hxxp://strikersclub[.]lat

Analysis

user interaction
yes
max time kernel
150s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 04:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://strikersclub.lat
Sample260730-elyt8sbd58

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1196	chrome.exe
3760	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298577668358291"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{D48BEA0D-99DE-471C-B164-86C55DE30C07}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
4444	chrome.exe
4444	chrome.exe
536	msedge.exe
4444	chrome.exe
4444	chrome.exe
536	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe
Token: SeShutdownPrivilege	4444	chrome.exe
Token: SeCreatePagefilePrivilege	4444	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe
4444	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 536 wrote to memory of 4168	536	msedge.exe	87
PID 536 wrote to memory of 3760	536	msedge.exe	88
PID 536 wrote to memory of 1580	536	msedge.exe	89
PID 536 wrote to memory of 1580	536	msedge.exe	89
PID 536 wrote to memory of 1580	536	msedge.exe	89
PID 536 wrote to memory of 1280	536	msedge.exe	90
PID 536 wrote to memory of 1280	536	msedge.exe	90
PID 536 wrote to memory of 4416	536	msedge.exe	91
PID 536 wrote to memory of 1868	536	msedge.exe	92
PID 536 wrote to memory of 4416	536	msedge.exe	91
PID 536 wrote to memory of 4416	536	msedge.exe	91
PID 536 wrote to memory of 1868	536	msedge.exe	92
PID 536 wrote to memory of 1868	536	msedge.exe	92
PID 536 wrote to memory of 216	536	msedge.exe	94
PID 536 wrote to memory of 212	536	msedge.exe	95
PID 536 wrote to memory of 216	536	msedge.exe	94
PID 536 wrote to memory of 216	536	msedge.exe	94
PID 536 wrote to memory of 212	536	msedge.exe	95
PID 536 wrote to memory of 212	536	msedge.exe	95
PID 536 wrote to memory of 2056	536	msedge.exe	99
PID 536 wrote to memory of 2056	536	msedge.exe	99
PID 536 wrote to memory of 2440	536	msedge.exe	100
PID 536 wrote to memory of 2440	536	msedge.exe	100
PID 536 wrote to memory of 1704	536	msedge.exe	102
PID 536 wrote to memory of 744	536	msedge.exe	111
PID 536 wrote to memory of 744	536	msedge.exe	111
PID 536 wrote to memory of 744	536	msedge.exe	111
PID 536 wrote to memory of 2668	536	msedge.exe	112
PID 536 wrote to memory of 3844	536	msedge.exe	113
PID 536 wrote to memory of 4716	536	msedge.exe	114
PID 536 wrote to memory of 4188	536	msedge.exe	115
PID 536 wrote to memory of 4188	536	msedge.exe	115
PID 536 wrote to memory of 4188	536	msedge.exe	115
PID 536 wrote to memory of 2148	536	msedge.exe	120
PID 536 wrote to memory of 2148	536	msedge.exe	120
PID 536 wrote to memory of 2148	536	msedge.exe	120
PID 536 wrote to memory of 1856	536	msedge.exe	121
PID 536 wrote to memory of 1856	536	msedge.exe	121
PID 536 wrote to memory of 1856	536	msedge.exe	121
PID 536 wrote to memory of 1192	536	msedge.exe	122
PID 536 wrote to memory of 1192	536	msedge.exe	122
PID 536 wrote to memory of 1688	536	msedge.exe	126
PID 536 wrote to memory of 1688	536	msedge.exe	126
PID 536 wrote to memory of 1876	536	msedge.exe	127
PID 536 wrote to memory of 1876	536	msedge.exe	127
PID 536 wrote to memory of 1876	536	msedge.exe	127
PID 4444 wrote to memory of 3528	4444	chrome.exe	130
PID 4444 wrote to memory of 1196	4444	chrome.exe	131
PID 4444 wrote to memory of 4076	4444	chrome.exe	132
PID 4444 wrote to memory of 4076	4444	chrome.exe	132
PID 4444 wrote to memory of 2720	4444	chrome.exe	133
