hxxps://mega[.]nz/file/jxpTEDpa#7xWrtnQlTASmcISsU3_u-ydnNLS4OamtocileGhXka8

Analysis

user interaction
yes
max time kernel
1799s
max time network
1800s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 08:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://mega.nz/file/jxpTEDpa#7xWrtnQlTASmcISsU3_u-ydnNLS4OamtocileGhXka8
Sample260813-j36cvshf45

Score

7^/10

adware discovery persistence ransomware spyware

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
3852	msedge.exe
1204	msedge.exe
1204	msedge.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1663140284\Mu\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1663140284\Sigma\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-pa.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_897290675\shopping.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_1291170244\crl-set	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-de-1996.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1173681930\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\Tokenized-Card\tokenized-card.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_897290675\product_page.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-ec\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-mobile-hub\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-mobile-hub\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-shared-components\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1663140284\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-ec\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-mobile-hub\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\wallet-webui-792.b1180305c186d50631a2.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\wallet_checkout_autofill_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-ml.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-notification-shared\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-tokenized-card\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\wallet\wallet-tokenization-config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\Wallet-Checkout\wallet-drawer.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-ec\cs\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-tokenized-card\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-hi.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_141434499\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-te.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-notification-shared\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_32210247\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-notification-shared\ru\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-ec\da\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-mobile-hub\es\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-mobile-hub\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\Wallet-Checkout\load-ec-deps.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-shared-components\pl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_805813551\extraction.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1663140284\Mu\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_2113196634\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-de-ch-1901.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-en-gb.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-ec\es\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1095812713\Microsoft.CognitiveServices.Speech.core.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-ec\ko\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1663140284\Sigma\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-hub\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_1624077670\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-tk.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1173681930\Part-RU	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-hub\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-notification\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_422749116\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_805813551\travel-facilitated-booking-kayak.js	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DllHost.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3972	msedge.exe
4864	chrome.exe
4492	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000\Software\Microsoft\Internet Explorer\Toolbar	explorer.exe

Modifies data under HKEY_USERS 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310823825204812"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell\SniffedFolderType = "Generic"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202020202	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\1	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\1\0\0	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\1\0\0\0\NodeSlot = "6"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{589196E3-553F-40A1-BCE8-E015EA7A370B}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Generic"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\MRUListEx = 0100000000000000ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\MRUListEx = ffffffff	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell\SniffedFolderType = "Generic"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\1\0\0	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell\SniffedFolderType = "Downloads"	msedge.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5592	explorer.exe

Suspicious behavior: EnumeratesProcesses 32 IoCs

pid	Process
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
2600	chrome.exe
2600	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
1180	chrome.exe
6228	msedge.exe
6228	msedge.exe
1204	msedge.exe
1204	msedge.exe
1416	msedge.exe
1416	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 3 IoCs

pid	Process
6920	msedge.exe
3160	msedge.exe
1408	msedge.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
824	Process not Found
824	Process not Found
824	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 43 IoCs

pid	Process
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
1204	msedge.exe
1204	msedge.exe
1204	msedge.exe
1204	msedge.exe
1204	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe
Token: SeShutdownPrivilege	3416	chrome.exe
Token: SeCreatePagefilePrivilege	3416	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
5592	explorer.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe

Suspicious use of SendNotifyMessage 28 IoCs

pid	Process
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3416	chrome.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
3852	msedge.exe
1204	msedge.exe
1204	msedge.exe
1204	msedge.exe
1204	msedge.exe

Suspicious use of SetWindowsHookEx 17 IoCs

pid	Process
1740	chrome.exe
5076	chrome.exe
5592	explorer.exe
6920	msedge.exe
3384	msedge.exe
5564	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
4496	msedge.exe
1408	msedge.exe
1408	msedge.exe
1408	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3416 wrote to memory of 1180	3416	chrome.exe	87
PID 3416 wrote to memory of 4864	3416	chrome.exe	90
PID 3416 wrote to memory of 4980	3416	chrome.exe	91
PID 3416 wrote to memory of 3752	3416	chrome.exe	92
PID 3416 wrote to memory of 4980	3416	chrome.exe	91
PID 3416 wrote to memory of 3752	3416	chrome.exe	92
PID 3416 wrote to memory of 4188	3416	chrome.exe	94
PID 3416 wrote to memory of 1380	3416	chrome.exe	93
PID 3416 wrote to memory of 4188	3416	chrome.exe	94
PID 3416 wrote to memory of 1380	3416	chrome.exe	93
PID 3416 wrote to memory of 3664	3416	chrome.exe	95
PID 3416 wrote to memory of 3664	3416	chrome.exe	95
PID 3416 wrote to memory of 5372	3416	chrome.exe	96
PID 3416 wrote to memory of 3592	3416	chrome.exe	98
PID 3416 wrote to memory of 1500	3416	chrome.exe	99
PID 3416 wrote to memory of 3592	3416	chrome.exe	98
PID 3416 wrote to memory of 1500	3416	chrome.exe	99
PID 3416 wrote to memory of 4296	3416	chrome.exe	100
PID 3416 wrote to memory of 4296	3416	chrome.exe	100
PID 3416 wrote to memory of 2368	3416	chrome.exe	101
PID 3416 wrote to memory of 2368	3416	chrome.exe	101
PID 3416 wrote to memory of 2900	3416	chrome.exe	103
PID 3416 wrote to memory of 2900	3416	chrome.exe	103
PID 3416 wrote to memory of 5696	3416	chrome.exe	104
PID 3416 wrote to memory of 5696	3416	chrome.exe	104
PID 3416 wrote to memory of 3692	3416	chrome.exe	106
PID 3416 wrote to memory of 3692	3416	chrome.exe	106
PID 3416 wrote to memory of 5860	3416	chrome.exe	107
PID 3416 wrote to memory of 5860	3416	chrome.exe	107
PID 3416 wrote to memory of 236	3416	chrome.exe	108
PID 3416 wrote to memory of 4204	3416	chrome.exe	112
PID 3416 wrote to memory of 1720	3416	chrome.exe	113
PID 3416 wrote to memory of 3708	3416	chrome.exe	114
PID 3416 wrote to memory of 3852	3416	chrome.exe	116
PID 3416 wrote to memory of 3852	3416	chrome.exe	116
PID 3416 wrote to memory of 2984	3416	chrome.exe	117
PID 3416 wrote to memory of 2984	3416	chrome.exe	117
PID 3416 wrote to memory of 1188	3416	chrome.exe	118
PID 3416 wrote to memory of 1188	3416	chrome.exe	118
PID 3416 wrote to memory of 2652	3416	chrome.exe	119
PID 3416 wrote to memory of 2652	3416	chrome.exe	119
PID 3416 wrote to memory of 1500	3416	chrome.exe	120
PID 3416 wrote to memory of 1500	3416	chrome.exe	120
PID 3416 wrote to memory of 4724	3416	chrome.exe	121
PID 3416 wrote to memory of 4724	3416	chrome.exe	121
PID 3416 wrote to memory of 1740	3416	chrome.exe	122
PID 3416 wrote to memory of 5076	3416	chrome.exe	124
PID 3416 wrote to memory of 2600	3416	chrome.exe	125
PID 3416 wrote to memory of 5380	3416	chrome.exe	126
PID 3416 wrote to memory of 5380	3416	chrome.exe	126
PID 3416 wrote to memory of 5204	3416	chrome.exe	127
PID 3416 wrote to memory of 5204	3416	chrome.exe	127
PID 3416 wrote to memory of 2064	3416	chrome.exe	128
PID 3416 wrote to memory of 2064	3416	chrome.exe	128
PID 3416 wrote to memory of 5308	3416	chrome.exe	129
PID 3416 wrote to memory of 5308	3416	chrome.exe	129
PID 3416 wrote to memory of 1356	3416	chrome.exe	130
PID 3416 wrote to memory of 1356	3416	chrome.exe	130
PID 3416 wrote to memory of 2584	3416	chrome.exe	131
PID 3416 wrote to memory of 2584	3416	chrome.exe	131
PID 3416 wrote to memory of 4316	3416	chrome.exe	136
PID 3416 wrote to memory of 4316	3416	chrome.exe	136
PID 3416 wrote to memory of 5744	3416	chrome.exe	137
PID 3416 wrote to memory of 5744	3416	chrome.exe	137

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mega.nz/file/jxpTEDpa#7xWrtnQlTASmcISsU3_u-ydnNLS4OamtocileGhXka8
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffd3107c728,0x7ffd3107c734,0x7ffd3107c740
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1288,i,12925530841061911175,13766390615456416474,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1616,i,14353450741830226789,6648984761247665824,262144 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2056,i,4511540858336884315,13113929933518363190,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:13
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,7976229771959081679,317991372599728391,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,17062999333037617394,3957788686778347205,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5084,i,12517366405927355794,5655707188343890795,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:12
  2⤵
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5752,i,6054649407874686802,8622384565867534621,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  PID:5372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5876,i,6695438212060528220,7321087477053748774,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5896,i,11534869602994375193,10231872823719982209,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=6200,i,11260178658399540594,12736326903055104082,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6388,i,6554105251959795103,5212646864168818741,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5892,i,1941699708471257181,12513321471654702343,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5956,i,4045979686379562570,9328773555737941751,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5888,i,8387058640891620704,10538986176200623916,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6736,i,10449900096799390778,9563819668985032790,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:5860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7084,i,1698453849162286717,1663950613666651506,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:14
  2⤵
  PID:236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6140,i,4556523738333690536,13365871934479775594,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:4204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5908,i,8613932335210202761,879388339155145199,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6684,i,13731521949416551416,17617223205208786718,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:14
  2⤵
  PID:3708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6684,i,14982928627042361355,2889354886327682829,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5880,i,8278555289047257836,3441596045364419011,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4896,i,16851629252499769923,17093524878489910579,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5752,i,13780969398732046034,3244363274901933035,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6736,i,2560724017955490402,2382305925239304369,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7392,i,2048076189483164403,15714080458092551856,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:14
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7436,i,4256684722564116399,16348634571933939026,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6712,i,1927223598160049697,16795947220634573142,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7604,i,17492015896591753212,4085056092360081050,262144 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7612 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7724,i,12433827176135589686,18185595659706747340,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7408 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7592,i,4242958637038397148,10814782413557975877,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7812,i,7860289079669761153,13282877150476209029,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7804 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7916,i,4907323122269394609,16478177428429362782,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7444,i,8865563916939055225,18413648147697633451,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=1144 /prefetch:1
  2⤵
  PID:1356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7376,i,2257799854024033452,16644026009584373856,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6428,i,3104165334176666577,4847763667606122304,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6736,i,16339799612624513247,13393894729048204576,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7452 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6288,i,14827865144734766537,14589821153355228249,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7916,i,11865362272834752978,367551675413068775,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6760,i,8226899235671604919,16046502156057932171,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7852 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=6772,i,8313308578104405788,10597515037280346878,2097152 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=7812 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6564,i,17470598298095636735,16519859084056942666,524288 --field-trial-handle=2476,i,12344814592189644603,14697781544721561136,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:14
  2⤵
  PID:2428

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2632

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4552

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:5320

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1156

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
1⤵
PID:5080

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
1⤵
PID:2368

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
1⤵
PID:1108

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
1⤵
PID:1880

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
- System Location Discovery: System Language Discovery
PID:4452

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:5592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x30c,0x7ffd1ce2c188,0x7ffd1ce2c194,0x7ffd1ce2c1a0
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,12966601623834466503,10247171930204108814,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,13847420443850217317,1630762819852679752,262144 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2772,i,7148588128887669917,8603190741014355556,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:13
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,2205632611710574672,10293991689542587265,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3840 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,7555721715181351458,3109957596175727517,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,10085319356777305097,4181707325977340886,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,16806131317302685082,6413263979545489468,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:9
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3836,i,17983701266172179132,6859389056326569508,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:14
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2104,i,6309171058031467261,12100788205590683088,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
  2⤵
  PID:6388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,14200113451326057036,11960806316957090031,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:6464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,2280562085889480048,7187781240885794116,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:14
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,637288998854463549,5421106720621803450,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
  2⤵
  PID:7156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,637288998854463549,5421106720621803450,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
  2⤵
  PID:6220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6748,i,11592595895012469993,6631629275026760254,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:1
  2⤵
  PID:7000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7000,i,13669748577309425259,675092224717560690,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7044,i,2601443515769017653,11256664303090144696,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7360 /prefetch:14
  2⤵
  PID:6688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7076,i,3150939015170715631,12461064494967099302,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7376 /prefetch:14
  2⤵
  PID:6692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6780,i,8512681062716314119,2923307452080517046,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:14
  2⤵
  PID:7008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4980,i,7518534313360720658,18119347121790207929,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:6908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4988,i,4246465791410530374,17098740875321657238,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:6800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6628,i,5165673775004879656,14891798861388742133,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:6552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1280,i,16213376909559648083,7838376342945401434,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=1416 /prefetch:14
  2⤵
  PID:6820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1284,i,7202442318146818692,11886848346362480468,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7364 /prefetch:14
  2⤵
  PID:6348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1268,i,18342742737566072681,18340822302859472546,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:14
  2⤵
  PID:7144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3956,i,15916523840664759164,3858953839930063053,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:6920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6812,i,15163919010521619340,7955755778144830628,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,6399451111528970809,5095740258187119234,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:12
  2⤵
  PID:6172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,8938904677825830030,6362527228552613173,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1396,i,7930990207902599753,10219209303712511786,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3928 /prefetch:14
  2⤵
  PID:7112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6500,i,830877770716140132,15178072340265160367,262144 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,2432032336708813456,15275168746268968736,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3932 /prefetch:14
  2⤵
  PID:6396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,16101854571283165326,15976610227106538937,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,9145664275591314439,18147579438705629848,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=1244 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,5681758853968972683,17472862718143048784,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=1248 /prefetch:14
  2⤵
  PID:6344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,9669769411667512870,11473879304791870772,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,14639689526993694721,12850184314089161964,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:14
  2⤵
  PID:7036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,7658269833470822848,6318750259872114651,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:14
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,16020740227707695466,1165415251166368161,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:14
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7684,i,1353482085497343107,7641198091874156470,2097152 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,8444268992265666895,6764624584261569708,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:14
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7900,i,1488974275728768554,10087206854467609747,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7812 /prefetch:14
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7544,i,2211549283879729248,15232368049221651451,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,16359260296351880594,8119960427507336787,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7764 /prefetch:14
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,11724866987603449945,11223893715635918998,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:14
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7272,i,2795754726675941309,16685460493182272964,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6848,i,11936192398729165737,1655925120237582905,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:14
  2⤵
  PID:6536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,9587022963643720459,12632531144450317486,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:14
  2⤵
  PID:7136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,2635075457922987092,13420455811814966269,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7276,i,18006861280101531790,14695144225253271732,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=7804 /prefetch:14
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,17943103289089062395,15825637368129642826,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,14852662595884205647,13487464638105347556,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7532,i,13689486160405885854,14879576465986325477,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,9229527147916475994,15886170958663354322,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8080,i,8916204952139282630,12768428798972745832,524288 --field-trial-handle=2340,i,1171522484403624617,12067135337297614019,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of SendNotifyMessage
  PID:1204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffd1ce2c188,0x7ffd1ce2c194,0x7ffd1ce2c1a0
    3⤵
    PID:5940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,11483648863687066825,14690928505327625869,262144 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
    3⤵
    PID:2900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,16239221742605493754,4753382859271452012,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,14406608031327809536,6755582118841031483,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:13
    3⤵
    PID:6664
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,7305281772479316466,9548360787812253942,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:14
    3⤵
    PID:5776
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,7305281772479316466,9548360787812253942,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:14
    3⤵
    PID:5072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4944,i,16467349265333393424,2400137829028151943,2097152 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:1
    3⤵
    PID:4140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,4622141157652022926,18363445723697239242,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
    3⤵
    PID:4016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,5217742286210313326,6002503546272255185,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:2840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4276,i,568610449168617140,919731968887399020,2097152 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:1
    3⤵
    PID:6636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,1993215068552058205,14188394787255954869,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
    3⤵
    PID:5084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,6932201349995988589,10510666053069077174,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
    3⤵
    PID:5316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,17962794390348804430,3971800418133625540,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:14
    3⤵
    PID:5440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3460,i,14785449816400393809,15968677819287708994,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:14
    3⤵
    PID:5792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,6105135294328400656,10110378892998256835,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
    3⤵
    PID:4448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,1967746605399297308,17762443241455201065,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
    3⤵
    PID:2064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=724,i,12159828238142194416,17779009467828798301,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:14
    3⤵
    PID:2892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5260,i,4444223109238958393,6042804558616643017,262144 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,216254119232503127,375304329179993943,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:14
    3⤵
    PID:5040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1104,i,176323800789576662,743072395870321510,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:14
    3⤵
    PID:1048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,7867004689570425775,14212254622386266456,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:14
    3⤵
    PID:4196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,3279812026629042963,18418061809867256972,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:14
    3⤵
    PID:3992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,3481021874072927833,17426033018032519578,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:14
    3⤵
    PID:2704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,915820092542160445,14734505394197551423,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=3936 /prefetch:14
    3⤵
    PID:6108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,17759576270033357963,17531140513849299994,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:14
    3⤵
    PID:4792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,2476527944099086173,12554291403901911710,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
    3⤵
    PID:6348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4624,i,11455369225338383137,8279915353886171923,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
    3⤵
    PID:7112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,9959016318852313938,2059567207949154171,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
    3⤵
    PID:1892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3384,i,16561093138587021362,6296060423276413729,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
    3⤵
    PID:4544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,1586146290019974885,7520583229841567184,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
    3⤵
    PID:3716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5808,i,14904240893391219236,12905091880251738887,2097152 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:1
    3⤵
    PID:6280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6372,i,2902279252386385775,13469157918818316165,2097152 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:1
    3⤵
    PID:4164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,8726040135558211533,2665726763821655625,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
    3⤵
    - Modifies registry class
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    PID:1408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,9629124983313731345,3986650984585126806,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
    3⤵
    PID:780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,10909018490533274849,17399238864174462438,524288 --field-trial-handle=2208,i,11466976391794221399,828017569691088323,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:12
    3⤵
    PID:3424

