hxxps://slimeranchers[.]com/

Resubmissions

06/08/2026, 01:19

260806-bpqq9azhpe6

06/08/2026, 01:13

260806-bldyaazgrf6

Analysis

user interaction
yes
max time kernel
15s
max time network
77s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 01:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://slimeranchers.com/
Sample260806-bldyaazgrf

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
2	raw.githubusercontent.com
29	raw.githubusercontent.com
102	raw.githubusercontent.com
103	raw.githubusercontent.com
104	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4428	chrome.exe
2540	msedge.exe
1040	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2044	chrome.exe
2044	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
2044	chrome.exe
2044	chrome.exe

Suspicious use of AdjustPrivilegeToken 12 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2044	chrome.exe
Token: SeCreatePagefilePrivilege	2044	chrome.exe
Token: SeShutdownPrivilege	2044	chrome.exe
Token: SeCreatePagefilePrivilege	2044	chrome.exe
Token: SeShutdownPrivilege	2044	chrome.exe
Token: SeCreatePagefilePrivilege	2044	chrome.exe
Token: SeShutdownPrivilege	2044	chrome.exe
Token: SeCreatePagefilePrivilege	2044	chrome.exe
Token: SeShutdownPrivilege	2044	chrome.exe
Token: SeCreatePagefilePrivilege	2044	chrome.exe
Token: SeShutdownPrivilege	2044	chrome.exe
Token: SeCreatePagefilePrivilege	2044	chrome.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe
2044	chrome.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2044 wrote to memory of 5272	2044	chrome.exe	89
PID 2044 wrote to memory of 2292	2044	chrome.exe	90
PID 2044 wrote to memory of 2292	2044	chrome.exe	90
PID 2044 wrote to memory of 4428	2044	chrome.exe	92
PID 2044 wrote to memory of 1488	2044	chrome.exe	93
PID 2044 wrote to memory of 1488	2044	chrome.exe	93
PID 2044 wrote to memory of 2596	2044	chrome.exe	94
PID 2044 wrote to memory of 2596	2044	chrome.exe	94
PID 2044 wrote to memory of 1020	2044	chrome.exe	95
PID 2044 wrote to memory of 1020	2044	chrome.exe	95
PID 2044 wrote to memory of 5628	2044	chrome.exe	96
PID 2044 wrote to memory of 5628	2044	chrome.exe	96
PID 2044 wrote to memory of 4784	2044	chrome.exe	97

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://slimeranchers.com/
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ff8764bc728,0x7ff8764bc734,0x7ff8764bc740
  2⤵
  PID:5272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1620,i,348558277810119954,14091305793485046085,262144 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:2292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1480,i,4477598876879868429,675237697115788459,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,15429115117837212231,7560795320529434782,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:13
  2⤵
  PID:1488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,8943751614784552881,13037285639968608920,2097152 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,11112564713540046768,224045332762612623,2097152 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4696,i,17347977640376001215,8558125155410096103,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:12
  2⤵
  PID:5628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,16676285161656837389,18026433518108887951,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
  2⤵
  PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6196,i,7336898336033657839,13928130919055989727,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6160,i,18412623954903365972,9744540679210574104,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
  2⤵
  PID:2988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,7392696847908079014,17149108677970878187,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6528,i,18082619360468370050,11341468570293764513,2097152 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6452,i,3186014384519849519,4279510819573442265,2097152 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6916,i,5182503855612691103,16567009728237027410,2097152 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6928,i,14224338788300279662,2383991866714465420,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:14
  2⤵
  PID:2864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6988,i,17222576305542157003,4889972413087045596,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:3936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6992,i,1099867868055886528,10507478001799914388,524288 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6932 /prefetch:14
  2⤵
  PID:5868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3624,i,11336892191966751444,17842038085915887936,2097152 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:6952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=2976,i,6118451665644452324,4273433498255741918,2097152 --field-trial-handle=1908,i,17560735270425258241,8782450215399839948,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:6992

