hxxps://greenrocketsecurity-my[.]sharepoint[.]com/[:]u[:]/p/jeremy/IQBYN1SZ8ovORb8OSthN0QjAAQ_ZZrxVbsmGxGQQ76nidvY?e=aa7p4e

Resubmissions

10/08/2026, 14:37

260810-ry7dcsbl7w3

10/08/2026, 14:37

10/08/2026, 14:19

10/08/2026, 14:01

10/08/2026, 13:52

10/08/2026, 13:47

10/08/2026, 13:19

10/08/2026, 13:09

Analysis

user interaction
yes
max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 13:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://greenrocketsecurity-my.sharepoint.com/:u:/p/jeremy/IQBYN1SZ8ovORb8OSthN0QjAAQ_ZZrxVbsmGxGQQ76nidvY?e=aa7p4e
Sample260810-q6fpyavyev

Score

8^/10

adware discovery spyware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
262	5128	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5128	msedge.exe
4692	chrome.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OUTLOOK.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OUTLOOK.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OUTLOOK.EXE = "10001"	OUTLOOK.EXE

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308435454887443"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 62 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Downloads"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 = 14002e8005398e082303024b98265d99428e115f0000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{B5DED31F-2FC6-415A-A562-4AF730D25CE3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe10000000cd8e0d151ce3dc0160af53df22e3dc011dde55b2cf28dd0114000000	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "3"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\NodeSlot = "2"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\MRUListEx = ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg	chrome.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
660	msedge.exe
660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
6068	msedge.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
6068	msedge.exe
6068	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
6068	msedge.exe
3388	OUTLOOK.EXE
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe

Suspicious use of SetWindowsHookEx 31 IoCs

pid	Process
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
3388	OUTLOOK.EXE
2396	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 6068 wrote to memory of 3536	6068	msedge.exe	87
PID 6068 wrote to memory of 5128	6068	msedge.exe	88
PID 6068 wrote to memory of 4996	6068	msedge.exe	89
PID 6068 wrote to memory of 4996	6068	msedge.exe	89
PID 6068 wrote to memory of 4996	6068	msedge.exe	89
PID 6068 wrote to memory of 5240	6068	msedge.exe	90
PID 6068 wrote to memory of 5240	6068	msedge.exe	90
PID 6068 wrote to memory of 5392	6068	msedge.exe	91
PID 6068 wrote to memory of 5392	6068	msedge.exe	91
PID 6068 wrote to memory of 5976	6068	msedge.exe	92
PID 6068 wrote to memory of 5392	6068	msedge.exe	91
PID 6068 wrote to memory of 5976	6068	msedge.exe	92
PID 6068 wrote to memory of 5976	6068	msedge.exe	92
PID 6068 wrote to memory of 5452	6068	msedge.exe	97
PID 6068 wrote to memory of 5452	6068	msedge.exe	97
PID 6068 wrote to memory of 5836	6068	msedge.exe	98
PID 6068 wrote to memory of 5836	6068	msedge.exe	98
PID 6068 wrote to memory of 5164	6068	msedge.exe	100
PID 6068 wrote to memory of 2500	6068	msedge.exe	103
PID 6068 wrote to memory of 8	6068	msedge.exe	104
PID 6068 wrote to memory of 2500	6068	msedge.exe	103
PID 6068 wrote to memory of 8	6068	msedge.exe	104
PID 6068 wrote to memory of 8	6068	msedge.exe	104
PID 6068 wrote to memory of 556	6068	msedge.exe	105
PID 6068 wrote to memory of 4272	6068	msedge.exe	115
PID 6068 wrote to memory of 3468	6068	msedge.exe	116
PID 6068 wrote to memory of 3284	6068	msedge.exe	117
PID 5500 wrote to memory of 1784	5500	chrome.exe	126
PID 5500 wrote to memory of 4692	5500	chrome.exe	127
PID 5500 wrote to memory of 3008	5500	chrome.exe	128
PID 5500 wrote to memory of 3008	5500	chrome.exe	128
PID 5500 wrote to memory of 1552	5500	chrome.exe	129
PID 5500 wrote to memory of 1552	5500	chrome.exe	129
PID 5500 wrote to memory of 2744	5500	chrome.exe	132
PID 5500 wrote to memory of 2744	5500	chrome.exe	132
PID 5500 wrote to memory of 5148	5500	chrome.exe	131
PID 5500 wrote to memory of 5148	5500	chrome.exe	131
PID 5500 wrote to memory of 4916	5500	chrome.exe	133
PID 5500 wrote to memory of 4916	5500	chrome.exe	133
PID 5500 wrote to memory of 5180	5500	chrome.exe	135
PID 5500 wrote to memory of 5180	5500	chrome.exe	135
PID 5500 wrote to memory of 3608	5500	chrome.exe	136
PID 6068 wrote to memory of 5360	6068	msedge.exe	138
PID 6068 wrote to memory of 5360	6068	msedge.exe	138
PID 5500 wrote to memory of 5804	5500	chrome.exe	139
PID 5500 wrote to memory of 5804	5500	chrome.exe	139
PID 6068 wrote to memory of 1868	6068	msedge.exe	140
PID 6068 wrote to memory of 1868	6068	msedge.exe	140
PID 5500 wrote to memory of 4384	5500	chrome.exe	141
PID 5500 wrote to memory of 4384	5500	chrome.exe	141
PID 5500 wrote to memory of 2280	5500	chrome.exe	142
PID 5500 wrote to memory of 2280	5500	chrome.exe	142
PID 5500 wrote to memory of 3576	5500	chrome.exe	143
PID 5500 wrote to memory of 3576	5500	chrome.exe	143
PID 5500 wrote to memory of 4280	5500	chrome.exe	144
PID 5500 wrote to memory of 4280	5500	chrome.exe	144
PID 5500 wrote to memory of 3212	5500	chrome.exe	145
PID 5500 wrote to memory of 2708	5500	chrome.exe	146
PID 5500 wrote to memory of 4376	5500	chrome.exe	147
PID 3388 wrote to memory of 3240	3388	OUTLOOK.EXE	148
PID 6068 wrote to memory of 4528	6068	msedge.exe	149
PID 6068 wrote to memory of 4528	6068	msedge.exe	149
PID 6068 wrote to memory of 4528	6068	msedge.exe	149
PID 6068 wrote to memory of 4744	6068	msedge.exe	150

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://greenrocketsecurity-my.sharepoint.com/:u:/p/jeremy/IQBYN1SZ8ovORb8OSthN0QjAAQ_ZZrxVbsmGxGQQ76nidvY?e=aa7p4e
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x27c,0x7ffc25b7c188,0x7ffc25b7c194,0x7ffc25b7c1a0
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,4750109667633722698,4223277230882111777,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,4743610466304591007,12407601368786869243,262144 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,8312594833716434279,15657225753859463702,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,16567904172910681309,12235023850231628327,2097152 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,17480602543313617703,11339346441059208336,2097152 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,3960404983997104320,2619052294934718314,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,5894047502763389563,6676366435543656315,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,710423246717861072,811398255564175852,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,710423246717861072,811398255564175852,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,3866507780424797664,12904077583915841183,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6128,i,13519880517534049496,4981313865346717701,2097152 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,7974775078400589141,10265972296038757179,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,18275013720214337327,1892580119909825907,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,859356373640442651,3605669367385039460,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,2838404971492179739,9743982689127074562,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6848,i,7536113550585300811,13775024924318093974,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,17166577078722773672,9670701001082291531,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5396,i,410756653876259431,7863442225986055033,2097152 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6708,i,8465296599402945871,2775710410985448185,2097152 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,11026651362418104552,16313297577285955270,524288 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6824,i,9882996305226204404,3759820256045416369,262144 --field-trial-handle=2200,i,10415792294581543043,7217368194625734724,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:660

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2248

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:696

C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
"C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\Admin\AppData\Local\Temp\Temp1_GreenRADIUS Windows Logon MFA Agent v2.9.21-N.zip\GreenRADIUS Windows Logon MFA Agent v2.9.21-N.msg"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://files.greenrocketsecurity.com/winv2921nx64
  2⤵
  PID:3240

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xfc,0x124,0x7ffc0aadc728,0x7ffc0aadc734,0x7ffc0aadc740
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,5243141752915164657,14799717221824987245,524288 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2084 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,7312472793069531742,6031644655621620369,262144 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1968 /prefetch:2
  2⤵
  PID:3008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,3689016259736564420,13322460552706689390,524288 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,14733346590852882061,6479859833029407332,2097152 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,3195934384862843236,14697552665802732623,2097152 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4432,i,14505869660742625441,11911770951997760729,2097152 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4436 /prefetch:2
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,787216433618943840,7934665221508828614,2097152 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,4689274009976961644,7298827024322223682,524288 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5620,i,2452347379137198420,14204876966718462600,2097152 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5992,i,17308602959567564972,17169023709739457809,2097152 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5936,i,9802629955186190346,14453691675905672392,2097152 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4808,i,5127706588996275344,14424849579223960164,2097152 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3612,i,10757013725463286475,7673251982962163305,524288 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5984,i,6159803648008955232,8700579164742483867,524288 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6112,i,3006686819081788687,18186036106829483699,524288 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6048,i,18001235183371568721,11156540752863471424,524288 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3652,i,6762929529669090355,5528398702153538830,524288 --field-trial-handle=1972,i,2138665860120895475,13263417832610135707,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:2396