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:7016

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6984

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5552

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1520

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
PID:7152

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

metadata

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\metadata
Size 506B
SHA256 6f2a3448c51ee7c240bab4c8e2ace56863031bf059007a388109b80eb0a759bb
MD5 2b5c0051d0f269f5795c3b7864b4c87f
SHA1 4cf958d2b0c49409721141a2216a882874beaa93
SHA512 428e43c4c69eb49d6a2fca4a8cc91879a994f8b77c1bdd77e60d099ba3f10e812b471bf8ac4034a3c830a0526bfff7a0120cbca1adb09a50de8dccc008a83024
TLSH
T1B3F09249F5B53642E1CBAEFD95C59EBEA86867AF62077808406321EA19C075C021DA70
MD5 SHA1 SHA512 TLSH

Submit Download

1e29c995-38e9-49fa-b13c-22545b1e1b1b.dmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\1e29c995-38e9-49fa-b13c-22545b1e1b1b.dmp
Size 718KB
SHA256 808f9d562e94e195a6a29ff26ef20298788e75220d956458b8a103612b5f5a43
MD5 92dcdc0162656dc7b6a49deb41c68f9f
SHA1 0d5881c58dfa3813c10a8bb040a6db9d2a4bb4e0
SHA512 009733cb327d04f58c96f1f906599d863c6ef273306daf01b07622d128b3759c13d459b077293bb396cd9489cb856ada729d6df15c815df009130b3733f5f612
SSDEEP 6144:S5AmaFghAHRqe1g9rKaeJB/vWCMD9xMiI4Th:S5y0Yg9rKng0+Th
TLSH
T178F40B42AB654A63F06C3ABB24DF9760F7E3940A4F5B43072F5211693C67FF41BA9980
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25dbedae-167f-476d-bc76-1c5f6df8c076.dmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\25dbedae-167f-476d-bc76-1c5f6df8c076.dmp
Size 799KB
SHA256 b2bf6b2e2a879f7eb4e5caa8e264d1a15781db727239cf5496c5eb8316204d77
MD5 ed2a351b9798ef3fadf736e2e5c5c68c
SHA1 c527928f6e0018b6e427b0c163e84fff4075c74c
SHA512 9ed1876457782a2939cb4d642aeefee7a0975283cadd11d8c9d76c5c64f0b9aa719ed3312d83c51c0f06e1ea0acfedf693f01453d952b3f3071431bae92952ea
SSDEEP 3072:BIJVgEwzEKFQjiZha8W38lc79w4lDdLKv0Lf+y6TvQZP1Cqq1HeB2HUA:BIJeEC3FAiZpba9Hlx1KK9q1HeBY
TLSH
T1C005CB17A6564877F02882312CD29752F3F7E64C7BA6438672AD523F6C677808BB07B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b74229e2-9b2e-421b-b2d6-baa369c31a5b.dmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\b74229e2-9b2e-421b-b2d6-baa369c31a5b.dmp
Size 732KB
SHA256 18e0e68af7585e634d38bcdca4149bf9e209fe72d7044c06d2aa26aadc4ce219
MD5 9b445c3536f0e5a8bec4db99340241cb
SHA1 a6f81dbead414f06111910eac1594b6d177b1712
SHA512 78a9acf69bd9a1777a84a5ec51722c94d5783513fa84bc8bfa69f51873e6cc8ea62bb5f6b2ed36d46902305f79b178d2f926ed4411ff2364f4a263937b937acf
SSDEEP 3072:UDo/0hg24ONpONdvOtBW+w998k9TgAdhboxj1MVBgU3ptHMdyasynf:UDo/ug24OTONd4/s8kNUxj1M7Z+kI
TLSH
T195F4A30BB645942BFC1947710BF69FE3F3F3B4684B56570762B5923E2EAB3584B20A01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c17f54f3-8743-4a00-ae2c-a681dfa326a9.dmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\c17f54f3-8743-4a00-ae2c-a681dfa326a9.dmp
Size 749KB
SHA256 2c8d2d8177b95cc3bd0993a7199d211dca0b6858b55ea520f8d2995635ddf2ff
MD5 0bf6375c810f02a19e82ad2167006d41
SHA1 1d1c80ed598eaa7f91c0b0177e8491720d2ceca7
SHA512 f0c640b3a40ff5b0d3785b994c436a6c38783845240a5a347044f6bb69789ecfeb420733f6c502245936967080aa6359fea1cf29aa4fa8b47bc7456a3afce7c8
SSDEEP 3072:hKSwQUo4jYf1F4DQhqChmG3bKqWIyjZ7fLkTWxKAhHPGUd5c:8uUo4JDQhqCc0WltLkTW9eMy
TLSH
T1E5F4C606F6658A3BF015527454EBBB1AF3F3E85C4B66873B7310EA3B2DA32524F21905
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1e286de-75b3-476e-aed9-3d505efe6531.dmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\f1e286de-75b3-476e-aed9-3d505efe6531.dmp
Size 777KB
SHA256 1621bdb4c3edf76070a743d9cd1fa24441825adea62c1a68fd3cde600df8bd3e
MD5 699866c6dd88e9245bbf50dd01b3f2fe
SHA1 905c60959b305cee046011cd3d7ceba3348543a1
SHA512 1d4d68da42ab5008e9a500f0e0b40edc50eaad0911bf596ffbc704741e98464c30429248a5d318a31ba5c5bc8d72bd5372a7145ecb8e9117e94ada80044c71d2
SSDEEP 3072:vZHSQCwAV2NfRPcUPSsGc9gl3+CqCagKfavkiYbjPSK2KDydZgHFWVdpjpZ:vZZNfR7ZGdXJ/eP3DyMKN
TLSH
T17B05880AB7418863F309427154E25F93E3E7DC282BDA479F563856E96CF76983B30A07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 0348e188ce947271b1b49a9d58c1aaf1347e158d5de7ee8e42117c3b3d0a6c95
MD5 68c498148bcb2812bdc36d43cc0bb9c6
SHA1 f1a9976f5355ea5ad308c0e75210111fc74d8805
SHA512 9e183181a5fed97ca4d84032ba5cd14472bf475c4fc6b51eb28ada951e40ee94a9a80000a9dbe3e016f742118b2d359229f9b6a80254f616854f8ddc8de92da4
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000038

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
Size 36KB
SHA256 0e182243701aadb0a1c75756f6c236901acb01953197016a2892986cad171592
MD5 c7288ed8b96efe9b05924a3cdf57a861
SHA1 ef89235637684147079a9deff69e8557059327ad
SHA512 a64a546b89c6a9219b15e2a7e6525ebca44dce8c4a19cfb22a645077cbf8a8072c2384e753ff83cb91c170964f7e2b8b29c54fb8c2daa53f0202867be6303baa
SSDEEP 768:m306n0dmynMu8Hv9jzNLG6x8QlwtPP8Sp87GgYHjaJEaXh:m6EHpNHRwtPPt+7G3HLQh
TLSH
T146F2F1609358F49884C8A234FCE31CD34A45C652A0EFAC57414D9B22EB964D21BE2BFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000052

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000052
Size 75KB
SHA256 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
MD5 af7ae505a9eed503f8b8e6982036873e
SHA1 d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
SHA512 838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892
SSDEEP 1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
TLSH
T17D7302E63B6C4943E03D6460708ABE9F104B3AB42FE057E5C876DB7F2722992B71552C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000053
Size 269KB
SHA256 c1194a6d214282c2695f3819eb025ddebe333c8c3c0982d8c6593230cdaa9c73
MD5 3f978673612d52a5b93236b1a7245748
SHA1 ab64e3ac90db2a44839eda0e2ffb813363a1504d
SHA512 49f19b92f888130c773cf5d0d8668fb10433ed27ccb54fac0b13a740bf89c19187e387dbc223bd64c41ba0d1570331d5ee3b0ca912380725aa727b6f096c9f20
SSDEEP 6144:THW9+78s1V+465jnj237zpei5NUC9upkCjavtYJT7FOav/UI:THsts1AniLMi5PslmYJPgaEI
TLSH
T16744231E109740AE5A3C43CEC747B47DB64402E69F769B37E85F7B398F806822F86985
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054
Size 3.4MB
SHA256 7e05aa07b2129a4f82026291d83e244fdd34dc83a54f9b4eb7642f0ee3039f13
MD5 69a4ec6d5b7bfe21c9afb6083eb2bbb6
SHA1 b42fdd3e7781cdded708fd2d3a7437de8d94c3db
SHA512 2a835b2fe2128aa63b9439ce6fa6f859e8c53fd0b8f96e89d9e816c410895171863b1c24581aec717388106a15950882f565a772e9d71bb6d63a5979bd22f2cd
SSDEEP 98304:efECC6sYZ3dgsH3i6Ht/5eTKJr80IIPlVCZYVNbsk:efETOXiY5eO7rPlVlHL
TLSH
T177F533B74C5D7153AA0FC96C6BDEDF1977A17B1928CA2010271D027348EC73C6A6A7B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000055
Size 157KB
SHA256 5af8530e0fc9c3a326f31cf74d980cce71dfbe9a5cbd05025537d22e644993cd
MD5 b2d0a29dcd546ec7a4a6eae33b381cd9
SHA1 c0c968087a9805cf2d402a0c82099cd547754441
SHA512 d57ec98ef959b6311dca1edcbca73e2c5fcf4fef591306ea56dbe299dbbeffa7ec9bacfc2f92f998cfa98a18f27dc4a9299008ce8e11810a8c6ea6da0cd8b301
SSDEEP 3072:sYRQlF6SQQkeVKwzBd7HwiZ3GiZlGLNXWsYX:l2lrTt/Z3TG56
TLSH
T1E8F32323CB1B7CA500826F1A0B5244560AF2919B4DF2AD34BF404D7DB749E3D2BBD9A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000056
Size 25KB
SHA256 573b69ea9a82b267987821f1f9831f8604891e00021435fa02fea0459aa8357b
MD5 d01a41c3cda2ca5048c6ce01aa3ef541
SHA1 44bf25f4c7b67db20df1d686d934c8db9f381d93
SHA512 d96c8dedfb14c66e3c77a31cb161a6a83fdfd419b6348050b4f83b077cd0381b83e8e39d47946e6b5f6f230bfceaf397260b1fde4776c701e828f4245c74592b
SSDEEP 768:uyHeG5IhBguG48+1Dxzcmlhx4ZKgXM1DgG:uaeGwf7DmmlnqLXMCG
TLSH
T1A8C2E16B5D4B8CE78910DE3C184297CA2AB47D170B8CF4B79E1426FC942F587941BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
Size 179KB
SHA256 e5344184089a98ed92c2d84816547e574483172abe3a8a8e017bdae0e1033dd1
MD5 24b1d43d7937e9fff2dad4bccc9b137b
SHA1 79ae63670e3ed62205565843adcc7f26f7fb0b2f
SHA512 e1e7154f7d15df2264ca0f7ebdfc75967a339e5d2d7e45f6c976adbd04944ae52e1c3cf385ce7eba364a803e0ce4fec7dc1685ed0eccab01ec1e5a708faa91ef
SSDEEP 3072:c8uwiA/MSJkGlre5IsCpvFKcuiGb2JOU4I5X1WVJ6x7ZdSGAkPQaClc:d9bhRGzuCiJi+l0VkPQaWc
TLSH
T163041247BFE80439D09291BE7A7E793AB1B57A1DCF41B440B644B0B452EEC2490E67E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ea6c241a4da0dce_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5ea6c241a4da0dce_0
Size 249B
SHA256 2663dc0aafeb938a90a8268653f3ba1c184a1c87dbd11fa821fd7566d8bf6ac2
MD5 d3831bd1f29965be4d3c02cb8302bc59
SHA1 3ca681376d77c988e8939141a707bb39772a7c85
SHA512 3d8f4a7b9fa4e1e6a23208a25f51b662a58c3a90a2795589757afa30b040429c22a37f7ed400b765207e8931c5d3b011981203a60912f2ee173e4fd782dbc393
TLSH
T117D0A7139A295945D81B43F5CEE62189D22AC25027E5E515C400ECBF6AA5436D643425
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 6631562ca727a4eedacce3c85237086bf2e3a9eed2eeee66e5687e40e285779a
MD5 203634a804f0858d286ba8f0060c47e7
SHA1 07ab0c12dfa46e01b302afefbde0cf519c33a4cb
SHA512 2a540a7c807aefa7dbb22719082cfa20178122e06d7beb7d108509a6302b402593dbc4a34bce0695906a46bff50a6e495d85fe968349e9ec410f621fbcb6dee5
TLSH
T1473142C171C419F2CF8B633224D37CA0B63A062251A35E862F7C1F79110A3A5B0C65BE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 1b8672645abd344552e93b8c7a0869d220c0d890acaaaefcdd27b4ee3fd4207b
MD5 e47bf1478c1e18d663bed0b3b282e2c8
SHA1 07b2c80f71b21265c3086aa532410343c972b1fe
SHA512 b1512055738aebbeb56eea4838d84a37e07aace4b58508a1ca751bdf2c807bcb94553c5376956967c2043ef8e047fcfa0ff165d3283c2ec2ca2a71a41279f817
TLSH
T1C731D68071C019B2CFCB633225D3BCA0BA3A052261632E862F6C1F7816163A670C64BE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 57f9dac772ae395da2949ade22d76877e404272982abe052f79d11fd85023776
MD5 fc878671f092df5dec995f607c778daf
SHA1 0c471061b87013909698d3b06e083504cd05f7e5
SHA512 8113fc57d23add68e854f8fd100bbe6de4ee983cf3670080810dccafba4577061b8802dcf351b8c28e1e1ff774ecd8a46be6e2d19ae3148926ed92b2017341ee
TLSH
T10BB0021422D00065C662067754D359567560CD75131627664AF55BB9841B3915545191
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