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3204

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1492

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:4724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Downloads\Slimerancher_OFFLINEBUILD.html
1⤵
PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ff86929c188,0x7ff86929c194,0x7ff86929c1a0
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2104,i,11381427752654971243,14176935138256712829,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1848,i,11151276631396946547,14700820277075019753,262144 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,8619557512723792002,10849878369696005071,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:13
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,12044557504652158470,15661401633787705513,2097152 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,17756123601495419556,5637292931762764935,2097152 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,11037072637714498800,11752547002895985144,2097152 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:9
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,14983721616296542477,15868671776285304273,2097152 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,13966369337349455678,5491942475912363371,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,17454741990376338906,6771138207347672595,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,3130584087878857650,15957049168852831912,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:14
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,17246745776239846324,5348017867425253142,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:6892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,17246745776239846324,5348017867425253142,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6256,i,6089148301041960906,884884465357504951,2097152 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:6668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6472,i,6067719129587138698,884341531208139363,2097152 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:6728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,2593303241393986110,10072695010988047823,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:14
  2⤵
  PID:6944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,1946773073720972334,17533295238850324937,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:14
  2⤵
  PID:7144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7504,i,4445492722593413856,2898743180500917329,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:14
  2⤵
  PID:7136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7500,i,8839329367716638400,13899373590730542772,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=7384 /prefetch:12
  2⤵
  PID:7044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7764,i,6057720281210359460,1082948322177903301,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=7756 /prefetch:14
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7912,i,8230550813557290536,6521717253678751590,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:14
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1488,i,2597941950437420780,8368733060802002751,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=1196 /prefetch:14
  2⤵
  PID:7316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1448,i,15604772089867336512,79267331051806742,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=8092 /prefetch:14
  2⤵
  PID:7324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1192,i,4465831457329538104,10910840726052589774,524288 --field-trial-handle=2476,i,1150592895344029481,4346698106911288158,262144 --variations-seed-version --mojo-platform-channel-handle=8136 /prefetch:14
  2⤵
  PID:7332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  PID:8112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ff86929c188,0x7ff86929c194,0x7ff86929c1a0
