hxxps://link-hub[.]net/518152/I0ETjUhCYWRP

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
899s
max time network
900s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 09:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://link-hub.net/518152/I0ETjUhCYWRP
Sample260808-lec3hscg37

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2856	msedge.exe
1816	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306548187426950"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 16 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{9F7497F1-2DC4-4E12-9619-3FF375FF99B3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{BEC2CA52-F6F8-43C4-81E8-2723934066F8}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
6032	msedge.exe
6032	msedge.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
2432	chrome.exe
2432	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 48 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4116	msedge.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4164	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe
Token: SeShutdownPrivilege	4164	chrome.exe
Token: SeCreatePagefilePrivilege	4164	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe
4164	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 908	4116	msedge.exe	85
PID 4116 wrote to memory of 2836	4116	msedge.exe	86
PID 4116 wrote to memory of 2856	4116	msedge.exe	87
PID 4116 wrote to memory of 2836	4116	msedge.exe	86
PID 4116 wrote to memory of 2836	4116	msedge.exe	86
PID 4116 wrote to memory of 3220	4116	msedge.exe	88
PID 4116 wrote to memory of 3220	4116	msedge.exe	88
PID 4116 wrote to memory of 3404	4116	msedge.exe	89
PID 4116 wrote to memory of 3404	4116	msedge.exe	89
PID 4116 wrote to memory of 4340	4116	msedge.exe	90
PID 4116 wrote to memory of 3404	4116	msedge.exe	89
PID 4116 wrote to memory of 4340	4116	msedge.exe	90
PID 4116 wrote to memory of 4340	4116	msedge.exe	90
PID 4116 wrote to memory of 3976	4116	msedge.exe	92
PID 4116 wrote to memory of 4432	4116	msedge.exe	93
PID 4116 wrote to memory of 3976	4116	msedge.exe	92
PID 4116 wrote to memory of 3976	4116	msedge.exe	92
PID 4116 wrote to memory of 4432	4116	msedge.exe	93
PID 4116 wrote to memory of 4432	4116	msedge.exe	93
PID 4116 wrote to memory of 3720	4116	msedge.exe	97
PID 4116 wrote to memory of 3720	4116	msedge.exe	97
PID 4116 wrote to memory of 3720	4116	msedge.exe	97
PID 4116 wrote to memory of 3660	4116	msedge.exe	100
PID 4116 wrote to memory of 3136	4116	msedge.exe	101
PID 4116 wrote to memory of 3660	4116	msedge.exe	100
PID 4116 wrote to memory of 3136	4116	msedge.exe	101
PID 4116 wrote to memory of 4724	4116	msedge.exe	103
PID 4116 wrote to memory of 4024	4116	msedge.exe	104
PID 4116 wrote to memory of 4024	4116	msedge.exe	104
PID 4116 wrote to memory of 4024	4116	msedge.exe	104
PID 4116 wrote to memory of 4476	4116	msedge.exe	107
PID 4116 wrote to memory of 4960	4116	msedge.exe	108
PID 4116 wrote to memory of 4960	4116	msedge.exe	108
PID 4116 wrote to memory of 2036	4116	msedge.exe	109
PID 4116 wrote to memory of 2036	4116	msedge.exe	109
PID 4116 wrote to memory of 2036	4116	msedge.exe	109
PID 4116 wrote to memory of 4712	4116	msedge.exe	110
PID 4116 wrote to memory of 4712	4116	msedge.exe	110
PID 4116 wrote to memory of 4712	4116	msedge.exe	110
PID 4116 wrote to memory of 4876	4116	msedge.exe	112
PID 4116 wrote to memory of 4876	4116	msedge.exe	112
PID 4116 wrote to memory of 4876	4116	msedge.exe	112
PID 4116 wrote to memory of 4772	4116	msedge.exe	116
PID 4116 wrote to memory of 4772	4116	msedge.exe	116
PID 4116 wrote to memory of 4772	4116	msedge.exe	116
PID 4116 wrote to memory of 5332	4116	msedge.exe	124
PID 4116 wrote to memory of 5340	4116	msedge.exe	125
PID 4116 wrote to memory of 5292	4116	msedge.exe	126
PID 4116 wrote to memory of 5164	4116	msedge.exe	129
PID 4116 wrote to memory of 5164	4116	msedge.exe	129
PID 4116 wrote to memory of 1496	4116	msedge.exe	135
PID 4116 wrote to memory of 1496	4116	msedge.exe	135
PID 4116 wrote to memory of 1496	4116	msedge.exe	135
PID 4116 wrote to memory of 6064	4116	msedge.exe	136
PID 4116 wrote to memory of 6064	4116	msedge.exe	136
PID 4116 wrote to memory of 6064	4116	msedge.exe	136
PID 4116 wrote to memory of 6032	4116	msedge.exe	137
PID 4116 wrote to memory of 5708	4116	msedge.exe	139
PID 4116 wrote to memory of 5708	4116	msedge.exe	139
PID 4116 wrote to memory of 5708	4116	msedge.exe	139
PID 4116 wrote to memory of 5640	4116	msedge.exe	140
PID 4116 wrote to memory of 5640	4116	msedge.exe	140
PID 4116 wrote to memory of 5640	4116	msedge.exe	140
PID 4116 wrote to memory of 2112	4116	msedge.exe	141

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://link-hub.net/518152/I0ETjUhCYWRP
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffc12efc188,0x7ffc12efc194,0x7ffc12efc1a0
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,15532011838268839407,14636662262444674027,262144 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,9309302585264143038,17013908994931793967,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,5175211705716754966,9096092981050830079,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,14390273066270194953,11558647984193262766,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,9152613107374551944,3737134416899776921,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=2520,i,17680726944401452522,13823552475934132087,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,11632440340533861905,2928524213439077978,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5144,i,1172907172855831132,7762817286920287780,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,3184408291538956397,6653523298718943437,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,8674061396834492749,4207832865891278162,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,3784823200949437864,14513791268497034044,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,3784823200949437864,14513791268497034044,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5108,i,341391862505743351,4844385363830266243,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,11782636358463109874,9612088923300133575,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,11175518489429628223,505394046281615183,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6772,i,13019213891895216132,17351499069920551770,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6444,i,10395517327593228464,4851717184824950118,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7128,i,14524114959720395713,17474758756535325873,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6252,i,9471452737946612472,1255037842689321238,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,10222058114724423096,3738696057911845874,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7436 /prefetch:8
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,4247930643402599051,18060585975048210304,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:8
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,10376792490346728579,6682765889363069997,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:8
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,17445344281465154644,8705996762493809133,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:8
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7656,i,10234717416403902418,14788466838865404400,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7676,i,14978289862353492692,12006725804646362354,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2172,i,15230716622249531863,3275716488959694182,262144 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5624,i,10726258576228520258,15211799394384401016,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7484 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6256,i,12984228031107071641,17973031266419201570,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7692,i,4226133574205854763,3475830814296878411,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6204,i,7514692001063564060,8485583579399594459,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7816 /prefetch:1
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5452,i,5165833591531540468,9501339162522518470,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7984,i,7027627468613085063,3865303397271204908,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8100,i,8797584225503990214,10198796539203565099,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8076 /prefetch:8
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7440,i,12161962356856287002,9750928850829086240,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,16810366246628909524,1137137632042295073,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7240,i,11369493383249190508,1020203558891345786,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:8
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8296,i,10194556790288249156,2166114205926613002,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8248 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7684,i,17638833276315921014,592816936780078817,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8436 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8672,i,7070826030704635593,16128219257787839498,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8676 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8580,i,12229779115552002511,14734678142404969528,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8568 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7376,i,4000519786601628935,4111494522338281197,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7900,i,5775705134675881853,9388305732816810298,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:8
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8828,i,14895789496166502534,14531577178596543001,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8876 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8256,i,3366498340098838190,11900264347643302141,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8752 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8816,i,3905817399741802243,11462858924956530455,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8496 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=5648,i,8240527152930211717,16229157631791704378,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8940,i,3165608370884674518,8911290275946756316,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8872 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=4576,i,14958346766890440327,10654030928113232589,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=5560,i,6513319933662363780,9715175096983386928,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8472 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8820,i,5446715699134277151,17271562714393799136,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=5544,i,2585613607625094096,17799033803595303008,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7900 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9284,i,13380329494661473163,7445329524863650962,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8564,i,6299361607207973768,16347446308846931019,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8560,i,11267514495750883054,12570215917786010789,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=9152 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=3956,i,8224633971564448350,3865837648994237508,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=9388 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8228,i,18291085454202408974,12446593285397744872,2097152 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=8604 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4000,i,11491685888632599844,7771597038687180095,524288 --field-trial-handle=2324,i,13599960294983135013,12622257367703229597,262144 --variations-seed-version --mojo-platform-channel-handle=9300 /prefetch:8
  2⤵
  PID:2008

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4532

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc049bc728,0x7ffc049bc734,0x7ffc049bc740
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1812,i,5209271870880804240,8088833864762856994,262144 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1996,i,9854929034317077036,7420746685929324498,524288 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,18322930172695114000,7314235048712463757,524288 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2524 /prefetch:8
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,7439507861100911410,140360829644576819,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:5424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3120,i,17156566429511353910,3694232322754537396,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4488,i,18151184987238151708,9595826887827462188,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4504 /prefetch:2
  2⤵
  PID:176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4692,i,9469939268370076081,2022546558636436881,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,18238761924715951204,8957559034806011615,524288 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5612,i,8706394482589278828,5980291708797221225,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5576,i,9710751811691963171,8285309888792231918,524288 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:8
  2⤵
  PID:400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5904,i,5752300144140665539,4655744458327831087,524288 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5920,i,11805813620943574805,15233805043339984127,524288 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  PID:3532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4560,i,4151358668098915168,8178202568327750560,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5808,i,14112027886906324754,11252657973926934280,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4580,i,3520469511851408302,11836110049044092188,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=240,i,15930406947987073602,18002981541765886009,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3320,i,13485053584856022643,6889911318140774960,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3244,i,8641632425197589037,18297577071537985382,524288 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4648 /prefetch:8
  2⤵
  PID:6092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3096,i,4843195891714924372,5129850181882036629,262144 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5032,i,6312693335105871089,8326647419512675940,524288 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=1628,i,2109052791883826117,12620284314595852495,2097152 --field-trial-handle=2144,i,12033697915868103751,520767487701794599,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:5868

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2444

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d86a60e3a787cdee25e7a116153ecf233de5370d9aed225ce6bf06213cfd5d0b
MD5 3ded14c5772c71f4e22fe710bcd1caf1
SHA1 a8cfce9758b8784a47e8d0d6ed03c11a5a113a04
SHA512 e84f8826d1da243e1e005aab2e1ac54ff75e410fcdda1f3247c6c8c6dc6883e14052bd29f098f111f57c8ba9f6958b58c58f47340e37104bcc9eb2b310b7b6d5
TLSH
T1A1E02BA5C861EC2718F90719A0641745D754135B2A40994B7B3C921C8FF5A374685D1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 62KB
SHA256 574ab3455bd0f060a5115336e90dd1f9fb63ff5d32ae7e2be93ece29fead5a8e
MD5 8deae3d846a8674bc90c637b002c42df
SHA1 35d93788603bd8992e2a6105839d608cd8725c04
SHA512 bf4afcb08eb01f92eef89e8de29b9f8006fd7d9b3a60446fdb09783da401957a3d7f6de89bca4ae1e3d489512bbbfdf0664f5022e38b122b70b31857159f3e4b
SSDEEP 1536:rKuaHQmWm7FHVyLBtfskd87qa5jIhoBMM5OPLGEgYhH5P/sW:OBQg51utkqa5j3oPLGbYhHt/sW
TLSH
T1BA53020A6082F9F229CB242F98A45490CDB62A0CD55797C1F73BB732D916F489437FE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000037