617c68a1-0948-40a0-805a-14ca485435f2.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\617c68a1-0948-40a0-805a-14ca485435f2.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

69a2cbda-f196-45ea-896e-f3bb92374811.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\69a2cbda-f196-45ea-896e-f3bb92374811.tmp
Size 6KB
SHA256 81b97e1d80fd3ad4a343ef7d334af35f81c044f715583b14c56377cd4f991415
MD5 02ba477e2e0e5b28b4f891e8cc7ff92b
SHA1 3b384d1124a5aea5e72dedf88edc3ff4dc9bb90f
SHA512 355ad8dd0fad5360db3b82977fd642ad8222a3275e8bf08cf933ceaa4b84c6845dbcf4596bf6577bde72205f4bfb9989312b3650875d4389fac08e9a707a1445
SSDEEP 96:DJsZnaIO/f0j2QPtKhVQd/kOpf4QnQg8g:DJsZnaIO/f0j2QPtKhVQFkOp4QnQg8g
TLSH
T1C9D18EB3C3E4D63E881166F4AF183E1BCD690928626C3C67C9D8EE4B67E5472E24154F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 94f163a673adaa2912abdfec8b7e2f49c4194dab6f61d00fb3a08eda8cfd7054
MD5 78a38f7d7627493c135b2fe50f1a172f
SHA1 44ba795ba8838b9a87858c6499aeb8fc04fd762c
SHA512 49f03b663bea0bcac429bdcdbd45e4981e92df97f27b76fc3f6f6577467ca477b8f08e73a60518d5ae051efbfcc0991350ce03e002cfb279476645ee09a1976c
SSDEEP 192:Dmk0uAW/PqxaDlhwRaIO/qtKhVO3pmQxy+CGm6jEd7sPsI8Q8qSODIgK:Dmk0uAW/PqxaDlh4aIO/qtKhVO3pmQxU
TLSH
T198F1ADF393A0866EC91162F09F287E1FCE690524536C387689D4EE4BA3E6073E24174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 8f15e52c48f01d71e6265a3ba64ba367a7a6a85d784cf465937da39a143c83ee
MD5 1899927ba82752958130956f9a7a27bc
SHA1 ccf502e9918f30107792e569c4c21b36221e3873
SHA512 98edaae95010cbb6385fe131f7e1e63aec0509802bf5e9e5186f6f529d02de625537a8c7c50decb90fb59d9f36133e3718adb56bc625ca7ea41602a6ada80220
SSDEEP 192:DJsZTBeHeEXIbownRaIO/StKhVOnp4QntyCuQJYrjE77sPsO8e8qSOD/:DJsZTBeHeEXIbowRaIO/StKhVOnp4QnA
TLSH
T10722AFB3D3E4867EC81262F49F283E1BCD290928526C3D6789D4EF4B67E5472E24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 0d3469c588cb5a844e73f4e550ab539a6bcd034204b4252d489456a97c0c6e5a
MD5 8ccca220bd57b68930584277b9477cb2
SHA1 c2c7f60667607dfdd8c853775360a2d240cde992
SHA512 b43285f79a4837b6cd8ea339284b76266deb3e268643d8fa743ded8fcc33ef403da6c9f949b5ee05a56727404fa9916e258b8d4b058646f073cbd994d751846f
SSDEEP 192:DJsZTBeHeEXIb0aIO/9j2QPtKhVOnp4QntyCuQJYX:DJsZTBeHeEXIb0aIO/9j2QPtKhVOnp4J
TLSH
T15802ACB3D3D4C67EC81262F55F283E1BCD29092862683D67C9D8EF4B67E5472E20124E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 61b356fea17963d53c6d963db4d340b290aae3f125eede80ded45f0af8696adc
MD5 2d35dc8aaa22822bf228b2246558d8d5
SHA1 53cb665354a2924ffa55ca43680824c56eae30e4
SHA512 9e1f48d19677741b6132221f6d6ab4d96e4af417b2025ebb03381916dc4d7c5d8cfa3cd2138dfcc9469887a8f26c80687889996a9fb9c7e0ef6589da9f0dea72
SSDEEP 192:Dk0uAW/PqxaDlhwJtaIO/qtKhVO3pmQxy+CGm6jEd7sPsI8Q8qSODImK:Dk0uAW/PqxaDlh8taIO/qtKhVO3pmQxS
TLSH
T1B9F1ADF393A4866EC91162F09F287E1FCE690524536C386689D4EE4BA3E6073E24174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 9bc32c12d6d1c2133e6b6cd44678c41a67ccb1732b3b397685d11acd74651761
MD5 7a4825f19c07f753c8344d7c22d4ef93
SHA1 fd4a6236bb02e39fb8ff0337df1674b3c1c554c3
SHA512 49cd4f644c89075fc3e73254ef14ea3db8282f24b08848823f36ebf4283e553e142ee1c1586162b73c2d495cf9a32f36c7a3b26a377b4286823e03b517301a2d
TLSH
T188315BD7957EF5A7207C68AB1D457C0D2DBB78321A4168F1DF6A826CB0C69F30B06427
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 eb7608facf688996470d55ec7da9b755f08f3710b5cc26b72049975260662694
MD5 a6b52dd5c1414b60c4fcac0ef504ab33
SHA1 0b94799cd603f7293ef92d68be1b66453b32a26f
SHA512 97da95ddcc63902ea029ee4f76f5a789fafc6450656dbc2ec5a0b58c59081ea43a655c088b3934da22e138920e4cfe98d6be81c86d14eef583245a0c1b780299
SSDEEP 192:vRANAUr5v7tM2PRpJ97hFTG99Hsb+WNZaEbZhMlPpg7sNqgMwQkdHl6wmDVyIsns:vRAN5rZJXmvwHGczgDBlU3
TLSH
T16E52E86AA950697B9CDBD21AF915BB67E7F1102675D02F80EBFCC92C14E36CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 98d308179c7e8b9d9c296887568130a5736e7bde253284fff3a9c6f856243c6e
MD5 7b68856ed8ad97232761cf2b467987ca
SHA1 dd40656d9baeef7da1234521970269baaac7dcfd
SHA512 0686153cc64b6a75fb6cf426a5474bea2c14676d9ab29742f0b3f59fa92a5f2925ce2f0e9438f962be29b5c788659f00fc43c500d26009dd8bb950c3c7afbaae
SSDEEP 192:5RAdANGv7JnvAPRp25V99Hsb+WNnBSG6E42MGkdHl6wmGVyIsnAUgR:5RAdiyd6Xkvws842+BlzR
TLSH
T1A932B56AB950697B5CDBD216FD227B63E7F6102634D42E84EBFC8A2C15E39CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7a7f371096f1e08a1bd780d6acadbc6e41b1a28ae245b4b444d0f86d360395ca
MD5 7c1ed08cf4d8b6285cd23fbb181a77d3
SHA1 30b86d149f40c7cb7daf184a6cdd87751dedb38f
SHA512 e8047953e58ff31c5dbcafcebe18d0e6e6a718bb7f0cf101ee53e1aa437badafb031f3bf5b012adec27336de0d8b15447fd154a2a48eb678ba27a5f65a3af5ad
SSDEEP 192:SRANAUryv7Je2PRpJ97DTG99Hsb+WNnhe+/sDg7sNqgM2kdHl6wmDVyIsnAUgE:SRAN5reHX2vwgxOzgwBlUE
TLSH
T16352D62AB950697B5CDBD21AF825BB67E7F2106675D01E80EBFCCA2C15E36CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 a3487d7ba7e2a436f0e14f8cfd6b5a697e331a920b1ea17c73d9428b70346929
MD5 6e0557d5aa76cba13f2b71f43246a400
SHA1 6ccb90ef97c764400bffa916495ed94f1537a1b6
SHA512 b1e923a9c852039a792519d80daf27399201bdfff55e645f494f39f495c471d84f918b93650c630b70d2ca57893d691c36a386f8f409008375ab8fefb6f20ca6
SSDEEP 192:5RANANSv7JnvAPRp25V99Hsb+WNnBSGg7eMukdHl6wmGVyIsnAUge:5RANi+d6XkvwsFeCBlze
TLSH
T1AC42B66EB950697B5CDBD216FD227B63E7F5102670D42E84EAFC892C15E79CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 fe71753bf1159df69d35a5f3e5c77c003abba06df62724c6d40bcef5c1a974c3
MD5 b84709b96120752f077cddc04be3ca40
SHA1 e3311b4ad04928d0ec43a42acfd13f3b7111dde5
SHA512 cc02f1ef2c8be0ab9d1ba0d7005b30ec0be397ba6585530fe45cb0b35173d0bbf727e3eef7754231b7b7422d22a2795ccc4b640c540f26c04d5932bf61b306e6
SSDEEP 192:vRANAUrBBv7tM2PRpJ97hFTG99Hsb+WNZaEbZhMlPpg7sNqgMwQkdHl6wmDVyIss:vRAN5rBRJXmvwHGczgDBlU3
TLSH
T10B52E86AA950697B9CDBD21AF916BB67E7F1102675D02F80EBFCC92C14E36CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ecfdcb3a5156d32b6ef210c1774903ad1f7b846057e135c298e679590ae9d719
MD5 2a4aed4640779c5aa7b5b211aac342d2
SHA1 e0da7c288e16e07e7ec1a9618258193ac4b8e5bc
SHA512 cc204b788d635fabbcb0e1cad04eb3a89b916c487c2056a6634a41e434aaf1d143aa413ab050834d7ed96af0b3367c0d7d9977eed130fe7b459666f49cae17ca
SSDEEP 192:vRANAUrAv7tM2PRpJ97hFTG99Hsb+WNZaEbZhMlPpg7sNqgMwQkdHl6wmDVyIsns:vRAN5rcJXmvwHGczgDBlU3
TLSH
T16552E86AA950697B9CDBD21AF916BB67E7F1102675D02F80EBFCC92C14E36CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a4e76a1ce317d9e9c595b5c5d94ae35e53416ed32f9c2a84464773c6bd4872b3
MD5 05ba83f5909c3c14124d7923e1f9de39
SHA1 9fc3b6c6427f20d3ecbd8b4b6a3e929c432e9e38
SHA512 90d69724cee4e95fabee614590731d0c6cec58cc13e851e6f1ebf07959eceb05f8844704c084bdfd67cee60f12bde7d6ce7e9bbd23babf3cdfd1ccf2ae905b18
SSDEEP 192:ERANAUNzv7JQ2PRpJ9STG99Hsb+WNn2Ltg7sv8eMekdHl6wmDVyIsnAUgE:ERAN5NLxXpvwUQXegBlUE
TLSH
T1DE52D72AB950697B5CDBD21AF926BB67E7F2106670D41E80EBFCCA2C15E75CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 064ba5a336f4f56bf7e6c156ef1b0773aab1858032cf2b3351d046e933a9f581
MD5 ac983e5964e253a2cf65325fd0b2148f
SHA1 ec6717ebe4b40c26f82424af1ad56782180b51b2
SHA512 97c0f96253e0bdff14da745138abd369bfeb8f1223e8669a37a6e6e0ce3b90d0d99c260a4458633c0517f353a508b7f9135e48a23755384d5548c90fba2939aa
SSDEEP 192:vRANAUryv7tM2PRpJ97oTG99Hsb+WNZaEbZLIjg7sNqgMVkdHl6wmDVyIsnAUgE:vRAN5reJXjvwHOuzgxBlUE
TLSH
T1C952F82AA950697B5CDBD21AF815BB67E7F1106675D02F80EBFCCA2C14E36CC2217013
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b201e7740dd71d8a732c27f5ef8b61d947abbf645794ac6fb4bd4a8619ff5178
MD5 ca4a686e5538b66ea2e086c86566d039
SHA1 edd6b605f02b3c22f0318680149d0757147929ef
SHA512 47edc50c17e815a6687e3846bd5e16d63aad0e89d5b6dc447b2ec327ec561ea508d67fb441fe44246d598dd5407ebc4c5ca34bff56daaea03db7d31a8bf425c5
SSDEEP 192:ERANAUNyv7JQ2PRpJ9STG99Hsb+WNn2Ltg7sE7YMtkdHl6wmDVyIsnAUgE:ERAN5NexXpvwUQ7YxBlUE
TLSH
T12B52D76AA950697B5CDBD21AF926BB67E7F2102670D41F80EBFCCA2C15E75CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 67ba9117ac169b24d6b7abe55aac4054c13c68ef90eea5f0bc4e97f1dc56c25b
MD5 1cc6baa411f454e0fd43cc2612a1a3dc
SHA1 260acc174b1fcf59ece93d81959315eb1d27465c
SHA512 3cb3c2949f15c00d783ba3d0d1260f16c911fea846ecd89dbf512d808b0d50ea3d499e948c42640b4c571f0765133a52c5e78948bbc9c6429e1da950664467ef
SSDEEP 192:SRANAUryv7te2PRpJ97+TG99Hsb+WNnhe+/sDg7sNqgM2kdHl6wmDVyIsnAUgE:SRAN5rebXRvwgxOzgwBlUE
TLSH
T1C552E72AB950697B5CDBD21AF825BB67E7F1106675D02E80EBFCC92C15E36CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 824a4f61fd53ae8f5d57443df73e4c9ae303eb7de13658744a4805eca5c8631d
MD5 c099bd89ea6ec7a643cd896fa44a3408
SHA1 f87347a6cbd24dceb995e5cba58a60541bb22526
SHA512 c9a30248f35d17e3eb96c1711e432408e3e346ae2d699677011554bb6979e797158e36adb322f575139870b0c9370a59c5f010062829861bb8730c7df98bcd0b
SSDEEP 192:ERANAUNSv7JQ2PRpJ5TG99Hsb+WNn2Ltg7s6GG2MpakdHl6wm6VyIsnAUgE:ERAN5N+xXmvwUQh2KBljE
TLSH
T11242D76AB910697B5CDBD21AF925BB63E7F5102674D02E80EBFCCA2C15E39CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e68f08a6db6618629bda7337c939e4a6f36df88e1df8270c969a4ed521c4e361
MD5 98b325623874c40ab5542f709abc585a
SHA1 dd42311406177337e0e50fe3c5ab1e7539d6db51
SHA512 7dadc15f4c1ee6311a2ff98dfbfed2d9bbd4e75c1619425a5d79433957d3274bcbca0d6ce0d8da6c89c9bfdb55d5128acece1680e69e4c154c43d452613e5429
SSDEEP 192:vRlNAUrBBv7tM2PRpJ97hFTG99HJDHsb+WNZaEbZhMlPpg7sNqgMwQkdHl6wmDVz:vRlN5rBRJXmRrwHGczgDBlU3
TLSH
T1AB62F86AA950297B9CDBD21AF911BB67E7F1102675D42F84EBFCC92C15E36CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 54b0eea83d0e1a051b4f007a55427a1fed53e624e53da6a57c90836075dd8938
MD5 6560bcac7a7f731129acf32fe41d855d
SHA1 9d1985c5bc722cb20a3b650fcd14a3bf5a1fc2ee
SHA512 cea92d14cd933545a134829c02a2e092324d913b375cf11c0a2794447929eb8028c5fc6b6afb6699435fb0bace921eb275b7818e32d6c9823c0e30ecbb5072a0
SSDEEP 192:e/Q4K6I+7KxkXqK4I40pUZNCgVLHrKHfFKslE8nRXzKD/KB+ErUkKN9MFUxpElbC:GQjH+7KxkXqKf/pUZNCgVLH2HfgslZRu
TLSH
T1DF32C72BA48D9A3F4FA8D50DDC126F4BACA5025776780C2456FB9D0803A5BCE115A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1a10dae3092c064b7971ffb912e1ef3c7e9bbb7ca81aa063f5c2513b5c94365a
MD5 73ef6db1407545f42821224140f86928
SHA1 94d3489a7f4db96687a33e760f6754e4a36d8d6c
SHA512 e30f5aa783ddf19318f652e3ddd6823643f7a42b2f34b1506b2a2f0a18ea42111c43f5f1571a996ff313e6108a1d4a894b34a30955568df0de75462e8bd33940
TLSH
T131B0125090865D51C84182B11126908931828E2181005A0686D0768B98430E04112114
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 5a38fe451c0ec53c51b44ab8269dda25df57423f5367dbb2003c3117827faef4
MD5 ccea22739a275defd96aed6934e185b9
SHA1 fbaa679b628308c381610ae1b37aa393caef9b1e
SHA512 ca082577f1f7679dab204b515256dba4095fa58d02599015d62fcc2bfa72196d4391e6cd70992f3b5e7d691ed62ecc05812e163f64583441550fd5a86297de54
TLSH
T147C01202F84E60D0C9C651707447A08831158F61C019750687F4F6B5BC962F5613A59C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 e32f361e1fd03d5425e05a89efbec8d51d9e8fb45d1db6f6d5ac94c3b86a1829
MD5 f311492773987a4dc7406896bec69cc0
SHA1 f4227c43c17d484467a7ae948bc0e041dec17635
SHA512 dd5139d284518b5cfa428efa9b6835bc5c0b147dd214860ccf3f0069392b29ea5c6608cce3d22c4fe73690dedf8f69552110e4f424dc687f8de9e00107b1b44f
SSDEEP 96:hbJ0d+CgjAe56y7nKZwpOfssadSl8h4otop5thDmB6UGGfvk5EWiwljVRNC39IS1:ht0Ngjf5ZKSNRiU2r2Nv3WiwljVuCmca
TLSH
T180C1F8B1E4AD5DAB4CF6A586B1032D43DEA810AB6964BF54FDE95F0C00F75DD2382223
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 71a67ae6eac55f139b12f144dd7356403a081cd22ed7693c32dc43cdb76b7e6b
MD5 46b7963dcbee72a36525fcb65b8642b8
SHA1 53d7c9b14592fc905261cb6b8deaf5f881fdcac3
SHA512 af3a52f7c7f5a3bf47fbc89e4c863e5e013c880e22712ee308c41c4a90a14282941998efd39ef19e5085b633973bd1cd8e7651d9433a022a57f212c203bd93f6
SSDEEP 192:ht0Ngjf5ZKSNRiU2r2Nv3c2PyPljVuCmcL:htMgbySNRxNvcxjVuCmcL
TLSH
T164D1F8B1A4AD6D6B4CF6A185B1032E43CEE810AB6964BF54EDE95F5D00E74DD2382233
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 4f4c303ba19e54715b26ce87685bf2c839f76d52a900599096faeeb1a516c917
MD5 b1e25528615ba659b1308acd9651a859
SHA1 06064c45f82efc95e0ce84f122dbda5ef515c4db
SHA512 ff7f73260ef8d62920dd3f234e80a47f09058549def9cdf88db8dc9d8ee44b4935a565231607c18932cf1707cf851acd8643d060c8e214ef8b6ab4777b884789
SSDEEP 96:hbJ0d+CgjAe56y7nKZwpOfssadSl8h4otop5tpPDmB6sGovk5EWiwljVRNC39IS1:ht0Ngjf5ZKSNRiU2r2QcWiwljVuCmca
TLSH
T1E2C109B1E4AD5DAB4CF6A586B1032D43DEA810AB6964BF54FDE95F0C00F75DD2382223
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 4b3063f2e1bdb7419da6c223cfabd725e2ed90f20d72d2385bbbfabce66c50ee
MD5 b5aab4f51a681711cf8d116148224424
SHA1 b70a6140bb7d546d66d795f14e923b0da4a0469a
SHA512 c3d8a8a7e450c3a049065cd54ab65e4fd8d265069c7205532ba97aa0e6a61b8138149781e2cb0b835027a9e2fe1c53a5dddfeb6945004994e180d948cbf8e784
SSDEEP 96:hbJod+CgjAe56y7nKZwpOfssadSl8h4otop5tpPDmB6sGovk5EWiwljVRNC39IS1:htoNgjf5ZKSNRiU2r2QcWiwljVuCmca
TLSH
T1EFC1F9B1E4AD5D6B5CF2A58AB1032D43DEA810ABA954BF54FDE95F0C00F75DD1382223
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 ea35c89e2285ae569fac125bcd4afc4d49f903c782c720be67732eecc0d2f87a
MD5 dbd0ea1d6d67b0e40a5ad0a1120f4c18
SHA1 6b7aa2eaf2ba54f10e2f5099ff1d2f20a2b33893
SHA512 69062c66bf49a470a6ba8540889f1949aeddc37cd41cf38a14535aba6ca30f50355a9aaa7fd1c939bdc63758b44ded3ce8fd04ad4cdcfcbe18e8280de9bc4007
SSDEEP 96:5C0d+CgjAe56y7nKZwpOfsobajcRDotok5t4DmB6vGyvk54EjTboRYv4a:5C0Ngjf5ZKSNqDUDk27qEjTbog
TLSH
T1E0A1F8B1A4694DB794B6C589B1427F43DFA421A7A571EF80E9DD1F0C50FB1E81382623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 e8d5a7e659d151afaf8dbfd4d0dac4d17a8dfb94600a76708453cf0cb0bd6340
MD5 34867ef94a120e6e91491d7e903decef
SHA1 1612cca09735dbd8ffa459ed970cc7ed7eb6745e
SHA512 613bfcff9938fdc35852281b5b19c14cd8f63450051c07273cf7d913b1c74d8362d9bbe87ba0fe5971a1698c2331edf521a19c7314f6f1b0499f219cf6f62de8
SSDEEP 96:hbJ0d+CgjAe56y7nKZwpOfssadSl8h4otop5tIDmB6mGyvk5EMZH1Qzb/ZgWljGj:ht0Ngjf5ZKSNRiU2A2mWc2PqWljGU4
TLSH
T18BC10AB1A4AD6D7358F6D185B0032A43CEB410AB5560EF90EAE94F1D01FB19D2386123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 7797f342fefa669e6c0394023800f314c93afd5957d8df826db73de6d68ee74c
MD5 77c9941aa2d735ebda5ab03eae7b7326
SHA1 4428d4996b3fc73afd1a69993b6c3607225c91e7
SHA512 0db622de2e5f6b1406e72e68ac4c2b41d9c858617091f10ab672cb26ceae56b0ee0bb514e2e3dd8f55eab026bae89a9555876775969d66d8d1d932e61fd9026f
SSDEEP 96:hC0d+CgjAe56y7nKZwpOfssadSl8h4otop5tIDmB6mGyvk5EMZH1Qzb/Z9WljG0e:hC0Ngjf5ZKSNRiU2A2mWc2PPWljGU4
TLSH
T1CAC1F9B1A4ADAD7358F6D185B0032A43CEB510BB5560EF90EAD94B1D01FB1AC2386123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 dd93834da96bc48df415033553eedf80bf463830fefe71342451e6e1b32c7df4
MD5 4c06f574572eee1673951f747ca76821
SHA1 df69bd0102f053e4561f41f282f3f7737318c3e2
SHA512 c1877b6b3b78a0b4cfbfb13ce0642e895f7d5d2c05e2baa9946f294b3c71b3059f0ab80b410a2b047739a8cd8e0e70440e81f617957ffac4b11ed7e9d358fed4
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Q:fwUQC5VwBIiElEd2K57P7Q
TLSH
T1C3B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fe2d1a3fe4e125a20450a80b65338ae68752f44903f85c5d2d5e731ae3d70183
MD5 ecfbcc3efd6c00edce689f1146aeaa68
SHA1 a6a0173a3f8b7dd0a0d89d6dcaee185d8b60cb80
SHA512 08461dcccefc71f7839c3071c69f8790daf8e792e69a9831c24ccd3f8cd8589f942f098920666496b0fe78f07a5032ba3d3fea47ac1a59dfb3a3079f1f8fd197
TLSH
T13ED09734A826A3E0C92A017188203200222000B138E2078210622C0CCF70042A2DFEDA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 821a65e6ed00e715086e5ee61121544a863e4a387daddf3cbbd47db861564d52
MD5 62411e27214f891cfd230cb1c0928a26
SHA1 66e6584bfb7e4b528ee53c0bbd629e3a4f2670cf
SHA512 47dcec840ada207d67fc686a1478feb84c6108282498645006860f02c69ac75180f7892649c1649eb3a16f475663f9b09db0886bf7e42bc76dd5a3d151c64b5c
TLSH
T139D0A779B4569395CD4A0172985537503332007038FA5F6291FB680D9B5006567DF6EE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0271ee03f7961f09882e572b5d6f575ae6bb91c36b47c5f9fadbb88f0e15684a
MD5 5b4dafa9e7723c11cc9adb5d5944b5c8
SHA1 4d2d207f0b5795101856b7f76fcce24ea17d9def
SHA512 a17f00e6ab41248fb04e9f7a54b3bf96ef8e75fc3dd2bc5d9205e60a749c6f01192372eb601cd1afc3269f001f97c45ecc5c81b829ff657ffeeb5f5df56c43a4
TLSH
T1BFD0A779B4569395CD5A0172985537503322007034FA5F6291FB680D9B5006567DF6DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 168dc438fa355b9b84e416f9d4caca14da218ad190d72da09fe489277625815d
MD5 39064a84dfec9bbd8c4b789b6d7a7c62
SHA1 5d817a4df5ed7bd1eac0c4bc0464a76007ad0c46
SHA512 3a4f32a1ad3eb6c391e6d11f4f6ba07c4d21cc935ddd8fd93306857b9e0cfda06c39786a872cae88f394320921a63296ad4df0e61334710db192febec2f48618
TLSH
T1B5D0C034763961C2C92725B2CC3163007320007030B587425171840C8E3489667CF3C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08a3eccff4cd9b05162ffe0d083662ea8cd60457899147f42dbbf95a0a97d97e
MD5 394c25b8b347a39d61b9cf28babb5c77
SHA1 c7334bcf8642ac580d30cf31659724fe1ab323c9
SHA512 8e5c09dada01bf020bbf53884d65940c521dc62e17d9ce99fe6c571edde4b95c7c7716f2eda97b70568b2cbac8823e7afed5a9bac7be39d1acc6fc95c23a4b1c
TLSH
T1F6D0C038762962C2C92725B2CC3063007330007030B587425071440C8E3489667CF3C7
MD5 SHA1 SHA512 TLSH