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1964

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 81bc66c6d38e1855c821ddcd551a0e8099362fc261fb35c8148890c3e6e09e53
MD5 f0f2ae09655e818eeea315fb175842ec
SHA1 a3d452bdd30d1aad7a65201568880279293da39c
SHA512 c797a03d86e8d8aa1903496856829693ad1d46742893c4d34e5ddadd0638325b8eb3e8b07f0a865250597351f4deb1003d538152d02ab5f84bab8ba53965c9a3
TLSH
T142E02BAAC961DC370CFD1B5D50500749EA5853073A42888F3E3C84188F7563F424A85C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 75c578a08b4713c73f1a70ed801f3adfb04ac6428bfb66af0dde2c6aedb339c5
MD5 cc94d80347cc64e3e838c1529efcedd1
SHA1 bda47445e5c0dffdbb25ca7e22081417263cde90
SHA512 faa3bc00b2684ec5faabde501bf58d0eae69d28fc6b40bea6e0f6a940dc938cabe26e6fdff09e13ce7ef78f5e8e6996bf82c57868e4905163d481db7a8340936
TLSH
T15C313C0530BC595ACFAEAE3188F20C6332303BC7E6431E0A6A588E7402F23A7101B5CE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 1d0ae964647664f5ce067c08ba4b1221d80cfce24708d0e13c33fcb73abd8d05
MD5 84cb652acf41dd929ff87fb364c0cb75
SHA1 819bd2966344864d9c0cbf59ebef4f8ee8e112e2
SHA512 da1e47730e9cb5dc6999062e88017695d93903376364e88d7f6742f6179ac6c0165aee203ff42031d3139c5de550af9314f971d353a5503136881e73e997b60d
TLSH
T1D131711130BC1946CFAE6DB04CF2089732312BD3E1531E4A17D69D3582FA3A7885B6CE
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 72b30deab423fe597b8f76cce97afe9ee33bc2d54f735ce317de83dc85a9aff8
MD5 d64e4e1d72ae0cd814740b93d124c537
SHA1 6979178b3344e0528c03b415d80d1b05640ecf1c
SHA512 2ac8a14ab17c7ba137e4419751fd8a7c284298aae88c76666a44ef29857509933255ac2fe423ad6de2ea819fbfc6c4e4f3cf195bc95c528f5f23bba6b0e58d85
SSDEEP 192:DqB/3PdqA/rciZZ9+aakHxFQ+twE1H8UkNPFaPifPCYQhV+eX1sZwvWrXGof6D:DqB/3PdqA/rciZZ9+aakHxFQ+twE1H8A
TLSH
T16A328DF3C3D8C62DC80162F59B257E1FCD290A28626C3D67C9D4EE5B63E2472E25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 20c826f83029e6288b033c8bd295873118d2e139926ea8fec948c56676118251
MD5 0037cf4ba00e4138575dc14c4f582b15
SHA1 918425cd7ed6058e256076b50620bf9079838beb
SHA512 244a3e2dff2b555e2053a01ac9619f4ce50dbe87810a0ac302334830dba9c53ccb321b3232621b921a730a2dae4ee49595859eafd99808d64cf991400f21a154
SSDEEP 192:WRpcBzXvMNBm+3N+hv71hpAPRp2WtYcw92Hsb+WNBkn04rY2553+Z+VyIsnAUgtK:WRpmzXvQeBhUXsQwZz2/G28
TLSH
T13152D66BB910697B9DDBD22AFD117713D7F5102624EA2E84E6FCC92C04D76CD222740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9cd7d7c3fe99772c6f3e0a3df6907e203c2e09dcb65df6800501c6fadecf2671
MD5 9d22a1989d48f07411dc191fc7028eab
SHA1 a3b95c0e05c8b2d677d806010334c5d18e14ea7a
SHA512 819f979e06d6a8a15ff3287faa52e273cafa369090e5b0f1a124a04541ade3a342bc1bd1e7ff039626c654f3764fcc725d77583c289525fdf6e6754fa5872d5a
SSDEEP 192:WR1XvMNBm+3N+hv71hpAPRp2Fr092Hsb+WNnn04rY2553+Z+VyIsnAUgtaJ:WR1XvQeBhUX3Qw0z2/G28
TLSH
T17552E76BB910697B5DDBD22AFD113B13D7F5102224E62E84E6FCC92C04D75CD222740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2b1509da6ddf29954b3aacd423499c3c6108789459bcdaf2992c7fdcc8554d7f
MD5 3fb8c3194f15552620e40dbc37a6da96
SHA1 bdcc0ddcd20f50ca9b05dcf0119b0854a5a76e32
SHA512 68fdfc07240e47d540e255c80c7bce05567da457a60010cf5c83ef7593219102f9a1e71bba7ba497f67c2b937d3aee1c872f66ca3b8708fc686728dfc782cf5f
TLSH
T182B01280C0425502C44307B01253188C71245F14D60F570143E07922C825261C8140A2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 e52fe804ebcd06976fa805db558b69847c96146d72e25c22558165a89d860505
MD5 1155262c984930bb40e69a042c30e520
SHA1 253c5a8f44a20f633a6e43efc58daa8c3ef49373
SHA512 47b2fcff5e8e544e078c858c4ebb18f8f9aecd94fed44c24aa137db6711cd117ea398316d9bb07ea7eb9b4d26f673c0bfe767d1a7de3d1fc76f2350b3898f0a6
TLSH
T147C01211C701B021C48A23F13557ACBCF1345F68CB0E179C43E0797AF8392718025555
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bc03.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59bc03.TMP
Size 96B
SHA256 951539a597955b7d5103538a8735c245ff9661eff12c846168ea7b00d1c2279c
MD5 1ff34d4a788601c1aaff9448c9d9817e
SHA1 f14f73787e836b38c2e9ea630c462427e9fe2c8f
SHA512 b30bc23da3a171caf74c46e48f1e1e47082229f55ec7120351b21d86ada2f1c3084fa389b071af9830cb6eec0a5c85a79a50e8d9ff355b5f28c7f20f952250bc
TLSH
T16DB02200C203A282C00303F03888CBE83030CF38CA23220282E00AABCC223300232020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 364ea49c0c6cac99f3ddd8ee344055ce5e97d3545c931130379293925b0415f4
MD5 1260717d53d226c15cff3dc638e2fe9f
SHA1 5e7ae299367df7750f92766d161dc810afbbb7bb
SHA512 7472f32778667acf7c2e6070bc052ff7b2b0f61ada17408cd21a2a08fff376b6abf3985979a8bc01f9ae1e4750457a10774bc7d67804b32bfaf1903c1c1e81d0
TLSH
T1B9A002909185442BE84D777114C112852271CD1066970A6164A18C568850144457A8C4
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 22ab300cafd062931fadd8ce403266d7c885ad318783d2b90b66d00183c1c13e
MD5 8d8de654012531ca7b06aaae2c187fad
SHA1 f287073c42f3374d5022208ddfb6efa02b1dd954
SHA512 264eedaf44f1dc6eef3ba3b46923e9f805690f061988968c460f8598ab9ce47865a9d2e88039825038a2dfed26c7c35aba3c5852845f13f746eea60f21abb41c
SSDEEP 6144:78QGnRUUf0ZwVW6OHCFPn6s01WNm7Rkm1tYpBeh2BAoT:dGnRUUlVW6OHsnI9oBGcAoT
TLSH
T13134237B0EB1AC325AA9F779708E466F6EF54AE3CA04B8D640C46B4087CC6DA1745F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 815d1464110f013d39f1bf378da30e32e4d40da5adabab80e86a29f5e01e539e
MD5 a7a8570cd135c192fc5a5015ce6006f9
SHA1 a621cfb41cf8c92aa5b73cdec01ed709213dac2e
SHA512 4a2967f1227ff862b1f2cc8b9117c354a11eab4c99eabe9182b73492f8574ce2eef158cf6cca6d000ad4f4908fc76d3b4d454b2334332da23c4078a1171a9f83
SSDEEP 6144:Yd8QGnRUUf0ZwVW6OHCFPn6s01WNm7Rkm1tYpBeh2BAoT:8GnRUUlVW6OHsnI9oBGcAoT
TLSH
T1A934227B0E71AC324EA5F73D708E462F6EF54BA3CA04B88A50C86B4097CD5DA5A45F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 be5ea554d978500d84507a10ec434a38410c9ecf8defd8a6da2666bcedc1be4c
MD5 6f79767fb5ed28571d46625b2d83f8cb
SHA1 9f2db0d35a8dd0333c3a5897b72dce25d5be5abf
SHA512 4fad95fde409c26c724c1f4e78367003bc1d193c60d953dea81df79597998afa5a7d569bfb9d5797141c71fdcde67acfd33cc0d5cacc276edb79c58e4fa76db6
SSDEEP 3072:PGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:em7Rkm1tYpBeh2BAo3
TLSH
T122C312275E71E9375D79AB4EB08E0B1F1EF14AA6CD30DE92C8D86A0437E97CC0A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 e5637b40078a9c8f59d97d41f35f6d2fd208a65f9948abec5d404823a2f11fe0
MD5 e054aa55fc79fb418a3adf69339a0944
SHA1 a2ac0fd20c15bad0943df052bb47899c1a029a4a
SHA512 8e308b8dc0f8d874ab91f78fa09eab21dcd7feba3d1835ec5a902ab98efa6f56ed0abf2b765deb2b6a704a0fe6db87b7c0f68a8656186d5206ae6eb499cf7729
SSDEEP 6144:68QGnRUUf0ZwVW6OHCFPn6s01WNm7Rkm1tYpBeh2BAoT:MGnRUUlVW6OHsnI9oBGcAoT
TLSH
T19E34237B0EB1AC325AA9F779708E466F6EF54AE3CA00B8D640C46B4087CC6DA1745F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8119f1cbe8f820d9427baeeab840b4f55afe1de324381ca51fa9340c6707e902
MD5 2c872576b33defa5cde4a9469c919ace
SHA1 38ada27a9cc159ae63312efe6b398044f9c5a8a8
SHA512 471e8d1e1837777dd2bf8013541d6cab0bf9a392f358efc998f14b7c453d1b39e7e76cc9aa03529ac25420a372d0d7b0ea596dd83420c1fac2bdc0b4a028b914
TLSH
T1D7E022A6C822EE3709FD4B58A01A9657E701132B2A42999F3A3C92098FB473A45C5C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 56KB
SHA256 4f04a250dccf4ed1b666d9045facb352ade4710fc78d8a26fe57d5d3b9f44d53
MD5 879501961bcca1be0e856edf50cdfb8c
SHA1 ae90dd23d35269f41d2c47024ca0133c36c3c783
SHA512 3a3af7f09b1dd0c6b589ebf6943eba3f79aa16b7cdc49c5fb19711dadd049e44ea2719e0b9018788cb3fddeb16d284c25e8610aa458c6ad0de6d1a27a3fbbe4e
SSDEEP 1536:BnJ5HSLa/KcLBs21YrEjqjCDxG8+xwvdzWv:B3Rs+CZQxG8+xwvq
TLSH
T1294302395B375DCE6BFE044C4A079502DF23ACD02225927F9EA5E3E645F0933699E48C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 41KB
