hxxps://cyberleak[.]top/download/gta-vi

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 21:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cyberleak.top/download/gta-vi
Sample260905-1d3dcaal2w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3700	msedge.exe
876	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134331175802116989"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{D9FC777E-D465-46E1-A21B-58399C7E8649}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{01655449-CC12-4B4B-B48A-7459206367EC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3656	chrome.exe
3656	chrome.exe
5376	msedge.exe
5376	msedge.exe
3656	chrome.exe
3656	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe
Token: SeShutdownPrivilege	3656	chrome.exe
Token: SeCreatePagefilePrivilege	3656	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
4684	msedge.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe
3656	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4684 wrote to memory of 844	4684	msedge.exe	85
PID 4684 wrote to memory of 3700	4684	msedge.exe	86
PID 4684 wrote to memory of 1928	4684	msedge.exe	87
PID 4684 wrote to memory of 1928	4684	msedge.exe	87
PID 4684 wrote to memory of 1928	4684	msedge.exe	87
PID 4684 wrote to memory of 3708	4684	msedge.exe	88
PID 4684 wrote to memory of 3708	4684	msedge.exe	88
PID 4684 wrote to memory of 4724	4684	msedge.exe	89
PID 4684 wrote to memory of 4540	4684	msedge.exe	90
PID 4684 wrote to memory of 4724	4684	msedge.exe	89
PID 4684 wrote to memory of 4724	4684	msedge.exe	89
PID 4684 wrote to memory of 4540	4684	msedge.exe	90
PID 4684 wrote to memory of 4540	4684	msedge.exe	90
PID 4684 wrote to memory of 4080	4684	msedge.exe	92
PID 4684 wrote to memory of 4080	4684	msedge.exe	92
PID 4684 wrote to memory of 4080	4684	msedge.exe	92
PID 4684 wrote to memory of 3368	4684	msedge.exe	93
PID 4684 wrote to memory of 3368	4684	msedge.exe	93
PID 4684 wrote to memory of 3368	4684	msedge.exe	93
PID 4684 wrote to memory of 452	4684	msedge.exe	97
PID 4684 wrote to memory of 3476	4684	msedge.exe	98
PID 4684 wrote to memory of 452	4684	msedge.exe	97
PID 4684 wrote to memory of 3476	4684	msedge.exe	98
PID 4684 wrote to memory of 4204	4684	msedge.exe	100
PID 4684 wrote to memory of 2808	4684	msedge.exe	101
PID 4684 wrote to memory of 2808	4684	msedge.exe	101
PID 4684 wrote to memory of 2560	4684	msedge.exe	102
PID 4684 wrote to memory of 2560	4684	msedge.exe	102
PID 4684 wrote to memory of 2560	4684	msedge.exe	102
PID 4684 wrote to memory of 2612	4684	msedge.exe	103
PID 4684 wrote to memory of 4240	4684	msedge.exe	109
PID 4684 wrote to memory of 4416	4684	msedge.exe	110
PID 4684 wrote to memory of 632	4684	msedge.exe	111
PID 4684 wrote to memory of 4428	4684	msedge.exe	121
PID 4684 wrote to memory of 4428	4684	msedge.exe	121
PID 3656 wrote to memory of 1876	3656	chrome.exe	124
PID 3656 wrote to memory of 2640	3656	chrome.exe	125
PID 3656 wrote to memory of 2640	3656	chrome.exe	125
PID 3656 wrote to memory of 876	3656	chrome.exe	126
PID 3656 wrote to memory of 5032	3656	chrome.exe	127
PID 3656 wrote to memory of 5032	3656	chrome.exe	127
PID 3656 wrote to memory of 60	3656	chrome.exe	129
PID 3656 wrote to memory of 60	3656	chrome.exe	129
PID 3656 wrote to memory of 260	3656	chrome.exe	130
PID 3656 wrote to memory of 260	3656	chrome.exe	130
PID 3656 wrote to memory of 2464	3656	chrome.exe	131
PID 3656 wrote to memory of 2464	3656	chrome.exe	131
PID 3656 wrote to memory of 5184	3656	chrome.exe	132
PID 3656 wrote to memory of 5184	3656	chrome.exe	132
PID 3656 wrote to memory of 5448	3656	chrome.exe	133
PID 3656 wrote to memory of 5756	3656	chrome.exe	135
PID 3656 wrote to memory of 5756	3656	chrome.exe	135
PID 3656 wrote to memory of 1068	3656	chrome.exe	136
PID 3656 wrote to memory of 1068	3656	chrome.exe	136
PID 3656 wrote to memory of 5292	3656	chrome.exe	137
PID 3656 wrote to memory of 5292	3656	chrome.exe	137
PID 3656 wrote to memory of 5124	3656	chrome.exe	138
PID 3656 wrote to memory of 5124	3656	chrome.exe	138
PID 3656 wrote to memory of 2912	3656	chrome.exe	140
PID 3656 wrote to memory of 3368	3656	chrome.exe	141
PID 3656 wrote to memory of 2520	3656	chrome.exe	142
PID 3656 wrote to memory of 2192	3656	chrome.exe	144
PID 3656 wrote to memory of 2192	3656	chrome.exe	144
PID 3656 wrote to memory of 6084	3656	chrome.exe	145