PID 4444 wrote to memory of 2720	4444	chrome.exe	133
PID 4444 wrote to memory of 5192	4444	chrome.exe	135
PID 4444 wrote to memory of 5200	4444	chrome.exe	136
PID 4444 wrote to memory of 5192	4444	chrome.exe	135
PID 4444 wrote to memory of 5200	4444	chrome.exe	136
PID 536 wrote to memory of 5248	536	msedge.exe	137
PID 536 wrote to memory of 5248	536	msedge.exe	137
PID 536 wrote to memory of 5248	536	msedge.exe	137
PID 4444 wrote to memory of 5296	4444	chrome.exe	138
PID 4444 wrote to memory of 5296	4444	chrome.exe	138
PID 4444 wrote to memory of 5404	4444	chrome.exe	140
PID 4444 wrote to memory of 5404	4444	chrome.exe	140
PID 536 wrote to memory of 5760	536	msedge.exe	141

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://strikersclub.lat
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fff287fc188,0x7fff287fc194,0x7fff287fc1a0
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,8570633898606052869,4623534239766283734,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,9236573635855798976,17310227492726280545,262144 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,10902466511592150198,11477529471138511816,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,5122508124924947199,13400723406813042966,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3528,i,8678526062947298958,5821025682540074908,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,10508883141326041168,7966963434263268059,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,16004509782559276090,15642849443314133092,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,5152401693355073049,10248169684587194285,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,15678817033629911438,8987304161882760269,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,9466096969977469194,16859547616327195552,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,9466096969977469194,16859547616327195552,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4340,i,6489591532416152150,8223076540278497832,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,10698793155451165176,6995054453056164813,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,12495787680921081991,11210003814593876523,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,9224810393955855267,9123345561461441582,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3576,i,9133989120498367105,10651584849207996127,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5404,i,1134480833298661543,14161283571617270646,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5476,i,3397079162011361134,10791851573982939611,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,15974941308875606906,12776721810034344091,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,12759838872792423790,12424880403842233850,524288 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6724,i,13519834601889813586,1391901463444336079,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5728,i,8673030510121375086,9328770516403973795,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6944,i,14684846702857787291,11830233436245654558,2097152 --field-trial-handle=2276,i,9003172545500374572,4383337093394902680,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:5760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2352

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff2646c728,0x7fff2646c734,0x7fff2646c740