SHA256 40fb6874aa7a26a7af323a466cc86ec6ebbad75a20adfb903f2f457c7e1d8520
MD5 0b1cf5fa7f1d3b6fb5050584a6883c39
SHA1 7a730ddc01aec54fbad82a81bda05f4eb22319d2
SHA512 4db7f4567f8824665a0c26b6b2065b6fb5af8281c64680e108275cccd1782fd4739b2e292fe0fa30a3d39125338ca9e3fb173fccab1fcf13c955bfa8b5e19a2a
SSDEEP 768:OKlr9DGP1ka+JNfINS1v5Pl55AxOouznaccVZPgspgFhTsZ3hpvsd8dj:7lrgiNIAN7IxO3boXTCkZRKd8dj
TLSH
T11C13F2D39D7ACC9B42B694615724A91E7A80F370A68D2F3C19CCE28471D1C7D0B962B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 49KB
SHA256 7605542b4b62a4954b672957b67e38dc391021f6d23272f49eae44db76d7cbac
MD5 8e2833791a31cb1bae27d74c8b4e3796
SHA1 33c56ebed85d0e277ca44bf6ee1ecbc39fad62ab
SHA512 fce87a0564e5ff851710906834febef597fa7b3d39f888cb63ec07799938b4d39fdc03a310539881eac5eb6099ddd9e04248da5138788d370ab3222686498a82
SSDEEP 1536:4/b/80ymOPK37JNhRvgG+aeMUmhSrGkzJtZ:440J/I1nMkzJtZ
TLSH
T1B533F1A4F0A9D4E4FABD1432755970AB197FBC8511407F0FAA700643FEB98D2F1452A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 16KB
SHA256 b4d5142c0b53e29b10fc0e052b049dc84532d9d9cd847338e1ba591d4abeda56
MD5 9ad938c546be08d65dfb70b996464574
SHA1 5d844966baeb518c04352849115a360573f30367
SHA512 d836bf7c710db1789202a4b33729ad12e7c239ff9f9ee8f47366b745c96f9ee9f86fa5c9b98182a0e63af0749d081e92a6f3aa24ec18a3b7fe5be858642ad0cf
SSDEEP 384:6HEEhFzYcr9+MoieazntSnf6eaZSAFYG4NghaSdK:6kts9NrejgZhVFhdK
TLSH
T1F172D1497809BC4FDFB5C4994231A7893FE92D1CAEC5ED27C38A4AA08145F40BB2793D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 52KB
SHA256 23baa011139291899860d53c7323f135921ed8d66d14a2b1a8675b1d041988a6
MD5 418782559cf180d6fc7f5cfe24910bb5
SHA1 73316f2ec4bd3978e3d9b96a850f4fd5358eed72
SHA512 29365f742f8d2a266782fdb790ce6f191514b8fbaf08bfeb2c1b3f38dca5c289a368c6b9d044f1f208188f84c5fff10e8f4a8029057f4e6792693ac903bae9b1
SSDEEP 1536:MGuZt62br/CG0yKvwyVj6S2GG3EAhQxrw/:ET62bjCG7KIKU34c
TLSH
T1043302E9CC9D6CCF1C638B21DE111456450DA2A1D79CDCBEE2F740A9F20F686036977A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 27KB
SHA256 643419859585cbbc302e462c447060343aa9eed4563b58fc55a13fb861c74004
MD5 0afe662f7e8ad9db29706b20713ea9c1
SHA1 64553fcdeef9b36f2e9d1faca7c1674f936b85a2
SHA512 7e017d040455b3b33631f5550364af2b0b173b74bf9791f4e4c726bbdbaae4ae3100e751c31c01193c37ff97eb997a2066c669dfacbafccdb3e8f8e54ddf43ed
SSDEEP 768:zXoQgAKTlxd/SSiv6opsty7Fa6++b6OcoXG+9Y/h6hjN5R:FQQ6w57c6pccG+ih6hJ3
TLSH
T1D8C2E1CC6CE76338D1D817FDD00EC8CAAD43B11E6C6CE9195819968AB9D0FC4201AFAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 20KB
SHA256 5cbed04ad637c341cbf45d933a271fa8c9a9f4b5dc49b46dc664276a5f628869
MD5 cd6f549a1f8e53d640e06d4b27a23fe5
SHA1 71b71b7260c5fb5a8c96bb7740dca66f1d1f8a3a
SHA512 e06e2633408f61db3421314edaf7d7a15a3d6411a9f893bdfe17ec2019d3690382e3b2b44b3649fcb5c97395522337478c43d974071ff5646c132b25f692fe2a
SSDEEP 384:V+2B73Uc6ROORoWCsCICFJkt2/74SII4Mm6aXqf2AjAWiXptzv9MvkRuF:V9F3uROOPCpFJ/D47IgS2Ajf+jzvYkRW
TLSH
T13C92F18C18533A2925FD1BBA106D79612E029C34364B873DBFC7121D97E58F8A54BF18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 50KB
SHA256 8f7116923c02962619abe1f0023fe7e1e882bbae1c684bec12c77ec2dbad3052
MD5 2cc3240810110534fd41b92c08cab1a1
SHA1 e82f4e551465ddf2f5950f246076870f1e768367
SHA512 89d730934bbc45dcba93a8fed5e4bc360cfc7cf374ce5df9e55f18c106400e9b6f1e78ec70546f68baf40cf31d6cb354b9aa80e2bd1bb295becc35071d2efacf
SSDEEP 1536:ba9zr/9C4bGztrQ08MctjgnBVlCclRv8R3rz/ztFD:W44yvQtEnBzfRkRX/zD
TLSH
T15433010A172C9F178F4AC96B3985478F5AF5A03B6F0899313B28CF5432A6385B1360DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 44KB
SHA256 a963c6b95363fa684311c92187af6d8aefdaa92a36e965716ea80f2f1bd77740
MD5 b8c07867d241da873e477328084086f7
SHA1 2a221bd8628b285e81dc394b6d42a50d1d91dcd8
SHA512 d6c950925b50f2307c8f3de630fb7c6f13744ce283d874780df9e2c3e711eb54a295b89dab603bb2ebda27b2624f28a74b3c8c984d3ca41e3669922f3e6fbf8d
SSDEEP 768:WZHlA7htVPR7JLkh28ihtTqLo1P5/WtOpEaLVgMvDtp8uJuw:WgtTJLfHWmR/WtObqMvDtphuw
TLSH
T1E913025EB56D8CB832D1953C2C5975431CAF38E6594F2841449EB0EC624BC05AB6B7BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
Size 22KB
SHA256 a2150acd6b73c0a3f264dba768394eaf354c20d06b1dd87c4ae9638bf41d668c
MD5 f54fe2544d345ea4054dd20d97700ca5
SHA1 c1cc96ff65cd8fc1ff77f9179d157919045111f6
SHA512 4bee24390050551eabda6da3e6c994ecee17a631dcfdbce9cc87c231ef3ad3bbbc7d90eafcd28e3cf11fb9cde189f02da378dcdbeb5949665b8cf3322a019685
SSDEEP 384:YyRXqcOXRq22BVpeB98NCIIuh70+dz/kQSR66km5cJCjFNbKA79V2s7JXP4YBYwC:YydqF2pM92C0h4KkQSYJm5bWA79V7J/u
TLSH
T13EA2E14C12B4ED001EC563AD9DF4F7C30AB61C6FD85923EB0EAB590C986820E6A97F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
Size 17KB
SHA256 b30c3078d5d8efea6740541ea8ff30d4dc999fc499c66e96d4026e602492225e
MD5 957d845943b845fc59d4330fd026d0ab
SHA1 2967cbb162e124bac4c619b95f4b56f2c081732e
SHA512 754202ce20a73f07b52916ac838274904650c95800400e8448aa834f58b13ba01ddd4fc0eb02704eed4b4b1cb2a49aefbc585a5697d07840352f37ebdd051a86
SSDEEP 384:6yZKoQOzQG0BNDrFBZupdZcKb/eGEkDmLCBHOBFINhuUVz9O5Q:8zU7eNDrFHxUCLC8BFYsUnO5Q
TLSH
T11B82D0610B9BB133D325A4FA0ACAB64F6143A11DDCC36F821BAB53A6054DE2D1B7250A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 16KB
SHA256 98aceac979e7943ca3cd352501c73a7ba297d4db87d7392e2945db3ce29b33fe
MD5 5db40868abe1278edfbe02461d4f3547
SHA1 ed9229e0c8f49e1cc8134e4e6d3822a4bb6a5de9
SHA512 d8267c31cbb0e23940ba78dd1e60b119a641dc46f11f472fd7dc2e5e708b0e38f4444fcfdbbec7409064b78688f268dcda2ae5005b8a568c81e59d41e676bbd1
SSDEEP 384:hjV21SKxGY6QHK6wAv/q5r7eJSnXYFwXNBhDdzD0z0LzUv5Q:hY1Sc5JwUtJ/wXJDdvG5Q
TLSH
T14072D1349D8E28E4CB493FF584115E92B955C356AB0CB808BFC28CB2E94DF1C58A0E16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 16KB
SHA256 1f7216458568f394c796e011cb5da2285c6d9c919e3d7c224cfd09df6197ac50
MD5 c67215019b9fd89b9e29a16916be5264
SHA1 d4448c620ffa5574ed0fccbdb1ad2bee466f136d
SHA512 2d111fdde602ccab07090b296b485cfe3790bde13c92a62f5c506ec1d4637b8b53e7a46f15506eb4487d9cafbf15f066caee883292b3e24c7cb5498e05b1c712
SSDEEP 384:AjVuYVspQW7Zrs1N11tKuETb+Gh306Xd55Q:ApumUQW7ZYFobv3Xd55Q
TLSH
T1CD72E1502E091450C21F11BF1DF1D2DA3C1BE5036BBED068AFE4B93A4C4E325DAAE55C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
Size 17KB
SHA256 7d733601e4b8e0cd33e0b0147b53c67a79d63feae377df06b8d9fddfba8c1062
MD5 544461b8842b77371d109f4ed5357e74
SHA1 78adfa3d6241982e7f39bfe6b0d4c4a834594e98
SHA512 5260f4d1f3ae8f49c1c15743b666cf8416e037c5c8ab13c9a6f531946788fcac8b609734641ef059269761fbd5782d933d6e81dc5a6fcc234a878ff54b6126de
SSDEEP 384:Qjjqlut0VqOv2h+wJuJzlBkTkugektS1yhVpQpORJ5s:QN/I2fJuJzl2TkZtxHwORJ5s
TLSH
T17772D0F22B2F98E0AA8AF1F560147A9865383F1D5786D8B4C309D2478B42A7CCED6513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 17KB
SHA256 d5a73c4c8205f5c8fdae9018d01b597f1827316dc5ab9d0ec9747cda2853cfd0
MD5 b12ea61d43598c7ee353b17192f4738e
SHA1 3c6fd3c30c08251db3c4baf4a7bebce9856ef535
SHA512 b97a89acf620fc22536bab7e18f77d0a71d9ba82259d8b81b58ea15cbfd06ef137d58fb53df2df6227458a78c1f51ccd8e5cdfa17a4fcd56a4aa961729fe6b07
SSDEEP 384:Q7j/Ktiq7mSWyB9QVbQ3HyHfCr6DSYn3xzeOCWVSCZUkpLBdidC65Q:Q7LKtiq7mXWQbz/5SQBzeO/ZUwVdkC6S
TLSH
T16D82E04BFA225A6D823EE87B00084547F4E9C969DA1BDDF2855D436F3449E3806A8E28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
Size 17KB
SHA256 67daacb863882f1d7f87a5174b29a7ff8b0a719c6e46babd207f2379a0d99f83
MD5 25a32bd7412a074cdb95f5d07d0c749b
SHA1 141485a16822e51f1a71d2217bde2f8fc7eb08e3
SHA512 fdd81856c6b62dfbd25f05fcef28a4393891b50a2f0755608fcd0be64eee9f0a8f7f7d76729ef73808248bd83de1eeef1906be5a8a3e220b7c47df28e8a1133e