    3⤵
    PID:8148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,10938953325817276109,8830495369421198240,262144 --field-trial-handle=2252,i,7693796803534002051,10975142388489249154,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
    3⤵
    PID:7072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,671158791390817862,9414465201822650605,524288 --field-trial-handle=2252,i,7693796803534002051,10975142388489249154,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,11553797016334014228,2961303232152785526,524288 --field-trial-handle=2252,i,7693796803534002051,10975142388489249154,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:13
    3⤵
    PID:716
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,2695594752389437610,14368271894602116373,524288 --field-trial-handle=2252,i,7693796803534002051,10975142388489249154,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:14
    3⤵
    PID:7384
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,2695594752389437610,14368271894602116373,524288 --field-trial-handle=2252,i,7693796803534002051,10975142388489249154,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:14
    3⤵
    PID:7344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Downloads\Slimerancher_PORTABLE.html
1⤵
PID:6412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Downloads\Slimerancher_PORTABLE.html
1⤵
PID:6864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:7080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:7104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 b4f8a595c51512d70afcf9ad80cf04d0895a5144294acbf87c172bffa83ea8ef
MD5 66b8b896f3f6c32b32b9399c070a9ff7
SHA1 e08fdbcc0f12e8edd81209542c89a017a899dfd7
SHA512 0b88fa1db04c82e9713d562d8471b7a8f2f3fb156144deeec9f80fb6231c94f2e2c9c68efd6b67f6b19fde632ea73417bbfcadbdc23d07838951806b9412676b
TLSH
T1C5D0A98C1CC11A15FB20CB3618E33A807334E6080C23AEC251E01839822F7AE1481C23
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 48c16952ab9a28de9a31965ed877779754f3ccc4357db5553b09c5b086a2c9f6
MD5 82fb89466748221d425a8d736450c29c
SHA1 b78f66b7babd29c4242932e4fc6321752ed35199
SHA512 e12e63d465a8d78911a80a66c7b991db05547fe6676be7c29fea541d9fcd86f92f02fe535b3fb7cc649c863af631b179540f691363c0f30e6d39ae683108a768
SSDEEP 48:YALlPj+WPP1PPYP4lPmIsJSRsJAXLsJR1foKsJrfskNNs6wzspVsvWzsH2WzsLYQ:D7++Fgwl71AC9Nd7cr23zhweSmX
TLSH
T171A198F3D3D8872DC90156F4BA592E16CF6D0D24036C7C6AD9D8AE0FA7E2471E28194E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 859B
SHA256 959cc8138eac520681bf14fb01307c086a854b9d1a7f435995381036e14bb3ad
MD5 8f7a5219a2998df5e13cc98eea5d4358
SHA1 f8dc1ce610bf02f41be12d45f2f426a324c0e4a2
SHA512 739dd759468e749c7bdd16194d341409c0f090440ca37f8d9858095e574c44e0a1c6a2a6076e6ef8c2c97308c7194a6aad3a00ce55363a1850face31dc354db9
TLSH
T1F0116BA7816EF077206C186B5D407C05A5BEB830039179E4DF96826EF0855F71B11462
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 ac19cbbbfed22922c7599a522f0ca22ffac4bb2acd4b885043d2ff7aa6b3d770
MD5 57d6e63795792bd69d2398b1a5e784b7
SHA1 9b37dc03544c70f7bc4ce4c95c79cb8ac5ed8490
SHA512 91f0c61c5f765b79020286ab5dc0fee52449e47cd26e81b7c3cd6bd0c2c1374914891291ba1b02ce4d7fe9bf50059e11c9c27a50bf97f90d114b4eacc8cb63b6
SSDEEP 192:+RXvYFWv7ivAPRp24S9rHsb+WNnK3fzn42Ga2I5eMY6rVyIsnAUgR:+RXvKim6Xs5wa742V216tR
TLSH
T18A32A52EA921797B5DDBD22AFA657793E2F5013121D42E84E7FC893C10E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 dbd876261cb6ea8e4a53a408e068f0d2839ce2ad1beea88182cc69bddd7c4fd2
MD5 e5a2383c6ba0a532f4d6f6fb17c495e2
SHA1 c8e5fe501c586286491b098f9cbb99284e6ab836
SHA512 a0d6196499a95ac1428bee01d44574a1c90a938520fcd53de7df5f1e7747069fd90694b10cf6d92053b3b268a88ee9372b5eed3bbb5b5dcb70eb7580fd4a221e
SSDEEP 192:+RXvYFCv7qVvAPRp24S9rHsb+WNnK3fXL4eCa2I5eMY6rVyIsnAUgR:+RXvKO2V6Xs5waz4e5216tR
TLSH