  2⤵
  PID:3528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=2036,i,13765087753274233859,11823992167172598744,524288 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1836 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1688,i,1859646553404788250,7502197456918411458,262144 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1912 /prefetch:2
  2⤵
  PID:4076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,16629430829962542694,11451188116463779985,524288 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:2720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,10994827961956648290,1656659098898164012,2097152 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,6259437496418604754,8428524402049928961,2097152 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4408,i,9420675849158981160,17947716472563051858,2097152 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:2
  2⤵
  PID:5296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,11585348745730272632,11403941292304179192,2097152 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,12933162628869607227,15537864033475802492,524288 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5764,i,689720385159214912,14867818108989189749,524288 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:5888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,16258738243459103698,14531427533368962712,524288 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:5880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5952,i,16595220988822359019,11419932475837267093,524288 --field-trial-handle=2184,i,13059698145752601029,8024795273843146885,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:5872

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5148

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:6020

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c632445ec60ee30ee9d0be325d4774d239eb22bb5685a589815e1cdbb0a41ce5
MD5 977d686c4287f923807fca979f77ad0e
SHA1 1728f513c1691b1db90d577e0a08756b6a05ffc7
SHA512 d5c69c5de71ab3ef1c571cbbf684cda87dc44c8a02822bc589509e6a608a767210e5d9b4780344c2064249e2a19a04d9503591679a887c1f5b6b45b21a14fe05
TLSH
T1ECE022B9CA62AC3B28FD1718A8A54745FA41235766409D0F373D910C8FB477A8287C5C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1bf63b7b93b2849ea6a1fe71f0b1cf760e8f2320070d127bea8ea0730b3d0723
MD5 c0010e48744fe0f63d198313418837f8
SHA1 7a2085c78871508b937b874dcc87fd0b65788601
SHA512 becc104b533e973f4821ad06245b5048034f758238f08dde984cf0cddb4d89ac9a814d566a3985cda9a8414625d608e8012b0f129f62284304925c16a8477e6d
TLSH
T175519CF7C3E8967D851152F8DA21AE2FDD2D1A14021D3C6288D4AE5F43E2872D20178E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3a9b49fb07765cd7d803f41ec54adc6d33374be4272812b2c05de794c82d7c47
MD5 b231033c83b128b93504c7ac893ff542
SHA1 f16ce05c6f67780a67caf72e432b08a14ce4e67e
SHA512 4b05f46c0853044ceb2f2de06e32a4e88a936a7e0468cb1db954f448064a2442ed0588a36d463f920a4943eae29a4070400db89f7080ae144600aca22acaa8d8
SSDEEP 192:2RhbqIr7BRv7MF+pAPRp2o9HHsb+WNnU00gde0cQTalVyIsnAUgtaJ:2RhbvBgoUXT1w/0fKaT8
TLSH
T10E42C62EEE15697B6CDAD229FD227B53D7F5102261D42E40EAFCCA1C14E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 f70152ab194dddf8a947e19563864d72d6fc2dbcf40b9207b719c10a27873ed8
MD5 22cf77d3bcfd9765feab399f800deff2
SHA1 bc69188b4327df0b18eafd3fa5e0a4bebf54ee49
SHA512 7c52ecdf0cb91da1299d7995c6ad1158a85f182cc04eeade2256230fbb21f6465361ec74494b035b735d2fc6ad42b7418ec392acdcc39502d23a73d77db92ed6