SSDEEP 384:kBj26sI/ZxP8aY37lndbesTfwJT6oA2JuIhF8DaIvSYGbS/H5Q:kBZ3xSk7T6t2JqNKtbwH5Q
TLSH
T15872E1B00C8DE46992D117FA2010AD88A4BFCA59DDB8DA705FB328AF6015B5F6EC2017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 35KB
SHA256 11980ecd03e02439a6300eeff5dbf9a48bd52eebf14bbcc246752b0ce5baf223
MD5 a729d45a65e2b9849159e08ef6fd5f12
SHA1 75a14f3e8ac5d4eca6ade8771c84f4f5328301d6
SHA512 89460bcacbedba68cd7fe67e675c5dfd76e6c43d87ed13d03eebf4a66bc298c85f96605306eb879d4ed89bfe0e53699a11a09bba866226f767ab97203395a6b3
SSDEEP 768:KSENBcrDnCoCXOup42vD+ZNtRjWHLOT2dm8k7DwOeN3RKws++a:nEzOLCXOup42vD+ZNtFWrO98kvwOe1Bj
TLSH
T1D5F201584BEABB66EEF1843830813B13B4A9B9D321FA887FAB17855144CE0DF300D5D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
Size 35KB
SHA256 a8283e1b2cabd16be04a6cb0a292e532d5b74520123e09c2cd9deb9eccf2d1eb
MD5 e243d03bb4bdfb80fc2b9c40863299c5
SHA1 7abeba96529b293239da5536d4260efa1e797ad9
SHA512 7bda56879f1873647edf1b3d18e468430fa9a03ac88e8ac5209e834de13b7c0fd195f684f7afde8e526b4993c1debcdf6373357b925b423afcc37d76ee5c0f41
SSDEEP 768:vznK/ojztUR378mlRG+tg7wogUOIyPh/qCrRkZ3OFGvEUinr:vz8gztURLblRG+EwTqCrOZ3OEEUir
TLSH
T148F202B4C6C9FF6A86805150DBBD929A06FEF4354B2E2F6F411DA52B4B63118C03DA47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 170KB
SHA256 f64ddbb70f682e3d5cff038f60645c65a5f12fc6540c5847e8820874bdd5dc2a
MD5 803ceb01f01e471c5923a098df0cec38
SHA1 6949b85fcb35fe372ae548d452222f3741ee30a3
SHA512 fb44310c0c1ca2818be89f2f985858c632cbe9e7f9bf657396b3b5a97bd2433be54f2a34977e3050448013ba2528f090427ad99870904465d568efb17860d92f
SSDEEP 3072:p7hRKQDF/LJPNffygOMiYE9CGsWbRZSd1WMx5eeVeKgj:p1lDtLJVfagDiL9jsCSeMx5ZXG
TLSH
T1DC0412EC49191924A27E975A620CD032F264164F0A330FFA13C667C61AE7B7275FEA52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
Size 159KB
SHA256 36b658e80d8825f6b43ff8f67ef5fec88412ca10f9d2663453ad6ff0984b9d7b
MD5 ad63250d417c50ddffe294af75057337
SHA1 76863ee93960479c7519acae5fec7e5799396e5b
SHA512 6d8dc692c422936e5b7b8871a0b0d73e0b86766aa9241da29d3aa24ef7610e21ed7c8675e340d8a4d27beb70aaba6c1140a6ae8cd49925b75459287a36d9cbad
SSDEEP 3072:QyhZ2PSoNC3n5Cn9TIzG/mp8q1wZDehjGWMet91naGMIWMRNqeR:xhsPK3n5Cn1IzRwY4Q9VaGMDgDR
TLSH
T141F3125CD879627D2278C72E17B6463B03641D37A893A88C687F7B447FC46BA330981B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
Size 33KB
SHA256 bfe9f48b1c1c0a4d93329f3399f4de41ae5ca780ce4e5fca7be168cafee394e1
MD5 1666aac9e890dbfa52233ee9dbac7016
SHA1 8cbf47e86bcf022d8675a0346eb429f12d9c8285
SHA512 85b940782fd5607168ab3f41503708ffca3cdce1ab953d9f4692b4b15172d296e96598888f6a9f2e79e2c3052a68268c71b02036c05aed0fd6f3c9dae01e5440
SSDEEP 768:31PRL8c2ltP3rsGrsuMSTzMrq55WpivIu/LDySbaiQJPuSXj/VVw:3156HHWSTMLfMm3dc
TLSH
T1ACF2F273C720038A6E9CBABD3A8B110C70966BE373D81A75B8D1DD41680257B7E1988D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
Size 30KB
SHA256 49549a16f46767fa5c801de6e26a1c45112b83653f048bc9a78ba7210f8a14a8
MD5 e7d3a17da96b7f43961eec4abced97b4
SHA1 0af0c5a2a390b75a0f81e75d1dc67d14c675348f
SHA512 ba5b88d16d03168919b6e633a0ac72de155eccc6c1ce1304da2a29e8288d272bd320f9f6307de24c046e7e85701c7cfc768040385ae70002d341f90304305a49
SSDEEP 768:cp7+DCMWV6s91OETS7VzaHE9q0L1YptENHfPX+gk1V:cNuCM9S9TSBzakDRYL6Hfv+gk1V
TLSH
T14BD2E11A536759B1DC25BABED85CF4BCA4CF2AC23680345B7C12BD116B2C897B393487
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 21KB
SHA256 6dbe807b8da91d549a49beec3330d795601ec0f272ea232e91121f3ed703dfe4
MD5 3121eb7b90aafbd79004290988d25744
SHA1 5584f1beb7b9e8ca11833035c9962b3ddd54f904
SHA512 ed25bf0b7c12742a7b71bc271364970508fb03a5096f42eedc360ce92205af5be0ac4eb0567585882d34629d179f9cab287839247c81f61d894360a83b28aaa3
SSDEEP 384:1+dO/a3DEzldgPzdY/Y+qwO8UBQjOhW366JkamlnPXljXTQVoHyX2iAgVTx4Csl:0IC4rt/YXwx5D2nPxTQVMymiASjsl
TLSH
T133A2E11B4D05767661E7723A1E2429368A47B3608C54D8ECEDD8B03CB6923A89AD713F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 25KB
SHA256 dba7c93d3cf4806133d8fe211dce32aa12041fb82acc4591f464052714878fb8
MD5 b2b60f1c7184b15ebd6cb2a213c323c5
SHA1 8fed557ff6e49376f3a4bc56f95a548d6075955d
SHA512 e1a4bb4afa8fa8c09e163ba9c0d264425378c8d50f212e2932a2b21cbb6983b566180657bb753681b960d02ca4dee73a5504d433c536e64da979cdf34aabb8c7
SSDEEP 768:NMoT0A+T9/Oz+njTyqxGmuFgdc9ZWbns4h1:ekX+T9/nnjTXGLFgdf
TLSH
T1AFC2E10DE88CBE503192B8523BD50984B8D63CB9EE96DE24F64EE1F418D803DE416B77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 41KB
SHA256 3fc627e56349201333e6c39a44036b5cf09ad9378e46782098505edb037ba104
MD5 60af105ab6b630452b06d6dda4b0be74
SHA1 920f5fc2ca2058928738c1695504b23704c794a9
SHA512 7a8b15d66d4d3d65037170599bf6c961fea777f1d74685852ab8e18d9402145e1271561eb1aa7e9cb403a01c72bd195bb97f4ebaba1610d5a15942b57780357d
SSDEEP 768:QTOHIITViR18dOg6nKv5pT+M595tKJXT+7iMbu6qDqjKvrUDBgAc5SEgfGg:QT9kViR110BpKc9uJXTc9a6ckpBgAcIr
TLSH
T10413F1A13C846EDA0CBADE787B5C1E2CD69717326197C0E6705267A8F60FC3F146E10A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 46KB
SHA256 e91fee23bcfae78b7296d495abf0358581632b33658231546c952a78547c3c08
MD5 6b8a7e8b419c5a36fb12a98266d0849d
SHA1 7cda6611d700e1ffe0764c81b79225c1fd4c61a4
SHA512 1f9bdf6748ee8a7b234bbee1016ef830a5c5257d58df11019bbc926ef4ca293e23cdf857bb3e9aaaa98aed4801e77b63cd6bc1b13db58e1a7987f992711c0437
SSDEEP 768:YbaAs8rPBIrmFo643/r4Uv+o+C1ynKOfhJu1sTjW1i+cjycPsU5arcoaIw6R66Ph:YbdIqFo64U7GMnFC6vD+cLsJrKNcBEtw
TLSH
T1052301BF88EB3403304206AFE41585294976D7D38A5AFE20557A6CAEDFCF09331CD186
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 22KB
SHA256 f1841ff185a4f43bf0184c828da1647c0ddfbebb6bb763cd10789f9eb6a4a306
MD5 385c4e9577e00fe34c8d8c331130238b
SHA1 a54ce0445ea951461110446992048884ef96c069
SHA512 e8356351df006166cf98dce384e14cb280329e3d05db7724050cf0605fef03e475b0977c84f30f6cb31350bdb8cb792ba6bc604c4aadc30a01ee0971c78f6d35
SSDEEP 384:kNZeH7YePHGkFzJRqzkra3d1JVINWX++q+1Ejm/13KUwi5Cf2eMIl3Vno16m:7kePPdMzlHJVQWBq+1gm/1Gi0f2hs3Vw
TLSH
T1C6A2D0301B5C3420B6836E7729D30EF36B3DDABD01E59227AF6CABA7C6DC71A4459018
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 21KB
SHA256 c958fec1beb0ad85c367cc63c7baa2138789061a7fecf4af0902bb8dd7c51701
MD5 da7ef08ca0dc4552ce4498afbccd473a
SHA1 c22c096a78818689272e8d4d0d94a31bbb1af5df
SHA512 b5185328e445c2bdd373ba66080942aa010869bd28911b2eb1359917517c62a1d95747b7f2de671864e6f560e4fd7fabd8b966cba6b37e264e649d57f55a0782
SSDEEP 384:qGDzrCI7KOwcLtZ8bqzvFAA1T9dIdw00R/BDeVrEFddx4BxwdXXxzxj1Jc61whG+:JDzxKOwcLt0qzvFA2T96dw00R/deZEFL
TLSH
T175A2E18EB179EC10D6259E685B184F0D143BF8C9C704A3A7B4B6FAD37F5D820886F616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
Size 53KB
SHA256 4232d0eeacaac408998ece1c08515aa0b0aeae19d0d8939b3f08c31a10731d2f
MD5 dd89a874af5f3994a9e4a50443880043
SHA1 bb9450c7d98878085c095d11bff205dd0f62e7b2
SHA512 45b62879830df53a3d44850bc8661c5e777763d76fd156470fea171163e547ec84af41487008101676a8fc6f96135ee8ad2c7a05752f9763989da04ad51baf91
SSDEEP 1536:bV37tX7cMewoy6sVQDpzacKt47AUPS3hOA:bt7tLhewcGQNpKtIPSROA
TLSH
T111330119E918446F0588CDEF9FA0ED63E8D6580CB5C19BE17D96CB46BD4C30DFE086A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 164KB
SHA256 6c1e193329eaa6171be33f4e34eb1ee24bd79e253d02bbde5bf4a33d9e8127df
MD5 bd6b06fd02120441b62f71c400ca0576
SHA1 63ab89dfcdab7cacbd6a4e538004bb26a7e75135
SHA512 2d1455a7abcdc659ed911111d6c218051a26828e72076994a0da0d05f86366203b1d0ff7c77504313a9f6910adaed1975807233421409d50de3af57dc5e00961
SSDEEP 3072:z3TKAoP7U6xT/kSnaTDjFd1kXwTLADro1Mv82MQGEMlf2xC6BT5Gq:zloTU6xT8WaTD1kXwTLAfo1IBTh
TLSH
T17FF312CFC60E976AF24AE31700045E3A9F5D6E250272BAA37DF90C5D725542FA3079B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 d97ed976632486a6dacc015498bdfa80650d5139338b972508c2b059aaad49b6