Submit Download

79a9fbdf-ac10-499e-97e2-597229e30c49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\79a9fbdf-ac10-499e-97e2-597229e30c49.tmp
Size 414B
SHA256 368cd01c6ef891728e6a48d65ac93b1c27d98b145f6da047b9b0003825158f52
MD5 b055e51b5a01250d4c2334af0420a71c
SHA1 866fbf852cf751515d206450edec9c7ba3d3f7d2
SHA512 79370d46e3b85936743c338afc5f047a808babc19022bc1d678175dd428b0cd3003cf2695b0b153a21a0f556d2676c471bb6fab20686d0e285f9a99e3a44a81c
TLSH
T15FE02BA5CC21EC3B18FC175E54D50B45E710134B2A9086AF7A3C824C8FB073B558681C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 f2a398b23a30411d0e09ff901b0ed18e46b3a43dfda5594328ffb35531861469
MD5 30b1f88be6e3b8cf197e7a3ca083a3f7
SHA1 1e4de153b329a1909a055ac0b7f9d7df6ce1647c
SHA512 48c43a00f9b89932cada948b7a87eb3056d96a388338cad95390617aa5e19bc1ed642316b2510d9f4f54ca80ab82372c7158e429664795d523887c4c75dd1bfc
TLSH
T147E0268506CAE22EBE546547A3B8430CC280364AA2C8FE0E3744C8CE70414C4E3836E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 bbae5b6f3bf43a7c1076a1e3630836f568cf66690349bc601659a4ab2c6c10bd
MD5 409cce312e1d266830a348715720ebd6
SHA1 d781893dc786087f39848aa6f2d8e8bf2f6121bf
SHA512 b0575f60650a397819606b929e3b63e78168af5cd1fd815316e03e0cd92b7ca840698385f17532c657d6145d28a3ae53248b4b8791aa3afa6d593640b3437fc7
TLSH
T1E8E020B406C4D29D695465875274834DD1E0374AE2C4FE4A378494CE70024C0FA97551
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 1e7be1663c7858dbf87a477f0af1e38e0d9f17fce8c7e2a06b7e2ecd213b3791
MD5 45949a81d21187b3634ec559c779e0c7
SHA1 8144e79852be724ad0b5f7020a9b73aad7efe5ab
SHA512 51fa8f2ee6a66e677ec00379002e0581bbf50b31e6b0825bbeb67eca703264c5d042dd716bb4682705025a13235afc6a924050dcbe5952c593b93d5c2eab388c
TLSH
T143E026D806D8E26EBB40A48753BC530C9280368AA3C8FA0A6B448CCDB106580F3C7AA4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 db717a1dae3825cde412a0f82610acc8168a05d4513793b3d0a36847d68ccc87
MD5 89fec0f9ce91dc776b186efdf32561a0
SHA1 0d23ffc5bf254c654825e6f0c149955a9bda0074
SHA512 934b1c7da6c132d2421cb0ca04bf8b2318895b66392aee599ae0f5e19d5a428bf68f9e1e8f6d4ab0287709f9a1461b3155a1e59b10b325afe32c7bfb849e8389
TLSH
T1E8E0209605D4D21F5A506547A198434CC280374EA2C4FD452F4089CE74060C072B35A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 648dee7556aacd77af591e92dc535729d93a5a0bfa9b12d7eab365ada3390b46
MD5 e3e64fa734845bc4dd9ea4e79e513500
SHA1 649dd98cef689311ad6635d8d9055a3d70c7d899
SHA512 c97f75f3b3d789815401a6fed0baa901ef54478126195b8dc699130b8e9fd62878a46a698019003d8935b8f6de24169081f75a2779a21ee7f41018cd9a11fa5b
TLSH
T10EE07D8426C8E36FBB86654B5268870C8290368FE2C8BE8A374489CB74070C4F6C3690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 fddfcbb1736acb980e6a2654e599afbd756cae999c46cd5a8ae99cc5537fe519
MD5 42aff857b9138561875b7067cede68f8
SHA1 185bab07f6fd9c16fe114bed73d9a1c679511955
SHA512 c850ed037489956a74b7a250f7e7d195f4d742e4b659f1b48067ca1779addf71740198bd296284817937e67abf4c16150aff1a575bda24910fb2e8272890f652
TLSH
T125E0209406C4D27E59C0A7479264430CD290374BE2C4FD4A6B448CCEB042482E6977D5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 9bf29e4b38127872b2a1a4105097eeca3ce0c8c2c2c2403c12790d28301ff877
MD5 61ab565809900a6537577689c69c6524
SHA1 fd9bad27115d854cdeb60a5ae4d93183880e8d91
SHA512 f1e0f707001d15cc68c40c0c1f9635817de7462efc1801937d3380a9ac4c32926f1c6343df71ef7d8f34430a80360cbfe891be25d8d759e8debb9afb2134d48c
SSDEEP 96:JVgc03i3EkzQeNiBVoe8TIz/zD5KzahtcCdDZW:bgJi3FzrN8yezF4atceZW
TLSH
T1D5A1622C7BDC9CEADB15557800EF38C92BBB8A5651469B024EFBBD785846EE412F3102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 5a5a0d32c1acae70e4039b49f439661b4b1ebd8f618ab726317e24eca14b201f
MD5 45a1df4e145f38b05a907322ddb845c2
SHA1 87d37557719f63ed0aac2b2e2d6f4e18062375c0
SHA512 c9c7264f8119d30b6558e0f6c8b74436ae2a9cb4d2d548de73dd8052fd5e85c95023d9977b50e882c4ca1301fd0c4f118dafdcd5400fb8bd19dd3fa1b461c123
SSDEEP 96:zVgc03i3EkzQeNiBVoe8TIz/zn5Kzah/cCdDZH:RgJi3FzrN8yez54a/ceZH
TLSH
T158A1522C7ADC9CEADB11557810EF38C92BB78A5650469B034EFBBD785846EE512F3102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 addcf136d602e6e14c5d3bfa67cf2e22b15ee8841d1abea382af85226c50947d
MD5 4e71f884a5fb7d2740a56fb1229978ea
SHA1 61394fa0a3f7fc5603a75235e70faafe8edb5ade
SHA512 614c3ad92dfde58968190da580cab60ca4d1c1d16ea01994707f827e8728b84c03d0108ea0e3e7a1fa5221aaf70b94694554ea59fb9f6f9797dcc01a009a620c
SSDEEP 96:HGV2c03i3EkzQeNiBVoe8TIz/zn5Kzah//CdDZJ:Hk2Ji3FzrN8yez54a//eZJ
TLSH
T1FFB1622C7ADC9CEBDB11557900EF38C92BB78A5650469B024EFBBD745847EE412E3102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 65264260bec293eaa61052e8ffd9cf13f073293b3320ecac82fc5bbcf667e95d
MD5 90f969bf1baf7a2d79307610e41df1cf
SHA1 c22735a439fd99ae2b104722c6ad0933ff101425
SHA512 5ddd7dc4d5ba7269bfd5df7fdbd8a071d609250734c8073c5ab16673ce92b68823262aa4c30d7481a9acc8a961e76c39a46d250c00955d8efd49c63c8b137aa4
SSDEEP 96:JALdqQ5GpadQuwZJxzawviEAl4gX51LfBVPVzLFaQhia0w:SLM9pMwZzviEDgXDBJlLFvhi6
TLSH
T135D1886C7ADC9CEADF12557450EB7CCD2ABB8A2760825B130EFABD645447EE412E3102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 63e8269b2936cb231423c8fd60f858845990c8b690be492df213a00904e5c91d
MD5 e02e8482a0ca3d4d31137e174d8cdd2a
SHA1 b2d1fa6d962d41df26c14f799f35168a830d119a
SHA512 783efcd3f67f85ec99a73e2d7e30d2d9c91ef1ea7f05766ee0f51d1d5073d1f8a2638cae3a3b55ec531e948a85abfd9f5daace706abc401ac3098a0df074c7c2
SSDEEP 96:5kV2c03i3EkzQeNiBVoe8TIz/zn5Kzah//CdDZH:o2Ji3FzrN8yez54a//eZH
TLSH
T1C0B1722C7BDC9CEADB11557900EF38C92BBB8A5640469B024EFBBD785846EE412F3102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 941e88a0219639856a99d9cc146127ed0bfeb2164e26f5e794a32e5b4df21ecb
MD5 d63f117912f00a966a0ff80b5653a0bb
SHA1 14cbd5ee2544355d1a672f0a8c7e21b4b058904f
SHA512 e7d638a268641dd6a1058cf65477005c42fa89683d57deebbe3f6552515706931aa5420bcd0a26476325a1004ad538b8ee8cb476dfb4fef6f752b0e441979c84
SSDEEP 96:epAQdAQZGUdQupZUxzawviEALJv1o1LfBVPVaQ9FvQhmqaqGx:eyQuRKpQzviEg1iBJ39F4hmqzW
TLSH
T159D1C82C7ADC9CEBDF11657440EB7DD92ABB8A2660825B130EFABD645447EE412E3102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 15a0fa035a506f825a34499f918be6dde1fcbe1114f79d1fc6f4c9d836ceae03
MD5 010c3b818dcce580d6e2a954680e99e5
SHA1 6a0094082826a129948fa1ba1735e6c6c0b4d397
SHA512 e9e8f92505504251076f249503ec61bc28f5de6df358c6c830f551d5b144dafa2ed45384720f28bd64dc324e68acc28e38ef63b28769a4dbeea44c39ec3fc614
SSDEEP 96:RAQdAQZGUdQupZUxzawviEALJJ1o1LfBVPVaQ9FvQhmqaqG/:6QuRKpQzviEa1iBJ39F4hmqzQ
TLSH
T194D1CA2C7ADC9CEBDF11657440DB7DD92ABB8A2660825B130EFABD645447EE412E3102
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5d102f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5d102f.TMP
Size 2KB
SHA256 25871164c862013cf4949f60a4c71efc33e29e7fe1011552edb1448bafa6514a
MD5 5a7bb365aa0bb84e4941c088bb5358fa
SHA1 25a6eb34a87eb8756f51cccd18f802f18ba8651b
SHA512 291d44b5e3c715814b875e2d08a4588e13a7246b79d8ce2eabe26105393d3e3601f55807e8bb4daa804e5c86c908efef4f0ff6544d57cdcb8001beeaa4d555a1
TLSH
T1DA51CB5D5B6CDDFDC722A8B664E040D93DFB8CB905435F1202FAEA74490EFA82311211
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 875e65ebb8078da859c3c0c4bb7fc7853783bd2d2c9575ae2ff476b56b4a76b0
MD5 d4470435825b4d176053f98261239ddb
SHA1 56dd28f2990a8a592e10f207d48e35f9cc5438f6
SHA512 28aba8675c9eeb83201081b4f94acbad5126741be23e7ef55a43f119da65cd11c206d296e23d058987a8cfda8e4ddfcecd48f333eaa9b4fcca3ff1bfae150e29
SSDEEP 192:DGIt2v8sJylVad7Ya75KfcZmEtjsPsSG1faTFQq+8qtjh/sp:DGIt2v8IylVad7Ya75acZmEtjsPsSGp4
TLSH
T121E1BDF783E5866ED91256F0AA14AF2FCE1C0556436C3D1A89E4AF0BA3F2471E141B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 e2197b5178e7608cdba669964f85fb091a7bca68704eb82f4f8648af27bb5bf6
MD5 cd5241eb914e804035cbed93926ca13e
SHA1 a5ca1cbef0b8e9b24a99d211a723b8323ebe023d
SHA512 e4d33b802447bb4f1edd89e934cca5ae64fd9051afc0e2494eb72229e3ab61ea59328462bba6bc14849141c009f4144cd08507424cf9a8ad6b4a6fb246e7836e
SSDEEP 192:DWjy+wJjlTeTge/k4HXGzOVadTYaTjsPsI1fiuQqj/8esVRDwRlR5OIsj44SKGIY:DWjy+8jlTeTge/k4HXGzOVadTYaTjsPT
TLSH
T12B12BDF783B5466EDA1196F0EA14AF2FCE18045643BC3C598AD4AE4BA3B2471E141F4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 7ab6713c12c43e04c62dcc1038d2f85be592f6981463e001793cc29d0d88f8f5
MD5 e1e592255a90a76b489d4b6e7981780d
SHA1 691712220cda8b4b511686fae823d756f0d8b092
SHA512 dc3c1f9838797c2289a5f486e87ff36cd0885e9800c2382140d014c60be66dd27dbfffdff4e96f85bd781cd50311a4b89802299bd0d686862b64c8ac2147ca21
SSDEEP 192:DGIt2v8sJydBeRuexVad7Ya75KfcZmEtjsPsI1faTFQqty/s8VwU17sVAl35s4GA:DGIt2v8IydBeRuexVad7Ya75acZmEtjK
TLSH
T1D312CDF3C3E5866ED91256F0AA14AF2BCE18055643783C1A89D4AF4BA3F2471E241E4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 f9f4cd6624e91b456741af92cc49aa9f5ab538c93943103310a7e0476aeddeaf
MD5 3834a114de9d8694711fefe102711352
SHA1 3edf890ae7577be302b0703051e6ad3525a21cf0
SHA512 3432c4301d5e984aec28b47c6df5fd35f27950206169737d9d82e33eb5eaa91e3c6ad24f836935c8ffd8a582af0c18851e07497e3dbeeb9c644867efd4dc3d15
SSDEEP 192:DGIt2v8sJydBeRuepsVad7Ya75KfcZmEtjsPsI1faTFQqty/s8esVRWXlLGUwMib:DGIt2v8IydBeRuepsVad7Ya75acZmEtw
TLSH
T13612CDF7C3E5866ED91256F0AA14AF2FCE18055643783C1A89D4AF4BA3F2471E241E4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 96e3f97a361bbbb61dcfd96c49eff21f64f75858d3b34f175568439c54f4c378
MD5 a77278f2b5300896e32f257b7f3b90e7
SHA1 dd47543674964b1fae3bbfd7c1d4f2d6252085c3
SHA512 a16873fc3b1dae7fe98154c6e9eb7bb0d1166e4277cfe52011d933d97c6dc19748dfe1d52dc6fe97eddfcb72f188d1293ec24a68d6634ef1a48404fb92e673d5
SSDEEP 192:DWwJjlk4HSGYGOXlvelaedVadTY9fiQqj/8esVRj44I8GxZcZck75TEe/jsPswuC:DW8jlk4HSGYGOXlvelaedVadTYRiQqj7
TLSH
T10C12BDF783B5466ED91296F09A14AF2FCE18045643BC3C198AE4AF4BA3F2471E141B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 12fa126508e1d983f479a4bb09b41eb16d1a69af352773da86a1e1bfd4c5c22b
MD5 e9128b8e6ef2329c0325093f9a81bef5
SHA1 8fe12034590909ada34050f766c2c49b40aa41b4
SHA512 afbd790c3d1c73f9453417983b318e84ee3ca21843fcd22139111ea4c60e750307acf6a26f51712d3d3cf9b569c91291f9fc83a88b639c5531b850a40ac0dc64
SSDEEP 192:DWjjyj+wJjlTeTge/QVadTYa75KfcZTGtjsPsI1fi/uQqtj/8esVRDwRlR5OIsjj:DWjjyj+8jlTeTge/QVadTYa75acZTGtl
TLSH
T180F1ADF793B1466EEA1196F0EE14AF2F8E18045343BC38598AD46E5BA3B2471E141F4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 d60aab106366b8f99292281e9f145bf0e39241e02b56f45ba5a779955160683f
MD5 0f276a62942b9297a14bd36835dd0f7c
SHA1 f26722dcd50cc52bec0e8111b4f32e52f4ffe40a
SHA512 cae20d5fffae459db3939fccbb6c3cbcba4090a020619149cba9fee125985bb1d906a285bfe95b0094b64e4a2b3b7410ec7e504c74af2fc42a49e72a8d27521b
SSDEEP 192:DWjjyj+wJjlBeRuepsVadTYa75KfcZTGtjsPsI1fi/uQqtj/k8esVZDkwAlpLOIL:DWjjyj+8jlBeRuepsVadTYa75acZTGtD
TLSH
T1F602CBF783B5466ED91296F0AE14AF1FCE18045643BC381A8AD4AE4BA3B2471E141F4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 fd24c19e44b3f3acbc712981e9bdbcc4e3742d99c039220b36f9ce949889cd36
MD5 9fa6aa136a6a245a2c2aae713b27ef3e
SHA1 68ec3e1deef9401b10ccdf9f957649aa8a70c3d8
SHA512 a63de2dc5e2aeb332e2316c65818c2cf30b778e8f3e2be37462660b8b52f7bd17a11c0f14fbee16d542d0c6556529c73fa741d2c57019b97b365ed2d824b7479
SSDEEP 192:DWwJjl4HSGYGOXlvelaeFRVadTY9fiQqj/8esVRj44I8GxZcZck75TEe/jsPswux:DW8jl4HSGYGOXlvelaeFRVadTYRiQqjI
TLSH
T11012CDF783B5466ED91296F09A14AF2FCE18045643BC3C598AE4AF4BA3F2471E141B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 9ea09520dde5b35aa032de2340d2ba26aa487f854010f3dae98e68bac36ef3c5
MD5 b3f12b51b6472831b4223d9f10fafae9
SHA1 457a94394f54bf82ed61f92e77933c73ce2dc889
SHA512 db6799b0df3c5be42f860943fb949e27ef61de561cbf1bd8ec637e701ab34919af48fcfa55533b56253764188a96a2f1e8128f8c300ca9c3f3ce355a97e33647
TLSH
T10AD02357234670755D5D7D8580D5AD4FE76740610C81DDD751D096D8053149C4707181
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 5cddae77e26eaf00b28e1510ddc793db4c49d343ec6e32c56248e16ee30cd26c
MD5 9d294f76eecd055a9aeb9798bc9e1873
SHA1 ff9c26ab4b10f70098afed02be817abfab43c6d2
SHA512 e27bd10d6a36f9613775f2b926b9e309dfa52009baab6587075906dc2ac3ee76d86f66cdad844d6433eef6a6e4c76d83d6e53593262793145b465980034da222
TLSH
T1A3318DD795BFF4AB60789CFF4E4A7D051CBAA832068158F5DF9A826CB0C54F30A16053
MD5 SHA1 SHA512 TLSH