TLSH
T15AB012408003D151C04602F43957188C7114AF10A60E170143E06927D8351618015060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59cb45.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59cb45.TMP
Size 96B
SHA256 6a74311aabe29b6056c5ef852c60dffc5aa516eaa7f54c9fecc554e742694926
MD5 dd49e5c9ae8ab64f1a7115193942c7a7
SHA1 db36dc1226e31d6990c1a4fada723e6a81e72c68
SHA512 19080f34a3a28cc8af53a0ac69e7cdbf654225ea70f5938c66b32a3e550714c4d5ada330586105776379f3379a6564604032a4de92b9d4eb2ad794e26acc2254
TLSH
T13EB02208C0022222C0C203B03A8282C83028CF20C3030203C3F00B2AEC282302020030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 f13381084d05197058b9ac2a477116e0a313f26808b7e3dcb97132149e228892
MD5 3ee651b601ddf5ae1abc4d49cdfdaa8f
SHA1 ef72791a449d70f050772e214bbc81a60db92411
SHA512 8fe059e328d7d020028de08cd837adeca306813df24732d3a470ac6b9c2186f74e70bf4e3ffce05b811b2c6d63d60b041b49b43107102aa65076b7855e35f347
SSDEEP 6144:AqOy/eY/0Ljo6PGqnPm7Rkm1tYpBeh2BAoy:AqP2Y/0Ljo6+9oBGcAoy
TLSH
T14D342323EE71BB761499623D708F9A1C0CB11583DA4DE6E18ED9AF8927FA9C41D18C70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 cfdf2fcb6ec24502e2aa486a34cfad375122d4a6e3e11b511ec460d6e969148e
MD5 a58058fcccadd72543ef3e25297ae7dc
SHA1 d7ebcc757d34c68c270632c6fe7a899d70ab0900
SHA512 52aaeda47c80048f38643f40fa455b3328bffd3a57fc0aefe9b2d75d7b9d22ab0284eb5d1bec766045dce95cd73999129973880ebcdbd47d7a9c23b7ce0b6295
SSDEEP 3072:/PGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/em7Rkm1tYpBeh2BAoM
TLSH
T103C312275E75E9375878BB0EB08E0B1F1EF14AA6D930DA92C8D85B0467F97CC1A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 00a5d103ebc5f842fe87d1ea0aa6446016809c64ec089797694cbcc0b6c5d3da
MD5 29e8a6892438bdf1920a881e4eeb7d78
SHA1 6183c0c0e1328b31bdf95113747da76f966009b6
SHA512 70ff72a1f8f71761334b1422f7af6456ab4299a22da3cc701ed4501a26d01214e26c9ae3f08e5f37740e96e846c759bc7f89f05b24e3fa948f0d21707d11bcca
SSDEEP 6144:ACcOy/eY/0Ljo6PGqnPm7Rkm1tYpBeh2BAoy:AfP2Y/0Ljo6+9oBGcAoy
TLSH
T152342333AE71BA760899662D704EA91C0CF11683DA4DE6E1DDD9AF8923FF9C41D18C70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 18b472129ecaf1071311b68fc0a315873605ab5066183b615843c669c132951e
MD5 305e42006f92981c9e6904105a69d93d
SHA1 402bcb8704e0e0fd60a61424f855451a4af4eb3b
SHA512 f6ee71307da61648b274784bac3d030a0ffc9343aafdc0166e090f4a95e609a9d974853590409b6d2779939316b0889a7a06ae3a9dffb94c129d635e4a872b63
SSDEEP 6144:LqOy/eY/0Ljo6PGqnPm7Rkm1tYpBeh2BAoy:LqP2Y/0Ljo6+9oBGcAoy
TLSH
T14D342323EE71BB761499623D708F9A1C0CB11583DA4DE6E18ED9AF8927FA9C41D18C70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5fd0dfd3d3bf3e7005f86201a11a7b14e5b70a804c20d2fab2dc7e18e83479c7
MD5 59dfe5a6038e1ae4c00480b3fa70dfbf
SHA1 d8b171ed62e85a9877f2b32db7bf807cb4576c47
SHA512 0cff21ef0bd37ce3d4f98e7940c908c3201d89cc50406b17dab09361007866bd0951b42f1ffce2eceef6f25882ea83f6afe53c995d82bb88973ce086556c906e
TLSH
T1BBD09730FD10A5A1D22A0071001006001E1404B220A782D1A024181CC9B8040C2EABAA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 67KB
SHA256 5e9ddd849c267cf191b2db00f575728d4b086f3b4fe31417a455bf0f4816514b
MD5 088ec17d4fa0e1202159915b03be22a7
SHA1 382daed964422de3fd5b9868d05253fd3ed4ffad
SHA512 c09cec454c2ed9330ae55066e690a1a017b3e401875a01df398872a7077ef7dd76b81cb9a5bd8d65e49b6170013f977a348e8b15467a9c96e1dda3dd949a030d
SSDEEP 1536:pAtMV9QuLlHIH7W6u5giUEJ/hnyydpMPoIShQg2WnFIZ3:pAmV9zZr6u5dJ/oydpMPonB2WSZ3