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cyberleak.top/download/gta-vi
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe5ca9c188,0x7ffe5ca9c194,0x7ffe5ca9c1a0
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,9994753590557342620,16835742303069289990,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,11046037908213579037,3121271881503193682,262144 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2372,i,3938805244814880287,4449690581961948515,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,5396855096669942924,13731310857916150171,2097152 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,1307419595431671863,2487256936892461756,2097152 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,5270684301618042873,1778889979033618831,2097152 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,9884375442334401467,2523141155381365464,2097152 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:2
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,12231183269573693966,17802078296471392847,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5644,i,7282984784057584864,387604089157631350,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,6108673120652768471,815792209301864924,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,6108673120652768471,815792209301864924,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,4590556261945743125,6244454971462801767,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6436,i,12307005412299224205,8763536586712901203,2097152 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6884,i,1239248253459020243,11268460165400318960,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,6629036386727993175,2817540272445682920,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,1562227363593083467,16963425958525393853,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,16875532732206782054,2881933480290655760,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:8
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,9276173167916976152,17322675043455029251,524288 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4200,i,11987238178221773490,9468134694843326538,262144 --field-trial-handle=2284,i,1985546471027440518,15143373694984263244,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5376

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4120

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:556

C:\Users\Admin\Downloads\gta-vi-cyberleak\gta-vi-win-installer.exe
"C:\Users\Admin\Downloads\gta-vi-cyberleak\gta-vi-win-installer.exe"
1⤵
PID:1068

C:\Users\Admin\Downloads\gta-vi-cyberleak\gta-vi-win-installer.exe
"C:\Users\Admin\Downloads\gta-vi-cyberleak\gta-vi-win-installer.exe"
1⤵
PID:4660

C:\Users\Admin\Downloads\gta-vi-cyberleak\gta-vi-win-installer.exe
"C:\Users\Admin\Downloads\gta-vi-cyberleak\gta-vi-win-installer.exe"
1⤵
PID:4456

C:\Users\Admin\Downloads\gta-vi-cyberleak\gta-vi-win-installer.exe
"C:\Users\Admin\Downloads\gta-vi-cyberleak\gta-vi-win-installer.exe"
1⤵
PID:4980

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe5a9fc728,0x7ffe5a9fc734,0x7ffe5a9fc740
  2⤵
  PID:1876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1760,i,2381696225261325096,14158075233137771249,262144 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1952 /prefetch:2
  2⤵
  PID:2640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,10161115818798535521,13791036144720177519,524288 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - System Time Discovery
  PID:876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,8868347855571044154,3789445342990488127,524288 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,16763709107718055867,9373229976353921171,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:60
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,14467833697256237833,4336613490348734596,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4456,i,10035809568198756371,2378109614637520710,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,14149670383854070434,3400136279729289841,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,3877045120881990183,4161574281158353771,524288 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:5448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5552,i,17791385193829953345,1252519674455223229,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3712,i,13819921180677401950,10557930296758915243,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3324,i,16000410220011075725,17061932697599142432,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3972 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5928,i,196291315611197040,5321111336999789567,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:5124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6216,i,5351385780698053864,1997191096160802308,524288 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6316,i,15729498604381851738,982152209183673161,524288 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6236,i,3923444614946851399,7563539595180102433,524288 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6420,i,15745334367638725850,16882984458940028047,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6236,i,6723626873112180875,17863810866209966808,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6464 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3116,i,10735897194996615987,1683334979313084481,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6132,i,16773187738889285376,1722097157559549011,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3244,i,15873298167583068237,13033291529836536287,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5772,i,17545706357379245761,9407654287786689415,524288 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3440 /prefetch:8
  2⤵
  PID:5796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6388,i,482057502945448831,3622419479472645248,524288 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3328,i,8235040768751232068,16626475918561996036,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6148,i,14018952554763834812,14309689311754429301,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6040,i,7319475822641968849,9857724319640942235,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=3288,i,7079236270786784493,5611266216757653160,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4444,i,4608924590983887686,10302475834000336387,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6608,i,4692525690079211706,12839521060609677513,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6796,i,16253940662900185100,11894508404631209449,2097152 --field-trial-handle=1956,i,7395066766231436424,3564072113926184835,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:1756