T1C932B52EA921797B6DDBD22AFA657793E2F5003125D42E80E7FC897C10E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 377214f648d46362e6b3ba61a4a35f0b3ece9941968bbbba3d2ad7ec28b97d19
MD5 7474e77ec98ad67b1de76a2bcb904b87
SHA1 1fd8aba26460037ff3c385d81628b3b905985258
SHA512 67e346a0f8465ab666ae21bc92d69708d4d803b8aee3da848c9b2e2d8e52bc6b8a6f9afb8c8f23fb839086bb7a9d160a743e211c885cb1bea9822ce51f955664
SSDEEP 192:e6F4K6Em7KxkXqK4I40pUZNCgVLHrKHfFKslEVSsXzKD/Li+ErUkKN++2n7DTe2:vFjzm7KxkXqKf/pUZNCgVLH2HfgsllsP
TLSH
T15C32E827944E5E7F4FD8D51CDC126F8BADF5029673780D2892FBAD0803A578A114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 baf3d0ab7d6255c699473f1fa3c02f3a783068ae766260afbe9212923c64963e
MD5 1e4a27860889cd4c8bc0e36278a48b70
SHA1 b5f0740e922b7eb9e6629bdf9e5b85c5c8e0c8a8
SHA512 9521a6ff407c6272ea632fb6b0e986d76482fc73f7168ec1439e5c667aacd51d4e5d730702a786022d233ad8a3fdd8fd18a7b071e0ddcab67d33ee6028e97497
SSDEEP 96:TC0d+PTkblaRZiIEby3rUfsfuZ8IKGGxRDotok5/OFADfB6xGyv4YR5glObETev7:TC0cTkJaRZi/CF2lIDUD/i2pZIR5glO5
TLSH
T1CBA13B3264659DB76976D98AB5423A83CFB9723B7950AE84E9DD1E0C14FB0AC1342433
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 7f3008566b20c50f6a9d6ff2d738b126f7ca98428325140871b7432ad03bb7d7
MD5 2bbba328f6da278d868205cc45bf9ea4
SHA1 332a07fe849516a21b35e011a2d5397d19a94147
SHA512 3c873232dcb2b174d140eeb31996647ae56127f9ccbaca5043bfd8469759312c46f13d7461d1bc2e227b396e5547bf86bf585913dbf92c3572d8b9fd939eae2d
SSDEEP 96:TC0d+PTkblaRZiIEby3rUfsfuZ8IiGGRsSl8h4otop5/OFWDfB6/Gyv4Y+mE1I0/:TC0cTkJaRZi/CF2lawiU2/iQpPI+mEmM
TLSH
T12BC12B3164BDA87359B29556B1433E83CEB8727B6995AE54EFDE0F1801EB09C2383433
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 26edcc9638bc3fe936168375c704cfc4dbb343a6bdfd564af0728c18a5e01675
MD5 1445911c26518a522af1ca9f358d520c
SHA1 277992498703893448104ba45f6deb48b14072bb
SHA512 21b63c72723868ef627653576e634ce2d669eb045c14af05349ca1e188590582937f809be5d10ee3ab54a441f9c42356603f79990b040401139d22a95f558b6a
SSDEEP 96:TbJ0d+PTkblaRZiIEby3rUfsfuZ8IiGGRsSl8h4otop5/OFWDfB6/Gyv4Y+mE1IM:Tt0cTkJaRZi/CF2lawiU2/iQpPI+mEmM
TLSH
T111C11B31646D987359B2D556B1433983CEB8727B6995AE54AFDA0F1801EB09C2383533
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 ea6c413bd3a4aca37f6a01560a5c5c8e6af6dec96361a1101d786b0f8f1e23ae
MD5 139ce518b45976427bd72b14efca8568
SHA1 51fdeb1ab59ef36c8e42899b15a31d27b8238707
SHA512 c1bb07437945a81c770236eeb9784d4b30892215b6b27f7a94b495ccb1d0ebe99c7e9013dee2015726b545f52a660ffa7654be57e5010546f2e4c6b4c832d980
SSDEEP 96:TbJ0d+PTkblaRZiIEby3rUfsfuZ8IiGGRsSl8h4otok5/OFIDfB6/Gyv4Y+mE1IQ:Tt0cTkJaRZi/CF2lawiUD/i+pPI+mEmQ
TLSH
T104C12B3165AD587359B2D556B1433A83CEB8723B6995AE54EFDE0F1C01EB09C2383433
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 528666667fd1aa4bd38c6e7b63801ebbfc76fdf67baef20a9b0dcb024c332091
MD5 a736e3eff6c42c201d52ae4d12ffa3ed
SHA1 a8083ba84e6757a2438200a7deccc33cfc44e0eb
SHA512 1bba810207010d3240668c552c6761ba9c3364a147f6c68ace134740e1f4a37be7c309140c70aed2f830125ce9ed1332bebdde4ff8e19663a028c3a0d8c73623
SSDEEP 3:MsEllllkEthXllkl2zEklDq:/M/xT02znD
TLSH
T1C8440404FFC01445C50550704455D75013F4DC504551774334530413DCC75401D01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68e33ac4aa2e456ecadc75bb30e4f5fa8ad522042b96390251c948e0c4192090
MD5 e97e97ee93418b9f46e1448fb6a55b7b
SHA1 85bc3b81dd4370b2cd4db1bc6917264763ad3540
SHA512 beacc162d51f58184667637847b08a64cb0cf6ece5c6d0603a03bb429aad1b4236278a8f5022cebcdfd5d53979af5bca87ecc0402b494b862a857fe83e2342c0
TLSH
T194D02370BD79A7E1DE1C51388410DE14623643773AD767C69151680E89B004557D7DEB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9afc2bdbfb9972f868cc29c5854332c41d900b0f4aa2298f96310f5ed7136c16
MD5 4bfefe9cd0ca8ac81a9162cee9771433
SHA1 2772c4436ca9a4a1673fc3a79536f93b625f618b
SHA512 b4f712267ee1e3953886ecb5bf8e802c33a9ea094b561dff5886835aeb9f54f9f8e35621a60ac4f9c76d8cc61c5758dc066ba9a77f36b886d9d36344a6db2562
TLSH
T198D0A770AA5597A0CA0991349811FA25A673427434D79BA29051644E55A405893DB49A
MD5 SHA1 SHA512 TLSH