Submit Download

b9778d4d-9234-4c49-b9ea-5bb8fc5cdf61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b9778d4d-9234-4c49-b9ea-5bb8fc5cdf61.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 59bcb57d629f427d6779c4ccdd8ce18ada762e940c675cc0de3f9040e26ab2cc
MD5 97feb84b7d24b5141fc188da943d3e5e
SHA1 3b71a16fcbac94903d6c8be2d570a44f01f0e3f4
SHA512 709bda4c95b9bd026d0a8d9a4cdcafd328332215f9500313431412f5d98d8b5174c2969ac919410953d2ddfef471b385dd44c93a577fa5b585363c9a5eceecd2
SSDEEP 384:sxRvHlF/fas6y96d3AJO4F7lHINiWv/58AQ/HUg:szFF/fUyq/59SHL
TLSH
T11E82F8066974597BDCDBE219FA457F63E7F81063A5805E48AEFC9A0C00E67DD2203C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 74848470d198c36b6fc2695872a52891b780067217eabe495696291f4afcd9ed
MD5 053ff126f5db832389ec154f0bdb7b61
SHA1 62d2b36b53fde86ac4b443dd4620838fc07df98f
SHA512 5a79684f6bfa90877eeb8cb25d9abaeb4cd07ee429de680b395358f81026e48a68919c079bf2dd537975cd8f294a9cd7097889e0efc893b7a5f184d911b35258
SSDEEP 384:sxRWHlF/fas6y96d3AJO4F7lHINiWv/5f7/7Ug:s6FF/fUyq/5r7L
TLSH
T1F982E8166A74597BDCDBE21DFA457F63E7F81063A5805E44AAFC9A0C00E67DD2203C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 a2de71126567b3f91689b7e71de2b1a3d19803185b2ce1289c833fbbd0db0591
MD5 ad9f94f19943b47b2c12768f33653327
SHA1 b9ea8cab56c7506d014bc4d9b34302d05fe7e704
SHA512 8dbb36f24ae14964b08b071cefdb18e4aaa5b5fb647b6628a5de6b3218a6853328d4524cb074ce141881a0aa305b7ba345e32e40b83706a79c25ed15c69fe287
SSDEEP 384:sxRWHqNF/fas6y96d3AJO4F7lHINiWl/5Wv/r53VIUg:s6KNF/fUyQ/5mtmL
TLSH
T19E82D816A974597B8CDBE21AF5457F63E7F8146395904E44AEFC8E0C00E67ED2207C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 8f3ab950c0492c497f5869141ba0fac2b7b83d47e84ed9bd4c18b8db4d702d04
MD5 bf675d5b4b85c41654ff5afb2de5db48
SHA1 5b774635fd3c47ecb2c4cd115c41cdc2dcc6d18f
SHA512 627073b9d8e131d752addde0017b7ee805c9c5be1da6a2ee648a7257193286dc0aaa174d867fb988701a354021a9aa2c352c66b6a9d2315507e8ae99d6bbde89
SSDEEP 384:sxRYA8F/fasMIrd3AJO4F7lHINiWv/5zh/aU5:sMlF/fKIT/5xaC
TLSH
T13872E8066964597BDCD7D21DFA45BF63E7F81463A5900E48AEFC9A0C00E67DD2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 dc60163cdf09dd011f4a77addd2a896a714093950e0c90dc76ae44b1cad59570
MD5 32921f293a30744561851e1ea59c6cfe
SHA1 d0a6c404991f82ee506c2fadf1ca7df3d639fb98
SHA512 1a0864eab278abfad9845ad974e5d8d3f6f79bcc91a14786a37a16f3e340dedd3a78da041168de1d2fb79129fa8970a48522b9c89703c5c7325f6fd16ccf8313
SSDEEP 384:sxRWHqyF/fas6y96d3AJO4F7lHINiWl/5Z3/r53V+Ug:s6KyF/fUyQ/5xtgL
TLSH
T18482D816A974597B8CD7E21AF545BF63E7F81463A5804E44AEFC8E0C00E67ED2207C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 33KB
SHA256 5f54fb613a7259fad778c9676187a55dcb440d4bf3e1c43690c59b22c0a629d3
MD5 473d77330308064bcc59091c04c0a020
SHA1 84d398a0e4e7f3854d5c97adc3160e8362b8725d
SHA512 9308f8aae559608a6dce3f87ce037f00bfa33ec92cd13bcc91b257d47d42b9cc78cecaf02a1b995955801ca5b18f623ff8398a7d988845d57b8a074cab28c26a
SSDEEP 384:sxRWHqOF/fasRWvpu66s8qMpRiYnazAW8pZS15posJWeT+h96d3AJO4F7lHINiW5:s6KOF/fTYpu4Mnc7WeT+hQ/5HtD7
TLSH
T12EF2F905A924C8779AC3AD19B47D7E33D6AC10535684CEDA5AECCE1C00EE1FD6B07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 303afcf0cef55d17bcc08d9aec17e377217a348acfbe2b6be4c5866bb99c91ba
MD5 cf1a795c5e8b02f181a5b7f7a0035b1e
SHA1 58297e5b9be0ee2da4273e9a7d3ca190d8ba5b83
SHA512 16aa0baaab1e2fac2d9389266b6f167d9a62c4018be0bc2fb94353a059eb023dd49113a58b380ab62c7df504d94eb74dd35c42ba9279b3e62169fd249890bc43
SSDEEP 384:sxRWHqmF/fas6y96d3AJO4F7lHINiWl/5Wv/r53V2Ug:s6KmF/fUyQ/5mtML
TLSH
T1CF82E816A974597B8CDBE21AF5457F63E7F81463A5804E44AEFCCA1C00E67ED2203C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 676d2fb3336f033094aea6ce1057e632e9b8947909ab34c8baee3f287a317666
MD5 b751d9e0247eee95887e1a64c3a74d32
SHA1 18387cdcc03d30f64551daf7ebae8dd021cec8f2
SHA512 89d5368bf26a63835dd2c57a859bba8e63fb3cecd0e52d283429d9b144d4f19cd713ad244fb6b8228b7e1f49b856bb5f74bdcc398a0e9b782351e5e640880129
SSDEEP 384:sxRvAlF/fas6I96d3AJO4F7lHINiWv/5PJ/oU+:szUF/fUIq/5lo1
TLSH
T1D272E8166A74597BCCDBE219FA457F63E7F81063E5805E44AAFC9A0C00E67DD2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 ad75b15f7c1bed94a7f2f846fd3e561cf0b97ad8066ecf800720a9311845ddd0
MD5 c9fc91039f6753bba07f568ac517830c
SHA1 b871cb7785b951ec880c8e507caedb9b9f939b00
SHA512 8c1eaea172500d23327def0a70166e6e77e921d440371624c1bbb4894aa66c8865bb1c37099e6e41d2f80805fcf1a1b505f49b07b793c7088c6065f6f5b2533c
SSDEEP 384:sxRWoqqF/fasdWv6u66s8qMpRiYnazAW8pZS15posJWeT+v9443Sg3A1F7oINi0e:s6vqF/fDY6u4Mnc7WeT+vy/5kyGx
TLSH
T132F21905A524C8779AC3AD19B47D7E33DBAC10525584CEDA5AECCE1C00EE6FC6B07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 64c3c6778f54fd706215287588b8511492b80a1ffc64b2773f84fba1d1db6d05
MD5 81751611086975ec4e7446a896641854
SHA1 973fea162a76c1cbf333112db7adc7456082a9c4
SHA512 f48dd632fa4db62c1b68d17a48846cc2d35a1575465468078b9efbb068fd48f5d460f52fa41ddc0fe52c0f306c004bca6c4a6198295b8f94aa9e8608bf978c6b
SSDEEP 384:sxRWHqQF/fas6y96d3AJO4F7lHINiWl/5Wv/r53V8Ug:s6KQF/fUyQ/5mtGL
TLSH
T13282E816A974597B8CDBE21AF545BF63E7F8146395904E44AEFC8A1C00E67ED2203C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 a84ff23e484aad37173b7dcb71876ccd80713fdd56cad6a2a3a645a1f488b946
MD5 f6bb555725305d6defaf8a0f56d95d8a
SHA1 2fb75b3667e34e0161ec859cd9febe8b290bdc2f
SHA512 bb9cebe32ca7ce4b41f76afc188bbc56789870877a91170e4b8c34003496776fd8a2295314bee3021aa6d6f123d2a2917f88a00beb9a264954f8905791e40eda
SSDEEP 384:sxRWoqzF/fasdWv6u66s8qMpRiYnazAW8pZS15posJWeT+v9443Sg3A1F7oINi04:s6vzF/fDY6u4Mnc7WeT+v3/5HtDx
TLSH
T1ABF20905A924C8779AC3AD19B47D7E33D7AC10525684CEDA5AECCE1C00EE6FC6B07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 1d8cca5f5e0ecaf61633369cfcaf455a933d731e99edcbdffd7d76c341f1c958
MD5 1a5ecc71d88252ccd3fe4e5bd1e05b52
SHA1 b4988df285d8bb2c0c95722fe776297c82dbc41c
SHA512 944f89696b554f10c9bd2644e3f00a081878a8ea74e20b4e008c99b689e59c876faa9d33b7f25fd67eba0a87d6b8fe3656053fb746f8b760eae67f5e9350cb9f
SSDEEP 384:sxRWoqdF/fasdWv6u66s8qMpRiYnazAW8pZS15posJWeT+v9443Sg3A1F7oINi0Y:s6vdF/fDY6u4Mnc7WeT+vy/5wyox
TLSH
T12DF21A05A924C8779AC3AD19B47D7E33DBAC10525584CEDA5AECCE1C00EE6FC6B07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 714ffa35c58bbc5c68e5b6ed75dc99c313545e755793a40aa213f4207d89fb3f
MD5 d03330dfb9d9fcae6ecd9f423e31c3c3
SHA1 2b40aeba5bee308d55f39a0fdd34009a335e1177
SHA512 f40d846f549f8a154016c3387236df98088845c73a61b1dc0043b48f2a810e87571306b1e2440a0916cbe4bb23938237cb59b371311321fc371400e186b2fa9a
SSDEEP 384:sxRWoqgF/fasdWv6u66s8qMpRiYnazAW8pZS15posJWeT+v9443Sg3A1F7oINi0C:s6vgF/fDY6u4Mnc7WeT+vy/5AyOx
TLSH
T103F21905A524C8779AC3AD19B47D7E33DBAC10525584CEDA5AECCE1C00EE6FCAB07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 02ee5a97a41fbb59028c92ee3d2ccfc9983213815e24b745e44bc08f3e1a2843
MD5 f4d5e652c2028c72b3260b1755d069ad
SHA1 bf33f75cb8580b5a08e983a17c38f7919a542c9f
SHA512 b4118c50ef546e765eb99c01cf22c01ed556ec5af25be11db8b619ab402c9603835941712211aa44fa51182c45ba9c775cd020037b44fa0017a1661e3a6211af
SSDEEP 768:kfISRS7pLuL7CvWgd5fWb8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6SV2RroHh0Pu+7:kfISRqE7CvWgd5fWbu1jaVU2qHh0PR7
TLSH
T147E2DC3B640CCB7F4F8049DCE8297E9AADA802CB96D8CD9447FA850C03C67EF55165DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0e35356d-9574-49bd-8e18-521329540ed0\index-dir\the-real-index
Size 3KB
SHA256 da770ae0c40eaa75eb3abda00f703b5b7fb009419a56bab45963e4a725616dd9
MD5 d5d1e3dba5bc88729e5cfab69b737721
SHA1 e6a1ea9c3af2393d893421412c68b83c0d111af9
SHA512 67d9c56f35ffaf0807fe6eaf3df7442e658d8bbf4932946a88d40bb168bbaa5285ff2f8a0dad1e1c095a5aa31a463790865328db0db041abde5a2b8b5a913114
TLSH
T19E51E74E0C4A2C6DD86D05B258FF188173797CED97C49A07269DA130A8D333A3D5510A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0e35356d-9574-49bd-8e18-521329540ed0\index-dir\the-real-index
Size 360B
SHA256 b3acebef1608b2ddece51b05316e8ffddb4b81fbe2198e4c105a7bb621cee909
MD5 1ad5b9c0e6a8d96ebabb8d46dc67ccd3
SHA1 d63a8bbbf234036f964b0c0be4fd9a0fc1d4635b
SHA512 1ff0d6e7884d658391907adaf969a03eae3aac6b46fff7010cc420ec8f001c7fdc710b8bfea98ed140de30b1f0e7aa1f0aedce50a688a1091fa42a15df25f0e8
TLSH
T180E0EB8E4C410883EA222C750973288E333B09FE2A016F2310FD0129A94D62C144B201
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c7297.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0e35356d-9574-49bd-8e18-521329540ed0\index-dir\the-real-index~RFe5c7297.TMP
Size 360B
SHA256 2f6c17e7c0281bd0c68c5d51253acbe511b539348ef34f7d2f37eb51866d6609
MD5 26570a9cad7d93e8a4ffc445e7305d3b
SHA1 108fccf3403531eb4c54523227109d442b13664c
SHA512 338221d01d565661c52e23dfc1b30857e1a368fa40cc2835bb11ac151ecbbf051a17dfa6d2d870ac2ae69a3109b177a27d714ab1b4092877485dfc619cf96110
TLSH
T105E095DF21801CE3DD3516B45943931F337F08253505870710DF1C5E555579C4445746
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1ea4c317-f588-434b-b2ee-af07c2becc76\index-dir\the-real-index
Size 72B
SHA256 64a4546eb04af9fc5fb2da423f224fe69788e1e21127062ae1fd909a671e9cee
MD5 76c57b99719e85e74ba55a0eb83eb26c
SHA1 229aa81422278ca18bbe688390ebbe40e7c7982e
SHA512 00cb1e17da2a9838f8daaf6e9481707e9f7b483b58f0658dc8938b7773071dc609d099c89069d033c40d6a2ea72254e0249ab27d280c8909eb9dda1062ecce0c
TLSH
T121A0021813C88201D00222B1B6DFC1463BD489104201131DA5F0C244D8515CA4D4605C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cc7eb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1ea4c317-f588-434b-b2ee-af07c2becc76\index-dir\the-real-index~RFe5cc7eb.TMP
Size 72B
SHA256 f64d8af841536604aa83892fa31266452b031d7cecff95d6f0a170672017d706
MD5 47f7ae8707e2604826062e649dd36f88
SHA1 2668292e173ba5ea6e52e659d62478e089b94c27
SHA512 b0d80ca8264d40c31165ecf6a3eabd772a83db8296fd077164250a24e4790aa812a7727e4a3ed7251fe12a567d325796168e7eaf27171012e3f990d165295b00
TLSH
T104A0021003C89686C01225B11653D2C1B6A08C111180135E70E50284CC60DD0464110D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\55de7a66-44c4-46ff-911f-27701f9d5078\index-dir\the-real-index
Size 2KB
SHA256 02d12350a7a045cda4fb735070139c560d3cacffad3d324cd15a5548c502e65c
MD5 1d06684cb0b92ed533011b6451dc0ccc
SHA1 1c913183bda88da43e8fc0583d2f44a12b030bf7
SHA512 1882fa87155d80eb3bbcfa785a0b332cd9167f7d68c97111a7b17ff02e64e12f575c6b08338e40b2a19321ced8028257c830e3c503c03689b0291a23e7c9838a
TLSH
T18A51F88D0C091EBCE42C96732DF2098A37781CEEAE989E0329FC563079E72291D1640C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe673700.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\55de7a66-44c4-46ff-911f-27701f9d5078\index-dir\the-real-index~RFe673700.TMP
Size 48B
SHA256 0e45dad2b0423e84dc8bdbbbd8e6a20bf39633850902e189c2fa2b326aedebf6
MD5 14b081ded1053f908a317ed71da6f116
SHA1 4acafbb3713930273519f68ab5b1bed803e19415
SHA512 cf1eb5370e0b7d805b2b5e176af6ef38ad628c3c37e5f23fbf22b4b24b9ad9df067184c8fc069e2dde2388d6262726510a20f267fa6365ba30688e5186bbb23d
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 d570c21d7595ed73db4734762985a5df170ce4600f50546844f4720d9d93ba21
MD5 e76b1e2a1f5ee3d31490a11c9fbd0b0d
SHA1 5ef1665b648ba3bec9bbd5282fabaf4eae5fa365