MD5 ad813e2dd42838f2638b58f260dec257
SHA1 9b9ea3c06f92e16f4eeb4b7a09f94e009e431b90
SHA512 4d5d05002a21fe4a3f803a6b5830eed1d6ccb61fc2f0f3bfcf31b8d165b923264b79c0f963099d930b2ccb44d64f6f156fccaab442ff5bf3e3ee3ad8c0c17078
SSDEEP 48:HqfpTnOgs1vRPEx81tS7blkJw+aXm60HdOtjq4q1CZ6WeiDKubAFXNkZzoWZ7:HqNnOgs1EiibG3aWjHdCq4LZ6JFXaJh
TLSH
T1F581A23E46416C60EB217EF4A4D77A7874BEC4C6FA0BDE0AC50838375D1B39B0326148
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe590ce7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590ce7.TMP
Size 3KB
SHA256 70524d05bbe28311dc3282dd4744ea9475e72efe3e3d8f7fd1f1e4c0b3b4880e
MD5 f8691bd9aa2aeb320e899a4242408dfd
SHA1 4c27aa92c7719c77f618c500e6ef07a26c42af1a
SHA512 caca42e61213a7effd63b64b76ff325a347b681f00d193b794e55bfae905c0d86a3611ca275eb94eff9d3f6ffefb5cd5926f5e82bea6a6fd9697c42b1be6f213
TLSH
T1D871193E05016C60E7257CF5A8E37639B8BEC5C9FA1BDE54C50035375E1B35B4329288
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_greenrocketsecurity-my.sharepoint.com_0.indexeddb.blob\7\00\44
Size 173KB
SHA256 76db56cc25b1c82f3e632aa6b30057a68daa5bccd5c1ec74877383669c27fe78
MD5 412e7d72a94ae47ddf3684c7a4f2fc67
SHA1 aa39c7ceff980370cb1d47edbb8f6d9ba54cf146
SHA512 78605991b006b418e50a60d140104abfd40e424e22044800da2c715d92b8652e973f5b2482812b6804415334a59289304617a697162f1bd3b1e1862e49866181
SSDEEP 3072:LVrVct9Zck8OfglGDJYABbVZ5XmY3og9nx7wWoNF6+CdG2vKro9usnm6qsnD1D9K:hJcdctUDJYAJVZJv39veDuGaMo9usnmF
TLSH
T16D04E09794E021F33651FA1D201B512AD876C8BF8C4DD6A4F77678CE22F92025EC6FA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000004.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_greenrocketsecurity-my.sharepoint.com_0.indexeddb.leveldb\000004.log
Size 1.7MB
SHA256 1ef914fce2dd8e862ae32844ab62ef2953810a118fb97df48e7e492fe7bfe5f0
MD5 6d1f6af0824167e809cf91ee426165d9
SHA1 d121582a3c73eb6028cbd1f89983605444eb7512
SHA512 82b30548b1cd4d4080e2c5cbb32d1c67e52b87a7c2349d5188a79af42c788c578e3328d9632f51be722a4493f94af410958c7ae5ddef78cc6279f1c3b9ca7bdc
SSDEEP 12288:btKBB/bV2VbIwEBmVFRh8tD9m0JD7iMCQ99hI6xToQF+TTaTgM3K7VuSunAkk/Me:Fzwm0JD75li0uuQ3
TLSH
T19B854C131586D837BA666B310FC899FDDBA3194F6C8A0F2698DDBF4AC1F34051CA5638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_greenrocketsecurity-my.sharepoint.com_0.indexeddb.leveldb\000005.ldb
Size 1.5MB
SHA256 e84b6b8a4bd7c90ebf24d62f9a0199b09ba015e6f90b14e1653efc7e60de9905
MD5 c85a9a7930a7ac38008d2253673948c5
SHA1 5c953591d10cb33da24e934ae152293259f9e9e7
SHA512 b0da68583af77b93644cfbf313adc3ea34b445ef6d49b1ca3da0e4763b20314f8445db5424c4e61062eaaa899f2badf5285db2a23c108757e30a3f4dd6af20cf
SSDEEP 24576:i+DcfLE+3Y5bo8u8DDwVUgViSGkprMk3/5B:VQN4wnxB
TLSH
T1EA65D05A7748D832FBBF1372A81815CAEBB5B6135F05AC8D51FD1A831943B2328DC96C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000007.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_greenrocketsecurity-my.sharepoint.com_0.indexeddb.leveldb\000007.ldb
Size 2.6MB
SHA256 24669749b3bf89e73b1ef7ae4d11fd1e052a8ad5f7d3baf321c4d784757bff8d
MD5 ebe73de8d2531c66d0955dbfe4ae7c53
SHA1 bec162dc8571dc466fd2e5ab03e2459785e6cddd
SHA512 c526f777ba21cbb7ffc7da081640684d4be42444f7aae6d1d68a6578bda6613800426344b217fee0489cca52ab561f94749fff2709f66f8ac9f1321fa66d6693
SSDEEP 24576:iTWjIk884+07k5+AJZTBTGT517zDVsxjHnWVrcZ5ITdT6TVTBTYTuAJcAJ65o51E:dMZbIQ0JyHfDVsT5wtuVJguv1K/dIFpt
TLSH
T1A4C5F153EDD150B4B72A9FEB621E788BC32205372E061DB47298F2E40C9B79214FBD65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_greenrocketsecurity-my.sharepoint.com_0.indexeddb.leveldb\LOG
Size 559B
SHA256 f295450e93ab675abc3a5e2199f129655a416c4ebaae87bcb101c1a452fe7122
MD5 5f17323ace61847414e5023e8e8724d2
SHA1 8d91768ba0233b60ab217a88c44231f1c52d66b3
SHA512 bb09b508463f99a1ab605b36080f5cf7e9c8864b2185317520732e96b0391eea164b253f005302de7e2f8b8628ae96bd809b951baf9398840fa94f6aedba635a
TLSH
T1A9F0E16883DEC5EADB9C5683B635BB795D63A0099BC8E98C2BC1D848704D1849D1F4C8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_greenrocketsecurity-my.sharepoint.com_0.indexeddb.leveldb\MANIFEST-000001
Size 222B
SHA256 8df33c5737e39906a0ceb0c9ff7a495793cf45d2d8b22592458ace0a91eed743
MD5 4f0b15e0631da15d0ce96e3847072d77
SHA1 946d2dff511327e8dfee797f74faf44c9a9d14cb
SHA512 344f07f2add9fa9dbcd93f4ab13818a1ff22dac9a1cc6c734d90a578f48b6e3670defee16c5fb12c8de13f15e749b805749d0d0a06e952a092fb6448923b5e64
TLSH
T1D7D0122CC5C4742AD533C23295FA64CB9F0291CB325AAC6B20CA43520F01EA6BC86C0D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 c3ef9c811dbf9a6e944a54f682e14d16818a140ebfcfc9e5ddc3254482a45546
MD5 d03932a975bacf964f01ba0b36666a54
SHA1 cd34bfdafd854d067727130bf4bbbf2011849d0f
SHA512 a75d9e11d5dc34c6e573b1bc531d17558745c139ee6ae39dd810c942aa6ff72117f303c4a0715f48b7d655cd8a3e05b8287bcccece1294a7710d9ecd45faa2d3
SSDEEP 96:D1JOqIZnbraaij6ZzBzOGNw7furSYxIlBc:D1MqIJbraaij6Z1iGNGfurDulBc
TLSH
T14991E1F7C2E8862ED91155F0AB047D2BCE6E046447683C6BC5D4EE9BA3D3472F14160E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 b845997ff01dc69d7beff51d4595d20fd154b85d103b3a7f6eb8e4ee1fa42012
MD5 7e48001f35b0023026af9954d611bc73
SHA1 c879a17e121f56c6e44221ba85643ff19f9d8837
SHA512 b4514af4f97190e61704df0275a682c7ba511384445b6a27d953429d7747c01a0271d1e82511a895504a41d5d8d76621fd54b76614b749609c7c0ebc4ebf51b2
TLSH
T10C71DCF7C2E88A2EDA1151F0AB047D2BCE6E0564576C3C6AC5D4EE9B93D3472F101A0B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 035bfb008e5a5ca30eb965ac95fdd62836cac059f720b0ab8da9a3bbe3b40db9
MD5 f4ecf647abc333c7322ca4bcb028e7c4
SHA1 ec41f5d4d89bf6549389179aa3bff5812393969d
SHA512 f13856efc451059ca197294a0ce222b7943b59e46ee4ea967dd4fd18d712f322fe909b387bd3e5122c6a6efb14c69f2567734a0904015484e7326b67637a0263
SSDEEP 192:sxZvR8yMqZjK1Ml8M9A/fXss3lqaZdizodp1OHW6+WNgL4/YvXu026rIgjnJ:sxZvZ1A/fXss3lqazZoHbD/lGjJ
TLSH
T10F62F8166A3499778DDBD209F645BF53D2F91133A2955E44AAFCCA1C00E7BEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 a9e4d230dcd476cce2e40198d441beb714271af26609b48dca562fda7ae717e4
MD5 2e7de4a93d620da9eef1cc2ec4ba0db7
SHA1 fe816cc16702769e23f105e6e46376d73b65a386
SHA512 20a9d6defe0f3ef68d9f0a4d72f576ab48696b1af74b7d9886c3abfa2c6add010a899daa90641a98ad2ca158a0d41d0f879bbd86b85a9d1dda53ebf9b090d4a9
SSDEEP 192:sxZvR8yMqZjK1Ml8UQN9A/fXs0lPZdizodp1OHW6+WNgL4/YvoYA6rIg5VnJ:sxZvZqXA/fXs0lPzZoHbD/fGXJ
TLSH
T144620816AA38997BCDDFD209F5457B53D2F91123A1955E44A9FCCA1C00E7BEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\2d54671d-5436-42f1-8cf7-08a949b2bb33\index-dir\the-real-index
Size 22KB
SHA256 949a2cc9a6983073dd7695d07896f1c7f67bac35200bcd08438c7ff380bdb65d
MD5 98ffcce838117dee8fd50bf82718cb1a
SHA1 fa9a5a6dc0db34daacca92863f8042c58e383dd2
SHA512 3a4c6b142f977f0ac8e97269ada795a0a8bd16a9f86f4a0a97b98415e0e653f4c0afbb4de8a1c7e9634072fc620982185ecfb4032c4129b38d841b4c3ec681b4
SSDEEP 384:bA9okkyAf6RjleTBgZeqDwfWdUxsG6ydb+RTXScwrIGycwisTF7:Wokm+HEBWyxsEdb+RTXVwrIJcwZTF7
TLSH
T100B2598A566D5AC3F864403242670013F334E4B50E59935B0BBAF07D5C7F3DB9F8296A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59c74e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\2d54671d-5436-42f1-8cf7-08a949b2bb33\index-dir\the-real-index~RFe59c74e.TMP
Size 48B
SHA256 1d8b38d6a22e1c8f70d44e5ed24c2c8d636756a59c160dab9e07ad411291fee8
MD5 6143bc07fe4dfeab2643952bffc406fa
SHA1 13a40a145752d3fd54680e87d47c1bc982123748
SHA512 ec2a78f272fd9c33486913709376cdf4bb11adb33780a35bc2e3e4ab8887d3ecf85a5423e50441ce860ec853611bb8faaf11118baf6ced6e198d2ede0cec39ab
MD5 SHA1 SHA512