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037
Size 21KB
SHA256 6ccf834ab83ea01d915152cc32b03550c842964b8fc01814dea16111a6b0a28b
MD5 fce825bbb123f0ce6280e1ae7bff5b65
SHA1 0e643bb817510ff0f5eee99c0f09fde89dfd3faf
SHA512 c7e2a07dc9fc4695fa2e1f390d47aecf882b54910ed1a0b630197c15465ebb2e01d7684ae24f97a28b85555798cb623e0f7056cdc73afc40e03d0ee58ff89794
SSDEEP 384:NcX+MceVcdlJpjSo/mJM0eLmgTXM0k8lIspcIjtuXoaQGn2agbvM0hwgCd:uXFiDpjSo/pN5c5IJrGn2BvNed
TLSH
T105A2D1EA9FD9D77CB0244159A02CBC8E5E98B5604E33DC9AD1B7D02B23C458FA2970D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e40558952d78a1ec8e403088369e7a790fb8bbba42510d940ca0a7e897fa1fe3
MD5 48ef7332a0c795efacf31f0b4767251c
SHA1 0c010dcedb9c05c871010926964e485072ee6bd9
SHA512 da2985144669513865ef891e277bcce93038fa2df06118d456d6e87c9f8d1ce23f5ab1ef4b35ad4f777432826c3257c1f0bb828ff4db0ed357da013d10183c95
TLSH
T1D851970CAAE918E9DFC4A436DED6C94024BE8067CF4F0F5757369C353062BBCA674516
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ad1b1bffa538a4abd1c1387fef897178f02bcbd09592b3651b40175ec81fb019
MD5 072168cbfa7ea5ff7933ea1b3975f16b
SHA1 b4af74c0c23997e1d5500c9161a8990fa12c9418
SHA512 c9dc05d012d5742dc2fa76c9d2e0e8d8ecde215e899d4ee8f483d7061f9d5a6fd5e84f4dc109438cfeeb89dc9d222bfce2843c4db7a934cdcd2456937958755a
TLSH
T1B861DB0EAA9918E9DFC4A4B6EEC5C90424BF8067CF4F0F57473A5D353052BBCA2B4515
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 535daf3f6914b7a3a31de29a23f8324e1d62eb05c2b467055d8703d78c5880c3
MD5 8d7dba837dc1ed5d2d33d439c377124a
SHA1 f23f26090fc6d6d5876629689f3a57912886a11b
SHA512 9fcd680d61942153ec3e15b5e0747116b18e03e0eddbc20e687520e88b639578b361788357a1b0b049369d586d0c51902ebd75ddc5c4348a22c156091d49c571
TLSH
T136C0121C8252004DE397A5F222B6D9C065712F3A1467155BCFE28E6AF8337E05111524
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

