56d231da7629b8aa0361da98fd3b6123f0a0e6188c8d217d1100d
TLSH
T1E7C092DB4810998B0A38EAC82038631DE71F968B88C0CCF89498A80A3038923C542A2E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 0a1a0f3eb1b0b89dd75583bd71f9daed6b28a733b59ec79f9ae1525dd6dbb830
MD5 aa85e095ebeeba93b5bb597a5fc5e98f
SHA1 7e2b03e1ec16a040c6228b7f78dbbb87d1d1f48d
SHA512 554a3c3d1036653bc4b6274e58b9ab423e89dbd5bf5a61a74622abee952fbf6fb5b0d4e6a47c8820b2cb347e61d987f42cab1689410dbef84232bc52ec64ecf6
TLSH
T1CCC092DB4C1089870A30EACC3439771DE61F969B88C0CCF89898A80B3278923C542A2A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 f024030a12e482d3175dcc2b4575a868f006a26da16b81ec9075eb814a47844f
MD5 53cfdc9f153cd5acd09bc62250261e45
SHA1 b701b2d1d070e0394878fbd3442f37d286fa16da
SHA512 bb0272b1e495e6fa67c301a285a07e89fa97639496f339b4a0858087a2965f68303c622043f0093ffc59f35a067def5c28ff716d7a7c2ad55159847a387649d8
TLSH
T149D0A786695000421630DED83635B35D931EAD4D8CC1CDBC85A478053374827C011B39
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe591090.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe591090.TMP
Size 137B
SHA256 6aae72e9afa5b6d51343b929c86881c419cf3cc53729c00d1612ed27648ab162
MD5 3e4f843e5d7bd8328b7a9cf54a836fef
SHA1 56bdc6b0cecddef93dae290c5b9f4578e375a14b
SHA512 72a0d9d54564019f09a90f22a34f779817cbd967e56a5466fa452c5c5d746919c92a669808446e2afc6acde19202126f0ab8c552053b8dd69b1fc9d52a85463f
TLSH
T1CCC09BD7481045470B30E5C56034634DE61F9D5B8CC1CCF8D4957C063038913C54152A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 374fb2270377c8dfb97b10f84c955f0e438b2dbbc916a08bac1f43d8d8130821
MD5 54cc22fc066fa5c3b1be02a9a2c1f82d
SHA1 d20add3699621158dc47ceb9e23931d9a952b53e
SHA512 8ee3d6ed398f32e6a55097b3c9af33e6347113fec4658a2a4e85c34cf2153a6c1a4ea14ecdbcf7d811f678b9f1e8d82743c6ee9cfbbe0fdaa0dbc2b38ffadb83
TLSH
T1B3B0124088415101C4170AF42393249CB2149F10D60E170183F06AA28C25191C025160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 56c1eff95c9ad2e6aa0240685e780a69eab96e586069d8c32824b15b3da09f67
MD5 00dfb778b7de926bd48d874477fb6716
SHA1 e80ae54ffe600518f9c6db457b78cfb4faf6d5f9
SHA512 13fa4168ceade78b03480d1553449eb1a3466bd68db6243f811c429b829bf705b892e337828ebcfd8d2f5cfb6d464f3a47d4020707212999d458013379f51c74
TLSH
T1C0C09294C801D252C46A06F4156A35CC72B8AF96CB0A3B0542A83A2BFCBB23190982A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b3da.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b3da.TMP
Size 96B
SHA256 92bdfad3a0733dafa698513a916e5a9203be7cd68fd841c9830f916ac840c489
MD5 37ae272e4a60e972d986a55ffc7e0f5e
SHA1 3bee9422f6d86615b902b15ddc088f904b2691ba
SHA512 ebd5846174da77e134e239184c421de1c7a2fae997d6573beff4f62582796ce87bba0431801178cb456a8e5474630463fffe71827ac059d6c60c06cb8e848e0e
TLSH
T1A2B00296C1036212C04303F869A5A6DCB960EF26C603272792F05A66FC65A605535665
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 5c19abd6be5805bd0c24b81a809b9a849e47e14b17c2da9fb4b907c56afdd682
MD5 e3875c4e3aaf683dd4350b5e42b0c870
SHA1 ad145361a2f8724e14a01520ebedb63210f5a319
SHA512 24ecc4a968450eb2ad1f55312164838962404d01f8a3a1577718af7591c2b9f82a688ae8e15433cfd4e2ef298f8d04b9e647c49ce21307e373000edc4dee4d16
TLSH
T113A002E40351856AD10C037C11D606603219591066C20691C4E50054CC90185C531D44