Submit Download

4f559e2656380ae4_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\71a240b7-596f-4178-97bd-40bc89437671\4f559e2656380ae4_1
Size 1KB
SHA256 4b3236e347da72e7d485ac09dca949665ac76b1b83d608b7bf6e1ac10314293c
MD5 b4f4fe242e5a749644bfa714800df1fa
SHA1 3e752382fdefb278d6b1e4f6a80c2f0d1234678f
SHA512 f608f5519e9ab3aaaaf3d8e612b4b9249004b2107942d456cc4bbed6127602bd4e842be6f95e6ccaea79423ad4169f31163c6025280c2d5cd4f745c2d3f20437
TLSH
T1DB214252CB24C55FCA2B32F22812E7B973D7E318BE848104D15192B452533B16E5A42B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\71a240b7-596f-4178-97bd-40bc89437671\index-dir\the-real-index
Size 2KB
SHA256 09c37136106763cca392a10f81c2eaa5ed2d2136496c32a5f9e5dc73650713df
MD5 865fdaadb143ad8d9188741ffcbb1c42
SHA1 19430df2812f5f6e8c2845582bf527186ccbfbee
SHA512 2a52157e5c7aa8857b92e81c425c5f621354a41fcffff78158bdc2ace5204c45cbd0ba10ddaebb620e280ef9410841665847f37bd4fcd237ccbb05f15b9a8d3d
TLSH
T12141E6A97B487B66C065367C4EB332027A2610080798CA6F43D5F3072FA32189AAA069
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5915a1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\71a240b7-596f-4178-97bd-40bc89437671\index-dir\the-real-index~RFe5915a1.TMP
Size 48B
SHA256 6cd82dfef74b6cfe977551563380798833f77966f35d386d01198beaba4cddd4
MD5 c196f5b55c6d28d4c8b6cee3d52f8942
SHA1 5138769c900ebc9d30976c3e50cbfba72e78634b
SHA512 b3e2fa839c500b9d8413537c25f6d9b13a7151f16b4b7bf7c928e4efcf18fc6d269c22d71058ca05ea06ce1e00e3a593ad41a749f8b03f600197e23b74ec8d5c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\77f0f581-8c77-4d56-851a-b3ffa2ffa00d\index-dir\the-real-index
Size 864B
SHA256 53c0024a62d77958efea2a8c32fccea1c851a2c23e12da0c053ddd54e8a29edd
MD5 9a5a42358ec9aa3d2b060a188d574729
SHA1 dce2d4265ab8367c2b91bfe1db167a60b9b4d869
SHA512 e7d39a0bfec36ec5258913e6c32205ba03fc49f8df7fc07450a60c1161e3a3301279b7ef78e635e3a6dc0ae23e44fe30cb0e2ae6c24c9d9b6e27c1f1d220ed95
TLSH
T19B11B70CDC038732C61E83F332ED40AA302010CC292E615BCEBC00E07B802A4C263D6D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5919b8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\77f0f581-8c77-4d56-851a-b3ffa2ffa00d\index-dir\the-real-index~RFe5919b8.TMP
Size 48B
SHA256 17955713fdb454a36848251dd105ab81cda19ca91bb2415de7a44569ee04e423
MD5 543d291641616aec2b3abc225b721ec3
SHA1 8ad435434bdeee89fdefd776fcda17d3ceed1e14
SHA512 762d448958cd80e328356e6b05240397b6ea76ff8242a064f69a133389e5ed336e2e1e362fc5787958a1a1edf5420637183d06d33bdc23b6f5924d1c83145978
MD5 SHA1 SHA512