7e9f9028-1a29-4fc9-9d8a-a4348a599e86.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7e9f9028-1a29-4fc9-9d8a-a4348a599e86.tmp
Size 14KB
SHA256 b4b56969f6802d6032789aa25386b6d7d7663069758d26c61a17ae886c2e2530
MD5 3b2a4132eb5c7b81bf4e88bc7272393d
SHA1 983c20abfb4bd6d1354b896a79169419136b3fe1
SHA512 ea1af715c53dec908d821759dd61acc79dbde86e78bfd037d3e8bea7e3e3e0b4f84a818ea79da84386ec4aa73bb2276358833decf46fb71e1843257f4121c9ed
SSDEEP 384:DHj73NzktWHJqJ7goznO83FLaIMFidY5uarr4KZfcNqVDImQgwEQiaoXNQI5t1Dt:5sAfMbRrrLsP
TLSH
T121629BF7C3E8862DC91152F49B256F1FCE1D0928432C3C66C9E9AF5B93E2871E21165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 cc955dce1fa6e8c54588fbb2177d7377e7f5b8e5cd4325bc5d4cde3160d9390e
MD5 8adcc366093c6a744a718cd6b386dbc7
SHA1 c51332a9a1493207af770febc75fbb3d57fc9407
SHA512 94c052c01d59287ea27f9e1bd8e36d1ac3491f588cbf263da2d21db56f4f48bf7ff61ffa6c5acc1eafd7677cba3a72710d871e6ad6b8e7ac5cc88aa46cc8f978
SSDEEP 192:D0uGlwPHw1JJ3JxzHshSE3ZhaIMFEdY5uaPiuZ6fvqfPiNPiVWImQgwEQiLoMUNs:D0uGlwPHw1JJ3JxzHshSE3ZhaIMFEdY4
TLSH
T10842AAF783F8862DCD2196F4DB15AE1FCE690524032C3C7685E4AE1793E2872E21579E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 d0754995bc09cf10872c246f0278ee0055de2303869caa08770bff3d7b071b53
MD5 49e62499214786cc9d8b5aceb3d10b72
SHA1 cf2799332e45f62033f24ff4da0c2dedc001e7dd
SHA512 333efdc1711a5d01e054cb0d2b6b9d22d8d871b4f5cb4308a4d9b0ee5b5312893801d45b5a1371e671910eb722c1d2eb42e438e166683909e66197dec5ebbc98
SSDEEP 192:DHj73NzktWHJqJfaIMFidYqTuaPzr46fvRfP0NPiVDImQsHIoNv:DHj73NzktWHJqJfaIMFidYqTuarr4KZ1
TLSH
T1B8F1BEF7C3E8C62DC91156F89B256F2FCE290A18031C3D66C9D9AE1B93E2871D21535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 b7030f99352ffe0b7ce69a935d6d72018dff3a9a9f46ca9228358599230f91ad
MD5 2b97de7eb03437aac48a38343fdad77e
SHA1 79f0e45265a60392d336c19a69eea8329dc29c8f
SHA512 e37a9baf1cb9ec2adaae9c2ee52846ac9cedff9173247b2efb71148f9f569608e7e1c45bc1ecac86a43448b12157609ab490629bf912fb2f36125a845a9bd547
SSDEEP 384:DHj73NzktWHJqJ7goznO83ALaIMFidY5uarr4KZfcNqVDImQgwEQiaoXNQI5t1DO:5s1fMbRrrLoE
TLSH
T1F962ABF7C3E8862DC91156F4AB256F1FCE1D0928432C3C26C5E5AF5B93E2871E21165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 16952ce6cebe5ca0039d221e286e63830425bb37fcfaff48991566e86535e214
MD5 f63d08a2f420d190d52d60545cd61f22
SHA1 0767376f9f260ad6b9e907b1e44ceef831a190f9
SHA512 691cff01fdb2a7b4bae151ae43ca231fa51a60de63e4110019f1e1e85ba90f780d80a545265a45a3482b66af056e709d46f6461e5cf99b11d1e26d4056f71435
TLSH
T143516E67D2BEB82B20781AAB1D46F80919BDF43942C1ACF4EBD681ACB0C64F70716153
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 2c4f53b2923613dfcee7118af6dc0376fad13fed30c4af034cdf3f6c4c0060a4
MD5 d2cc2993841231533c81a9e86debc622
SHA1 6b43233ca5c049dfbb7c07559f191e5563c85631
SHA512 93eee46678236695b0c9a621e5fbd3ca933967ed84d076727e226a34d6fb427bd7d89718584b074dcb732db8b0d3b520bd181e31b457354fbc4df58155c1f1dc
SSDEEP 192:URRcBXqrAEU5v70pI0PRp5PdbU61fTF9+Hsb+WNJ0gkh+JiY4dzgOfuYOVyIsnAq:URRmXqWZg6mX5F8wpvKg8ye
TLSH
T1B962A72AAA102A7B9DDAC269FC35BB17D3F2212215D11E94E7FCCA2C19D76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d1dffbfd7ac39888fb28bf1a0740c702cf6d95d4d93f735d891db3595442752c
MD5 5cca84781ac0095c884b7c73610cec5e
SHA1 8f2fdc6b79d83ff4a653ca464b785f6407db82ad
SHA512 3ab37f75f8d87ef71158c094bbc0efe649b1e528dd48e8ac56c599e16991ecd8f00faedaf7c7b022bdc3c170b3b27b96747fec162f717d0b4d2bea3c8ec30990
SSDEEP 192:URRcBXqrAEUjv70pAPRp2dA1p9+Hsb+WNnh+4hGBeUofuY6VyIsnAUgraJ:URRmXqWbgUX/8wEYGeUq2e
TLSH
T1CF52C82EAA106A7B9CDFC225FD617B17D7F2212124952E84E6FCCA2C15E75CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1a7cf2810ff7120ba47e22ae2acf179a07be0c417bac2b8e4da4bb941272ada9
MD5 1185b08ab8478d7f02d59cf017d625e4
SHA1 82fef75aac20afb829d643e9969e19c6a10f6093
SHA512 c8e2a6069c4d0b8e263efd6158d241220f2701813883d58cec8be3400ff866e02599193ef955c59361c16ac4be3664ab2163d7097802fb7914e103e8509ef9cc
SSDEEP 192:URRcBzqrAEUjv70pAPRp2dAf89+Hsb+WNnh+4hGBeUofuY6VyIsnAUgraJ:URRmzqWbgUXo8wEYGeUq2e
TLSH
T1BF52C82DAA106A7B5CDFC215FD627B17D7F2212124952E84E6FCCA2C15E75CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 8969f0e3ea0658086fa2905972bcf7392451c0d3d289efd007706e77096ecbae
MD5 3c1e2d147d9c002392c6c77710b5d8a8
SHA1 8831e70f40aa9b92f681472e7d308f48972c8784
SHA512 67243c7a3ad4876ef0c35c9187bbc895da63d7357842b95caddb0879bd0e9818ab8c74cf600b64cbd3359d47adcd8478874a10966f15df7cbca705d36845c3e7
SSDEEP 192:UR4cBXqDAEU5v70pI0PRp5PdbU61fTF9+Hsb+WNJ0gkh+JiY4dzgOfuYOVyIsnAq:UR4mXqOZg6mX5F8wpvKg8ye
TLSH
T16462B72AAA102A7B9DDAC229FC35BB16D3F2212115D11E84E7FCCA2C19D76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c41eed494461573a6eabe9b8627d67a40f36f86d56e5bc405497ec9302a485d4
MD5 cffd25e71dd9745bf70923167e0bc728
SHA1 f541950050d4437036432f3e031b8626ac56c73a
SHA512 55b200370488e9df3930f5ca181bf2a6f59a56a803478d2f2a3e89cab3433bd1f0641484dcdb2e79e64e2367d17ac48f93adc6f32dd1526c48cd9bebe6354b4e
SSDEEP 192:URRcBXqDAEX5v70pI0PRp5PdbU6v7TF9+Hsb+WNJ0gkh+JiY4pBc+fuYOVyIsnAq:URRmXqlZg6mX5/8wpvYcsye
TLSH
T1A962B81AAA106A779DDBC229FC357B17D3F2212225911E84A7FCCA2C29D76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 27ed666964e8a2cb9979fddc1f699afa9795b7cc41d66f60f45c53994eb4b08a
MD5 5b44e8ce0e15c930397ed4a296597293
SHA1 bf4be4246959c28a3d583ce451f9ee1fe86dbb75
SHA512 356cfac183559392ab160fda28d76759901d290cf9fedb3998384c8bc906234ea6aa506ea96370e4dcc0acf9c2167a6f92b46b300aec0d2c4939bc4b541e2194
SSDEEP 192:URRcBXqrAEUYv70pI0PRp5PdbU61fTF9+Hsb+WNJ0gkh+JiY4oJY9fuYOVyIsnAq:URRmXqWEg6mX5F8wpv1Yxye
TLSH
T16A62B72AAA102A7B9DDBC265FC35BB17D3F2212214D51E84A7FCCA2C29D76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 db1ab015ec9a985a5be7e96f3f832ed1875b58c673ebfa59ddaabaa35d9fd1dd
MD5 f5eb4281d67bb099eff42fccd1943dbb
SHA1 fc0350dc65b45b9d1d20442ff60e2663366d92ee
SHA512 ccdd913ee79b92654ba4d6f3261ed3ef8a127263471a85a942f4bf4ec7e495f5557896f1a0594688c6d15579e957574423eb730fed87016c679b5a0fbc85f8f1
SSDEEP 192:URtqrAEUjv70pAPRp2dAiC9+Hsb+WNnh+4a/2MfuYtVyIsnAUgtaJ:URtqWbgUXx8wEp2WX8
TLSH
T1AF52B52EAA106A7B9CDFC225FD617B13D7F2212124952E84E6FCCA2C19E75CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 56eed3d85e88e5305589f712d18cb23f72b2883ba58dee8c4d5641a0fec66e75
MD5 998b2aa50ba96021142759766386b5f9
SHA1 69592e86eb8c54a80126600c14d403bbbb4ac1f0
SHA512 533540f294a426605b2ab1b9db2e34eab3a93a1262a4a3f35f062143eb88638b51eb55a53cb0a1f8e4798ba0b3de5adbe9bc6f68ad1ee9e6693a8390fd8df063
TLSH
T1FEB0121080015251C04203F0118214C871247F14960A1701D3E86923D8352A1C0141A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5bdb78.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bdb78.TMP
Size 96B
SHA256 2a1b3e131bd6a4518b5469d879afaf528facae586537fe414547f7205079a91c
MD5 5a7a567873a22ad775cb2acdc880e81a
SHA1 074deed62c2b13112c7cd5e4e17b68b007a4a144
SHA512 7d39b2903d5ba590408a0dc5f1b146409c287a1593f3a0dfa5a46b78557dc79a1a06dee0608b55fb26b1e221d6e8f671f9ba152edf68907912bd08784a478419
TLSH
T1F3B02208C002A232C08203BC308080CC32E8EF28CA030203E2E20A2AEC282B080302E0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 6b6a458cbffff88182f6d917a3d1b4aa404c689491907fa8960b06160bcd0a69
MD5 01d055ca9d504ad5f0e4640a0778311f
SHA1 62a61512a246e9070db18a897b678d641ca1efca
SHA512 6f3c7e19cb5a1fdfd2853a3661dabd29aadfe7cb67a435b6a84d5c1bcf9f5b1dfca3bb57e28ce2a590321e4501935771d4a03d5aea783457232aff40f0816039
TLSH
T151B0223C30A00C03CF0303B220C2C3AC302C3C0002CBC2E330E0B0B8C0033C28AA2802