Submit Download

192e252c-4ad5-4fc6-9ea3-ac6a7e303f2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\192e252c-4ad5-4fc6-9ea3-ac6a7e303f2f.tmp
Size 13KB
SHA256 59779a1d226757df9bc313237c8e8f844142fca57eb4a6347f426634605bcb73
MD5 2827693c252e232f2a4ea1bae26c128d
SHA1 b318350a096223f44a9959b1c35328474f924f02
SHA512 80517d97acd5314d96fc7e69d5cb4c120b5cd2470c9cc3da7fc323bd312683505350a07caec2d5e2b8a64eae386d8e52d30b3c8eb860980bf9109261ae3f9e19
SSDEEP 192:sxRo/yM/jK1Ml8wC6/fHscIiHm2Sm7aj4zoD8p4Y/g6+WNIY3dL9GjIgVFJ:sxRo586/fHscIi2+J/5IKuB
TLSH
T13652E915AA38997BCCDBD209FA517F53D6F91573A1901E44AAFCCA0C00E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 987d2b88dee25d82b202bad55ce6bcaaa926a414cdc0e3a60e8c6c6b32260163
MD5 3383aa13a8266e52b6bde3636d6ad76f
SHA1 624718fa73a9813ba347c7c1b90ebbf30b6fffda
SHA512 7e8c7aa5b80ffa906afe72efb06c7136e650b936e5d084af93f09ac22ff08a3876bfa9c6b1f81ebe13ae516d845b009be3c908019deb2a7693ed2851e6b519c3
TLSH
T14DE02E4083220265EF690C70A9CAC2A633F0CFBE72930BA461D4AC744E41FB103C082B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d9ad.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d9ad.TMP
Size 360B
SHA256 26949075ab93ec6a1e99cfe0cdebd78854c020c42f167ae59d3429cab43364ae
MD5 63dcc072f38c13727ff3f855dae9c406
SHA1 93c2aa95282df866c9527706235e8eab405bd8cd
SHA512 3cf4699e2213e4867953aa4ae38935dee93eeed52a34b61b998afa9f0caafadd52655725055e8da11cf6ae023c8d57b387d4b630f9db1f9e3ddbef91210febf8
TLSH
T10EE0C70087260644EB594CB0A9D9C2AA23E0DEAE72930A6960D8AC344A41FB113C051B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 c2fb8d002f2f938b2ffbcf2eb1b1c456aeb14055ea3af15174d8e34ec8ad9cd9
MD5 84603d8c391de6b081ae14f4f7c832d0
SHA1 a2b7ca780ae987ebcd94c1e815c0b0ee2b995a2e
SHA512 7468cbffe95a1387d745590b9643b3834bc8a7534ae98e70f01c7d6707fd8a8b5a15c3d31113c65a2b8a287bb4e975a1d5b02ab340a5c9ee6b31eff804f7f446
TLSH
T157E026A814CBC179A564B8D3D36C830CC7D2F55BAA8879072F4C8C8C7101341B3CB6D1
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.108.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 40KB
SHA256 b619f301a56134ae50c2a124e5bf9978e97c7f5da73c132a74dd43e866e1bbd6
MD5 710d10ca2ad6b423a5accdc3f511ba38
SHA1 ffe534ff4afe4b3a43cd813d80c3df786bdf62ad
SHA512 8e143291e7960167b75c2beeb2c5d75adb318b3e79eeb395cf317d7432be6e9d3f17192689330f0af8ecb0450d2d44fb7df77bbb008215197fa5a48072305284
SSDEEP 384:Y7Bnka+6SSvzkWjuG6SSvzkWju/Aws5GLWOvniP6yjNY:4BkVjKzkYrjKzkY/wL5ni
TLSH
T18D03BD27BAB03C23E39C8F3C00260877342911BD5FE5C64678597277DE2564EAB691BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 e1cd73903a6de37099231ef4f9d297e18e3ffed84d4e69937de9cfaf3eb99648
MD5 53b809ba5a7f31235528f08dedd40443
SHA1 b2d5c6a9590232a48bc0d01e568ffe6307af69e4
SHA512 4a61ea80d5edff8c0c1416f0d357ffe55fe3e274b996fa37d1f1d291ab066d00c29cab5356a156945b446c574b6ec99132657a85998f593034cea636d2489e34
SSDEEP 192:r7LaWUzH+bF+UI3iWGVoWN3qL/cAVVV63:rqIkUI3ijVoWN3qL/cAA
TLSH
T18E241F0E5F753722CDBD813669E644A35C7DF03F875326DA687114B4CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\file__0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\file__0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 2373814573cb338edec148b32c0fe2deea6ee6e9b5ba149a0f48944cac0de888
MD5 a6a27702b1be964abddb4f9b88134a9d
SHA1 93879f41e194340d4e35d88156bdf684a814635b
SHA512 8ba4b81bc48f02a82ec0551e6bb6498736deea23660209b1d7e8945abb994a7aa50bdb4eef27ea0bf0f786672e781fe359e00aa034244846b51c0fee7597908f