Submit Download

a4e5036f58e9d133_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\7b161580-0da2-4b4b-b09a-73d9ae168b86\a4e5036f58e9d133_0
Size 77KB
SHA256 6ab3d70c82b4a4523c5a56737ac1d17cd0f0de78e16c67679e15d8d43b0be141
MD5 9fde7efda0859cab48daeed89336b78c
SHA1 27d82f51f77e95b2ff9f05a9567bd32dce0aa3f6
SHA512 686a3bffeaea393dc2e69d6df7d5eecaaa703639814c9c36e136ee064677757a1bdd34b015f3ab26b7ef719e3e86d73e1107d50371ad3694a44bdf7d67f4f21a
SSDEEP 1536:t1rZ2ZV+myJ0rB6D5MYvi9bNumckvzBZTMbkFSGJLioJ2+C:/VYV+myJ8B6D5MYvi9bNumNvzv/ioJ2F
TLSH
T1B8732ACEF95536A691E771F9B06F31076337005A608C40209312EAE93DB56DEA3A7F9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4e5036f58e9d133_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\7b161580-0da2-4b4b-b09a-73d9ae168b86\a4e5036f58e9d133_1
Size 194KB
SHA256 f9be6f2e679c49b9ab5ef1614d32885ec478236862f56cb85ba2a7fb021f6086
MD5 fa742f2b989aaba079cf3b73f0f6bc28
SHA1 8b74a398f1ab0a22ef104617d53c02eb38126ce9
SHA512 53ceaf9c813fa048ef902d206aac0034de292e7d46227ad39febd314ef147536328b2dd27c7d40bcb223308e3d4287c241a429852249dd8ad1ccdc09c57ab96e
SSDEEP 3072:QnOl5ef3j+Z+0jMRKj2DchbX7JMYeFBC/mWuYzl+e2MqyC6LDhibt5iPcB8K:7l5efTV0IQIckBBWuYzl+e2lyV850PcP
TLSH
T1441409042B72A657CE6793FB91A2862BB37A41043F83E7151AE137391C353F78D5E84A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eac20401e41a96fb_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\7b161580-0da2-4b4b-b09a-73d9ae168b86\eac20401e41a96fb_0
Size 177KB
SHA256 69d0a6fb994b4ff44ac4fd0af912ac69d1c6ebbbf6feea100974adc552ceddaa
MD5 050535e61a642506e50b4446fe354716
SHA1 df74c4ca88e82c5575fa3bc08f4945cf5bad8f0f
SHA512 44bf0dad68060aac649944cd5a5b83c48d1881f9cbb31891bb50476c6ba3454af62910d29ef60694c760cf0d71f29049b5fdf3a068f04db9489972cea04fe29e
SSDEEP 3072:XRRPWd7J3T+kFwMgITW5RL1BRRaENLkYbeuw7l:XRNWpJ3qkFwM5qRhBRRa4eF7l
TLSH
T19A046D9672C1B07507BE80FAC07B5E11F3393959A4059C39FA28ECCB7195689A273F39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eac20401e41a96fb_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\7b161580-0da2-4b4b-b09a-73d9ae168b86\eac20401e41a96fb_1
Size 378KB
SHA256 eab486010429f7b2eaf8c7f446a9f48e9e23b7b9c89aabdfe9051eb77bfbe509
MD5 81cf90a39525b7aac87e5f9e8eafab92
SHA1 ed5c23b3e0e19a4ce29bec2733fcc6675d33f55a
SHA512 f615056ad1714ffa684cc4849178fb381a79bbaa25717ebf05d60ebddf1bd68d33d8ceae9f012976effe7924036dd1345ad4cf459cfec616a731f0edc1f34d04
SSDEEP 6144:7RsArMEIO8Q75qzg63v8BLVkJVZdz/uXjLMH8qzJeD90j/qhXyi8smx7GBvnwzqq:7RsAQdYLy/TZo5pC
TLSH
T18684095213616527CE2743FB41A38A3BB33981053F83E72669E1232A2C743F7995E95F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\7b161580-0da2-4b4b-b09a-73d9ae168b86\index-dir\the-real-index
Size 120B
SHA256 73b3a18cd04c99da2be0eb34b90bcf2fa04a7afbcb21bd5e09dee46eee6e7851
MD5 6ca9736163f60055a4306ba83cd24a80
SHA1 ccca6f9dcc5924efec462f8bb20c51869cb5e7b7
SHA512 634f1dbb9d2bed832d97114d6991255fda0a929fd4e50f52ab4d4616f28eb22d1c4e00dc9ffd4c9776eb566e0fc44daad95fc8c79db24acc46fefeda8fa640fd
TLSH
T18CB01211CD41070BCA024731396A04303332070C472D530B4079013D5E3306FC241134
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5915c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\7b161580-0da2-4b4b-b09a-73d9ae168b86\index-dir\the-real-index~RFe5915c0.TMP
Size 48B
SHA256 4a0a2094dd60874949ff913fab23a98711f61cdbd4e324ac7777b5ad876ee607
MD5 186723fdc704458912a292d2a2e1122b
SHA1 932f78dec92c79b79f31617f4ad2a31a6af9edf9
SHA512 01d3698dbb50dbea76877950791f77c48695de171ee651d4b64c4b376a97df49c3d58badfee56fecdc5e6b1e81e54847d88499317ce7f4bda79f813bf07c5a66
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\bd12e83e-fe8c-4ea3-8e35-d4d1bde84e0b\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\bd12e83e-fe8c-4ea3-8e35-d4d1bde84e0b\index-dir\the-real-index
Size 6KB
SHA256 c7906c602621e90f8e41e11a6be90959b1ea91ed827b31b781c9818732195512
MD5 217813e00ef88866b4f8cc080d28f7d6
SHA1 faf5e016d5ba566aa154df303bae74737901f2fa
SHA512 eccea9ffd9366ea841f45479967980ea38d29acf09c977ebd158e1153f9bc550279810f159e92c851042d75c5153acd752313f84506bca32e57b219222cdc57c
SSDEEP 96:u/v37FJZGnye4rwuSnKBe4D99TTa3X/i96f9fWgLg4GL3ebFf1r:oJJZGnye4rjSnAT/6fLcJLCr
TLSH
T160D119264A61BF26D8312E700E7725297771A9EC0F08269B5748F2747FE31A40E8757D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59f66c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\bd12e83e-fe8c-4ea3-8e35-d4d1bde84e0b\index-dir\the-real-index~RFe59f66c.TMP
Size 48B
SHA256 95aa369c882dd376eba484b9ffa0a39b6d1b0de51cc77248b669af7b0eeac564
MD5 01f977d85eaf6a1ed7558d99f09265be
SHA1 7a1edc018c7ec6508023f9bf50849c5b708f0025
SHA512 a7b002741c87673ebc06494fc39e9dc0885c0cc0bf8107412413d0df4e11fe2d4bd54652df80dfe20f811c6e7751325d19d799e940758ae2df334ef941a02869
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\index.txt
Size 367B
SHA256 62637f0cad77b05aa008e7f30fbf9a16e8ea1721512e459fb6e54a46c6dcba90
MD5 ffd156e06161cb8b0039025fe4846841
SHA1 f4ceaad09f83295091bff537b00c452387c0d53c
SHA512 0d9066a8bd7b6dbe41e3d72408fa24680ab2f68b6d989454b621de512527e9986806e8587787266483bbc9e98d3b8d204815a2cc7895c5fe5d8d0d37ed913b20
TLSH
T1DEE0F12B0498143EF184C6C17021A1D551575E01FD414C5813D0A2A49613383752E911
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\index.txt
Size 614B
SHA256 2fbb76995a72bdfe6a97e9e0676ad015653f6d22127b9046019c20d75b293bfb
MD5 d1643460123bee5928c7b3e7607ddb33
SHA1 0c1ba53fa68d3fe4e167b830f3d3f1f093373ab0
SHA512 b986975dc7ff7d566e13760e6b5b42401de2c7b5991b5a383e7e214edda238a62ffa5184602e1caaf00b47f62c46347bed72172ffd68ef536a088c6b164b57ed
TLSH
T1DFF0235FA5D5192EA540C7C1B4A1B5E5420B9E42B8420C9C16C5B2E4D6033827059E1A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\index.txt
Size 770B
SHA256 a3fb125eded2805a6c13de97b2da88e092b105b17ba3799591b53fbc93e0ee12
MD5 8043d6e07b29926d43d07d0dc0a18784
SHA1 489f7e18b895d4e8d890bfee969490bc11062766
SHA512 a8e115f56a6381f8372b5268a6ea4aae7ca6bd5e90bb1b1250ed716bac7cadc727629fd71a8979b34553681e16ca11ce7df3e557bf1a5129af9874ed949c015d
TLSH
T1D001461E5495193EB054C781B4E176E7465B9D41B8024C8C1FC0A3D4DA032C1F45DF0B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\index.txt.tmp
Size 465B
SHA256 77c4a23dccb427a64c6dbc6e1908d233d5b3236ca92c7f378eb6707e2c688b92
MD5 02b21d0804304bf6488f86eca22d59d8
SHA1 f0fe12c661e7813979be31ca688f763dc9a4df16
SHA512 85117e6fda089fc70199838a8e8cf628669a1c9408e61fcbeb413f373a40d1f67ab889678fc181c76c6bebad775cb0e6150c37ccea44490a1065204aa1968a93
TLSH
T151F0545F89D5343FE140C6C2B03294D80207AD00F8414CAC17D5A2B4AA23386316E935
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\index.txt.tmp
Size 669B
SHA256 94cde22544c1032fec9e77d398a49121fec812e06e6a0448b6d560bdadaa41a8
MD5 6b169757ad9963aab77d004db0582b56
SHA1 42f76495b184f7acb206c311b87063b1bb9ea3b3
SHA512 b2d5871ec48e95586e61b1afde31912413ae02e8d28b3784cf8784ff587d587fd2bf5abbd7256077df1d622300bb5a3ebf5b66fbb9900518703d2d63666a4ffb
TLSH
T13D01C02A2855092EF054C78164E07AEB566BAA42F9464C9C1FC493D4D6022C2F86EF56
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58b476.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72f9441b5d8ef2f9ca2785d22f4917af820492f5\index.txt~RFe58b476.TMP
Size 217B
SHA256 54a784fb84baa08c45e108316af3ba22f69c8e09ea0c3ff2ccbc52e9e151f5bb
MD5 7aed8497b07b7b44235e783607034fdb
SHA1 449c0c534c8148f6dc1ff2c6b5442e3179beb38a
SHA512 d8bd697b286950e5b07bbc3a40b41400be635930ac60bc7fd91254889d9315a10fe14b2317c26b525ec70726356b93c6914537a09d26f42f5e3159c39207e897
TLSH
T132D0A75B4588247DE7C889D1B426958496171E04DBC2845493D2F2246227387762F570
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 d07959c20182c804951f0417cc9f756118b0da1fadc9195e53d3a1aadd91665d
MD5 e73da4e596677fe63b1290a407ecf4a5
SHA1 23d85d7a9ab95988851b0234c1dc23fba6631b34
SHA512 dfd96e88174f7a27cea6b005edf4d551a7c7eaafde56d8375f147f1b79bfeeaec30f1a4780233b893e835d3389b673ce6398c1430a8281c2624c63ef7000c732
TLSH
T1E7B024F004111177F10C577CC04D44CC307C4DC4170F1013437D04DC401054050030F7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f1dd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f1dd.TMP
Size 48B
SHA256 2f00501755f7c5e494d3d93c0ab230e32eebe3352188ec0a6ba6d5c2e28788e7
MD5 145d9717c29c92e81a851e35ade43e60
SHA1 f6b2ebf344d4b7683f9cdd376610927076d7457c
SHA512 56280e28e3b517e571bf9c7382ddf794d45b5aac250bf0a4c4a17a6ddfa34322f7d47a50c7b126cc282127c507f7ff65f4f31fdb9599867aca25637debb9942b
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 2773227d15bb70ea40763a1212058c217c10193deb7ca625e4222fafa8fb9096
MD5 4834684d548fe2f55c6d2ad9c8b6a926
SHA1 d66e5c50324aa72994f6e9a0ee6ca9f5b697ab28
SHA512 06f7bf97188a711feba37ee22342a0ccc5e79c78f51676170d9631d2719e95034bf79f180cd63eafea4d8ca8d115ca8db0f2483a178a5bd7f964a6520e57835a
SSDEEP 768:0LppY93PBZJPtN53ATy3jJlZEdQ3bvV7RMrbAxzdT0:0LppY93PBZJPtN53DbT0
TLSH
T1C3B2695A703E0211397E2988B39596364F4235A33058E8EF7FB814A54F67E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 bda6147a57d758b66ce03f41311404f61f70b0ddcdeb7a9f78c5140a5a4add06
MD5 5a2174d65b8320f4331b215373d80335
SHA1 8cfac2a819abcb0805d8429d7f2bf03a4c673f28
SHA512 63fbdc6d8c206d632ddad33fbeaa8668dc673b90fafe0a734d13b0d2984660524e8358b04ff7620f6f74381d84406ac6ceab3b51c6d16bd6944b2aa71d818bdf
SSDEEP 768:pfFccps3uwgbkUVHoGpENdwjnyKPI8p0KS:ps3grHOMI8p05
TLSH
T10CC25B32E858DEABECD74F99B74A3907DEE04223868C9AE4D9DC1D4D109719D430F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 4440cf6746243427539e5ea9b1a452f1f129ddefcbcdbf5734355038588d7a13
MD5 b289bc5fed452b725e2c25f95a4363e6
SHA1 6f6f51c907418449f634752c13b8398381b8291e
SHA512 436d26a803124e0db2bbdb8716166b7acab507f7873f8c3ac5b6991240729b663a9d24a68f58b7f5b18d76e679e96c9f2ee441c0130ef4df7cc6a36a5dc0b6af
SSDEEP 384:np6iFiZcI63sND8TUNTUlI4QQckCr3Kt2phiftGfFmmEEXIQ/4dWnjnsKP6Hlyt8:pxFQ63ewgTkrtooGpENdwjnsKPoy6Dqa
TLSH
T1F9D24B32D8A4DA77EDEB5FC5E74A3A03DEE441139A9C9AD8E5DC5D1C00971AD030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 97ec5948317fe0e01ce5fdadefbc466a97ebfafa55d6c6b7f819459082e14c9c
MD5 8c72808c9514435128dc6f4f7423785b
SHA1 705089844670cb49f8b09aa42c3646540267340a
SHA512 0003419717d13e61a1e1ec205029983c3fdfdcc4f87a72499b5a939da4f8f81c50591f1ede0bbaee174170dbb53d3d58ff60a84400fc745072432ba268316247
SSDEEP 384:nViFnZcIoisNiR8TUNTUlI49QckCr/dYphiftGfFmmEEXIQ/4dWnjneKP6HlytEx:cFPtTRwgyk8OoGpENdwjneKPoy6Dqa
TLSH
T1B6F2E4F198D39977E9AE4B87A73D2D029AFCC113B5885984B7D85D1CCC861BFC30A819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 bdf2c92ce7e2f7bab71cb636cf4dfaca6e54f6246cc512a9cd55416ad9cefe7d
MD5 6f4da453145740dee34a2cbd14a09b26
SHA1 09f4e0f011fb9f1cfd6abc4a12df22362275afa9
SHA512 a4070ba3d9b488ee88d104f61c557a6d5c121564ab4900343d966c7d494b48bc9b504e29f93a875d37addf6e37698da4a2ad12ca9c32dc1b5b611a623e87e82f
SSDEEP 384:npBiF9CcmyWCs3sNK8TUNTUlIm2QckCr9lBKphiftGfFmmEEXIQ/4dWnj27pde4a:poFccps3bwgbkUTkoGpENdwj2vI8p0KS
TLSH
T15AB25B36E868DEABEDE74F89B74A7A07DEE01227859C59D8DAD85D0D009319C430B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 dcc785e3371f73487774e6a52a874264439298a81e7454a14eb5285d23ac6df3
MD5 5717d8b525137360ed73e85a94e5b9e6
SHA1 b4d678d063b33118ecc86f3926891a3f386ccb1c
SHA512 cda03bd57e78da952d6f56dec8fd2259dac8523dcc661857279bf0e5ce055409e885955ccc8f88789805065c1ddb631ba1feeba488575240e45367c6c0fd7a7e
SSDEEP 384:np6iFqZcIksND8TUNTUlI4kQckCrIKt2phiftGfFmmEEXIQ/4dWnjnsKP6HlytEx:pxFIkewg/kitooGpENdwjnsKPoy6Dqa
TLSH
T194D24B32D8A4DA77EDEB5FC5E74A3A03DEE441139A9C9AD8D5DC5D1C00971AD030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 de836cdcd62d9041e3b811a645794f10663bd102beb3e87253e09565a9b7e0ad
MD5 cd17be2bcd9bd8295d7c18e8890bf0d7
SHA1 8f1eb34dcf6593e7aa9668079e5d10b97c99f19f
SHA512 ef7a628875584f54e418abb4d2b179dbef4024c76ab5ee565eb41181aa5f69bb6b01bd79855fe4f3ad2cce30bae2fe6b34a0de35fd7c62af1b2586934691c3a4
SSDEEP 384:n5iFqZcIksND8TUNTUlI49QckCrIKt2phiftGfFmmEEXIQ/4dWnjnsKP6HlytEDN:QFIkewgykitooGpENdwjnsKPoy6Dqa
TLSH
T127D24B32D8A4DA7BEDEB5EC5E74A3A03DEE441139A9C9AD8D5DC5D1C00971AD030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 1c852281eab0f209b1d273b3e160a53416fb8f09085ab8fd8b42a35840b5922e
MD5 9bd5e5a1382917af774df0d2d32aa5ef
SHA1 367ca8f415c608a74410daf038bbd640054e3811
SHA512 5e44c85ff364524415a226c30c89d14feb23903b9573b9be621c8768e6502150a9e859ec84932093195ff9dae0019187ea20879c75cf11f886616a76c9074f01
SSDEEP 384:nViFqZcIousND8TUNTUlI49QckCrIjt2phiftGfFmmEEXIQ/4dWnjn+KP6HlytEx:cFItewgyk7tooGpENdwjn+KPoy6Dqa
TLSH
T185F2E4F194D39977E9AE4B87A73D2D029AFCC113B5885984B7D85D0CCC861BFC30A819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 4917ba773b7b86deeae6b4f6fe1ef25151d0b3bc3de3ac2118f52a5d1ef93755
MD5 86ba60fa60e9ab6309d5eda2053bdb22
SHA1 55f34662d132b8b9aaf3cbf6bef1eb0109e7d671
SHA512 6cc78bcf93410e67815775e7decfd8471477f6bce30ec75209efbb9560c284fc3fcc80880ce707cedd49827a2807204e944c69a910655ee4af27f3649c1869b8
SSDEEP 384:nViFPZcIoisNiR8TUNTUlI49QckCr/dYphiftGfFmmEEXIQ/4dWnjneKP6HlytEx:cFHtTRwgyk8OoGpENdwjneKPoy6Dqa
TLSH
T116F2E4F198D39977E9AE4B87A73D2D029AFCC113B5885984B7D85D1CCC861BFC30A819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d454e9d5c16140cb2276ffa2f61f9029fac74ad74ca734b740bde9ddf34ccbab
MD5 8c1bae471188a86474f209abdb5b01a5
SHA1 d5c849930ae7f6704503233bc4ae247a1b43d27c
SHA512 1b2dcf63210a475a568a43ef0e85285634ae8098f246987bd606634cffc4d582812523ea103f14384b201e38b7942aa3393fe891dee47642a3d8b21c696d68cd
TLSH
T188E00202D74411B6D0640A3044D317102772C0294742830F4A5401B8BC617605D74C40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4e5f234710feb550b992859893c8de1519ee6d182ce72a3522a7649ec497adb9
MD5 020f08bb2f6d5b11eff7ac5ec8952031
SHA1 65e01dc8cbf0e1e0bd15e2bfadb0e663bd5f0913
SHA512 6a27d20e8650a9c08dca70e7e4094521d334f996150a78e5a7ebe472709b1e8a8b0f34439d55e44e9d13dca8f49865d781598a2d9084811859bc942e3e3098db
TLSH
T1ECE00202974411A5D0140530408317101B62C0290641820F4A6401AC7C317606D20840
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58d7cd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58d7cd.TMP
Size 392B
SHA256 c353bffbd2a7ef6646a5f37c8c2473288885595e84de5edf0e753f5e3f9efd9d
MD5 78955ff9dfff516086e0d72cfecb0264
SHA1 c9a982339493d5939bb01eebb8e4ec033a3674ef
SHA512 f1364d5b6e7b8d086b0d20c33b6303f027ba4a58caf7154210aa09a42c7fbe2e7fd9107d79eada604805758c4026a6d98e489267e217ea41034116405d581778
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8602b0531d61ca275f4d8f086a715b90f47073efc00f066a0f9ad50eb50b302d
MD5 87203998b40b50e3af25064b0b8caa11
SHA1 142c417654d6e1cbf27d824a803e2df2ebf78b7f
SHA512 8cb7c77589b87c644b639b51ae619ca1ce33ef620b7793679f91608b97452fa75ac985112fff674994a8d4056d37fd7644d37c1f2c5f81a322b47a7e9be8d60f
TLSH
T12C41285CA6E91108B3B77E46ABF6A96D487F7C772F0B905E00010D4F0666B40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 01760d95e44c4d4460f5edc172670c5f4c33196918567780b0535d779239eb1b
MD5 94f9687d7437a09931e9d06d8b057338
SHA1 dae81eb0584139c32dd6855b6f0ed082988e2339
SHA512 96d4e7c4f78acc19c809a0e6f0b13e5ff2e68097720eafc2606926269250075ecab638ad813beb6450df6c0124e1203895f911f7d945f467b02fe9c1804b8fed
TLSH
T1D0517E587AFA1048B377BF566FFAA46D497FBC732A06D49D10110E4F0A22740D962737
MD5 SHA1 SHA512 TLSH