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4896

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5564

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1bcc47b9321ae6739c2a606a85943a473e8abfba07a355f7c0a27a407d765c4a
MD5 749e07b8ba27cd823a81f19bedf010b4
SHA1 a3d998d3436e658ae49781e871d4b37f2782873c
SHA512 80cc79cc06387ff8533d3d0294f4db7e3eb576a032f2bc66c80eff6e20fa07a1ea5e7e7beebb0b706cb0577c99a632b76e95e5e80fdfb6f0491f9785871aa502
TLSH
T102E02B69C821BC270CFD471850155646E750135B2A90590F3A3D910DCFB162A91CECBC
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 344KB
SHA256 c1ba7027e790c346842569dc60319a75bb54ad9875b3a114cd3d60febdc1ecb0
MD5 a76556d1143eac7869c5cdd2ba75aee7
SHA1 62ace25f7a400460ef1550bd536b8006aff57655
SHA512 b6763ac3d83198054c3e24685aab797d60c39df22f0eeed2ff4217bbfb891efa1f2ffda857b079443e0ee66fa3e0b2f1cca34867fcdd8a709b88abbd93c33e4f
SSDEEP 6144:+1/dG8Lx2NjYH/1z2cvc5NFLhVke64uBSCGJ0qHQzr+LZ:+voj2hrvcdnlJWF8HQzrQZ
TLSH
T13F74231F614B6C6CECDE01C7216E44D5D32B8F52CB231ACBE649D16B04E749C8ED9A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b077dfb211cca608e0ac3acb829da788b1cbd9796bbde6334a0e6aa73b2114b3
MD5 b1c7a276bf58c3a038883907772a9537
SHA1 462e6153f6dff330dc4ee02d64670004d121a386
SHA512 c3a7019756904d1b385d35d5fc99be965af57171e00804204800f7c2cedba8402422c0472d9e5e728f61f3b32cbed56e29b3d8ca741b5ff530437810b41ad629
TLSH
T15421EE8558CD0C9DFF653A3D4CD12E5B222AE3C762EF2E5BC163D47061A33A040366D4
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 e2e285bbdd28907ecc34946f2e4c188c160b50aa4892ba6406d6c9705e929ef7
MD5 9ad40dfbbe3d7cf05113e167dd1a0499
SHA1 8e025a2c8b2b418bf18248cf5e74384f579b0f59
SHA512 6bf77863c12feecf21df8bfee7e99e3891f7864fe625594e47af6fd0b0dcee08363138444b22f309e134fb707d472a4f4acecc54c63dded909a60895e272c2ab
SSDEEP 384:DeASLei2JCgzmAfkA8wzJwJL+ej0RaaMKAEmNhVY0o8XqOHHSCa7Br/haYtIHfCJ:2uYtzt9U
TLSH
T16952E0B3C3D8C26DC80166F59B257E1FCE190928526C3C2B89E8EE5B93E2472D25124E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b647a32cb3e00caf79c51b48227aecac6be0398a16c6682b86a084c806f44a7c
MD5 3b1742cb7e2a98e4e00bedb1a42b3484
SHA1 325851158c732db79d3caa350521ba4d0e6ccfb1
SHA512 5e32b4f45d54706a9a81e95455dd1c51034a9dba17f729ac4343be6a5383aa2f148a46bfb0e2ef4fbc4c2f364822d5efa09577f717f2dc65b250d215db3fffb0
SSDEEP 192:BRvcBzJk54ZoKGOv7spAPRp22m6N9wHsb+WNnOL4qX2j+v6ZFqrf/S+VyIsnAUg8:BRvmzJSXqYUX/LKw0p2SvqFG3S28
TLSH
T15952D72EFA14693B6CDBC229FD627B57E7F5102121802E94E6FC992C15E79CC3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d1fb2b011d8ecdbcf4dfc947670c5c0877048cd05631802cc341d4716039f34f
MD5 b0d976c1e65500c3da3d36648bd66b07
SHA1 52e5fbb4c08764646205d397c870d9f00c2cf6f9
SHA512 7edc6f53771a1366d65287bfb5936d5deca4e336fa390ec5b53b093be4fbf54a514920f7e4c7692993fc8582c56f3b4e268e4eeecfe210747d85e38cf9fa9a9f
SSDEEP 192:zRwccBzJk54ZoKdOv7spAPRp223FqvY9wHsb+WNEidCXBdeUtW2mk+v6ZFqrf/6j:zRwcmzJSAqYUX/BKwAud2mTvqFG362e
TLSH
T1AF62B62BFA14697B6CDBC229F921BB17E7F1202161801E94E7FC892C15E7ACC7227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 81f2f24d49219083785fcc7b58d84747664e354564d281e7f33e1747c52acd93
MD5 55f71676fff38565772fd3e42a5a2d81
SHA1 63542c396efe1d30e42902bf9f864e1ceb0a8efd