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5036_1373844645\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5036_1373844645\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5036_1373844645\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5036_2068576268\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 dec58db92e29a45eb8a84bb8aa6115604111c544dfd5762e44905b738715ce6c
MD5 64551dc783164e6bd61df703af7f9441
SHA1 40da223368f303fc8246c77df3c654bdf104b8e0
SHA512 273bf924e54e11830950d75810a7fba76b6781c464b71ae9f66c7a4aedc0e3c0904028eaabb92b124159ff0935a4fa30396b34d799239c66dfe05bc50141ee06
SSDEEP 6144:5HtTsBXhZexAtClnkhqq1Ynm7Rkm1tYpBeh2BAor:5HpsBx8qtClnu1Ym9oBGcAor
TLSH
T1E13412265DA9BD3F5D34512DA0CA4D693FB14FB2C9188DB2C8C55B04B6AABCC0E44EB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 cb0bf9e02f417cdc70bd2682b1d31b93657e079666c206bdbbd14124d2b6a0cc
MD5 8be529f979a7339d10740c9533acd2af
SHA1 733253c0891a7f4fb080b79917f95a01c17903fc
SHA512 654cf2dbfede99b02cc982b180fb0e9d34961de09a332e1a5fc8d3819e13394eb033d35b60eac71adc1855d8b9c023c6e62bfadd049c8f5f1b0f9c0c26c01d11
SSDEEP 6144:Y1HtTsBXhZexAtClnkhqq1Ynm7Rkm1tYpBeh2BAor:IHpsBx8qtClnu1Ym9oBGcAor
TLSH
T1A534123A5C69BD3F4D35612DA08A5D293FF14F77C9188CA1C8C91B04B6ABACC4E45EB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 e0627467ceb11770c9b653965d89cc48b19de48436dc51362d9618c96bcd4a22
MD5 dfa60b4eaf3351bdc6d44a59a037de66
SHA1 1338b80401437341b9d018d4c590debddd131d89
SHA512 56a1617c9fcfbf63893f359924d3319dd496ccc8056abcc883326bfb48ebe35c3367db2205a0aad5f24a18669335e7d4821db7e4c1be3bde4359756cba53ea0d
SSDEEP 3072:AvGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:1m7Rkm1tYpBeh2BAog
TLSH
T1F7C3023B5D75E83B5CB5A74EB48E0F1E2EF249A6C920DE9288D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 03c9714ceda41208919b91db8014de24ae37606ed2abc96a2531b3653937df48
MD5 8c2296de8b61220530f453b2f30415dd
SHA1 2c66c88bc6a0f8267af3c1881fe9195ca1582177
SHA512 c741a1ee72d19a8af3a3823ca6df21b2e3afeeede73da7c80eb421ce9f7370fb162d00a8565078ba3856a8ccf78493a4b12f92955afe287b59ec5f2dc6911402
TLSH
T1E7D023307A3671C0C21E0030E4110B40236E40B230CF43476194440DADB40C1D2DFEC7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 17f02016c9b1e534b2ce8f5769bd573a0a1f11f396c303249abaa016fa7300f6
MD5 19c861bb57cb6710324ad7569f5482c8
SHA1 9492eb57a3133476e89bb7c10b49757f23555e26
SHA512 b24c1a709d82d5ff005df72ddac4f81ad335c0472c864aa10dbcb00ee3769dc91d9df6578a2b3e6842df635bdc556f7bef754b7f9bafa0a455cbb711c9b14fa4
TLSH
T1F76180380F4601A4FBA2037197D1C212B47E86E7FC93EE96D3B009F44BF57228A1974A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5851b5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5851b5.TMP
Size 3KB
SHA256 c24c3914d4ae5d0f107ea9bcb6c510d5fcde565c720e3873883e785328c856a7
MD5 17403c424df75a17b3198449e9371df3
SHA1 87741c076fbd653e0576ea1976784942ee74fb73
SHA512 a3aed4427ddc3beacb2392e7296003955a9acf9c3d9d4fe73852f1161abd6364cd90c4bb3a983ee8a43e050d7e68332352e14b674dea30cf4171eca24e9a3921
TLSH
T16C6180380F8601A4FB62037197D1C252B47D82E7FC93DE56E3B009F44BF57228A5978A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 61d143d99156c2381f690dd103a079cc79bb1d3e1c96d6652114e394722f4888
MD5 f625310379bfbb871ea8f7e057202b92
SHA1 5758bfd4581357ddd82c29a96a44ad67cf2c5706
SHA512 198b9ea71ff0251327c9d7c7fb196a50164feb92de4d2f8a64d43faffc74e8c824b6dc4e9908e1b1435fd48514b10764d56319c8003274168b48dc50fe146ce4
TLSH
T1E731A0B7C3F4D96E8A1156F4AA04AE2BCE5C0615831C3C6AC9E4BE1BD7E3476E11094F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ffa588f0196282b7f797a5b5ffdf7af4f184a080eefd4779667bbb626cab6239