TLSH
T1666302B5D4F9178620352C8EA4F6907428EBA7F47950E9F050C4DF488DD8A7BAC08BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 405KB
SHA256 1b60a6c04cc80fa726e3c5026255272c3b75303cc1666700305b3f9acf8b2226
MD5 e6b338d0fcf0d823a1874c7606dc62dc
SHA1 501f5d87f43ac13f1545286e3fde99eb15c5c5a7
SHA512 5cb49ce345babefaa0b4070245244a8cf2611000c2fd124532f43c764022177192f62a14090d3b5945544449788612326e215446cbe5f1830c4309720cedeec9
SSDEEP 12288:Ph3qrs26+46/k68I6l0X7+uHw8AVTQPUg2tQVy:PhqrL6+vkzI6yIVkY
TLSH
T16894237C930EA8852F3F559A617D2C8A1884F8F5CFD95E81BDE3E7E150A0D090B5B328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 00c102d872e9407b09993fabb6d1d38652408ab3d17cd9486fffecdbb9a33b78
MD5 6123403e600de4921cd9492faede4c2f
SHA1 e9739c7d926057dc2aa336d6f69fe3b0f886aac3
SHA512 731b6e122cf25adeaa75dfe59e61a71ef0ceaa0c5926c5ed3240beceea6d9e89943f264b8621dff75290adef5ae29d051144ff8d7d757844d7cc646484d9678d
TLSH
T1B27129B620010193EF210F70909372F27DFCB6E8F2579EF92D7099BB65063A086AD90D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 f783adc7d8eae4dfbb416c6d59f6bb57138903096ccb9055e2052a004e3fbb40
MD5 d94f538c533880fa4d27c966cebae51f
SHA1 106b1605e6335b209ccef2036d45c61a7d5bbb69
SHA512 494f06b7f434933844c141653b974f0e6569d9eeec5e7ebecfd91b0e2f2f4115262d023abd92c567129c4afa0a4b044a6c06cf426f212a28318a3aecdaeffa3c
SSDEEP 96:+2usdDoJA5hBBuGUwN9RBouVraNnFXh0fOYA6jeh9KKWDvy+nJQ:RdSA55U0muiFX/8ehZqvyGQ
TLSH
T1CCE195F62D8045E2DF105A7190AB79F639ECA1CDF1065FB61C3086BF981EB9095AF40D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58aec9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58aec9.TMP
Size 3KB
SHA256 bf6786041ed099b86b71685d3b481c1bd8dc293761a56e06f2bfc5e8e2d2529d
MD5 b14426e2d56042803576f5c3ddc6e2f3
SHA1 c5a40292d67a69f652a2e700844cffd9b1676098
SHA512 3c8414f8b4d1ee6fb30f18af04cfd57622e6d13ce3f0085123b232bca1d9cc9ab2097a275d30a54f0867a291f2cc37ab38d5df64698aa2ec4e3789e0b1803bef
TLSH
T101712AB620010153EF210F70909372F27DFCB6E9F2575EF92D7089B7650636086AD90C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 cab56c16a5ac90f787633aab6bb0569c6597ca73f4026e58057a7a353579e77c
MD5 87cbc74a3132f26b54c1a3065ee0f04e
SHA1 3e4e34572fed4a2099b57487fd238b40310d0e6e
SHA512 fcc6e0fc55237d4c62294ce2bf963ab85ee09d15b58641576ef7db8370789d3581f52bdc3e80ac9a8a085c8f8c54015863ef6c9be56549e03fc9d6c6b515c77e
TLSH
T15B61BBF7C3E6822DD91156F0AA14AF1BCE1D055243AC3D0985D4AF4BA3F2471E152B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 c9fcd123dd3e5fb888a33771cc2c2569f0c1dbdbe5fbef3427d2a25f9108f81c
MD5 e5e24ab115ad3dde6fb592d58c7e746e
SHA1 2d68f4ced0c98df9544dd725975edfc932f888f1
SHA512 46949ab8582009cc670032c011f74c1c88e31823e34bb78bf7195773d9b61ff166e94d1f2060c4b60952691802c4c205e3c5c694c44c763744b852eb583a7e1c
TLSH
T11F61AAF7C3E6822DD91156F0AA14AF1BCE1D055643AC3D0985D4AF4BA3F2471E152B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 12baa6baba913c5ab1a032c5886d0f088d31cf418070a1ba993498847951bcf1
MD5 9452a7938b16c4c7414ad22bb1a863c3
SHA1 4c77d73f2849a2c014406cb545797dbe8fb13d51
SHA512 d9e6fd76405ac1071702e8601fde07580c779a296bc8213010f93580a8681ae5b43a9b6da893af3ada47606fe6d0d2c9197b6ccdd1a80fbdcdc92b64b8ec65ef
SSDEEP 192:sxZdRiyM/jK1Ml8Mkg/fksg1dVGIdpJHds/6+WNGYvx1mksIgrJ:sxZd0Mg/fksg1/JHdnGpH9
TLSH
T1CB42E7166B349977CCCBD209FA45BF53D6F91462E2941E48A9FCDA0C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 f6cb21dc724ba3f627d7fbf8fe971800abb376bc83bbfb103b01df878bfbb046