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 36a34c4661540e0c2744d42976fd2e255e9c5bb4512cd0fb96274a5562a603c4
MD5 843b8c2ca739bbc33250255e057f1f34
SHA1 9674d2460df4491b8e00037b85210b65ebd05276
SHA512 3c07f415208d6e8f4dfa9f1d83dcdf3ada8629f68df50f8d2bc56866b2184df1023a6559cd7ca92a1d3de3b5850c939c969f978512dcb0f6f0049b1f6c65a602
SSDEEP 3072:SpHCPKaiS8VY/vGYgGB+x7NkI1rVEotVdAkV0gZGqfd7NtZL8cHQRZEQ6SpsQ:NPKO8VY/v/3uukrVEQ0nEGqZ/ZLW3ExQ
TLSH
T129342277AFD20E371CC25B7474930A25E6F104BAC074924BB59E77AFB6C349146A3839
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 276KB
SHA256 19d88d4816674da392de8e89a907fb3e32b88e5a91a6993797b2b6a834713e48
MD5 a2b40a47ef38069e79a505ea54224d2c
SHA1 9349c5025a9f497404e2725638581a16162dea3e
SHA512 619b26ec31698d6a024ec92eb9e99d66ca2a7c70993309199f3b0cc1352b448d3968ee6e670e29ab7702e16a6d55eb3e3d53793f310dedb0565d6c6bd2c441d0
SSDEEP 6144:sbIamqMNk/BNPKO8VY/v/3uukrVEQ0nEGqZ/ZLW3ExQ:sMQSk7Z8VY/XznEGqZ/piQQ
TLSH
T1DA542373BF910E265CC22B7830521F11AAF104AAC135D68BB58A77AFB6874D185A3D39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 6a9842504a59a54adc5d754757b5132a81c05c1a10545c7ac94ff3a733c73a0d
MD5 8d1b2ec5665c14301e8504ec8474f2bf
SHA1 7ced3d17ffca44ff4ee842c3e42aeb96ba67031f
SHA512 6ead347bc1a73bc76623cd36cba14350b712d8b42264e1ae2fb1986cc673e02b614b06553e9a35ac8d3465d2c16a040da4d153cce6d4af65565c1df41ac82e8a
SSDEEP 6144:IwPKO8VY/v/3uukrVEQ0nEGqZ/ZLW3ExQ:JZ8VY/XznEGqZ/piQQ
TLSH
T169342273AFD20E371CC35B6474921A25EEF104AFC134924BB95A77ABB6C34918A93C74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 be5d85ca144a3cfb89aaa6e3d26e002cf37be771d88c2a451ac069aa230155bf
MD5 f28b27ff9b9446841f2c7d39ca1483f6
SHA1 610838613a7b225ed1bc56419e55884c5eb15e03
SHA512 4a9b9effcd00146ffea70ec12152ff1f00b00500593265d728031e4f921407254df8900910efdf3386cc9d906adbd70cf91ca7413b54248fbd1e54125ecc86f9
SSDEEP 6144:wwPKO8VY/v/3uukrVEQ0nEGqZ/ZLW3ExQ:RZ8VY/XznEGqZ/piQQ
TLSH
T1A0342273AFD20E371CD35B6474921A25EEF104AFC134924BB95A77ABB6C34914A93C38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 b0727c9e3881759c6dc7db5da612638f48e28da5bd7420d26756f5308911521f
MD5 10b500441efa4435400e48d14ffd4345
SHA1 7ea74aaf7fd2892a9f70483be9345272237e845b
SHA512 989a9e77174e47057fa616c18a2a72fafc61aead162f7da0b0fefaba4730c88ac30c27239de305aa6f6b4d5abec97ba176beda4afddbc338d49adf852a536423
SSDEEP 3072:tpHCPKaiS8VY/vGYgGB+x7NkI1rVEotVdAkV0gZGqfd7NtZL8cHQRZEQ6SpsQ:aPKO8VY/v/3uukrVEQ0nEGqZ/ZLW3ExQ
TLSH
T125342277AFD20E371CC25B7474930A25E6F104BAC074924BB59E77AFB6C389146A3839
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 d04ed3ce678c1b234cee8492669442a02f11d8e86141d0282ae10bf98e7d73a4
MD5 445611c15eb7c606bdc44613983d8f1a
SHA1 6e370349ec17fa784ff61cff2965dcf310f0bc99
SHA512 6d90deb9d5310bf41bbef7a3de6c52cf50292b4e9fb7c6f70256ab8d8a8673034eaf7f746c3a72f0a1cb8dd94157bbc3c70738fec9e5f314e81759d6af9aeb92
SSDEEP 1536:bSLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:+qfd7NtZL8cHQRZEQ6Sps3
TLSH
T1CAC30237EBC21F339D96CF64B9130FD667B644A99030D301AAAD37EB7C93591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 337373c4da28ee3002914faa7f66bd64bd0d39f2478ab28111896aef3d732e8e
MD5 1538b94629725dbea32dff25f55639b2
SHA1 133e292c7d10ee2edc74eda507e40b826be644bf
SHA512 ace9ab652f654068c864bb79cea4a34770b9e3e2dfeab9c984cbcd6625ccf3ed273271281737948f7076a7204abb9af1697268a6d42c8b81e2eed910356306c4
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1DFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2257e4a0539f828a6e47b61d76f9833ac9aa857f7e8bdf3fbeea80641d7bafaa
MD5 17bcd3f05807aa5ef62f2d429fb4a2af
SHA1 f1b79003a948768cd2834f13fe06e11456793a15
SHA512 5ebf6c21ed0577d10b493fdd440717ae4ced49aa591ae7b6e4ce40fe85463a5a9d8c193d5cfa1d4264ff4b3969f8c32951a818a44a17e406066c418621c5680c
TLSH
T11EE07D8469CAC26EF710A64F52FE434CD2C0370FDAC8B98B1710C59832060D4ABC2DB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 557B
SHA256 5505a6ee703ebf6b29a40fd60edc3e2f936c0d01c46c2b4e85e6ca5f06bac9ac
MD5 313867dd7ac74d55455d8e42c83983ce
SHA1 0047f26567c0220abe530b67d0f718a00de83927
SHA512 da066564719d7b0c47c88382499b856ea790140db1b18f37e1805b8ab6be1de006675580207598f7eac796e0b331a933e076693fd14849de143890982f41f723
TLSH
T124F0C06A67C0D2A95A30A08F9D67435880E0F205EFCDD8BB2306F68C7506873D2C4EE4
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000ae

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
Size 746KB
SHA256 2d165b26312d6b5d048a99b0e8f4a1c1a2a4bbea4332c1a848cd3686071274c4
MD5 dde617bbb9542963464960acb706d26f
SHA1 918111fd47b6cbf3c86918af4cc7dbd7725ddf4e
SHA512 f67967d69be263dab0d466c807bc40aedc35ee8badb4b26412b31fde20594c17bfc327b478dbe864c005f94f0cb2b9fa0baf9a30cd4075f1e752395a180b0895
SSDEEP 12288:NC4xGOcGLk+QyIiLITvovQvgu0Kh+6HNeF7Yu4KOnWlyjGxTjiymDdI63jwuTx+P:44xGO5kf7oUg/UNeIMTjl6e0zx0
TLSH
T191F4230AE6F61AF72D8D393692B919539B3B0B3368527E3C384695138E10736D382D5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 68KB
SHA256 096265551a5ee356be7ccefaa40a7de3929105288e029cda15c965cb65b55eaa
MD5 f6709d44783ca7b4b921437ca7dd2727
SHA1 a0c6e731ea03274fd0420c360b5f8079ca719138
SHA512 34b45e20793f4de99caac1c28fca40953d4bc2902ddf4dac70c55bc28ae28cf01632095b20317c8c661832fc1b971fdc2eb05450ef8fcdafe74a5084589ad52a
SSDEEP 1536:GeXJHPV3M/Ib+Npon9pSlmtHf+SxQBEnhB35LsKMCoNx5p1WFK:GYV8xNan/rp+SxQSnhB3aKMCix5fWM
TLSH
T10C6302D8DB1C78A3B3A11891398B31876F920AD1DB0C79167D7F521E5B623EF4071B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 406KB
SHA256 c9ec15f6b284850a9e9c19a7e64a22154929e0f9e15a44f9f7e394111739fb9d
MD5 9216d5af8ede8d6bad7e05785c4f1536
SHA1 6196a652118779feec14a3c1d560d8a85fb296ac
SHA512 4707760777c417037805268bcd345cea67cdbf895ea01a002a157f9442c81520dbff93cee7047922e1513321e90db2bbc4d62365a5cbe51f308f484d7aedbec3
SSDEEP 12288:O+3o7mAmn/5Y8dgX4V+1iOF8MB/noCWnm3LMZT7LDkwFdqM:OrKAmxDgoV+YlMVn3kKLMZTbkwh
TLSH
T1879423FE7405ADD11AAB541F91A0DF9284D045E178637B997EBF4CE8A84CA27C4C8ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 206KB
SHA256 31a8d5e4e179c987d1b04bca22cdc0c8691e2df7fe6b62aa7961da0e2754f8d3
MD5 8ed52eb4ea8ce42c1b69cbe4358d306a
SHA1 8025f3738aa1be9e11bb054b5d06213460b60ee7
SHA512 315dcbf5e7c8f91873ac34f816c1113e4ac1699dfa774053ca1f65607dc12a42615013713a6daf9b8629b388bd128e857632e7d2e8b90c1dfd00398b1ffbcd47
SSDEEP 6144:U4qnl/WplOs549+acCO+eeKk3bn3xSmJVA:i/Bs5m+ajO+emb37m
TLSH
T12A242379305E0A90FDD41F0EADF3AE7B239C0C7894965AAE46D26D515E3267433809F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
Size 256KB
SHA256 1a51a39a0181abb211af41600112378aa74b3c924fcb662ebd001a647233107d
MD5 455327b5819e32b79e98198399ec7a18
SHA1 43a90a3d3a2d989910edbf818393af1dcba2fe01
SHA512 f49ff3cce466d2e8a38cde077a149d342839f9531c9b4e801725e06bfe0cc01ba56d2c807cb14f584fa53b905616952a2029945bf808d110cdde5f3ffde80645
SSDEEP 3072:XUEGjRWiiI7+mJEpXj2xJZwVvWqRUXRf2QT3ScwuA63NonSznC3V:kvRb/6p2xJBmUXp2a3fztC3
TLSH
T1AF440250EF046AA2CE124BF4DC692F3359B551DB20D0AD0A8BB9DA107EC6193F70779B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 512KB
SHA256 3524d8883e4d5781b6215c05f97d1232b442cd41f66cc59723de6c5e19399ba3
MD5 a0355e6554046083e262e04dd1ee6199
SHA1 73f053d90ec3e9ddf235f2f79902350096be795f
SHA512 3e794941897c103033e709913af6e7057295c2e9f4587f19d1a13bcc867c86f6816d168245660195ea96ac17c833696abad4a4f034aa9dc2a45033ca09d52a11
SSDEEP 6144:aVIHGR+Y4LbXL9wD4GR9R9YsRUhovbfxGyTmSfKcKApMqdjdLi9NrMCrx4F:JU+YI9wD4GVwdVALzu9NQCo
TLSH
T1B2B423E9E1268529D30484B1BD769D0939BA3B681DEF3D4B04009A62FBEF1D0761EFD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000106