SHA512 9cbafcb7a83bb02832ec7a9ac95380b4018391532cad255ffa17eca1ee8d67fb9398a1375f1ed6a6971f5ddd7aea1b8a330e850c9a6de75c4c6644641b3b496b
TLSH
T197E0C0BB2DEB1854F99FC3F7603694700142BD10CA0AED4E901A82C314B13123027CB1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 259B
SHA256 a7a50ef9ba50b87fc7ba8c4eee372b0b6a1c337daf004ea1ed839b0e1cca52a6
MD5 0dadb8427e57e066bf576565cee2b013
SHA1 978038b46783890db4639da2a823b995cc5a5dce
SHA512 f16b7a011034afbedf8028804f67fd3305a4c0d674a5543e770505a648c3c1d4d2668ef4dca0078d68ec4290c357b893717b4d5d64bd21f5ffa1f0d2204846fd
TLSH
T1CAD05B7329E73900F68797EA947055A50266B94CC519AECD801B5EC370612521405C76
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 490B
SHA256 a3db8bb0c6e2ae13deb6369b87bb566381eeff9512b34e8ca000ba4fbc201d10
MD5 d03d7996feaa3ea54851135e1531a6a1
SHA1 ab9f71cd32c91b2f47d159ca9b474a034df143e4
SHA512 6cd7e5ba21fdc47e83b98b63341e33272f47cb9df6e7205995683344ebd92902dfd069dfa66c3247f8929aedbde45e3a063c6b3edf1c7a275b76daaa5dd090c4
TLSH
T109F0DCB62EF72810FA4FC3F7A07150B10102BD298A0AED4E9017AAC320B13162019CB6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 161B
SHA256 5440cd1b73a92a823498212392c7160a54a3e746013e2f598473b4d873e2ce3d
MD5 720bc6c917edb57ea88e5f4148410353
SHA1 b874d7997a57f1923d2b78b35bc6fd589a7d554f
SHA512 0ccfb6e1457a9b151a67c727360caab0a3a835e079fba1a783fbb9d57a6140709f1c6975ca1caafa58b05be67cd76c5f8c1b010b7f9a8ff1755f21c4ab06a3d6
TLSH
T175C08CB318A73801FA8383E980B114EA422AB88C4A18ADC9802E8FC330612622412C3A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe66ed64.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt~RFe66ed64.TMP
Size 386B
SHA256 b1dbdb5cd675fa364c86dd4b080135cec3824cd086141acf2fdf034e91c7378d
MD5 dc6999834da0b53ba2f5b8c48e884bbf
SHA1 541ee44f0d7b6f7b8c4c4968781529be76a15978
SHA512 9c2d465a89ac8b6e68e5ef007bea8d4e45c17a8fb840fa4044c37f6a5f3e54badf87c11bb3903bf04ccd68ba572e3e45ea392d53553baa6e4fd1efa889c3433e
TLSH
T1CDE068B72AF33810F98BD3FB947550B50256BC18C909EDCE901B8BC720A12461415C7A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 08ad290458b586b51a83adaf2b8757bd808325b603c4e5b3f137954f315c0ed5
MD5 a8edaf9ee894eaa3bf9fd61c30b41139
SHA1 b45d1ab78dcf08b941c459d81d2fc61c9ef42280
SHA512 2ef6d2faea7fdad9ad9569ad6fa43f49bba6a3921c4a5ad0ef2fe9fe6b35c26c70e91e6481a2fa949b5e8086d8ce68a4a02ae9191c981a8ecfa3b9f1cef5fc6d
TLSH
T148B0112288200082C0A00A38AAAA80CCA22C8EA8AB0A222802A800208238202C20A808
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 f79e96c1a98941e75c7c59028725c0607d774f34aae7e7f6b8b3ee816bc5f8f3
MD5 257b7d68d31991efb16f0e2bdb06b302
SHA1 28ff0292ce43b6c554bb2ca66e115929aa225c47
SHA512 d36d1752b6891db980851e44479f22a8f14ea1826be80bad6da787ad1a0c26b986d27ed2461c174531fb26f1a71c5130a63955ea482120c965b8940b4130f4b3
TLSH
T1F6A00225E9D49242C0810A70A7A705DD6318DCA89715232944EC445DCCB817285E691C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 7d02002a2c92cfa0e48aecc2f5f027f85b03eed4ebf0553573748afc6ee942b9
MD5 2afb874dfd061a84ec6f4e6451cd4143
SHA1 2d2526a9574ada1815a7cb1f186feec186d6be4a
SHA512 b4ad79f1c807051433202d7396b94b16b8261d02f5ecab4c79539bf9638090909625c08e32c00e03846542632d50cd825197192eac71d0ad4b56778a08ee02be
TLSH
T1A7B02431070C100DC0040F3C3CD1C47C731C5F3CD74503550450104044741110701005
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cc7eb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5cc7eb.TMP
Size 48B
SHA256 895d31d4a19ca26800820197f4b81b450a1bee707ef3029d23c943002fb689bd
MD5 d03ff6940120ae408381290e486e3c29
SHA1 3a0eeeade96db79f722b187ccaeb256226e87928
SHA512 ecfb184b50ab1efe5ada1367d25c18b570569ce8b3d74f2155b9b264cea18c435a4ddf9fc640633db3b7f9cec3969b9d5a95687159d2c1a7142e8ffd6668a2c6
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 84f5e61ffb02d9e28035e14f253db68de97d125b40de24df1e2e75fa3604f192
MD5 5b102f114153a4f8d8331ebeace37c1f
SHA1 f7b2007b989eb7147de5093dd4cb2cc4e5eb5267
SHA512 a23cb564f384749a6bf872c9fb61a823389350e807b5c018b00adf176c8fc95fde4c78f0bd71295d6872c7cadf1f2ce758b9126470607b570d1fd19fc84a06ee
SSDEEP 96:KcuIKvKSq8AKN6xKT26ocgkwcRPWykKeBWAkia6xoa5W:u/P8KT26ocgNcRey+BWAda6xoa5W
TLSH
T1C3912441757A43813CBE290D94B7CA16D695B063706EA57FBBEA00A20F66F410FFC9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5d5789.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5d5789.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 8c2a27dc5b5ca68c6523ceea48894cd054403f784759098ce5fb2ec0b73119ae
MD5 c7428f9d13a9a9c99dceb6c93f8e3837
SHA1 6787e2a9763c347c4ee92e6df59ea810c241e20c
SHA512 d4aa58c091c720aaa96039b23ac08a138adc3048d5e082ed705c2ad4fcf3bb277df0b4fba4aa69ab4122c4823eef7d8536e37af4dd2c63d19a6c8c9cde56a6f6
SSDEEP 768:/rv+4UNbdq3FGqsLwAAam6aQMGdjWca4GhfBcPeU/:/bsbc3DKmaME6pEH
TLSH
T175F2AE31A8689973DDB79A99F21B6787BFF021A384D40A84D9D92B0D439748E3307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 1685d9224b521a1a22cede5b141e21caa7045859b9017f58f62e4a13588e97fc
MD5 68c7a64bf656ef8a758dfb24c961e1f2
SHA1 1694c91aa67da8cbcae4831fcffc64aa2e602410
SHA512 b04960d5c467ca518a1ef5b450793ef8a8638c7a8ba96882d9f85053e4ac40cc908bee4399005c8e92ee2c4a70d839841b8ee93c886200ffff0b8a637976bdc9
SSDEEP 768:V53CupqsLHLhl2Aam6aQMGdjWca4Ghf9QhB:V53tOmaME6pQP
TLSH
T136E29E315CA89C739CA7B295F75A2783BEF051B388D84E44D9D96B0D029358E270BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 008adbb3f69be8efdea5ae3f46ebe90bfbab5b04867884647ecb0cc0b773d665
MD5 d6aa29cf9f203979305e0f197507226b
SHA1 fe55e77ec9ebe4d16fb941bc3aaa571965c6a997
SHA512 aa56098d7c3872a685ef2ca2136f322ab084dfeb15d069e255383eb811f27d19914c5c8b7739d03af43f9ba1ca5fa7cd4f39dbfba92205bbcc02873e814cf417
SSDEEP 768:9Fh53owgjUw8ANW/eLIAam6aQMGdjWca4GhfetP3hqJcr:153JrmaME6pCPhOW
TLSH
T13113F7F588D7897BD89E6787933D2D0299BCC263B5A84994F7D41E0CCD620BFE306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 c05072d02036173c44a2adb77aef69a5a3ddaf7fb1add632c8cfe43a7291ab3f
MD5 b8e687a27e2b77cb2fd68dd60ec9ec64
SHA1 cedf35c275c6b2a8fd37f33486773a158321759d
SHA512 8d6a71407ebdfb082e5a956b0c12b1c1f739bdb3aa23d326598899c0b95e6143efcd1dead4db2211d52caa9d3f6f1e057c575324011362612049041aa0097950
SSDEEP 768:VV3CnpqsLHLhl2Aam6aQMGdjWca4Ghf9QhB:VV3SOmaME6pQP
TLSH
T122E29E315CA8DC739CA7B295F75A2783BEF051B388D84E44D9D96B0D029368E270BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 658cc778009dcc34bd8bfb43580158bf34a7f26373be1cbfccfd7a9aa89cecee
MD5 6f074cea5227e2b6d9f677ba8dd7fe6c
SHA1 a79c9a59295364c85c05cc9232a33d8bbb4615fa
SHA512 7d998dd1cbcc6badb62cd855d0a268684afcef71994f2ccec842e67f99a6272a4fc54bdb4f13bd500e02bea1b98c27c707921aff874e0008677ccb57e57073af
SSDEEP 768:BFHt3jwgGf9eLHLvAam6aQMGdjWca4Ghf9QhB:Ht3DmaME6pQP
TLSH
T10AF26C319CA4D97BACE7A786F71A7687EEF011A388DC4DC4D9D96E0D019318E170BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 d6a514c1f10268625f39849b7c2240706119c86f608361c76737632d2699aa11
MD5 4b19ad454146d28b3f76b793b77017b6
SHA1 af9316266d2666feb22d440fbdd4d8a044a1a1bf
SHA512 089a8728e06f6e1edef8ecf178b8cb9469a3d447f59c6a29bf16482d08d18934ee586279dc67208b56b0e83f3fa8fdb6be1dbe550d58645e0b1bdf30fe5cda52
SSDEEP 768:BFd53twgjVxeLHLcAam6aQMGdjWca4Ghf9QhB:d53xmaME6pQP
TLSH
T1430307F198D78977E8AE5787A33D2D42AABCC163B4884980F7D45D0CCC921BFD30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 f92207796bb88c8de46eb5df63fc95d4960a0f890358cb8b664a38ea1277b5f4
MD5 fcacbfa202dd2f472121c3d9995a0894
SHA1 79820ae25bd39ce9d345c02bab2bc8a5b4b7f4bd
SHA512 9d944d7509c9f7ba72aaad174a654cbe67431e010c66907a3f7a852fc923f40a3b314d9a2b214a0bebf9148eafca2c441f8b9f06018850dad3afd388f1e1ebcb
SSDEEP 384:nliFPZcI538Na8TUNTUlIRHfFTXRmivk8xIKTjf4hB+HR480cq19bwR1WhFDXk3u:sFH53nwgjx7CB4R48BqT+cjk3hqJ/1r
TLSH
T18BF2A2F988D7897BD89E6B87537D2D1199BCC163B1A84994F7C81E0CCC660BFE306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 09bd21b5e631b0e74e49575f06f0c30db4d485793ef61d5869769718720eb6c7
MD5 b077c48c3190bd6b2e0ecf1bdc3e8a32
SHA1 58d3f7a1b1f2674835e0ac911289c63699d588fb
SHA512 ec59481c3808ec1eb4debb47d6ce69916d689f5f5a46292a778ee91c302b01c47311ba26e1ebde97db69d77639cea0a3c2cc83f33d21f395757fb595d315d0cb
SSDEEP 768:+V3HnpqsLHLhl2Aam6aQMGdjWca4Ghf9QhB:+V3BOmaME6pQP
TLSH
T167E29E315CA8DC739CA7B295F75A2783BEF051B388D84E44D9D96B0D029368E270BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 f4213d5c778c0f3e733843020cede401ec16d7179e7efc62a5e1fd8a1cede78d
MD5 3abcd31287994b00684c6c29a38697bf
SHA1 f37a33c87fc1cbe36da01daeeeed6ebf54441785
SHA512 02ec69cd61e39095ac40656eb0876352b919b0199e8497f2d40a201e634c6bdfa0ae79fdc4a2d9c2cc8d8606e67ee5fe164782333c93260c2496ec0de2e738fc
SSDEEP 768:BFh/3twgjXAeLHL6Aam6aQMGdjWca4Ghf9QhB:h/3cmaME6pQP
TLSH
T1540307F198D78977E8AE5787A73D2D42AABCD163B4884980F7D45D0CCC921BFD30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 012f34aa9e1bdb5817bfaf203bf7a5547d911d04e59a0c7debc1970feda1d9bb
MD5 dee621e974f5c53e8f0155b98767d866
SHA1 4af006021782599e01142439587abd0a5bd6addd
SHA512 a11b5ffd80c33e1c62d12a28f544663ccf7ccea9973a4319a3b3fd5c0dfc3b6787dfeb1b35d0951f333a67c19540be04a736a746d1a758eaa9944f158838d1bb
SSDEEP 768:6rv+4UNbdq3HPpqsLHLhl2Aam6aQMGdjWca4Ghf9QLx:6bsbc35OmaME6pQ9
TLSH
T17703AF31A8ACD9739CB7A295F25B6693BFB411B388C80E84D9D56B0D029718E370BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 60307a0d1c7c4fbaccfba3dc02499256ec9e1e17723db9bc242da22d98f040d5
MD5 e51f62364d0b9662e879aa0aceabf058
SHA1 f39456186d245094ad60a08a376527945343708d
SHA512 c7162dd95a249cbb398d622754c670a249f375404745b3cbb952d4b9d5376cd131220dc5dc9e2c9bec48756a1264a5fb44f644ab03b60b90433f41bb6b3cc43b
SSDEEP 768:BFU03twgjzvxeLHLvAam6aQMGdjWca4Ghf9QhB:U03TYmaME6pQP
TLSH
T1E20307F198D78977E8AE5787A73D2D42AABCC163B4884984F7D45D0CCC921BFD30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 efd42dabc4e6bbe829210239bb7b63e2098c04d759077cf65164c5183db79828
MD5 b01adf8f77fdfd0c6d42fdbf32a6978d
SHA1 07abb463b13cc2eb547420e69f8775a514b89d8a
SHA512 334d4bf7a8e410d62234749a5be67e8f948c8664df6326cc41202177d1fcd11f9b5bf56f2447d2df63017bfdc247e116f501d44a34129e2469272c9693ed4274
SSDEEP 384:nliFpZcI538Na8TUNTUlIRHfFTXRmivA80IKTjf4hBlSDXk3hqJ/mJx/7Izfr:sFh53nwgjo7CBEjk3hqJ/Lr
TLSH
T14CD25DF988D7897BD89E6B87533D2D1299BCC163B5A84594F7C81E0CCC660BFE306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 8267c0cbab40e0e91246c97c1562d9625a3a0f8f806576c9bf5242836a92d78a
MD5 9eb92a3d2ed1fb71fda3ea2470c718a3
SHA1 7f3b9bd68568bcbc801c7768421882965b08d06c
SHA512 f1cf7d2d43759a277540390863be88100452d31b8878fff1bd561205f1b56683b3f49c8a6d42d3f7a91abb2b4907a59b8eebe492350e88dbe0a5b38567b81615
SSDEEP 384:nliFLZcIn38Na8TUNTUlIRhfFTXRmivk8+IKTjf4hB+HR480cq19bwR1WhFDXk3u:sFTn3nwgV+7CB4R48BqT+cjk3hqJ/1r
TLSH
T135F2A2F988D7897BD89E6B87537D2D1199BCC163B1A84994F7C81E0CCC660BFE306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 47KB
SHA256 c29173cf2c1bffd704a731dd23e37af8d81024bb03c889ff6ecb32982063c4ba
MD5 595027ff40971e1131d072242eaddc7a
SHA1 9c3b11fe13fac3a16bde5b45dacd00c16f8dbe7b
SHA512 461686a7ffc6736a31f96fdf18a9c6f92994619078ea6b3e54003b5b933feeb67a1a596a268f4561ad9af6b2d069af4f094f08e0dd22010b00f07f379a6b3058