SHA512 6d29749d071593d1e506f2fd151cc533b0020f535e776d2c2c48eac8efe424c7d99687baa9c8c1832b58dbc0e611cee070e8f41ba70ac8232c51c2dff0e9a029
SSDEEP 192:BRwccBzJk54ZoKGOv7spAPRp223F6rY9wHsb+WNEfOL4qX2j+v6ZFqrf/S+VyIsH:BRwcmzJSXqYUX/hKwfp2SvqFG3S28
TLSH
T19452C62BFA14297B6CDBC229F962BB17E7F5102161802E94EBFC992C15D79CC3227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 0c263df53861d223923aa2961b53b1bd83ed1cec56cab4b1eec4bbb543a55151
MD5 7279a9ce6db4c6a0db409565e7bc97d7
SHA1 7dc90ab1e724932f6650a2ffd55df7f1ad6c0989
SHA512 a2a90878f6cada98fb6d706cfa6d083f95577f4002d3af2e4a362baca4dfb3dad2c08c977a489c8d385ee1770d30d2d8148ab67fdc97d58a9090978efbe85577
SSDEEP 384:zRwcmhJSAqmxcXQ83KwAud2sKvqFG3g2e:qcmhJSA5xdOKwsaj
TLSH
T1D862C52BF914697B9CDBC229F961BB57E7F1202161801E94E7FC892C05E7ACD3227427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 eab58c57490897dc4f5e741299836f2179b177e4c97bef871afc218ad51d3a54
MD5 3acba1021cd9dd3b1b45b1607443fc0e
SHA1 91da3266dda2a61e73a77a33626d269b61aefecb
SHA512 3531a35edde5738b55f19e0fd05a0ec83e8ec3d4e511488c1a8798fb23d49d6bdef979faa32fc080684674f40b96527fb4def31354ac369c47ead31cc84a60a9
TLSH
T116C01201CC25B202C04E73F8268BA8EC7164EF22CA0B134D83F0AA22BC342358018171
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a435.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59a435.TMP
Size 96B
SHA256 90dea2d7acd94dc6babe4a0e4576e02e7b2b000d490bcfa966dbd5212deb3d39
MD5 fa5118994012c0fed5b9130e52a94320
SHA1 835316650d2c2910dfd4779c600039fa0c8af4a8
SHA512 b4f29b1866433a338f07b33d6dced9c51071d4bca3631e729dca969b84f0550af0f1eea9b17c2fb47686d56f4cdb9ee09076d4d4ae3261cbbf31fbeeb4f2743e
TLSH
T1E3B02202C002B222C00303B02880A8C830A0CF20C3030F0B82F20E32CC282300222030
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 a8a2c51a5f09bfc94d8c85330b45224eedefbd17ffa7630998469614951c475c
MD5 6841b7274d7b53bac308cd2fd442fde1
SHA1 2c96c9f711060e8a7b0df8744309ea745273ed41
SHA512 815a3fa7695b9be5fac320da8e44078fa83ae0c8b42b4a827230aabdfdbd07c4a0cefa9a05fdaa39a77177076ce8b58141541cd6e2b9baa2a00f97fd717d24aa
TLSH
T18DB022A000300023E3022FF0A8CF0888B3E8AF3003832AE320B0CEA0F0803A20B03280
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 150B
SHA256 cde7865d37bd1c687c29a2f4a04cc133970bece3340a73fe4a1e284881c5c7db
MD5 cc236df123a22032659536f87eaeec17
SHA1 1820c550b1b4146bada12071899faf216ea75bc8
SHA512 69aca2a979811dd5c8711b5f0b2362525db80ee2ca2d679c0f2b1503062a576026eac86d7a4c8a22b101b56706624a780bada49bb88864e3a219e166f7ae6a5e
TLSH
T1F7C02BE32850454B4B30FADD1018B13ED04F410D8CD8CDF8B808C14A207CD33404BA38
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a3809.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5a3809.TMP
Size 157B
SHA256 2617d4e108bfb1c2d6c4d85c7169df2c331039c5842b3cf67fc3428e2e30136c
MD5 b3f18addda3daa91321d628157387ddb
SHA1 030c286926f1fd78e1c512bcf075db2d9f4c06d3
SHA512 719ce6aa45343e9dbd810c2b30d10b1450e6697cfe5f679ee09f8be1b389dc102edb80fa7c54fbf108560c63bc8b87bc40d1360d1b0314d47b316a94a1db8945
TLSH
T14CC08CF3242004474B30A5DA1028B12EE41F4C1A8CC4CCF8A808B14A207CD23804AA38
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 afdb3e1aefeb0874102386a3972340b449276fc9d29b4dde665f0ead9859c4bc
MD5 7a38e7cd1dbf48daf98d6aa52a52148e
SHA1 02c1690eb29e96bf683ea3a0be8103f7f6ecf0af