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000106
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000107

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000107
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000164

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000164
Size 19KB
SHA256 e743377f3a991d172fcfd74b3c96fdd2442566faf506bf5eead74be778795e98
MD5 49a9456645f864555f5ee783b7b0117b
SHA1 1dbd2b3c877edb9e922247932ac150be0a1a8ef3
SHA512 0c9a6398e32e2ba534f1da4a7a235eff5c6e90644723007eb2d6fd11cc0fb426dc14e23537560db9d0f47682fd9f8df7752aa3327be349775b442c8095765fd2
SSDEEP 384:ThFhACGnKTd/0lJrDlGqCISk06Yq+7uNlwb8Nkq47I/RBG6rh2rr3h7z7hMe6lq:T5AmkJVGwhYSlbs7aGVFNMeuq
TLSH
T19392F1F54F213735D09E05F47DA16D0E390C50BF5D1A9BEE862F219389A1E1F238E682
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000259

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000259
Size 338KB
SHA256 6ae52a48dba0694e94cf5f65562d395762f36e508ca9082d91f7be758d97c8dd
MD5 636b547cd36a9b8103ed5184d9c01bd7
SHA1 bab37acae4e257be1e441ca159e76823afd5bcc8
SHA512 2ac7413420195864763bf3c647f01156c47fd9df00090df2104e479110e0ab5bb9d4d03cdc9b0881185a2ff9f95078373f825739f09a3e23780c11626606f418
SSDEEP 6144:/rRnnrV5LmbaMJSyobxi+eYNnaujcKyKAkMwKvyIaQTS1/:Tn5Rs4iLYR/yKdMwKvyIaQ2
TLSH
T1AD7423AA02A0624ED6D9903391EC52B60A72C0506118EB0B9D55E771617F9FC7FF23AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 11KB
SHA256 43ab6272261f7fbe6cec1a14d0f4036249a85ce2d4e97f85352e1d0a7e23fcde
MD5 d0ecc8e9f9782842e1d9eb961e8ea945
SHA1 b18ff0effa3116bd9c895c9f49b0e8e0b893d00a
SHA512 36ebbaf3ab52c888e3d0e3c85f762f042efbf10fce8c57a63a177b763b8aead6633854ea07622a2ea650567dbe5bd19d312a821679b68c4748ea75763a41416e
SSDEEP 192:jVXqmqL8GgGnBCefFBeI+OJcxmuBaUNOsY4oMOE41b8:Z6mijxf7h5Z5fZH8
TLSH
T101320F3988E5A359DFA499FAC0D2488832BA029FC67B1F435B048E3C7DCB7C87590752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 ff73c73fe322d875ac4308def2851e676e91c95ff2b7bec19b0f05956c803216
MD5 85cd742de04a0fab31a60a4b6fb09f6f
SHA1 36cd868b16ee90d3c595ee798938fae084b248aa
SHA512 e2e79049a3e47030f9f9046c3440529bf8ba015ba62526a58dbaad42c9b816f22227b924457298f854d9495aee81a366c70c87baec02ec31b00bf2b1b950cbdb
SSDEEP 192:9WS/JZeNNPgWBmOTw5Bh6QkDVxmUnC9YQxGuvb0:k8C98Oyc9uYQn0
TLSH
T1AE12F03989E9B359DBA49AB6D0C248483239429FC77F0F425A449E3C3DC7BC475A17A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 5929d204862cd99a4736737a6092543867e844a132bc1dac37ec24b59b89c257
MD5 11fba2e84b6d8da7e05788551381be7d
SHA1 f94849229bfcd76ffcf896a76288e84eea9647d4
SHA512 ea593ce1ba8ab9dbf401a9d2d9e088e790701b2568faaea20c80b683e953b9146e1f75f03323686fe31d0f7c89506132e13628b523b815da1b073680261f9eda
SSDEEP 192:jkVXqmqL8GgGnBCefFBeI+OJcxmuBaUNOsY4oMOE41bH:k6mijxf7h5Z5fZHH
TLSH
T102320F3988E5A359DFA499F9C0D2488832BA029FD67B1F435B048E3C7DCB7C87590752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 cfeb089207cf25425f43723cd935b4d16a374f7d254fb4785f6a03167d401441
MD5 a818da8106b1971a05ba8a40cc53df0c
SHA1 00263b99f4653ee41e0f80e0fbb955b39c254363
SHA512 0dff8a34e525b27c83747567003e904e31d3fc06422ed6beb92caafca4b2d366a3ae669d58249839bbcc5d7a5122cc0f1c4e46f11e14144fb6c38fc4760df254
SSDEEP 192:SVPqmFT8GvGkBCIfOGoI+tJir5xmuBgnNVVYafMmE41b1:CCmTzff/LCaaLf1H1
TLSH
T14142313998E5A349CFA499FAC0C2488932BA069FC67B1F435B488E3C7DC77C87590752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 7408fe04a43761a832a134e590960410442192979b9be105608f2461cf525b3d
MD5 95af118af0eb61ee6abac3939cdf2df4
SHA1 fab711960854c428f97ba2f7ed7975a31ca1b1c4
SHA512 15028e97fdaa868fdf4d111a0d97d32026e05ae613f401f39647709d6917301c734a4f49500e91982ae376f9d4e2e619fa12038079961bb04096488f0bb398c2
SSDEEP 192:BQMIESK8smk2kBCIWGKx8I0CJi95ZBLN/5L+YLU1vJob1:nIEAsmEffKx/0CoZnOtU1
TLSH
T1A432613898F5A308DFA449F6C0C3458931BA468FC67F2E8747489E3C7ECA79975A0352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0f3b2f0df861ef8af4efa9b8cfd244ea05031f759262009b9d41f0ed97158f38
MD5 2eac1bad88f783fc15584c01e25b461e
SHA1 8b3ada4af45fa1751d864c12684df25b774b2f31
SHA512 e279461b1a2cd35fe18f203d5b47fb81179d29813889c8356f382314e2d345b29945b7900903e6c1d4921cfa6e1278839964cdfe46f95889b245c30fa9259802
SSDEEP 48:pUq6xWkuVWbHnpxzTkgnHxOxylRMgCdZ209F6j9NSaKs9CGlJ2Pbj13LRquftl:pUPAkrHPTbReynI2O/aKIC9bRtVftl
TLSH
T1DF91C21941B23025DBF40AF0E4C35609757E47CF0B0F4E921A9C9EBD6E8A394B1B078A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 9a3f70890819356a21fbee3c0c8ddfe201e0710b4d62bf5ed3fca34d12854df7
MD5 b3af32dbc2686228cdba6b3c6e62ccd6
SHA1 dedb6827dc590504c7e9c4676dc548a00aac8a1d
SHA512 519dce4991be669547a8551e13c68701c4451e211da22455517d0105aaa58303acb6fe73f7952cbd6e11b85c579c1a9cdd6cd70ec919e9cb3971912188756776
SSDEEP 192:5WS/JZeNNPgWBmOTw5Bh6QkDNxmUnC9YQxGuvb0:w8C98OyU9uYQn0
TLSH
T14512F03989E9B359DBA49AB6D0C248483239429FC77F0F425A445E3C3DC77C475A17A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe592c17.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592c17.TMP
Size 3KB
SHA256 efa56f84766a9b7700394f316889c7467c4236a7120fd0f8869dda78eb7944c2
MD5 2de87426ae0368b236078845dc6caa9b
SHA1 f9f33d874fc9115fad5df7bf2a80e72edceabd12
SHA512 97cf3763f5924f344274ef35d3e01e3219a5a5f4b7c7d0432abc000aa6e684c9169670a33ad897e12a56f28f96add271f7a351dfa2da9867e3b4039ac6605ba5
TLSH
T144718F2842A23461EBF41AF0E4C21206B47E47DF0B0F0D4518AC9FBDAE89764B27178B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\000003.log
Size 1.0MB
SHA256 b51584565bd187e9426f26e6876a66dadcf3c7a35b5b114fd9d53f11b71ba18d
MD5 d1daf092d36bf9472a3dfe898b1b2d15
SHA1 becea6ccffae3506b929746e3fff39f26f63e28e
SHA512 a86c8647761e2a3da517426cf59ca14fc6dbecfe3da6efb366a37a8ff002409537eec7147bcba03120e00f9d2e1e88308213890fab15300adf227c8fc5b02bc2
SSDEEP 12288:Oo4gpiBm8kKfkEE4crXJNrMJibQa3UhioN51PN:O308bfkpbloJN
TLSH
T1EC25B63A18959CD6F07A16BB8ED3EB9B8E7BAD403920D75593D0B329903350DCCD262C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 335B
SHA256 1b5798339692e94015869a7a964dc8ce96da6ac95c2ef312b5ef134168fe6436
MD5 682df5a40dba12fd03e6b0d54f8f1a3a
SHA1 cebba46b7322aa33704b1602884fac90b9cd5fc6
SHA512 15d69b2aecbd2933dfbaaaa2d717a8b99b22897a921d26ecd12e8d96a862ca294925ffdf137df224a761d1b5c3d43974ce3d3c762603afa672ed42abdedea090
TLSH
T157E0C0248CDBC11F522010D34624BB4CC5E3714FDB86BD431F81C9187443084E87FA60
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 340f8549156b9472ed534b86988dc8aed0c2c2c642d223e1dcf138aca5951bcd
MD5 954fffdcb2fbec77be072a2fb93ad6d8
SHA1 58add50790c27c660eff1d03bcc7e73d06df5dd7
SHA512 d6f1b1e5794717e59377dbc2eaa039a10fd6c407b67de7dffeafc53cc464280b70cd42cc92a07f63b9e2f54ece7eda113ffe5e54e275b9d06553541fc2ac565e
SSDEEP 384:DEtf64zifjZkirL+gnWLzy3dCkYvkIpGn1X/Y9ncPVVRhQ6Df2OVbeGGy5DbChsc:GErKoDo
TLSH
T1F682B9BB87F4867DD91152F1EA28BF1FCE1D0469439C381AC5E5AF4B93E2471E140A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 33KB
SHA256 93eb468dd4a24368d254a0bb38de1244dee7c40de1c0ed6d99771bb2cbeac119
MD5 e61cb20be3437c280bc356fc78ef505b
SHA1 0ea5d230e15b2ffd88a095bcee61cfb087012023
SHA512 3c318660de4c0802ce3a8ec7cdd6715354a0fd31a39f9c94424a86310ab1dbc79bbd93495904f94a11b43d88a72a3dfcafabc6763a109606a7e459e0f5f64e27
SSDEEP 384:D5Wn0MAt3jESsvDLty3dCkYvkI64WnDdfe6Y7mJHJJBH3KU5jBy1lBen2wufCMD2:mmrUeo1oH4ZL9d6XV
TLSH
T187F2BCFB87F4867DD91156F0AA28BE1FCE1D0568435C3C1AC9D5AF4BA3E2071D241A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 32KB
SHA256 a3e8c22c4ca155efa5c8ca5f097c2b4b64351029c5b48430c4bbcad45e6ff5ff
MD5 cdab24b4eb69fdd72997d052bec38ebc
SHA1 0fd2b330d35c72b528102c57204764fef5a389a1
SHA512 1fc98209b82bf65870f0efaeaacd0f7b974560c8160410644fc5f54cc3d3c8328a395d324e1012044bccd6d860b72f083f55db7e9109b99fb89248473c11b104
SSDEEP 384:D5Wn0MAt3jESsvDLtk+146eWXQU4WnDdfe6Y7mJHJJBH3KU5jBy1lBen2wufCMDo:mbrUZo1oV4ZL9cW5f
TLSH
T110E2CCFB87F4867DD91156F0AA28BE1FCE1D0529435C3C2AC9D5AF4793E2071E241A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 35KB
SHA256 5c526a1a9a8d4f7b155775aab8479362140fec669a77a642355f2d4d5a300d09
MD5 5e651f530ac3a32d5981620f58c9626a
SHA1 02ad440e197c51d6fae4af8356d6f4b4e9518dd8
SHA512 aba599822ad186cb758e0a58489199182052a5fd1f7a158708a8eb88cd4feee3688a8d53ffd5c9f038863aab2f0dcfa7addda26dc66614314ee75dd5f0da6f13
SSDEEP 384:D5Wn0MAt3jESsvDLtk+WXQU4WnDdfe6Y7mJHJJBH3KU5jBy1lBen2wufCMDUi3SC:m+rUQo1nU4ZL9cW5JyG
TLSH
T1CBF2BDFB87F4867DD91156F0AA28BE1FCE1D0529435C3C2AC9D5AF4793E2071E241A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 570a1b06efc8860b64e447a46c059d047bc5f9abe72505114c4d58141be94d49
MD5 8e94e15ec449e3a31e1ec91d665a92c2
SHA1 d8ebdba314333b6e190bcc1b25cb52d470024d24
SHA512 d0dcf7a1a3312d3131b4fb7546a55a3e35f45fcd78ad5fda1074a8194ff4b42eb2f3a66c196f21ad3cf08da1e6f88d1ddec24e8ce844d9ff85547f8a5ef6aaf9
SSDEEP 192:DEt7b7e7E7v7W7b7X7N7o7W7H737q707L7ZoLcGn17z7r7U7J7L7S/7r7pVR7175:DEtf64zifjZkirL+gnWLcGn1X/Y9ne/5
TLSH
T16A3268BBCAF4C67D981116F1A628BF2ECE6E0568525C3C1BC5D69F8793E2431D24098F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 764ba85b2253855273c3fbc56d3740d1a9c2ef664be66b529da440623f2d92bd
MD5 a7e5c865a3fcb9648eaa687dc11d3c0c
SHA1 22337bc5705f90f6bfe5dc975d06570267bc3544
SHA512 dfda86c8362c1d22dc636c705c813ef9307f97700e069d8404192705770573addbad9cab52ab7dedd54dae9838788c68b9ca0443b6e1f6d30f96446e8775a2e5
TLSH
T1B4D02353534531B9556D7FA1406BEC4FC33710290881DDD411D0A8D90731C6C4517141
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5b8828.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5b8828.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2e1f07a09c78238c86e1d84f094c0fc7fe9959d742b0a1616e48a41158e6b68f
MD5 42d82387f99a7089b4f27a7fc45f29a4
SHA1 9dfa95be3d332058cedc9305aeee808808c9338e