MD5 85d88d7816ec835e8a34903ebab3de14
SHA1 19a7de1d786478bd8f45c6b70daabc184ae3bd15
SHA512 6c97935873f5702eb56ff97b3d6f1c280673543fdb5e47ca487056140b4e26c492153963a44787313c9d5adeca95c2c085b980879f5d6777d3c43c5627dc6104
SSDEEP 192:sxZsQUnNRiyM/jK1Ml8Mkg/fks4dIVOPb6F0ddp4WTHdsr6+WNoWmqjT/YPtKwkH:sxZSnNEMg/fks4dxe8pHd7A+/QH+p
TLSH
T1B382081666208977CCDBD619F9227F63DAF80463DA545E4CA9FCCA0C04EA6ED2317C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 c0cdd2d0d73b4d9ab3469e04fbf7b1e74397ac0a9ba08a62a3d057dcd626e333
MD5 fb02ab97622f7b37c8377d5987465dd0
SHA1 da8b05cc68bdf28e6b0aa3399229090ff8496f5d
SHA512 e2423b4e89df925e1d68437c6f81c13d6c9ad15f4cf2e8f50c5daab4c58345bae339e017a3cc84e5fdedb16655b2ebb40e112705745c5c128e26c662888267ff
SSDEEP 192:sxZsQUnNRiyM/jK1Ml8ekg/fksCWpVwdQVOPb6F0ddp4WTHdsr6+WNL3WmqjT/Y7:sxZSnNEog/fksCWvwd5e8pHd7L+/jDQp
TLSH
T15482F9166620887BCCD7D619FD217F23DAF81462DA545E4CA9FCCA0C04EA6ED2317C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 224336f3acbe66adaad117fa69ee06a1716805238c6a365211e29411427fc1bc
MD5 e80c24c873293d5575c7e214e816b2f9
SHA1 6d00a83890a2bd52393c8513ad435b0613b1e58f
SHA512 527d63b54ed8467c671c84142420f1b6014f73252bdf4d9a5f40aa26a85ebc1505f672bad8f27248b7589b1f8eb1299dd41941e9345edf4397d3bc6744d46f1d
SSDEEP 192:sxZsQUniRiyM/jK1Ml8MWOg/fks4dIVJb6hdpmVWHdsRaO6+WNoWmqjT/YvzPmkH:sxZSniEuOg/fks4dRVzHdOaDA+/TH+p
TLSH
T13972F91666248977CCDBD609F9227F63DAF80463DA545E4CA9FCCA0C04EA6ED2317C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 73d01c830c8da05d39ee5b8720e61568e0f7e47eaeb574b9d6f32162c8406a38
MD5 d4bccfef3d6192770f0f1909bceb3bf8
SHA1 c2f633231e5cfbe1d7d3cee03967eda6268c14f6
SHA512 2c3fb17e2c67757e89f4328274bd4695ded95d060ba669ed4e8c0006568cb6cdb715d8ee31a65edb11a4b2e7c96130e6286004b5852e4917c0699ae3b4e1c176
SSDEEP 768:hNseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppuroX7:hNseJ3xWvhfynu1jaVcL88plL
TLSH
T1D7D20B2B280CCB7E4F844E6DEC266F966EE801CB67984D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 58a748b651ff3e1544d126427fcbb7bf8f584175bfc67a448d601acc39c59210
MD5 a4b2aafadfb452d8ea70fafb221196e3
SHA1 0558b749fc8121e488e936c0f1ac3644806f11ab
SHA512 21439c725fb5d96f11d8047e1b3c7c86c71a8627962468e87839f30421a074964546d5a370bedd93456219356b10589ab5ea44c1f254bfc61fbd160018abb9d4
TLSH
T187A0021406807281C01313B365DF4161631189950216633541DC014CC9E1775494600C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5971db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index~RFe5971db.TMP
Size 72B
SHA256 fd4603275f7e87db8fb5ec96fc4283bcb940e162a68ae9966f8d85e3872a4971
MD5 52946637cc4c0481d7ac2198de0182ec
SHA1 d96be9e85d9eb6e4049b317379bf17fe5d862dbf
SHA512 5b81697858c5eb1d9f94f76fcbd5288a6f0b97cb7a4535c2c28048aa3737dd6952760c88318324eb8782938d4fca0341c19fae6bd0b37669ce05b1e912592ebe
TLSH
T12EA00250DB80101DC11352B2255307915300E89422005B0784914044CC908C44D4158C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 2KB
SHA256 bb37b1675861bc6a2f21277edabc9673867147eddf48f3f0bafa33271b9e235f
MD5 9e847febd689f4583aa0199a497f101f
SHA1 7482b7b41f1f951a67f296a7f9af0833d3af7d97
SHA512 90cdb99f415084a6394ae37f522c35e42de3b7c6f5bc7689c831e6068a742c431eac515b38718133634cde427f5f77b2f3b990599e3c01165b0ccb73421547fd
TLSH
T10A51D84E4D4A7BA6CDAC24B328F71486373134FF89848B17948CA97478C32252D6AA19
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59837e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index~RFe59837e.TMP