SHA512 9b3646658034d34b8d3956c36d0a71243416e4eec7f764616d26294ddb98da7f41b63d2e424db7972cc3213fbd610f37bf5e822354626dc71fd568c8147314b1
SSDEEP 3072:LGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Sm7Rkm1tYpBeh2BAoK
TLSH
T1DAC3123B5D65E9779979B70EB08E0B1F1EF149A2D920DE92C8D86A0437EA7CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 6e77ff0cf5ee79b6d73f456f37e0ca1818cea12c5a507311dd77bf03d9308d5b
MD5 30ad28c0859fdbbcfdfa4ec91b041dd5
SHA1 94ae88274531921919e197d95586ea65aa847e29
SHA512 10260d7119d7e38ad93177155fddf467cfbf1f940b7f0059d763ae1ec19b44f8ca7bbe505770ffb224e566077a670021d8e40079098bfbe31aa942ce2b462b98
SSDEEP 6144:EgyHdua++A6CsEoU/+Zn26tbtVm7Rkm1tYpBeh2BAog:KHllCjWZNc9oBGcAog
TLSH
T1D73423639D549C37A95DA7ED344E460E5EF208E3E908E1E4C5D1AA08B7FAFCE1409E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 1712b273fd8b561f7ab3a6916b2d5c20dee38594fc4868600195af18eed71eb6
MD5 920fb8c240aaf3bc9bba85b628660b45
SHA1 9728e7356eb878ff817aba54a0c27e33136d9a7b
SHA512 c470df66347bf0914f2b3a4eb49b4a1b48ab5e1fdb636b234dde2980e13417d3b0565310451e10ffd1e03ac66f18820a66e0706253817d93a8df035026313cb0
SSDEEP 6144:QgyHdua++A6CsEoU/+Zn26tbtVm7Rkm1tYpBeh2BAog:eHllCjWZNc9oBGcAog
TLSH
T18E3423639D549C37A95DA7ED344E460E5EF208E3E908E1E4C4D1AA08B7FAFCE1409E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 074b84a56b0f19aa9f3da21f604d71b0f5dd50e2cf083bacd4211a127fec67cd
MD5 f135632a5ade78550a5ea74b8654c98a
SHA1 dd19c6c8f6b07ac22a86fb7cbde52dc6885087e9
SHA512 77532bb50d82188041012d55e637feea55f6171fb21b6e40afcf89ff73a833870e4eaa2ba63f3913fa79c5878bc1c5293c21ae6d744064e314e4468ab6a440ca
SSDEEP 6144:BgyHdua++A6CsEoU/+Zn26tbtVm7Rkm1tYpBeh2BAog:nHllCjWZNc9oBGcAog
TLSH
T1FA3423639D549C37A95DA7ED344E460E5EF208E3E908E1E4C5D1AA08B7FAFCE1409E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 838dea9e69ec61813fdc456688c750fbdf56af9eac75f72e2e13c73cddcd20ee
MD5 8011915ea2985fd040e403b7a996b118
SHA1 f53c9c203b4e314be6f1fc87bfa6f832ef5fb856
SHA512 c2dbd4127b58f1def7e49a8228a6e9489bda6b7bc5bc4eeb47c7fba633543a8676381a1a9dfd39676432fc22b5975b3de2960192da5dc1f45f329a061fbcee61
SSDEEP 6144:8CgyHdua++A6CsEoU/+Zn26tbtVm7Rkm1tYpBeh2BAog:bHllCjWZNc9oBGcAog
TLSH
T1CF3423779C545C36AD69A7ED344E520E5EF21AE3E908D4D4C4D0AA08B7EFEC91C0AE70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ece2adca-69f1-44e1-bd68-cce476f411fd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ece2adca-69f1-44e1-bd68-cce476f411fd.tmp
Size 116KB
SHA256 139a0321ad606f699c9c8189a2e2be2195ad68812960cfb004154476fd7f46f8
MD5 54a44e720dee788cabb1cd5e39d3bdd9
SHA1 aecb17959d7ca56ff3823f90126917ada69601c2
SHA512 38de2214ae11964ddfaa0fbe0fd6aee62d65d045be8fc1067813b044d9cba6126fbe43f273544f7153cd568a4e862955c3311130f124bca2113c4677859bb99c
SSDEEP 3072:7Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMj:im7Rkm1tYpBeh2BAoj
TLSH
T1DBC3123B5D65F8375DB9BB5EB08E0B1F1EF149A6C920DE52C8D86B0423E97CD0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2b697eddcb2b07f8539bfb3652953b0a60b5fe79caaa7bafd3e57283f337ae14
MD5 941e2ecafe7396f8e97c401afcc3b3af
SHA1 31446a30ef45517406a817809c058cb4d0f8977b
SHA512 222c47ab976196c3e2f6ff28796c492c670705750f2050ae0b523f8bda0f71b8f87e5338b508def4ce9eccd960b940f81d1f8e67bc05678f8080d5f069521c97
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