SSDEEP 768:BFh53twgjaaBeLHLpAam6aQMGdjWca4Ghf9bsr9Ep3hB:h53omaME6pbnp3P
TLSH
T15923A1B98CD6893AD89E7747633D2D5699BCC273F4A88894F7940B0DCC6207FE706816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 390f5502c4d3b2dc4fa261bddf4e16a1ecbcdbe7ab516ca8355df1f8e6b61ee7
MD5 db1b4c4d7fbfe31297fa2956bd6f2b6a
SHA1 5484181062603ebe88d87786003292b68813b014
SHA512 90667823393307c8e2346445db7598614de2f56bff6bdb3bf307aca62e0725ddcff26d5098644fe27d809283549a61fe6e7333657913ab36491e4e5808f9d9c5
SSDEEP 768:Hrv+4UNbdq3j3qsLHLh0Aam6aQMGdjWca4GhfwQPeU/:Hbsbc3DWmaME6pLH
TLSH
T1D9F2BF31A86CD9739CB7A695F25F6687BFB021B388C40E80D9D96B0D029758E370BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 df854a1d486890334deb4d48fcae2498d0a33efdf5930452d3f2c3476bb33f28
MD5 559c9b1297104302995bb88a4d6a6e23
SHA1 bada1e347c27859a2fe3227880a7530ea09ffc6a
SHA512 4ab0b6d959132313bb08450e738ebe34799dfd74f282b3968018e366285ba49b347efe902447b0e5b6dc8a9877c42c77c64976bb7650deeef11abd691b6365ac
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d9b95d06c25dbe2d844390b4595931c0987272949e51e8fdc726ac16cad9f4b8
MD5 a49819484d50d0a9f01c0faf77aeab5b
SHA1 79998e3cfc200fa87baeacfcf27aaf4574a04b77
SHA512 d403af60b8c4065942434c1f1821e677ed89a0ebda13842f1825a232a209b30ea877c026460d241b5522a3ee4485c64206c0169b9351f6965e44d2104a70eae9
TLSH
T139E00203D30010C6C1181334008356242EE3C13003B20206DD2001583C277012D15740
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1fbd7e23f88d353a89cc56d25279792c8ecee94deec6ef5efdd188b574563c11
MD5 28603692e32c4209c97c8b2d0f6e19c1
SHA1 7b6f82f9519e10cad91f5e76227d04869501c488
SHA512 68f973d809f26555217a01653964d036bf194420b802a0ac378bd949b6332455575bac368d55bc521e4e059d434684cdc419dce114d915ef0c48b0b0463526c5
TLSH
T1DAE00103D30011C6C118133400C35B243EF3C13003B34206DE2001683C277016D15740
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8f66c27f68331fe584743e54c4343909c6c4059bc07d6239f45dd05f16138282
MD5 92326cb90f3ee94e5ef6874737847b98
SHA1 eb39f99d0b2ff8a9cb7a3d4e79eeca8c94933be1
SHA512 631a3eeb36fe26a4f21b64213c3000432e7432bc6d1cccc309feab4be4b4c962e25c8d49817b9475deb04c826a2a3b4362a31d00bcf5b161a7b510e9efe025d0
TLSH
T15CE00103D30011DAC129233840C36B243BF3C13007B34606DF2002643C777057D25B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 be96b1fd84ae3971f0ffb71e3ee57be2d9d22a8e326b41f4f2154d5ab5860cf5
MD5 bc1fa2d06c244b3368a7fe656c4aa316
SHA1 d3d91c9b390776c4202676644aecf5a91047149f
SHA512 85eee613a624386cef61266fd0c062cccd5f28d125bc6763c0bd183cd103e149ac05f762c4377fde0db5497e055eea426cc3d9f18f0680fe1c92b9acb65d7275
TLSH
T13FE00943D31011EAC129233840C36B243AF3C27007B346469E2046643C277496E26B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5d9751.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5d9751.TMP
Size 392B
SHA256 9c47fe4c965c67c436e77726561b89341b60251830f3b785e81337cf12a772c8
MD5 e273916e509eba5bc2eef2a97cb9cbb5
SHA1 a9871d0051c1d4ec9d66f47b6f62b32a7e97d5de
SHA512 7dfa5abba9cb40a0f3a445f1f2ce4a8504680f8c1e8780af85c07a01a92be4a8df7bcb179924d8bc5e278cb45c00e0903253f4810869f611f573d17581a87987
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 456cabf700fa787cfc3fbd029ffbbb50d01c292c610fb8b3ad4e377f591e7050
MD5 eba34545cb6b45378ab505c40357433b
SHA1 5cffd48c841e721dcaf055140d3404023b7d39af
SHA512 30ee3789b272b7f04ea3ed58e8e24a62dc922b54404aa54644a3157c186b3ed0c3d9287b19d5850b20936bc634f6ac81114f435a3be6ef33e6ef97f53e496f34
SSDEEP 3:MsEllllkEthXllkl2zENlgYl:/M/xT02z/Yl
TLSH
T11A4404077FD00405C50013304013D37103F0D45C05335F433C510C135CC77430C40100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 68dd4a6a0b1711003690c2995fd0b77ba3c9ae6c27dd853ff492b52bd7701bc5
MD5 bc900814bda342e30ca622ecf6edf1a1
SHA1 58549077a989da91156012baf9dbfc98ecfe429d
SHA512 c918bfea1c94a06e69e13a1edffa87e69fd698fc8ddf310fc5545d1e2a80613e7617e19110e5496fa91c8e8037bc67a81e300b571bebefb407ab16a384d97fa1
TLSH
T124111FD11C7E1AC6C6BE0E6FA4833AFD40D8A622F4E8307818C8E964927951E2451C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0e2427c94f170f6dda5a9a85ddaaa0dc0088899c19efbb73c05e3598cb541423
MD5 95ac3c4f8946991b2f4b965a390aa896
SHA1 864730b7c80ff406dcef7eefce17b842687c2bd8
SHA512 b13343c0c56d9943ac874eacdf49f82ad4ffcf8be1ca55600fbc7e0ba55c6203da11354a956eb54c11ee241672e2d8c66d8469e722cfb0c0129f0dbbe3c2167c
TLSH
T1942112E0183E1AC2D5BE0DAFB0872AED50DC9612F8D834382898FD68967E51D2550C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 4d2b47e594a4d5d9d0c079c2ff5fac0e47e26ffad46c371ad51e472b3dcd0669
MD5 54b0cf5610d4cbeadf10f35941bea007
SHA1 8bcec79787775ec6c2625b88611eb0de385e393b
SHA512 3f6d82da490f1b52647d9f376be4aa3159f57072ad2b52a048895bf7f53255d860bc12cc4b5af53cf9d9ce8c76cfab722e47cef3b58fa776a8ffd7e991630253
TLSH
T1841184D00C7F1AC7C6BE0E6FA0872AED40C8A622F09830381CCCF964917901D3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 d5ac77baa45b515e4e6bf68f5eae47691bb5ec7224327ddffcd1bf8495d01c05
MD5 2319d6db63cfe756568ff91ac497855d
SHA1 4e54cbe232539aa5f1e0154626fa49593ffd1e43
SHA512 6e614b54ac0858da1c6fce18f2087859cb207a505eb9157f7bf12be367a5b5b322fd74437369204d73df06c6b8acdf703bb43187b2cafbf2b3a987652fca4e26
TLSH
T14F411EE05D3D1AD1D4FD0EBFB4CB39FC94D89622F494303828A8E969963E61D258483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
MD5 1a8162cc03c34509f59ea81728419884
SHA1 459f726ff17ed37a212bf5291cc592b4745c3c06
SHA512 129393fb77432dda8e2c4181dc778f609f56572e69213f9f8cffc544b845119929242d41078170b2dc72a678116df340544edb181c2aff069f8cd4ac2a541083
TLSH
T1E8011ED14C7E1AC7CABE0EAEA0872BEC44D86522B098347818CCF864917940E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0dcbd641392011e3042d4affe27de6b54e3bfe1fed2f238c1326586e38dbfb80
MD5 5791c60bac582e1f169aefd7494e8b65
SHA1 fc220a11a5357f3b3134686ea018f8327ad6720a
SHA512 7ea314ea2431da694bb2d6ab59852e9e0458aedea4693b1d78718c5a54c1c97849afbf8992b044f2295319673c112e8e40e08f8732d473893c556cad7c1d8183
TLSH
T12A2111E11C7E1AD2C5BE0EAFE4833AED50D8A616F4D834381888FD68A63D51D2551C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 805060eed10d347c6a09a36669a1efe4d08182f1d7531c7c7b9db9386e0ae677
MD5 d2c4d5bcc46c57f800488ea89c8d7b72
SHA1 438135f853f76d7395a1c720089fb314fefb402b
SHA512 9387e89930828dc34c932a10647deba9bff2fa29a94eb939aacf69ec42f0fc2a22c6ba6afbfab0e95435cc22a4d0cf111e72b7ae3bcb6adfbc94ae9012de0f97
TLSH
T1AB3123E05C3D19D1C5BD0DBFB08739FC44D89312F49470386899E968963E61D354083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 824de99fb2d26a9652ce4d147d41b5f42d8eb58933629e98754b359ef813de81
MD5 c854428d46d0bd8106d3a4b26b2c17af
SHA1 3414466742a52757c163c28cc508953129b9067d
SHA512 1de7dd4e62a741fd98b414fa13966befbe757d57478e2eca3d9d49fc11f15eff8310633888dec1ae7c7fd5ab938d39ed341567261f568dc0a1838e5acd6da636
TLSH
T1E93122E0583E19C2D1BE0EAFB0872AEC50EC9211F49834382899E868967E51D3550C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 eacf1adcab56ea7707951a59a1d5415c83ac02e038089cf23fd24d14c5a52cf2
MD5 13fbadbf74e4028d922652c3b1fb7281
SHA1 2cd5239ea161b2a994b9b84a77f0296997a22ea1
SHA512 c1600d8593594bf33e8eea3c0e9b7153a41c3ed3ee25dc39ca5b63f2eb3a021af51fb979ffea4d93c39aff5ea2b0e6b4348c8eaaec269e725dc1eb353379cb59
TLSH
T1A43153E0583D19D1C07E0DBFB08729FC40DCD212F49434382898EC68967E51D254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 583288ed7b9a82057291c9c619c7465947a7f0befac2420d45c54b94081d0c23
MD5 2558d8a4d3e15c4782a8181fe3e3dd5f
SHA1 47aca39f72d1c255f0407b778a5d9d2af9ab6042
SHA512 e2100ff9de8fdd3946ea3df7d409a7a75c6befa5c19db19717e94cdcf2fed8691ad59fac32e76bbd792438c169e545fe8211297e0d529ec1ccb03e35917a2e43
TLSH
T1375130E05C791AD1D0FD0E7EB48738FC85ECD621F89474393898E9588A7A62D308583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 fd88bb8785775d17028068870908d3ce2cd58076c8fffc419b2cc51e538fc833
MD5 004dd5ddf825865c639de6e2dda4f0be
SHA1 43ded6dedb455949bf0a713eca72ac12639f4e8d
SHA512 a8b5aaad33a8b3c907b17ee1d5e4987fb6f8744b8870fca344775cb2bf4a00aa5ca8660cd23dcc81a7082321c9f3337d08fc89a8a2d03ac3b62caef1739f3a83
TLSH
T17B413EE05C3D2AD1D0BD0E6FB49B39FC84DCD722F4A430382898E958867E60D244483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 f4c288fcf20bc3b74f6825f068ebcdad904df92fb19284e3605ee9da021e534a
MD5 79ca649d65cb88e1fda81cc3530bf6b6
SHA1 91237aa1ea98fce37bb08412585f1b738fff67d8
SHA512 25469acf04e2dc35f5b9686eb15f862768ab631a24adce43b4757e933bdf361e091b2a6d1488416d7927b47a6772d9fdfa7428bc04d80a0cdf9158b0fa267434
TLSH
T164410EE05C391AD1D0BD0E7EB49B39FC85DCD722F4A4343968A8E958967E61D248483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 c4ed6d60ca3cc8c4653cd8311534d5881070f640b088b8b4991f5a2645ad27b6
MD5 3eb1ddd725c6b0ccce40bbeebb1951c6
SHA1 1207e4b7ca52bcfd32131f5e4423ccba80858e55
SHA512 12a839f2499200fc943db6609160fa26447eb74f4de0b6ec1c692d05baf78d87ad2b3f21fadd6a499bd8da3b33dc2446489ba24c54db6484717e5ddeff3be695
TLSH
T187511FE01C381AD1D0BD0E7E748B39EC85EC9B22F49034397898E9589A7E61D248483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 3b567525fccea584806051ac6ca98b3706cae43958896b35ce043a80e431fe1e
MD5 9ab3892c12c274b32c59d73d16551b1c
SHA1 86a59db2310e239180cce311f5a34cb5b351ed81
SHA512 3fc6eed9b1567f4194cf569b6d21453dcdad23aba4fbb3429fbc7924ef7b96575e94629d09777cc5d69c49c385d3209d38206139ee7d523bb372abea7d552d4d
TLSH
T153512EE05C381AD1D1FD0E7EB0CB39FC85EC9722F49434392898E9588A7E61D248483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 84503a389f001df1edf964537a132f727c8b7cbc5b7d6b39ce464e5da7f2c302
MD5 f90fb873e22b19ceb9b35d31488cb747
SHA1 606e609dab889d1c37ba5369bd9b1669ad309d14
SHA512 c314ac688d6c4ddc26fde18266be7a8b4f75a5532d26de9d6b4fa86099a40fd38d9b4c0fdb04b1b8296727c96b2cbc9db50ff30a6c718bf0c9640b5c50cc5509
TLSH
T1E0513FE05C791AD1D0FD0E7EB48738FC85E8D622F4A474393898E9588A7E61C308483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 9ee17084defdd1fd01ade8a4c651a2c7b8d2413af9844542c2fe2f2a18fe5e37
MD5 235cc68224986d11e5489685f9e154c4
SHA1 9fcce15f0726b59fb00fe3c3bd6b09f9936e7ac3
SHA512 b36fb1469874ba5a06887e187a3654085b8f4ec10c3aace92d623a4e354d8c704f9f967132d37257921b8e4cd1d443f1dd4ef6a7cd4a345ff671369ecab30de9
TLSH
T13E410DE0593D1AD1D0BD0EAF748739FC84D89722F4A430382899E969967E60D254083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a481f410c3bf1c5183dcb22ef6d4fd179f49e2d98439bf91328e48784b7835ce
MD5 f5b4943f32d786b7974333de4744baf3
SHA1 d9142c99d5722da3fc4a960f80a0284b036816a5
SHA512 318517c600a72d9f52774f211d4cabe5941ce271403e5bb6c263cacdcf0553d6706a6d4f9d2da8a2f5154c97d7bd519f02d8a224a4398a882c998a224315b77b
TLSH
T136511EE05C391AD1D4FD0E7EB48739EC85E8D622F49434392898E9589A7A61D348483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 e88fe0139bb3e9894b393fde1b8dbf2be3af661f4ada6e00ec73028b710845d4
MD5 a2ac8dea9bda459562f1d9617095a94d
SHA1 ba70e0908b8630a4f135082e9757e13012f99653
SHA512 a2b8efb5cb9ead18417f192d51f5e0e9c59797601ef59258a3a9d493ed7655c50627fea42550872dfb93a3d22f29a6c7cd4fc5e4ddcf0c6aed8385d351893bd8
TLSH
T1F04120E05C3D1AD1D4BD0EBFB48B39FC84D89722F494303828A9E968967E61D354083F
MD5 SHA1 SHA512 TLSH