SHA512 d1a5476526dbae06d0796756ae49e898e7275034d26ce0616cd15288eeec0c4ebb4582bf7860cc09b4d1e51b45ff152eafa772d101fa7ddacf990ec5dafb7577
SSDEEP 192:sxZzR6yM/jK1Ml8UQ3ka/fVs3pYDldpjCBQCHW6+WNf0V2HoGZY43IWmIg5NJ:sxZzQq0a/fVs3pYDJCHbfxZMN
TLSH
T13762F812AA345AB7CCDBD20AF941BB53D2F5557295900E58AAFCDE1C04E6BED2203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8f7a8965ba3d4504fdab1992532b3f8e0a1ba5bc09874abba2c9134c2620da4d
MD5 ca1f74c1688a879fcddef5c9391684cf
SHA1 fcf5c3f57332fe476de9fad4a1579c3edf67965b
SHA512 f76ae08949fdad222a54238915f39f646571742e131afca03ff157273c84c41083eba42fac9efe7883cc13891208b1366b9c1e45e6caf370a73b6e626ffa139e
SSDEEP 192:sxZzR6yM/jK1Ml8Mka/fVsdpYlldpquHW6+WNp3t/Y4PPzmIgrJ:sxZzgMa/fVsdpYlJRHbP/49
TLSH
T1F452F812AE34A977CCDBD209F9457F53D6F50572A6900E48A9FCDA1C04E6AED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 38KB
SHA256 41987454525ef744d813296d5b538b3cb81666ee4c8a1ddf654a00659dce0587
MD5 e995ba8893fe5eb64ac8ea1cdc871ebe
SHA1 b3ff102b9c70e80273c55bda58b073de9b2a0018
SHA512 dd99f7535b9c643f116f3d4b84f08e8c580aa1fb1bc673db4fe0f501d615eba52a9ec351fea73a5e33f2fc71bb72671d1eb092207f08d115265c293876fbb9b4
SSDEEP 768:sBsXEm1a/fcpYx4Mnc7WeT+nmrZFIHbKlSuSab:lXEm1XpYCMmW1mrZFcKlSuSab
TLSH
T10C0308429820C977CAD39D19A83DBE36D6AC10529AC4CEED5AECCD1C04DD6FDAB03C52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 49a65f3073bd504fca6abd4454e2ef7edf78959c2dc20e1561e961c2f8d41ddc
MD5 bd49e53269dc7a7b3d76b39902e40140
SHA1 b2b9aa9e70570373bfffa1b73202ffb3aabaf538
SHA512 190009eed22817ad4b271455638a87eede41959aa0d38614ddb6cdecf925a485adf189a24d364017faaa44ee39b8536174e24e3bcda75978bbcca4f51bcf41cd
SSDEEP 192:sxZzR6yM/jK1Ml8Mka/fVs3pYlldpJMxHW6+WNM8b4XY4LPzmIg5vJ:sxZzQMa/fVs3pYlJaHbUXEL
TLSH
T12D52F812AA385977CCDBD20AF941BF53D6F5057296900E58A9FCDA1C04E6BED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 38KB
SHA256 7375e20b57c6052804171bc2340f7d9de718c1b5c241e0ebb01e87391f4fbca9
MD5 8a6ac2b760bf3c441f06ea8913e4473e
SHA1 b6c8e0f36266c39cb0c713c45914c8d22d776ac5
SHA512 a5285724eae6a7aff2b2c644d2b9a4586075f7bf9bca193d45cab50f2f77af01d061da7d6b372dbdec75bd4e7573b2b4bb3a6857c16792b967dd243cebb83480
SSDEEP 768:sBs6Em1a/fcpYx4Mnc7WeT+nKpZFIHbKlOdSab:l6Em1XpYCMmW1KpZFcKlOdSab
TLSH
T1E103F8429820C977CAD39D19A83DBE36D6AC10529AC4CEED5AECCD1C04DE6FD6B03C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 91467d1446dd9380a3a8435d2275a4b9d28fc207feac2126ec982c4539173ce2
MD5 ec7703f6d1fd215b74ba26b32116ab7c
SHA1 05cac3dbcfa94c97e02ee8737272ac3d6c98aba3
SHA512 9d34db793a5e6a35f4f822d77887fe00dce886e56e2c0a3c80b9a564bef7c221190ceb75aee73490a0256518aa244c444b9af350371d72ca0dc1ba7606d77484
SSDEEP 384:sxZZnGlrQqGOa/fVs3pYB0XHgDHbgO/RN:sBsXBa/fcpYBlHbDb
TLSH
T149820A1269345977CCE7D21EF802BB67E2F811779A904E58A6FCD91C04E67DD2203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 37KB
SHA256 671d418ef09142caf34dc68c4c65cbe929c42cd1e286d4c5a15cdd0b02863a3f
MD5 b1fa27a2d5c09f0af26bd7978736eb4d
SHA1 cfedb5cf4b64d03e8df8b4b2ff31d869c5759a18
SHA512 7326849dee61dc4eca5e7d45e9814a7306fe626db96b0d574fe33a8ef8f516b1b75a89fd9b577506cc1ce904f1413f3dd3d8e598d903a1699c17ed91b87933cc
SSDEEP 768:sBpXEm1a/fcpYx4Mnc7WeT+nljZFZHbLJCSab:gXEm1XpYCMmW1ljZFVLJCSab
TLSH
T1BA0308429820C877CAD39D19A83D7E36D6AC50569AC4CEED5AECCD1C00DE6FDAB03C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 08c9fccedcd08aba0430d16db622136b1270689446cee3f658e976187723123f
MD5 ef389ec90476810650a36349205b9034
SHA1 76165ce3b3bc6222cf42b62ae2fa6bceac0e9d6d
SHA512 e4adb246b43163992aabf5d3516732656269140be4be8cb4680f338998456c8e6d6c4f07e9e9413d14e73d48b269edba6c671daa065bb13c0b6b7b43cade975a
SSDEEP 768:DX8iJPNWvx78r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opd8ro5kDUnO:DX8iJPNWvx78ru1jahALocdnyUO
TLSH
T181E2FA3B680CCB7E4F844E9CEC266F966DD801CB5A988D5447FA884C03C76EE51279DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\623cd082b6202da0_0
Size 60KB
SHA256 e6007b1008bebb447eb347e23d095ae10b4bdb2512e9893142b7dd584853ea5e
MD5 508c846d27e1c5195343c53253fa8d22
SHA1 b825662b458da28ab24a8e1f1e1d99a991e8b955
SHA512 0fd02887a80d4188cc5f2714a7fd881d3f8be56e340394eb89e21247a13b05d0852410883bc3e728779178a03d82a1adbd916a94127a162d69c6db44be14ccc0
SSDEEP 1536:N46Sija4JfCS+ksYyiApR+M0Dpbarcquzpql5HPwqpzGc/iq+:Wz48bC6Rx0DNDQN/z+
TLSH
T1F25329A7A262613587AD21D6A49A7F00F12B17561444C9ECF0AC66913F08ECB57B3BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 63798a4eced9a147e20d421b24eaebde4cdbb37a20581fded8039d7664b9da1d
MD5 e752b37e62ccf87c23310dd2021ac382
SHA1 230ae975f0b139cbcc8a0639792011c678c0c812
SHA512 107edcb81f438aec6387327fcf6ff2c72710e82e4d516b6bdd42471666a4af430a1fc260fbe13c60b5e9f5e4eeb3ace5c68827923f4f3a22b6f55279bbef7b83
TLSH
T1F4A0021422D00649C02213F025F61349231ACA19D302B34781D36049D85854565418CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 3d4ffbca4dd307dd68eda98c00a617876f990d34c18cfe32947911635da7494d
MD5 e0a9d235435a5036be8a2905f85fdaf1
SHA1 e8e920ab71201173e124773d2c665727a0eff811
SHA512 1516c3d44c9e67e3a507a3ffc33eab7d2ff418a2c40bd27563ebf97c20f8c427eec85cc911131b3f6b68e2976911cf7e4ee59efab6d555e1cb9b3e46b56f66c0
TLSH
T109A0021113808516D01321B3ED9316823324CCD165846707509A045CDC908544ED110E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 c697312463397dd133a620a61f03f0de94e194d3b8c018eb197481617cba4ef5
MD5 f924543d8dad0bb34ca29104017af043
SHA1 484ca1d093b967f04ef8ecaed4c028aa331a5255
SHA512 08581b88ad361cf015917d9253e867fabf04e9f5bc2c27e3ef0099e82525c9f72baa293fbcf21adb8b8c4b2e668581db30e961dea2efab2440b13b33edde3748
TLSH
T129A0021833C01005C02212F42BDB41493216DA119201230B55E3644CEC985554641C9C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3802f11e-2496-42cb-9986-0162e34e7a91\index-dir\the-real-index
Size 72B
SHA256 1c98bdacd7f821fdc0ccf833a8f988f7ddb1c0ae9a46d68571c5275fa0eba9fb
MD5 89b39c0fbb187adf4c5449fb3e8738d8
SHA1 c5b2886e11dbca1b9965f08a23b2fa3bd5dec289
SHA512 cba6a90857979ab1748ed6a51fd244189ad6b19a9d749e407d4a9d7d2daa7d70b584a319cf486aeba41c71e777ce2ba7579129e5b7262af396bf22f8ffc46fa4
TLSH
T1FFA002102379B14AD01507F49947E2E033718CD0821D8E0540EA5498DDD06847396150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe61565d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3802f11e-2496-42cb-9986-0162e34e7a91\index-dir\the-real-index~RFe61565d.TMP
Size 48B
SHA256 70a1b2a0fde8d68bc840bb7fbdd6509019dfb6c39d41fc2a91160c0859236f88
MD5 0c450fe40dd9555b1d067c35ab940b2c
SHA1 9b09894fab4ac1dc6402cd67b349b262556b946b
SHA512 9bf9cdfea9ba5f72ed0b0f44cf697d4b4c129e60e2f873cf1f279a589419cb90b2c0391b9f8b68703a17fbe8095c44133cf5d0a241e8168a61274098be8e3cfc
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 3KB
SHA256 928cb5943c170623004dde04b2b5f7ba714c2f8d0fa0bed8941c4ddd615f748e
MD5 850d1b4ee715d1d70741469c453953c9
SHA1 3ea3f927b9e1c384e955a54ad3d77bbe8f2bff81
SHA512 9445771f6845e7f804084375a7bb72459e4f8286c48a63f4f48c397eec44642c182f9761754709bb8cb88ed8fae5ea53834c1cde27c7116e60be4b225d41b87f
TLSH
T1F951E95D4C830A2BFD5D167314F5144437B834DD67889B13AC9C6538BDC322D1CAD260
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 1KB
SHA256 72f65c3d1d01f36642ecec1b2a765203407b81979f03c0c9b05842e5a8ea5556
MD5 60d3a67ea5801849f7ca95fef07e2ebd
SHA1 31b867b36b756b52a7cd7cf420aab40fd48e8ff7
SHA512 50b8cbeac3c5241857c62a2b5ba2748e2f75fa271bde2184b61c20cd6ffaae5cc1de678eb2dcabd97cf85c7fa900d62dcbc59f3792f2f5b598ccdb4a493b4c12
TLSH
T1113177494E95CD6FEDB0417216716478737044CC0315A713983C31357E2779A264B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b32a5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index~RFe5b32a5.TMP
Size 1KB
SHA256 0167b3b93bbdd3198f54566aad27f7ba0bd6c0296b7fecc17092ea62ce1c1364
MD5 812fc2052bfd9e8078d79a7cbc235196
SHA1 f8a6a171ecf2bba4285dd03a3a110e475f1426b2
SHA512 a963d6caf4296d3d7adf00beb06bd1a88c6cd0ab88c819899a8ca9397421a0d4348ba2b64909d236ce3b1ca22933f51e05d7f908a4ca873a46df7ceba3dc4576
TLSH
T16A31664B8A808A1AE89450770AA6B4B8727599404311B783987C6139BD25BEE1F5E0D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a3c0a2d4-eac7-4086-937f-54ccbca1fb83\index-dir\the-real-index
Size 72B
SHA256 52d32a6911df5a8bf04fcb83bc65f5b842919c562216c527a2ab045ec3a7a53a
MD5 085a826bac5e5732281f6e1852a2e714
SHA1 6df17406c139a76bd0448ca7edf889df8cfdf15e
SHA512 db2aaaefbdc444fafa728ce09ab34e4f2ac28d3807629c1b4edf91d24fabfc6f04654cc09bb066dfd21817473a6180d6da72a6bc4d59e8df5c8a21ed14b0d7db
TLSH
T128A0026801A60082D0558BB1D18201E027149D260702831D50A109B5DC711687B09444
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 8c953bb121c45f195a01f293ba9e29a87d1742e98134205f4b910c9cf8b7654a
MD5 371d746d1b41e7f91f4d8b1488ac1757
SHA1 e23e103e6d9b460fe70227d1cc1ae92abfce319b
SHA512 ba523c3c49089c618f3577379fa744299f531460a503560a8be5903e3d4532da3d250e6ae21f5e77de030a5b3c0133a30d3c88ca8125fc328aa233f969b443e0
TLSH
T133E0C0F72FF72C44FEBF63E115B0A8A00246B869D544BC8F1426EB832461352340AC22
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 ec94978ca97aef1559fa05a181096fbc1a725c6c76db65ab97da15d1a6d2dc44
MD5 b085324113a12e4e09773f3213513a95
SHA1 790ece46d40729aaf3c453091b871db9991a9a9e
SHA512 60f9edb859b7ac5e9c117aa44b447a725d1beb0888ec3f2cd730e40a736010b06c0fa7a2ba6ec3608c17dbde7d4c7392aa6540e0399244e643e30ac81ad54439
TLSH
T168F097F22FF72D84FDEFA3E514B164A0020ABC59C400EC8F1426BB83A0B1322200DC23
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 476B
SHA256 1090d734eaaf99201756982661fe1a4f37c6d21212ec9d406824cf7b7a8f13fd
MD5 42ad2ae06da7d689260f0c5ce7096a7c
SHA1 04312eb59208d857546f9714c02cafad5307f6cc
SHA512 53960b9d3cf3e4e7f9f5ac6a17e8c960c323873e9e4f2028db101e93160992e828d18621805c070159a405c318c8652d75aa20fae2722591954877e9b9843685
TLSH