Size 1KB
SHA256 1c9f8e7c3a3317ea944af84d26a4036ec3e9604dfab5120e506aebef46e3e323
MD5 f0b44862872472748022f817ccfe86a7
SHA1 32c6d0bc52283aff664d6cf2023a7e4f117ee81e
SHA512 b8aa0396140d333b7adc298dc4ddeef8ba6cdedca80f8cda2339901484b8cf2d3b9a7661eb54d3411e7e031c774ed115df440947dc5b5fff825db5f7eae912e9
TLSH
T1EE31868B4A41890FE8D440B20552A0B83376C94053127783987C623DBC757AD1E5F0C8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 dd1b82d453d11ccd4c9f7679bccdc5ac04b61c0b065400bff7156e3c279c5f6c
MD5 3fb528ba47026076e94f6fa3e2cd69bd
SHA1 2125ba12cdc141646c30209476460ebacbc6a40f
SHA512 b8364898e33e36e4fdfa7f0b8560c1d20f5c4d97118153385200a2ffbb727f059e4923edacdab711462031f2d47fa7fb641af19772f32725683db9195e499590
TLSH
T1BAE0D8B62DD72454BEAFD3D264308490064A7499E945FC4E555AF6871072355309AC25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 6572291675756956d8754f3ebb4c4aeede74cf78b4be189a98264aa9754be145
MD5 2389b02d0cf16fd6fb44eb7378fc730c
SHA1 2dbadb382fb9c5d7d1247bfa3a8193e2b6ad8da5
SHA512 051580baceec49e8cb9722d51e6538761b79068c3df25f2b2adbe25470701fd3220f6b5cfcebb91d9984a04d24e767316456bdac522d33219a6c978ef3e31e89
TLSH
T183A00231CD94808DC50006789E611584AE908CFD5685271262AC5098C86C1515BD3105
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597313.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe597313.TMP
Size 48B
SHA256 50613d547e12bf9ed9e9dee74f3949253d0c5ddcb11cd97a5cacf8dfedf14fbb
MD5 dd523f2b4d5002569d4cb0cac11fb8f1
SHA1 72ffc2a46535e7c1e96fb772d3269aea2edfcc0a
SHA512 da99bba1c333780029f2e9e522c59c955e0a564daecc02977e1e5b6ec96ff5771242a5272adb4b66d235bbce86a6647ca4156811181028034d7d20ea11221ed0
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b8cc944d337f741282b07b7f7b3e06cbb800d90824a45137a9caae7357a94897
MD5 722cc53b59a4e762dfa1a7a9ffe02f2e
SHA1 303b11f61263253bf5609d299b41cee8c2d6ae83
SHA512 aa443538edd4235b8f6d1af9b60c173c35fe9ca4a783a740bd969c457c4bb8d1c7e44e865906dd3cba865b24aa061e405e214927705001a2988da2151c62e477
SSDEEP 48:KYHIhKggkXy8+FCuEA8kMADPIDmkKqBickWO0VjEO5y083ocGO+2kOh9ILc2KWTE:KYH+Kggmu32KYAe+ReKSoR
TLSH
T12B919813317B020238BD664CA697A63B8E41B2677414B4AF7FB904524E27E225DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 3d52ff859f559c8f38a19a1a9b64fe7fc0bafee94cdd0a5b63360577f55a1177
MD5 8d285b99d7314896e4d480e4b9e0285a
SHA1 642ac4a15ae88f3b16498dabd48b1c6dfd0f6472
SHA512 466c08a2165b8ca7fd3d2f5185628a42aca3655e826090ed88b099d1f229676bf1bc0cc63f91b265f3e784577a65de5aa7b87377ab9cf801164b79845e9c2685
SSDEEP 192:u1m+xasuheOwQxMGsN4aQjp5M79eJQmiU1IepTw4MT/hCi0bcvNH8z1HqJWyYy:nZcIhsN4awpS7wnJd/9dcMKWY
TLSH
T100626B72AC789D7BA9E7E241F48A32035EB48127E7C46F50E5EC7F0D05DA5A8030B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 bce98ab2d30abc1683a4677c690ee641e0e3e139fbb574f86af4a526429ef99c
MD5 7f54c598129453b9148dc5c5bc548cc5
SHA1 70408b799d965b3a18e19360024a3ac95de68366
SHA512 9acf9cca2ae19a6186206a54749d88f5a46da5a4620f6e6444ad21c91bb7f146b1002be85ed2221699169182b6216877502bea947bc1b0c32e8f86c6c3ce0664
SSDEEP 384:rZcIpssNZhTfpS7wb0iA29dcyhHASt+uqSUoJOK+Y4MkRWY:zWQcBiAAdxqSdAK+Y4MkRWY
TLSH
T169A229F1D8E59DFB54A6E0C5B581E2122DB41037CACC9E0CE6F9BB3A309F5B8171641A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 4842617aaec93b50087c780c25d88d7dd1ba98118c3403a58eae1492bdd39ef7
MD5 c510ad8d2d3cfdd6f3537a7a4e796b65
SHA1 ac3c4a9dcbb4026f19472a567d3f56cbc3d932f9