4458a98e-829b-43f3-b261-cc0ddb46c9ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4458a98e-829b-43f3-b261-cc0ddb46c9ea.tmp
Size 30KB
SHA256 4e918acd73ac6f6a1ca4821490c1312cf2b331cec693a28cf938a286876fce45
MD5 e503c22f42a85113fa8ea1d46993334f
SHA1 b3cd95333ee1086b2d9d2b5c40a2be62b8cee668
SHA512 8d93135ec2dccd3a9a8f62565cce6e389a60526b7e18b10f94d87af6f9ba22f4b317f6fa9dfab99f7eec9050099ea825c5cf8aabe7b0815aa912d8ec8ff06f52
SSDEEP 768:UesqxXlWvJD0T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9broWTl:UesqxXlWvJD0Tu1ja54LAs9oWR
TLSH
T19BE20B3B694CC77D4F840E6DEC26AFD76ED801CB66988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 399969acf8cbc44a92eeb1073c171cfcec6a175cb5fdfa1832292b183998491a
MD5 4abf161dc2283f0ae548775ff7e3f912
SHA1 f23175b561046127cea47140877efabf3cfac828
SHA512 fdb0074cd93a92f4ddc3e9baa028a5fca904626e5af3ead9f05ffb1e557ce02075a64fa4a5bc294b5f7e934934e32f2f75f7f15c35a5ecab4e75ce7730b678e0
TLSH
T1127109785E0708A1D703A0B379D252C032318AF7F426EA71C16D98B066077ABEF1B47D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586ffb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586ffb.TMP
Size 3KB
SHA256 06a2077fb73431fedb8785b9a72f91d61f9a93f2d09e915ce6ce4437b8e12520
MD5 9ade33c0a3475cce0542e397f8fc9c67
SHA1 ae75c836701fa0b588638d3261dbcf2f9345861c
SHA512 9bd8ed6b7fc105e11a6848b8f6ea4b09b52b37264ed6e9b6120d9e82a97d077b7679354c8544e5dc8308275744ecf74c794f538c2f53fd32a0df4025de9f17d8
TLSH
T1DD7109785E4708A4D313A0B378D252C032318AF7F426EAB1C16C58B02607B6BDF1B07D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 045b6b2df7a0a8016cfa3ca0670bac075d36f7de8136319d39b52ddbcb4e838f
MD5 1edc4498f8fc876c2326d35abcdb1ff2
SHA1 9345c8a28d5a0e70c87847d96f943d63dfdbc5b5
SHA512 97f6fccafdc6187d18271311f33dd09075576279685667bd21ff09450c7ee6ce544024a6458a470a37b64e63cc4963da550121c290082c97025177a452f85803
TLSH
T1CB418EF7C3E8D56E890196F167296E5BCE1D0A1942183C1AC9E4EF5BD3E3032E10164F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0dbce7a099cd25c31d8f5283ac977648455f218c7caa25a2c542ef4d589ca890
MD5 f7fdcc4539727daf035da7e731473d45
SHA1 3c0624b60013c24ddc9a721c37c242ca9536f25d
SHA512 292f56c04c5d7d26de8b184025687e82abfe3f5d46bb7f9d34f10dcc362dd9aa80582ecd92890cf97337b125ad699e59712e0f769d223b58f7292ddf374cad86
SSDEEP 192:sxZ/R+yM/jK1Ml8M97/fws5WMvIdpotYHW6+WN3hf/YIlx450IgrJ:sxZ/E17/fws5WMALHbF/b9
TLSH
T1E752E912AA386977CCDBD209F9457F53D6F9447292940E44AAFCCA1C05E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 70b955f859359fb3fa95663677d1448aefc5f2a5dc8fa0db146e1f3a4c286bf1
MD5 0dd7eb66be77f000c7e5062b3ce2f1dc
SHA1 9e7dcb018b72388908848bcbc4cf224f916c5e39
SHA512 2a404c46ba7cf312cbdd325d70c0c5298afaa8d12799046f868423dfd6b86d997a56a8340f4d3d194733956ffbe0ac2b03da1b4aad94829bab48f9e6afb418be
SSDEEP 192:sxZ/R+yM/jK1Ml8Mj7/fwskWWvIdpotYHW6+WN3hf/YIG/450Ig5RJ:sxZ/Eb7/fwskWWALHbF/u5
TLSH
T19852E812AA386977CCDBD209F9457F53E6F9447292940E44AAFCCA1C05E7BDD620382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 eb84289d27fce4a031cf4becad46c010ff3e85d9ce0e2e567477b6655e4cd9b0