Submit Download

Win2FAv2.9.21-N-GRS-EXE-X64.exe

Path C:\Users\Admin\Downloads\Win2FAv2.9.21-N-GRS-EXE-X64.exe
Size 12.7MB
SHA256 a9d4f7f0bb2806caa2969a93c2924a0770b7a482460b7bbacc7b169a808fb623
MD5 73bd1941ff41a7c0596705125d23d781
SHA1 0c8a8cad2030c79079f72c097468dee15e53a049
SHA512 643e967407ef43683f9288e7f9b9711b129376076e416af78891f3413a7cc3e5172cda7db28ea1fad9f71e5a01d9be0b2b529d6725001bde165d915f157aeb08
SSDEEP 393216:k2nZlFYwroYbjfxHP84ugTdC3aEc2UbFpX:tZla2oYb1H8kxl2U
TLSH
T105D622237690803EE5B201315DAF9E7491AA7D735A714197F2A0FE1C6EF0582BD23B1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3388-983-0x00007FFC01E70000-0x00007FFC01E80000-memory.dmp

Download

memory/3388-982-0x00007FFC01E70000-0x00007FFC01E80000-memory.dmp

Download

memory/3388-981-0x00007FFC01E70000-0x00007FFC01E80000-memory.dmp

Download

memory/3388-984-0x00007FFC01E70000-0x00007FFC01E80000-memory.dmp

Download

memory/3388-985-0x00007FFC01E70000-0x00007FFC01E80000-memory.dmp

Download

memory/3388-1020-0x00007FFBFFCC0000-0x00007FFBFFCD0000-memory.dmp

Download

memory/3388-1027-0x00007FFBFFCC0000-0x00007FFBFFCD0000-memory.dmp

Download

memory/5164-692-0x00000141C54E0000-0x00000141C64E0000-memory.dmp

Download