T134F02EF22FF71944FDEFE3E51571646003467855C550EC9F5426BB9761A13652009C23
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\949e2fb67d9a3a51e3346e2d2992cfc7bb325661\51da3466-ea45-4b1a-85b8-f2ab2ce943b3\index-dir\the-real-index
Size 72B
SHA256 f80127dda19f18d3f4d3497d1801acf19aa43d407615967773fc3de2750f4854
MD5 734648a18bfca8305d8ee2d8a32dd623
SHA1 f7baa2e3475e928f9c28eada25b5d1fa6ed0a014
SHA512 3410ca71e67b2963a3c7c3667307d464c6dadf14455a2e54c48d98849f35d964cdc234f1576bc7e8ff4b4aaaa3f968c75a2fa0b8bde63923b22e67802b03428e
TLSH
T14DA002B1DD54D404DC0423B814A3474416044CF802103212D7E84196D8A605941C5246
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe6144f7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\949e2fb67d9a3a51e3346e2d2992cfc7bb325661\51da3466-ea45-4b1a-85b8-f2ab2ce943b3\index-dir\the-real-index~RFe6144f7.TMP
Size 48B
SHA256 2411cfb9ea314dce58bcabfa7062439e7fb2276e18553f20f1d9b25699b238a0
MD5 f1541535c9c299e0fc9e267f309e9c45
SHA1 7ffe11c0a60cb564ae9dbe65cfdfe261b57b816e
SHA512 5a89bbbfd6ed3c8446d0a6f23c46d4c88e2cc37344976e55f49dbfb6b76b104515bdeb2fb02e147c11b2a6dece829e0a53647f8e368237094d44c1d07eac53ad
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\949e2fb67d9a3a51e3346e2d2992cfc7bb325661\index.txt
Size 135B
SHA256 3b2534258af49e21bc7245d6b0435d66beeae56dc328181f14921c011b679bb6
MD5 df59cf0920a945270c0bedbe828362e9
SHA1 69cf61c5de7c3b0059ef00180741b988c8ae5c68
SHA512 af5305e649ed50948cfc6c77d022540bc18e81206954a33e2a500f0602e07d2196be685aef8e1cbf6efaae1c6a7d0b47576d961debdbcd886436e7e1fd29deb6
TLSH
T1D1C02B0F0840412C6C101A581A42FC6C1932354600CCAC0CC0014002365DC944644F63
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe615032.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\949e2fb67d9a3a51e3346e2d2992cfc7bb325661\index.txt~RFe615032.TMP
Size 140B
SHA256 e53986301f396511ba4306c39aa5a2849f10be9041699c0f23c6e3edded2bc19
MD5 b58e79883e364504b13c39e1ba1780a8
SHA1 d98c6dd77dcf87efe06b273979001e23488a5aa1
SHA512 67fe16ce4f1a410f2882fa41eb8e01c6bcf588609e6a3fb8b32cef8a620c220d42892fe4d471d5a6ef50f6eaba1b2cb25e85a1a6a97ffbb54b991b4163813fa9
TLSH
T107C02B0F0040410C4D0014591A52F89C19333D4604C86C0CC4023002367DC51474CF83
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e5b7980a04e4805673a74179633ecd675ba6a857\379973f7-11bf-4039-9cf1-89d8d22cdba6\index-dir\the-real-index
Size 96B
SHA256 f9392a9826c9fb8d27a132da5be295fb7c26504de3edf225e0394d0fa066fd18
MD5 8d61ca2c093ee7923f29ae34612a5318
SHA1 8e200b446f9a10408337827397cecea5651a9dd0
SHA512 38b4608611f0a6087c8f4c3890b88af7332ec9e1775cc696f4d03388db863203253c85a7a81a2d1e936ebbe2d985612b02000fe88af13a13b0fe436f2e9ba1f9
TLSH
T181B002654A410047C41557746497499531752D6C8751135582D51165A5919C98142504
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5de496.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e5b7980a04e4805673a74179633ecd675ba6a857\379973f7-11bf-4039-9cf1-89d8d22cdba6\index-dir\the-real-index~RFe5de496.TMP
Size 48B
SHA256 89a780bd3d7c048b4876c94f8c852668c7760ef50d57bfd1f34fd07058905816
MD5 48cea9e934a89ba156f3b1e282c3fdfe
SHA1 550f1d7f96e4c6a124756821a1999791b7c4a816
SHA512 d3d0ef46af1ddf581b4fc8101d305cd0ab51a4b8b9ab7c991b3bf66834d1f0568575b59cdf4ad8cb9714fa6cf4630ee56b57486728cea0321d065e78b8f499fa
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e5b7980a04e4805673a74179633ecd675ba6a857\index.txt
Size 176B
SHA256 bcf2a7c286e4af05097e6d4c6994fb565437d2af6f05d82ba9d681d4d868ef19
MD5 f6c0b739a66d1169bbadaef440fc9c74
SHA1 946369f09bc027d770014a9d8d0a9388d35e5bd3
SHA512 4841e4272aa74cc3250a72a12fb86c1775529e68ac7891926859e44fe87117435d585a3ab917e549af5a0adc69584c6c68a43b0fbeb1cb761d47d649aabff98d
TLSH
T1E9C08CB7A800F00A0A36D17A328B327CC97F88A9049E683888460691002E8E725FAF4C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5de4c5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e5b7980a04e4805673a74179633ecd675ba6a857\index.txt~RFe5de4c5.TMP
Size 181B
SHA256 d7620fb9e87d72cb97e6df6abcee5228962b9b0e706305e869fd06db95b47867
MD5 24ea3c2f5098e17606fd613974dd4c50
SHA1 de660f68a0a3db9f72283e3060a19ab0dc7ad393
SHA512 2b55cccc78479ff5355e168901b368bdf5435ae0b2ebd89c680015fb9ca4d58d3af0dcb6f743f4077ea737a8153870e0d32e92343d2f4934472bd4c9d9331cc9
TLSH
T153C08CB7A504F0090B26947B711B706CC87F8DA9088E487888873690103E4E766F6F0C
MD5 SHA1 SHA512 TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 81KB
SHA256 7c0d9071bf5673e1517e4a2b188a87be9b9e0e2666348058a64d4a12ca3bf191
MD5 1eb632fc0dbfc4e3a6dc02bdb40efb8c
SHA1 41877c12e8a56bda7140ae157e4cbcc9c3c9623f
SHA512 0acc8b0c420baa48110589185225c2471ae28c8126477d69b27080e48b966777493cc99b88f83429d1ddb8a2e683bfa489da89e98604037abeea492c1cf0921c
SSDEEP 1536:RQSXups61ugdvxFftHNwS4lVl4GN8HIqBAhEaqhosnoQX:RQYuy6dxLSS4nRN8HIqBAhEaqhL
TLSH
T1AE83F9C6B711652203DB9236F8F79403A33969944509402C7BE89DEE8B2C6CDB677FB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 4736a400c355f5b073b0bd8b1c7904e4ab140920e12dce70ee74ecc1ad59977d
MD5 44925884820120890e1bac1870137f30
SHA1 46a115a458f505f90de72148389711df5b28bd26
SHA512 a6ef5a4eceb30a44372dcda499fd7cfb1c497d562f97fc342e57d12d740e054a3ccc83087d5a610ed9160df682fd55ed72e0b866d0dfeaf305555ff05c2e0c23
TLSH
T1E4A0021A8FDD8049C48016F49166068CBA10889C4B092B55D8EC955998932404193024
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 da10ac05956c4288e2f550891693bd9d87da7f5673da1aa36a88520186c36726
MD5 9c21009f634267e3bafd9703e18da9ab
SHA1 4dd246d6463b34bc23b485400d19875918ae3860
SHA512 4ff9372192ae28f81bd023cf943cb66d820adca6efdd176be03ffcc410185c54cfef9a71f75bc0945ee21c647ef874b8ade760868870f92a22d5f859fb6551f7
TLSH
T1F8B012028D4C42A1C054433DD012C5C821289424861E375B64ECD110EC2614C119123A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b8a89.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b8a89.TMP
Size 48B
SHA256 09bf42940f16664c6355887ce6deb4429031a0fa0bb2ed2b22c5a0407b704189
MD5 0d51f2f95ee7cf33b29edd7cbbc3b051
SHA1 aa9cb9946342c27092ec88a12715e5f432b764aa
SHA512 0d908258a3ef02b784debdf9204b3e96750a39426ab875d60993f4c99a3c67fbb658348a6983df554f4def2e0ddefe5829301bc4f7c230369788089a65a56352
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 84df6e655551d33c01fed83041fdd208700c2c53f116ed29d20a5112a19cf66b
MD5 1390cca5924cd66ea13e5634a0e70829
SHA1 5b41318f34803acf226266ba45cf72f4bfb62253
SHA512 54eb0dc5b7707081f01bcb79970a12d73a2593c6f205303e4baeebf308c1bf4f5d84097e69b9845144a343ab34436b676c22ffb9cf48c8e9327f6c868e8efd98
SSDEEP 24:Kd8fzIJamd+e64Wy+JIj06KiJhaK61EEqSmYM58UzyXYdfYrCaHdvLj47/+SIjX8:KgpIVKKwovyhiIvKLC87yNRIRKCsEyC
TLSH
T1C891231230BF02422D7D7909A6B087574782B1B37128E43B7BA955B14E2AE344EFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\448acf8b-ce0e-4c88-9137-64ca9f8a7dad\index-dir\the-real-index
Size 72B
SHA256 9c0dc098712394a78e80d7ae7134214f5866bb7398c57e592ad6d5ec2593902c
MD5 d579c998ac02899d29d3d82e9ca3378d
SHA1 968b823865ccf3ef899cc6a40964be016f1b9fdd
SHA512 7f9629d921d464d85c9794dd9fea331a536ecca7d2baabbf9536408f61f79c31a1d52348a3fab2d3ae35a74d642b2467d27f08dfca6b932442d53132eab65e79
TLSH
T1CDA0026883C76446D0121274A0468FA2F310C950050107034492118D9C942C55912055
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59018d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\448acf8b-ce0e-4c88-9137-64ca9f8a7dad\index-dir\the-real-index~RFe59018d.TMP
Size 48B
SHA256 42907dc634c378f09ae75c245aef28ca39ba2bcec4f6f5b5fecf0a91e62eda7a
MD5 9deec992b9ae91706b3b629d24c73277
SHA1 8c1287677b2043ecb276a8b69cf4afe026ad8953
SHA512 99ec80a33678c15850c4ef1df6449f002c74e2c920d10ad702be1041c7a6966b4bba3fb1ff61912eea23f5cce09761ef9b3026e43b3824da670da2f76ce0f04b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 95B
SHA256 4c1b32d5249d09c96afe1ae60cd58b1ffa63a23f1895c8623d1b6928389a8029
MD5 d9d2ab4710e3c5dd22a2b294eb902124
SHA1 bc0fead019555412badf9fb31ce96cd90fc8de78
SHA512 ca2db970eb010abaf2adbf9160c4b2b1f0c712efb06f26b2a65013f0ae566075d5e4efe7775437c8ad4a166f819609ee31d0740da3dd3fe4926272b64edf9d0a
TLSH
T105B002FB4445D9D55E7138E7414633DDC57273DC5C85FE8DD4751055322057F5011D64
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58b36d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe58b36d.TMP
Size 182B
SHA256 51910a63d10706ae533a365d95ec5d8763134e8e09732821b6f48b3b2b7d6df6
MD5 125f007ddc00627ca4bf034ae018b9f8
SHA1 19081c3ba4fc77becad6c372dd59937c3a6e4606
SHA512 83c2110a878138c1b408b6640cf17f716beb21ddbab30964b2f1afab7fe2be94074256dbc711676173abe230f376e1a91e02abd8e9738b43935be009074d37ff
TLSH
T1FEC01277909185952B6534D7511633D8C9367FC85C81BD4C88213445217085A5414734
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\blob_storage\781fbf31-f5fc-49fd-a2a8-7989b02d4a8d\3
Size 4.2MB
SHA256 0e38954f24577958cde72f0aeac6851c59d4682d33060a0b820772df8a9910b0
MD5 ac288f029f3de6e7f356906cd873ad7f
SHA1 0ed23404d1674a65273b661a435a70c9f9e3e27a
SHA512 050b51b1b6908613bb634c36746a3dd8cae3b3ba69605ae2aaf02eddf10af62e4876c1e973bbc882c2bd57c9cd09e2f94d133450a171f6cdf9518240c82be4ae
SSDEEP 98304:8hVOIMGjt5WRKNvYF4Vckx2YvijOccQjjKu0:2VZptcR8q46fdcQjjKu0
TLSH
T19116F1B856F31576D017E27E8F5F68046F2AA4036358DC0D3C6C66A0CFA90A149F6F7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597788.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597788.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 922668a9bd628674d70dd3a0c0b9db772c1a932cb49ae8ec5945308e699f5688
MD5 1eacac9522c264768b9acb2d768960d8
SHA1 ccda781fcef07b8cf0c1c50693f8f92658e7dc0e
SHA512 9a05f6be24f223d45328b58140b0a3478af6352d73c93f365882f2ded3e1af5fe9f4ee2c26e18af232a43913c049b5db0a2ddf359fbeb931a15ec73043b3c601
SSDEEP 384:EiF2ZcIR2sN08TUNTUlIR7BTOkn+7k/rqbmNXoz5s/Ikhrf1fzaBuv:fFkEZwgkXbm+zmZhr9aBuv
TLSH