MD5 ab0f1702c0ff575ee80a1aa52a14b1e8
SHA1 22ae350d4f2279b9d9a56bf4f6ceeda54ff11350
SHA512 c546eec3d485c5c0cd934081a884deb5ad4bcde8fa54fe5bcad8c7c1d585d856a16006db07d32e70cad9e83aa2c9d5cb723245ed4c12c940f6bf9e3cd0609959
SSDEEP 96:KYbaKYIKSogKteiCQQKp2SAgKdG6Wh2KKgh:Exb7j+rt4
TLSH
T10DE13956713B220338BD2948A36696779E4132A33418A86F7FB841B24E77E215DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d933626a-aa74-4c5d-8ff5-74c61362990a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d933626a-aa74-4c5d-8ff5-74c61362990a.tmp
Size 13KB
SHA256 b8f234dc3a4d15e76325a1f0189ec4b179f37f38b8ea89e1e3341e60cd500ae8
MD5 2f414b3b039e50c31b4c9e439d6d0d25
SHA1 3fc120633049edfedfd8e0950abc2cf0d67519f2
SHA512 2c4c4b6bddda994a2dc2a3fb86b293413651b829f21ffc8934151e2633becb96b04e22de263350ec483eef906eeb1139b7dda94a59c651bbea283ae95a12effb
SSDEEP 192:sxZ/R+yM/jK1Ml8UQqj7/fwskWWvIdpGtYHW6+WN3hf/YI1IG50Ig5RJ:sxZ/Eqi7/fwskWWABHbF/25
TLSH
T19852F812AA385977CCDBD209F9457F53E6F9447292900E44AAFCCA1C05E3BED620382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5907c6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5907c6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 d878a34a01551e6ecca2731c3374b965954e96c40411ed4eba233c7ca882fbb6
MD5 b7142f0fecbfab149a26725ec7487597
SHA1 b0a540f511f8b10cf6c3691d11f7c45daf61ca7b
SHA512 fc09576da9bc37205a865ed2819e9eed63b8439294fcd5a383ac56bef5a0bf02b46c8833d9b9e746f420d2bcabf7dbb3916621cc0e89c50c57b9a7e6ebfb5034
SSDEEP 384:YiFcZcIqsNe8TUNTUlIlyEIdbVg8VRN+Oi+p9xP7O6R2Feofh7UWo2:jFKqTwgIISH+Ois9xP7TR2vt
TLSH
T1CAC22AF358D78C76D9AE5B03A77E2D038EBCC067B5855A80B3895A0DCD865BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7f90a88fbdc03f3c7051e49494eec22f04954e4f66c91353465c466b36119807
MD5 0e9f2220380bcf772d452a453c753de5
SHA1 9cb66edfce263448e73273d4540584b3ba27d681
SHA512 c1d0dc3697fe5e26e6d6e293361d9186a7c3c64feb701233a73510f624cc056807140f1bf3d38921305d283506a48e3b4d81675224b3333f0ce6144da4c64206
SSDEEP 384:SZcIdsNOyEIdbVY8VRN+Oi+p9yP7O6R2Feofh7UWo2:gd0gSH+Ois9yP7TR2vt
TLSH
T194828C326C385C771DE7A506F94B36179FF89067E6C91E80E1DD9F1E06CBA98130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 02239490735af90992cd1423cabb6ed62a961727d9d36ab28b7d7fb378cb7263
MD5 fb4d5dbf339bb7b4d0eb660986f4c002
SHA1 66689a5492755e83aa6a72cec1441aeb055f393c
SHA512 f61028f1f4a4739d321f23e4f841463708b6367e716e29d173d43e832646c1a146ba075628552f8330de25db7f74bd7829951913292d0931ef7b4d095efe7057
SSDEEP 384:jZcIAsNOyEIdbZY8VRN+Oi+p92P7O6R2Feofh7UWo2:7A0oSH+Ois92P7TR2vt
TLSH
T19A828B326C385C771DE7A106F94B36079FF89067E6C91E80D1ED9F1E06DBA98130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 55b298a7cfb79e1355e8d62678e3ed8f51e8f2f14fb4de1dc138945d8ca29a88
MD5 33bbf06fa7478d357227eab3b6e6eef6
SHA1 174af312d9ecec91383f4ee97755232a300fca96
SHA512 3b8cc34381153c321ec5648987762be92a49f3b432f1a24a3d7a8b7370b0daf932f03232777a918792c6f4c2580f7f71b0da944b82efcf149d3a6abff0607cb3