TLSH
T12A618DF7C3E8863E891195F0AB147E1BCE2D0955432C3C9688F4AE1F67E2471D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5ba19b72306474dea4488d872bcd39932417b19855a27532ed8c78cf4fde816d
MD5 3e08010bc669c53c9206ebcc7327190c
SHA1 66ff7f382ca159c54bd924dc222b84c593060604
SHA512 10d9329e1e1b1f1b6569e3d589e699b26ce174c076cf1eccc9f740d66b1b4d0f0f5046169ae3dacbe0831448c59ecf4527986ba589b7e9886252b70940be765c
SSDEEP 192:sxRM/yM/jK1Ml8wC6/fHsdIbSZja2sO4zoD8p4L/g6+WNIY3D9GjIgDi8EvJ:sxRM786/fHsdIb0j2S/5IV0
TLSH
T1E662EA15AA38997BCCDBD209FA917F53D6F95173A1901E44AAFCCA0C00E6ADD2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 cacee31150d637624d0522cb33570416b2af5c865afa4636dbb157e67c4312f6
MD5 9facfde1bc772f8779bc15e740cee7f2
SHA1 1d9313346749eb97d540b8cf188b8d8487c8be1e
SHA512 4dfadca1056056e66aef009bc2f3fd4550b2345071a67b304146474cc5683169341483253ded1cce2c174ea3e6faeba167143cf0bcebcf1a052db53d6b5bab6f
SSDEEP 192:sxRM/yM/jK1Ml8LC6/fHsVWpVCIbSZja2/O4zoD8p4L/g6+WNIY3emgjIgD48EvJ:sxRM7H6/fHsVWvCIb0jfS/5Ij6
TLSH
T15962C815A938997BCCDBD20DFA957F53D6F81533A1905E44AAFC8A1C00E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 51d953cc44fd38e655927717fed7413f1166ed316797aee3750c923b4c682c98
MD5 6612a240ad33158a03824ee620a723bf
SHA1 336641d803c8a2916ec7afa68d6437784b10a59f
SHA512 ee65c4697dbcadc7b91164203103261bce8ce5cd489f43c67f7446f64086e4f71101779a95d335eb205021a46123bc9d3029e04e54bbb0584969fada72fda52c
SSDEEP 192:sxRM/yM/jK1Ml8wC6/fHsdIiHm2Sm7ab4zoD8p4Y/g6+WNIY3BL9GjIgDiFJ:sxRM586/fHsdIi2CJ/5IAuA
TLSH
T16852D815AA38997BCCDBD209FA517F53D6F91573A1901E44AAFCDA0C00E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 66ecd817b8954ddc37ba7b07dc5028fafdd2388be2db393cc8899ae1ea336dc8
MD5 0edc248f9521fd576e6efcd00ce9ed0f
SHA1 9cc1433fac56ef4838e3288f36ae887a8bada620
SHA512 2ffcd54954919aa80a4ac4e51b7f7f4c2a8e9e60eba7ccfd6769dee2bc0adc6471a309803896816fa79aacf585d7e71c7a15c108effa48d27227f3c67c7b3435
SSDEEP 768:GiqboQg7pLuLf7kWg0CfDs8F1+UoAYDCx9Tuqh0VfUC9xbog/OV5GoMW6irokyQN:GiqboQsEf7kWg0CfDsu1jaGGoF65kse
TLSH
T14BE2FC3B680CCB7E4F80499CEC29BEDB6DA801CB5698C95447EA881C03C67FB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d1c7e23e452865791820c52fbf96039d3c9226456c9a888758f6212189cbfb57
MD5 eaa9f0bc63858ded3b46199726fe5a7f
SHA1 a55d78efdec4bf0c79f3e210c9cbbb39cd8b4b7f
SHA512 5add2ce048749327701441bf4d3bad398404d90fc3143a0610abcc9ea628bab11fbbc058d89391bb1712e4d11a892dc450b911dbf8b1c30428287b7e8eecb568
SSDEEP 768:Giqb0o7pLuL7hkWg0CfDs8F1+UoAYDCx9Tuqh0VfUC9xbog/OV+MW6iropyQih:Giqb0UE7hkWg0CfDsu1jaDF65psh
TLSH
T1C7E2FC3B680CCB7E4F804A9DEC2ABE9B6D9801CB56D8CD5447EA880C03C67FB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 60907fdcbf48f8ef4ba155ee125ac1918b170a2d3412a09bbaf5c6869ec1ce23
MD5 8165d4b6ed3c9075a4ffb9333a4d4833
SHA1 2b4882e24a8651e980835798ffa4900596d12994
SHA512 debefd2f875d0807d3e9b34b831d23c155859d3f098cdacaab358f179d53bee3b466389a07b5fa59452d2fa7bbef1c8338f21446ea19143990a8fca1e0e7c8f9
TLSH
T121E092B519CBC26E659A60D79328E30C91F2B602DACCA9257F18948C72061407742551
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 591d053ba1da13e5eae3b4adff56f3d0bc74d946e409f57b5eb7c0def4c9e5a1
MD5 706a2c9065fb5b0f952ff328d2e58d69
SHA1 41d5197e30553c423ccce469170dd3243a77100d
SHA512 bdcd71d8e9c3a395846ab888b775de6f78caf6ee88c9ec4b249a054106fdd76909e39430498194ceb1c4229d09d272256f2e9b88f8e01434a952878c5223c900