T109D219F148E7987AD89E9707B77E2D034EBCC167B9845A94B7D85A0CCD860BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 aa5e5c554bec12d9d108c9150f018d1e6af8fef3777398ccd9e51023acb402b1
MD5 596c20f96d336238b3f355542c0d9661
SHA1 950ddd09c82cc1d6eac7a32a675660b63b26e7fc
SHA512 00aaa87244248ab4f1a77248771a143ef8bdfbf665aca842ec96dda965b24137ac94f381c6f66a557e584193f3418996264504aae57a4677211356f4a7dda40c
SSDEEP 384:EiF+ZcIR0sN08TUNTUlIR7BTOkpU7k/rqmmNXoz5s/Ikhrf1fzaBuv:fF8OZwgUXmm+zmZhr9aBuv
TLSH
T15ED219F148E7987AD89E9707B77E2D034EBCC167B9845A90B7D85A0CCD860BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7c7c8b144bde363ff61aee82280c463015ff822b4c1c38042593ad356381bd7b
MD5 885b2c3bd0c651323b547cfa3b44307e
SHA1 957ba9242162953c6bd8c078e35ca7e41e867727
SHA512 303c1a1b2fd6cbb07ef69c448c4999bc12ce8f8c5559f74ff2769010427e4024cf2da186e60d1b82abcb3bdf56aa35cc00a5efdd9d12cb99f79df54896fea8ec
SSDEEP 384:EiFiZcIRzsNk8TUNTUlIlk8knMA2k/rqXmNXoz5s/Ikhrf1fzaBuv:fFQhxwg9AKXm+zmZhr9aBuv
TLSH
T199D22AF148E7987AD99E5743B77D2D034EBCC067B9849A90B7D85A0CCD860BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c4bb8a1c98e5b6a6bc62bbcbf9eb982ffc11e173c9904814fb08f1741f513fc7
MD5 150d7af0a33d4954ecdfc850a28e2c50
SHA1 6b2acded5efe633a05420009660c01421c7ede04
SHA512 dfc1b4271f8b89d09243fb08dcde87e6a9b86555a9d7a728d9cdef8c8eccc295b57fb09f15c84b0a5a115aa8991f3c73e03a8da6647ae0fc2e2466dd45ed0d97
SSDEEP 384:SZcIhsNst8knV/k/rq+mNXoz5s/Ikhrf1fzaBuv:ghPj+m+zmZhr9aBuv
TLSH
T1BB928D715C747CBA5CA3A546F88B36135EB8806B9BC85FD4E9EC670D09CA0D80307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 14d2565056c0371cff587f097a66379de85d80b268430b3411728df3f0a7fb2c
MD5 2ce32a9d749ee55a154497be3ebccfc5
SHA1 2550c57c6bb73f19297fe63e7c869ba0f4faa49f
SHA512 4023c64f7ac81d52e68ba9152c7beb67fa28759ad8bec4a3dbc206f018984491f47df7821c923b3c0fe8a9a3d0744afe089afa2305557c0085aed8e260acb990
SSDEEP 384:kZcIhsNsk8kn3A2k/rq+mNXoz5s/Ikhrf1fzaBuv:ChgAK+m+zmZhr9aBuv
TLSH
T1CC927C705C747CBB5CA3A546B88A36135EB8806B9BC85F94E9EC6B0D09CA4DC0307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5fcb4892932c223010aee61e7096fa917829876bd4ba5f29ebd5727ebd712ac1
MD5 7ffd68f568a0aaaed8f5dc2d8f32bc8e
SHA1 0a27025c0b60add25a0a70579396a609fa59e5a2
SHA512 4939915a655b8eba5acf09ecf8ca6f1968323b3b22a0727f4c51783c522755f1dab63225a579b68ea9e754a7b580b8aed645dd3f78ed2e29b24a3d453055c1fb
SSDEEP 96:ZqONk3QsjpfmUTmDK5ih/cIPURHl8h4otop5Ss5DSeBhPwivh50xy0SFYKQAxsYW:gONz6kDfQmiUyNBZ9036TQiG5U6
TLSH
T1D502E9356C786CBB8EA3AE46F44737275FA5212BEA852F95D9E81B1C04D724C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 652f2283d1f3bcc1b0e7233eb89c18e7e913088ebdabb029b68a109665a10538
MD5 a80c3b48aa6e90612e53c16842501d95
SHA1 dca88381b1d26fc797ae320bcb0d4cc0ec7f9417
SHA512 009278bfb69305b84b992497a6694c424782baf8f6b30ae63d152b27c45da74c9e401d30d41b38a7102f472dee7e2c68969ea28cbc2450e668e53766d4a7d074
SSDEEP 384:EiFZZcIRWsNt8TUNTUlIR7BTOkGi7k/rqXmNXoz5s/Ikhrf1fzaBuv:fFxUQwgNXXm+zmZhr9aBuv
TLSH
T13FD229F148E7987AD89E9747B77E2D034EBCC067B9845A94B7D85A0CCD860BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 39b28c7cfdfaeda55ba72978f91f4635c45411531d700091c0d0b256a311ce06
MD5 e1251cfa0d49d3348354dedf32c66275
SHA1 56766bd32ce7d529c8cd5c3f80050b50e97d73dc
SHA512 9b54a3716b8ae319b0643645f9542953183280c732133c0ad7583cbfb997c16af7c1bde1e225a95807f8f15dcd994eedb6c1c9058d35d2d86faf48a7ed2cecdc
SSDEEP 96:AqONkBQsjpfmUTmK5ih/cIPURHl8h4otop5SsLDSeBEaPwivh50xy0SFYKQAxsYq:rONl6kbQmiUyzBd9036r1EYecRCqmU6
TLSH
T1B51219316878ACBB5DD3A946F48736135EA8812BEFC96F95D5DC2A1C05DB28C130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 41a1fcd44adcbe7e13c154ddf63ce26067d7b6d171cd27c1d727796c71ee0cbe
MD5 bae2dd1bfc3b0da1122b6457923d8ca7
SHA1 ef7552b02e6c1c4171a666cfb0d9c646fcad2a62
SHA512 b2aaa27f4176e38beaeb64ed9aa38a7bb81afa5ca94e104755830be6379ee6cd88f4d3314b64239fe405bb0a9fa1b13006dcbe09cfbed0fa8e998f443e6740de
SSDEEP 384:EiFPZcIR2sN08TUNTUlIR7BTOkp+7k/rqmmNXoz5s/Ikhrf1fzaBuv:fFHEZwg+Xmm+zmZhr9aBuv
TLSH
T174D219F148E7987AD89E9707B77E2D034EBCC167B9845A90B7D85A0CCD860BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b48d6ddd6ae56f3021cf94adb80d82212a824cb47938715a46ce7b4171377763
MD5 620c429ccf9e54f128db148ecbdda05b
SHA1 1cd19dd62e20eddf7159565325996a8bad17e4db
SHA512 21046c4574393b5fab813b010959ab053e81857ebd418ea23f14138899a32ca279760ca52ad301267198478edeac979fbeb2daae5662a430f282cbd0db21ab70
TLSH
T1E4E00167830120FAD53C837000E31B206FA3D07656F723028EA00A782CB234D7E71E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0d75f9867ba7d1f7a75280ee23b6774d6422d009c88fa2e72845de19582f4121
MD5 9d03fc75a838017024fa8aba7c77adc7
SHA1 f808f26a56061a0cd73232ab1d9fcb648b6245fb
SHA512 60ab64a45b5188d8ffbc8ae1268d3e23ebc5108c25e0330281d4911caf0798e80fac5f9974488984e1bfcacfaea0734d051c0111fc5caa32697def392e0c9e74
TLSH
T155E00153530104EAE829037000971F206FA3C030028313474FB1056D1C703496F30AC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1d594350a3f5118d8c01dc933ead210d189d5a911bc966565c32faaee8de36f1
MD5 5d877af01b474861cef17d1d7be42b93
SHA1 e28fcf8f91faf16e1274cf008844903c4f26da2d
SHA512 11df68c1c208a9d971641123e322a4ec2ae8c1aea6aa4d3560cee91b3f9eeef4833847a203a6af36d135b588c7a6421626bf39759c8573c4b4e681d92c8dcdce
TLSH
T118E00253530104FAE83D037000831B206BE3C03002D313474F9105651C203095E30A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5710c2ef7185cdf07065bff426c2d561f49ab120aba56d61c44a286e61f59f11
MD5 a7b42c3dab5627e1ed5b687647cdc506
SHA1 4ffe6003ca81a4119acd2888a50bd3950fdae131
SHA512 d9f91238dffd346b3b3128ce05ef53e7d0c4941250dba9820b94b38ca82392d1b9351729f207514313111e1ed5c1c23d1845eb8ce3e6b5ff1c6031685a76f377
TLSH
T1ACE00493930244FBE82D43B100D31B20ABE7E0B012EB27575FA929792C7230A7E34E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 64df974818daf206e38099585af0b4af5d142b90660510947bd563d28ad878c5
MD5 ad75a1d30ba336b88e5bf7ec476922b4
SHA1 98866b9c78ee51260835d1966874ab2eabe42413
SHA512 cbd083eaf32a04f266a81598cd340e21bb4cade8e20d428a791501e52f969c236709b7e77399bd789809fe7fb1df2a71dda11b2f4a525c366f2f0b6b5125d5d3
TLSH
T10CE00493930244FAE82D43B000931B20ABE3C03012A713574FA529792C723496E34E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6284090d986c01b73421fca2023ef66642976e15ea4a6293c59cd104fda6a9aa
MD5 5694130f52d379a923c078e76a345434
SHA1 e13fd9fee8dafbed46278308b363aa9d38ef5294
SHA512 354c4a58c2a50b499a4b1199bc350e03897525bb3c435f22b6f9e86e0675a5fa137940cb9d056284e8879b3fa8a018b2a6e306e6aab9481c9dd7c4bd058af1f5
TLSH
T174E001A3830100F6D42C837000E31B106BA3E07012EB17034F650A282CB23493E30E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 099359206498765a275b78467e5f1ac9693b8075216c3fd50bebe9bce51f86f7
MD5 f0daaac0b99f23b50e5dd1fe81a54fdd
SHA1 443a7a02c5f3f0504375b8430892474802885ae4
SHA512 bd5b00ae84d33fdbdc3f8c303222d1b8e84cbca996cdd11073129a4b1f60bcba2fa56fdc04ddbd029a10bf527e8f15d637a169a2a51a1b6880472e05cc78181c
TLSH
T1B7E001A3830110FBD52C837000E31B206FA3E07652FB27038EA40A282CB23493E30E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6e7b8d640d3899720b2fa8371ec1de747838be0ad2d4017e2c364f8bc1ae2b46
MD5 97f331781c6305c688bf32c322d10545
SHA1 4451d7ba28c28cefb17389b1dc5f817a098061d4
SHA512 f14cd877919f2c4f33dfceebdab4d263e286aaf2defa1b0ae95930882a79177e5737d655a76483d61aaed5ff9b0dcabd2da9fb29786462a44caa0169221794f1
TLSH
T1EBE00167830120BBDA3C933000D31B207FA7D07656F723078EA08A782CB238A3E31E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3952c6621135be7fb3c4fbc4f5bd14564236f3a4605b8c83ab4eae8502442c4e
MD5 7c3e68eb83adfbccaf25a4e779e2f6b7
SHA1 09e3f7485c6c9bbacb5604153e62e6677c5bb29e
SHA512 0047f74cc2ea7030cfcbfec235b7db1f265cd199e5a621d2629bc6babe53618ad7dc8a76a7720f1daf9ee20ff065c1a501e78711f4fbe2e0d228059db06be935
TLSH
T198E00993930144EBE82943B000971B20BBA3C030128313474FA125792C703496E24A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9107ebd72133597e8a3d0b36a28268e9df618ee2d5d557487d375719ff01717b
MD5 c4fdfc9956a742069f6d36f3bd680ec9
SHA1 356f10a1652780238cd519211c5a7cb0295f7c75
SHA512 0684d8b448700609284d6a17afbb2288b6362f49bfde26e9b5c62bd0a4275160b91e4b74924ba34b604e7f05265dcaeca548b2b920b5bd351312450ef9d956b2
TLSH
T1A3E00167930144F7D52D437100E31B106BA7E07112EB17575F6515792C623096E74E84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1ea6a7f7925bf1d94bb3d5bbe18c4142d258cbbbc329058224f3e7c062516255
MD5 d775a42b1dad76662a402e28c4194b31
SHA1 e7e4d0df0588276069dafaae558b919c03a60f01
SHA512 8550728dcce5e40bcb269d42faaab6e8e304071e59af2f953a136c76048d627b5f787381bff758caefa13a53508dc0e36a6143b9f121f90f6e876636b6280114
TLSH
T12EE0EC67834120BADA3C973000D31B207BA7D0761AF713078EA08A782CA238A3E31E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58ddf7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58ddf7.TMP
Size 392B
SHA256 c6a118daae57c91ee8b55fc3a489b00e25e5688090626389d792aea51c4aa68d
MD5 07a66136fea37377c5c7723e363eaa19
SHA1 33592f20ccec27d8d9b789090d22c8c215c8b087
SHA512 48694b1f0d4310f53e65158131ee61a6fbef286aab16238def795d2f1b41306f86ff6fcdc3bb5f320204d10c14715b6f382b6e59ce875299027fdefc69d397fa
MD5 SHA1 SHA512

Submit Download

57ea3d9a-c3b9-4d47-830b-9b81ac20e8f3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\57ea3d9a-c3b9-4d47-830b-9b81ac20e8f3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 effe2d8c8e66fa70b22b344bc99980dab096f41768ca4bb00db9f3d7680e3d33
MD5 c6f3b5957d25cfa1e822a341964843b6
SHA1 008f6d44cd656f0affa82a3aeb5ef25c7165e8eb
SHA512 df9f15939ee7f38939e052825f8a843251c3110c032e085e8f1db41d9ce4a7e325905b68f2cf027a799aca200c4e2e1b221db13ac5d9a945e86dd78ec4c6377d
TLSH
T17B41D998A6FA1108B3776F169BF698AD847E78272E06956D00020D4F0A63B41C961B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download