SHA512 a70081afa81614ba15f735f2d503d3bf8ae6c2a66fcc0e3a47b59b0960e8f5cd80be13359ed1dacd7df9557a5923d6ccbd28bfd5765e2812bcf7069169dbcf0a
SSDEEP 192:uhf+xasuheOwQxMlATIsN4YUTrjp5M79eiXmiU1IeWTA8BMT/hCi0bcvNQ8v1Hqp:sZcIpMsN4hTfpS7wbJwA29dctKWY
TLSH
T182726CB2ACB49D3B99E7E241F48A32034EB48127E7C8AF40E5EC6F0D05DA258130791F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 f9634e607eba4f516053ee5c04b3f15064f0343bfb502c71f8541df3d772db04
MD5 ec332fdab92b87170387d8872c2dad1a
SHA1 15543ec572309d9addfb56ab8b5195fa785c3460
SHA512 46758cdd4a1b5ff176b8bdd678f2c45614e1e4818ea38b8fe96fee4e2ade1d7bde92bc7bb2e6212cd379bb456153ad7b2fadf5a02c6fb5223014d6fbb31dea71
SSDEEP 192:utm+xasuheOwQxMGsN4/Qjp5M79eJQmiU1IepTw4MT/hCi0bcvNH8z1HqJWyYy:rZcIhsN4/wpS7wnJd/9dcMKWY
TLSH
T165625BB2AC649D7BA9E7E241F48A32035EB48127E7C86F50E5EC7F0D05DA568030B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2ce914d6195692cd6bf96020bf4de48040aded9df64f00b02c04567548663756
MD5 9ea880a35e5b1da402c31dde8b432909
SHA1 1cb9a54a1799eab91398fd4a88a1bd80f00601f3
SHA512 93fceb9843bca0d40cc4e9de33047dd3499459dc9ebcad639e018e9e46f353196c6895058bc28281d6a4bdb23fccc7ace2720033d6bdcc69044211a3d24edd0f
SSDEEP 192:lONV6vMtPQmiUyIxJThT/hCi0bC847B1U/u:lONV6UtRFTSdMDU/u
TLSH
T1DF020936BC686CABEEA7AE45F48A23171FE4116FE5905F50EAE82F1C00D765C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 0652941042e6386ec5befb59fd6c2d3596546846a3ae3fb871c8f87e51706e89
MD5 1baf71f514384ade13ee8b543e598f4b
SHA1 fd57ac5173329e4e63aff74cafb6f35b4e2226e5
SHA512 233df0c4549e631a8d803d1c8d5d3a8092003259bcffee8978dcc7a51389c537bf6fcb387db74405d093ebd32e4a7cc3df3b8e19264a3a32e0eb9e7b55767420
SSDEEP 192:BONB6vM0PQmiUyIaqJdhT/hCi0bcvNB80IHqJU/u:BONB6U0RModSdc2KU/u
TLSH
T148121A77AC689C6B9DE3A551F08A32071EB0826BDA84AF50E6DC3F1C01EB65C130751B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 57489a8cedcdcae814cb93c80c046a057930878868adb06ffc7f05150897dfd4
MD5 1cae353a6b2c49b02eb558a7de661da5
SHA1 70205e8261df3e2d45050d957b8c56405ac9ee4f
SHA512 48f675046f57a4a8c0e5f6155f3532f3c0b93512e3317d1b04f8576241f4335434f39e814fc5366bb40e4fdddfc0fb67ef1e79716c412c71b8bde194a850fbc7
SSDEEP 192:utm+xasuheOwQxMeIsN49Trjp5M79eJXmiU1IewTA8BMT/hCi0bcvNH8z1HqJWyN:rZcIqsN49TfpS7wwJaA29dcMKWY
TLSH
T145726B72AC749D7BA9E7E241F48A32035EB48127E7C4AF50E5EC6F0D05DA568130B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 c794274d175a2ed837e868de252ed2d840d6177cadfc0f24a86e487237817b81
MD5 65043acc7f1e208bc6832115a32d7b8b
SHA1 b7c20be147cf8a48a83ecd3114ba038be3574022
SHA512 8e95f63c667f709a226eb1675a109486502f71df84be0fba8e3f52aec110fcce6b47cd384486c53474e4f5fb2dc77aa43b2bad9a8b70cd8ad79cb2f3efeb2dc0
SSDEEP 3:MsEllllkEthXllkl2zE/l2Kz:/M/xT02zM
TLSH
T1FE4404047FC41447C50011314075D3701374D4105F135F433551053FDCD57400C40051
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68951752-055f-454c-acce-3adb62cc1932.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\68951752-055f-454c-acce-3adb62cc1932.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5f7808be4583bde7935a26b6d8e0cb372f7f6978e1c5e82a93be43b1bf3f6aa8
MD5 54b51d74c2ecec71e59f6de1b9463223
SHA1 07c44c9f8d065f264036c70062ff99a876846435
SHA512 68ccda84bf811b2f028a7ee1d569b736a78d09667761142bb2533c6209d841649de3eb9c677e7584279d446a6694a6275796c9356d21ecc099c1a0c5f2bf0c06
TLSH
T16C411A58BAEA1158B3B77F1A9BF6A86D487B79772F0B915D10110D4F0B22A40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download