SSDEEP 192:uhDsNOYlQRIsx1kRb1tQmiU11Mz4VRN+OmJ+KG93SR8q1qAjqCV8la:MsNOiEIdbZY8VRN+Oi+p92P3V8la
TLSH
T10D523932AC385C375DE3A501F54B36539FF85067DA892F94D2DE5F0D02DB69C630A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6826e4851c76a9ad8d64f11022075645b5663721ee60d1bbcb2b866bf4e6970f
MD5 b44659acfba246e041043eb0c37dc47f
SHA1 a906f53fa3b910b18ba9969fa435310982ff6f7c
SHA512 d01b3b75fe84516d1d5095ed8bc6a75c95c140d44fae1a0d01eccd5b92340a115b3bf05f451a1d70bd5cd614f8427c841d7269b99dfd51a81cf8d2b41fb2420f
SSDEEP 192:tONd6JkRtQmiUyZ/W+RN+OmJ+Nh3dRCU6:tONd6UrmW+RN+Oi+3WU6
TLSH
T14B02D835AD386C7B8EF36E09B58B27175FA8207BEA856F84D6D81F0C01D765C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6bd976735af53384c1a880eee0e8779bd36a08d556beb2daa06aab60cbd5c874
MD5 8e62b73b3d282f299e579937e4e6d21c
SHA1 3c0529f684b13a7ec1a7ddce280e2b1b1beebbe5
SHA512 1fdb8b32e3ca41ac891d025953277c2d65f87b34a00a26626bf5d80dd6c6788db818c627fe56d79f491e5fb90ad69fe13908356e06bdcc289fa8d2df1b730af2
SSDEEP 192:LONH6JkRwQmiUyX/s+RN+OmJ+KG9zVc8q1qAU6:LONH6UwCs+RN+Oi+p9aPU6
TLSH
T1AD121B3278385C7B5EE36945F48B31175FA85137EA896F80D1DD1F1C06EFA9C630A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 85582a697ccc8ab99957df6e5848eb4a5a89b98ee7fbf246989d8f2aa6bfeee2
MD5 407b40f360963b9ee2daad42c68caaf8
SHA1 03492d4203a99e6b79223859f4e4d73d1bd49acb
SHA512 f28899db0bdfddabba9620ad7e44f757a8daba0e125a55e85d66576d502a3c2de9095e0add42b780baa9be11a14c72b7d14768f4b36bd665315a9d93b87de2de
SSDEEP 192:uhDsNOuQRIsx1kRb1tQmiU11Mz4VRN+OmJ+KG93SR8q1qAjqCV8la:MsNOuEIdbZY8VRN+Oi+p92P3V8la
TLSH
T185523932AC385C375DE3A501F54B36539FF85067D6892F94D2DE5F0D02DB69C630A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1dc019e6-fe0f-4cf0-b090-bdadb2081c34.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1dc019e6-fe0f-4cf0-b090-bdadb2081c34.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f714e257921bef57c5b40cd5349c65005cd8cd1c5802bcfc0f447c19dc53b68a
MD5 c1170d1357728ed1718e73780f17d3b5
SHA1 586750754d6265ab34f88d31b027143ad1e1be7d
SHA512 c63915b5ddacde0373a8e1341854f879d294ace82be142cd2ddcd65d5648fc43c65b8a2201aec5f526c3deb1c9488fbf57ba48d4b7d8309e519baf3e6b0703fa
TLSH
T18F412858A6F91108B7B77E56ABF6A86D847BBD773E06D45E10110E4F0A32A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download

gta-vi-cyberleak.zip.crdownload

Path C:\Users\Admin\Downloads\gta-vi-cyberleak.zip.crdownload
Size 2.2MB
SHA256 be538a35dbf296759f8737db237bee8bc06670eccbd7fa88f0188302e1a5f336
MD5 b1399fbcf4b4de067a551d81d3a3b1e9
SHA1 77f88a92a606d7c85a9720a4d232e30299f6d604
SHA512 3719acb878455b801401aca2d16ffc67a74e54ba9c2da229394489299277a0ec6ea198876b36a53f69f3689d5ed7e1a4f96a6045e73917757503d15002192f32
SSDEEP 49152:kJ3pBm5hfafHnku/DCpta1nLiJsxfiV2ROCYpcI:43pBfHkgD3isxfYI4/
TLSH
T116B5346ADD149B1EE08A0170C0772F653709F6DE6A84833F63BA271F1DE9342ADE59C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download