MD5 c69198ca195f2b59b6a5064b5a869494
SHA1 19688b7dbcf4cf509b55bd78a3eb7a331120541c
SHA512 b9367b3b997b2ec59ffa5eaf92281e22e0ea3d9543861594d534c20fe7132634aa5caa94c1a7f1d42fe497923a8f4a41556d89094baee8f349cfb56b5051fd71
SSDEEP 192:sxZQRryM/jK1Ml8M6kz/fysGWpVl1flxqIdpejHW6+WN/QNQaYH/YTZJcmrWIgFJ:sxZQFLJz/fysGWvl1tx0Hb/Q+l/lmav
TLSH
T1E552C816BA34997BCCDBD209FA557F53D6F51562E2900E84A9FC8A1C00E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c9d8bb9916cf26ac6fdead083f4d0067f4f56e6d141fae344d4f510cc8e770e0
MD5 e6b265cecde3378656d96cdba56b8f49
SHA1 dbe7fee5b63bff49a74b9b8c01a7717aec20090b
SHA512 fae5b15345005a65402f669022619ad014d78f0c5253b87f47896fcea59af93d19d5bbe263a4e2d956d140c1c5800c849496999356d8c62812c80b9d2df17690
SSDEEP 768:m1W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjNroIOixYZ:m1W7kf0Wvqidau1jaa5LA3jmLZ
TLSH
T1EED20B3B680CCB7E4F841E5CEC266F966ED801CB66988D5487FA884C03CB6EA51175DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 ed3577b3072bd039c4622917c76852de4d84a69830e1a09e9e0c405d3b436e15
MD5 8c78d2f61566c8ff1a7a8c362b0e80dc
SHA1 2cfc4f4873d1ce8fd32deb35e0dccc27e020f006
SHA512 a47c80a441a56bf94497a74671dec938e81f94e0676422f23b486969048515c8d325492b01fc037776bcecd0f685c702c55d91546ef56bb63715876610d29ed3
SSDEEP 192:s2t/kh4fjRTnMv2zLJ2W1yZBOfX8L6xWqkIsPITOSuhWMfKqzkl:s2F6JQ
TLSH
T172D1530A71364601383D3C99B29B8A765F4675A3751CA4EF7FB900A60E67E210DFD8EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 f27cedf3869690ad1f12a17cb3513ac061d226428916d9243067690424aec6bd
MD5 13cbbd4706312322c42039938ed15120
SHA1 56fa5dff80f7979a4b0d4e1daa0c2725ec56f24c
SHA512 05ca4d959d74918edae68625eae44fa9823b3b48a3a39f6bfa24ddf22a1e822db9f433ec52042336cb82af722fd10251f89669b83b1feac4652a3d9fa349600a
SSDEEP 384:FZcI/sNs2tv/brv97dEh+CEJrOORAStv41oSOK+Y4MkMOObjI9G6w7CK:9/Wv/PJWuhOpSdNK+Y4MkM29MCK
TLSH
T1CAC27CB1D8A65DF740A5E0C5A982E5236DF8103BC6884F0CE3F9F739319FAB82716416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8ff0e9d1c13f648e09601514028c6b6847a8491501a1cd7b532902ea55cc11ee
MD5 f63eff6aba256b69dc9fbe8ddd6c6c98
SHA1 049031af94494195a0c2b14f3813c05434fc05a1
SHA512 2d77504579dc1ca801ac45f590820eeaf878b15f9ef269462b4a237cdfde5d92dc71d539deb862f375d0a38b00ba6ec7335ba4c86acc645ce8e3097c6634828e
SSDEEP 192:MON/64BAQmiUyC19W5GBPKlt+FdG8PohIaDtqU6:MON/6eAJjWAdEhxYU6
TLSH
T12C02F9356C796C6B9EB2AE45F48637175FE8113BE6856B44EAE85B0C00E775C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fbb48f0225eb89c70bbf11c0151acbd8cc8b2e2da94950702817d1980813ad81
MD5 279013b582ed45006dc1b141778a7062
SHA1 c301420ca316491a8c65d20424d3d7988ec01b87
SHA512 6a7fb2e1db88e979cfdb0a7270f4a076059de53d5da261b4b5d3b954b3b4a4ff2f6b2d0640d8e6882bb75f93108344d8457b7fef6af9d512ef814748d1f29f5d
SSDEEP 192:7ONF64BjQmiUyw9f5GBPKlt+FdG8PohrGFC1SJrVWwBqPU6:7ONF6eVPfAdEh+CEJrZCU6
TLSH
T125120A356C759C2B5DA26591F4C736135EE8423BEB856F80E6EC6B0C01EF7AC270681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3b124bace7506d47e25ed7a8308c422712a1a573aced1c42ecfcbc06800a3c56
MD5 0aa42cc54a1dd708650e89ce3a30edaf
SHA1 74d013acfa01fef15d945d74506d7b53589b7cf0
SHA512 6ea115efeb195d1d40cead089a5471bbf2f0bae40e62c0951910807cd506eb5cdf46cb8ee2502cedaf36f69c0a5b532d159aa33da53bdc8fc79b1180bae7f0ab
TLSH
T196411768B6E91158B7776F1AABF7A8AD447FB9372F06D49E10010D4F0626B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download