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74e10820-558f-4c65-9df1-c2eb52865883.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\74e10820-558f-4c65-9df1-c2eb52865883.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json~RFe5c9245.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json~RFe5c9245.TMP
Size 132B
SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
MD5 ae3a19c226264ff6cb64877f1e7e7243
SHA1 f993431dbd09200fd92b7a04ee6711a54ad95cc9
SHA512 97e5dbf0663585afbb5e0f2b5a36192624eb2c898462abef65225987df632d30f74f05ac5a71175c4c59f75d9ae6d2e640d168e479cb26b9a6857c71efda029a
TLSH
T1C1C02B85CB1E0C854E78153D48420B2727819F0030508534445A490C41741CE00888CF
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_idx.db

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
Size 56KB
SHA256 6eef93f5a82bd64ba296609f722e3be848328edc27546a45cf0f21d82ac56a7c
MD5 8a5383e1075ad646de862c8059e717dd
SHA1 fbf52fdd5e645311614ad356bed313e3f51bd518
SHA512 ef2de581ffe295e9d49d4a00c6537ac04ef3a564e3b0b0765ca8fcb9844a5f65a9b0ef1b4899d65c1303238d7ff3e8f0a8afdb35957745221e31e94093ccd0f8
SSDEEP 192:A4JfK9OQ+7YTNHw4PzRhhrTpLBOOINBk3xfTJ5+mMzQw2RAwUfNbP1h1n:vhYpD79H5dTJ/YwS71bn
TLSH
T14143DC26B805EA06ED092C36DFE6DADC63307D15CEAA131739C1BB6F49BB0C04D69585
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

004a8c06-5b9e-4e19-9a94-ad89c6c55817.tmp

Path C:\Users\Admin\AppData\Local\Temp\004a8c06-5b9e-4e19-9a94-ad89c6c55817.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3852_2086468447\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

miniwallet.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\Mini-Wallet\miniwallet.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

notification.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\Notification\notification.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1180857561\json\i18n-tokenized-card\fr\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1316559645\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Staging

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_1663140284\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1204_897290675\edge_checkout_page_validator.js
Size 1021KB
SHA256 4bd84a271e6aeee39cc614bb6fa9e60ad465f61b6a305f9f69b995f9af910219
MD5 84017bbd252b4e3da14c6c6f7966da0c
SHA1 619a6e18fddfe2003aa3799e48a30d4e4d1be2ba
SHA512 719563802aa0f7154333295cad12e0184c2da0108bcd5e009e0828326094e9d49fe16b1fd5de874ce583896c32a85659d554d1816670ba17bc07b4f7a97f657d
SSDEEP 24576:j142AzAtsJvGxkVKA8nG8O4cELKXnhw5BD6Nc6U2y8enpBtSLVzhEiJsfaWZPS6Z:j142AzA+JvGxkVKA8nG8O4cELKXnhw57
TLSH
T174252B80E1E2253466D74CB960B7D2C4B5DC04587399F1E8FA6C68CADB0F94723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3852_2049002613\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download