TLSH
T109E086F059CBC239642470C38779E70D86F0F907EBC8BA4AAB0C4449B102154B3A6990
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 7a654eaf7f1295bd11ab667cc836b9d50409b491f30365379832f489bd2a0177
MD5 3ad7e7d848334738c1d43aad515a499f
SHA1 8da6431d3a292140f1fb7cd93531ddb9cdb1b5a2
SHA512 85f703bcb9eae8ce64b0abf5daf6da862ed57977be249326600f37196d5e343ab7e71d394646790e82d35b8a7c84bc8010e9185033eaefd1495331462dee6e37
SSDEEP 192:C1i7PF/DWrwfX9mgpct1o7zsHEFw0Oy2rS/I8oRg2700/uUJHk0kVkAkEk+kikmJ:C16vWbf9B1IB8DXjB7VY/fc9/f1o
TLSH
T19ED16695713F4340387D690C91FDE82B838375A3711CA46B3BA905969F66E038DFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 6ad0284cf4fd2a579c22aa4a61fef732fca4d633bbb64dcf8b03b78c8107455f
MD5 b7b61ab6b6c3205685d4b08d17c4e4e6
SHA1 8155d61b840f82ce2793b566cfdda7902f85b1ae
SHA512 58c088b218a6c5a8a52bbe503ef20b40f64878220efc2cfe2d4da0711b5d9f7ee706160faf7f772a8448fdcdbdb894967d0a9e3d71fb1cd9e07b34b49bdf257a
SSDEEP 192:KQAIIIHbXMIMBQYcYdHaaOpLAsBlrHMrsU9AOo4msQLms:KQAIIIHbXMIM+B2UpEsDssUo4mbm
TLSH
T161424F2EB2016B77C09F6B76139686505BD848810072312D75776C2F8EF3BD782DA6FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 8caf0a846f0244a024ed6835d37ae3a8f0d6eb2d134b4d9c6c2dcb8b84995627
MD5 c23c9bf2c43ff63fb2fa89b5c57731cc
SHA1 9fb59dfbdddf3c3c7726f8c079000418efcbe6cd
SHA512 7382ebe55801f14f1c6cd9abd7ebcd30a6326209f907bd875740e394fad61d50e9b171ebb71e21c21444e0a563b45f9a7dccf642e7d0962423d584b0c07509a8
TLSH
T11CE026A4A8CBC16EB46430C7522C8308CBC0BA17EE88690A3F08C88CB009200B3CB6D1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9b6356a594ca2694058ba2d889612cd5d4229f8948e4be78658bc887fcd42e79
MD5 d28cedc895ae5622412dac847826f08e
SHA1 50f2413bd6650fa482a8331c1b575599d777aec5
SHA512 947f99dc075332c3f1f3eb7a8c1d3d019e6f3653b184c1ea3f31d20a1b67717967f7246ebee768c34a0c6138280bb95987dcc4e0d476f6bf2c912eb87510a0d2
TLSH
T1E621D655F330D109E149827EA47F9B291738D816CFBCEC0F547920756E72B440E4B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 ed80ee26166ed02cb0f9302daa52af212e93d7cd53954c442b1c67455645f049
MD5 30ac423ca721fa98e56d5469925a201f
SHA1 a713e89ac7973b962c3af15a7d5354eeac17a07e
SHA512 7d31bcc3d6ca8ce53b817552e9c406891ce311a2b48c9a3cd84545cf176499c84f9ca46e6254686025481e4a642aa85b56f13611724cc170f34c0bca41acfc65
TLSH
T180E0DFA4A8CAC1AFA06034C3426CC348CAD1B913EF882E0A6F088C8CA109141B38B591
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 10fd1417c920bf245e38eb011c00235e1184f5f7da21df7acaf53ba03cb18201
MD5 8cf584cd27ae50368aa85704cb82bcc9
SHA1 a81c70560209e66549b91282ecd57f5cc8c0a201
SHA512 ff24153515f63ce8db7045f5f702561faadfac80d5b3e126a2b2bb8c4ef46e190ea616ba9786ba16bca9971ced8d774a6d9ca33ad9b2b6a920957bdeba029e53
SSDEEP 768:ti3G2ic+wfZOsfcR66Igfcl66RvShCQRQWKvs+Q2ewBKZOGWOPo:ti3Gdwf7f16Igf56RvS8WKE+Q2evZZJg
TLSH
T110138DBCDC65593F48DE73486B0E2622ACA94233D4F88A58DBDD5B0DC17258EF70B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 72ed5c8d84ba05fa3c8ce652688c0c4ac744b7e20d907ed04c7b00448e9e39b0
MD5 a830d3c83e58fea0df71ec0cc4ab4482
SHA1 98358c8265bca9c68a256cbea269bc326a288e8d
SHA512 d293a208847b0062ae70956a8ada80b42735d6d3fb70cae0bb843b2038ac0d0342511d6f1d9797b460935002fe6d9ddc154d69333c7200f59c4a5471e4e26d77
SSDEEP 768:7i3GXic+wfZOsfcR66Igfcl66RvShCQRY2ewBKZOGWOPo:7i3Gwwf7f16Igf56RvSE2evZZJPo
TLSH
T1A9F2BFB1E8742A738DE69748770A7703BEE55233D0C81B98DEED9B0C018369E271BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 929b4b266800b87ed79e904efcf92f96b046b42c7e0f034ea51053a147dc72de
MD5 567bf64d6db643bab47bdff0e6442199
SHA1 5fc74e4ac2c1f5470e3e27e1d8d87d45d4174539
SHA512 b6053d82aaca4e03ae2e38abf208b2beeb7ea86a42bd7ac2ca1c6a8d52e5cb2dc8935d31df930471749d0a70be7634a1d7eb3f2b0f51d0a5a68fd5b1461dcc87
SSDEEP 768:0rv+4UNbdR39+c+wfZOsfcR66Igfcl66lvShCQRY2bwWv:0bsbj3Swf7f16Igf56lvSE0wc
TLSH
T1F503CF72E8786A739EE78644760A7B13BFB55263C4C54A84DACD1B0D028769F331BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 fe338c3c75ffeb49958df923d24ab2bfba8744de94d609251899beaf312e477e
MD5 e709e9457e8e96c65a809102aaf91f10
SHA1 e4f0133a2f45361baf227c0130d682a67bb252f9
SHA512 c15bd654ade0e36074c84d9ad6f8bc54925b6b5669cf3d240d8fecbfb956abe34f24954b83b33e182faa7da463e78f22f2e3f451ac0932cd800f3d1e8c6871a6
SSDEEP 768:Rrv+4UNbd43yqkc+wfZOsfcR66I/vShCQtC2bwWV:RbsbO3yfwf7f16I/vSm0wO
TLSH
T13B03CF32E8689A339DE782487646BB637EB96173C8C54784D6DD5B0D028369F370BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 38cf5d79e30dc3e15145a409ef1956216027b1ed56971be9c932ac7e7fe9de1a
MD5 32ac31bcc883c47fdd5b44a433618df2
SHA1 0aa64f9ff8655b8703c3e1e91425ef039f1ce40b
SHA512 d4be2f234f5974900003fae953675842f4d6388fb3438c51bc5b19ebb6d836ca710d9f43600fdd5001e9103f7bb410842e309f06d40d6ec1a98225c13139554d
SSDEEP 768:grv+4UNbdR3Ioic+wfZOsfcR66Igfcl66/vShCQRY2bwWv:gbsbj3IPwf7f16Igf56/vSE0wc
TLSH
T1BF13CF72E9786A739EE78644760A7B13BFF5527380C50A84DADD0B0D028769F331BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 1e502d55d3ba2f117617fbdd6f12ad49472c166bae0ac858e1283a0ac7829e56
MD5 acbd34712b24e4c743d4534f3f5c8b36
SHA1 6f72c05b40dbbaf0192509082e27560ecc4471ed
SHA512 6ff00d02a4264309a369923dc7b4aaeaac5f1d76fc410758fe9db07d73a5b97f11a57fa75005aa4f5a58288a8bb4821c64557e4e55f71e79f614d0b3344975af
SSDEEP 3:MsEllllkEthXllkl2zEellAI//:/M/xT02zNf/
TLSH
T14144041C7FCC1405C51C50304051D3501370DC100515D74334510413DCCF5C00C00015
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4694b61-8a86-4cf9-b89c-ce4ef47a618a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f4694b61-8a86-4cf9-b89c-ce4ef47a618a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
MD5 ae3a19c226264ff6cb64877f1e7e7243
SHA1 f993431dbd09200fd92b7a04ee6711a54ad95cc9
SHA512 97e5dbf0663585afbb5e0f2b5a36192624eb2c898462abef65225987df632d30f74f05ac5a71175c4c59f75d9ae6d2e640d168e479cb26b9a6857c71efda029a
TLSH
T1C1C02B85CB1E0C854E78153D48420B2727819F0030508534445A490C41741CE00888CF
MD5 SHA1 SHA512 TLSH

Submit Download

df7ae060-46d4-4926-8e26-c933ea92e516.tmp

Path C:\Users\Admin\AppData\Local\Temp\df7ae060-46d4-4926-8e26-c933ea92e516.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1312_1892682478\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Slimerancher_PORTABLE.html

Path C:\Users\Admin\Downloads\Slimerancher_PORTABLE.html
Size 62KB
SHA256 f655781762b00f35806b381b9ae4f80ea3c1a0eeb4a62b1a85f040c78b59cb37
MD5 a3f5ce11b9cd1ba881370f4d590b1521
SHA1 f00d097a1727d2f3c531738436692d0a43a77e36
SHA512 cf9d7613721eed20fc262c147f5449f40198c1a66260dcc572477dc67321e151be9f16a3d82243b5ebc30ed8edcfb6f371651cb6eaa7586d2e94dc5a1a740184
SSDEEP 1536:hF8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlr:hFV6+jKOh4g
TLSH
T121536CC1629C5492A3B76480087F740B7473313B0A0D59A8F658FAEFACACAD6907DD7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download