hxxps://www[.]mediafire[.]com/file/gnj0bm[.][.][.]

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/09/2026, 20:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file/gnj0bm...
Sample260906-zel73ssdmd

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 6 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping732_1967933026\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping732_617029565\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping732_617029565\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping732_617029565\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping732_617029565\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping732_1967933026\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5808	msedge.exe
416	msedge.exe
5956	chrome.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332006933539457"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{6E2217A6-217D-4560-BC50-E0A962FD82FA}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{80F3A50A-43FF-472F-BDBE-B9943E473F99}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{D5C165FD-42C0-48DE-B4F8-32593E35EEDC}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1392	chrome.exe
1392	chrome.exe
732	msedge.exe
732	msedge.exe
1392	chrome.exe
1392	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 29 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe
Token: SeShutdownPrivilege	1392	chrome.exe
Token: SeCreatePagefilePrivilege	1392	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe
1392	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 704 wrote to memory of 5536	704	msedge.exe	87
PID 704 wrote to memory of 5808	704	msedge.exe	88
PID 704 wrote to memory of 1288	704	msedge.exe	89
PID 704 wrote to memory of 1288	704	msedge.exe	89
PID 704 wrote to memory of 1288	704	msedge.exe	89
PID 704 wrote to memory of 4292	704	msedge.exe	90
PID 704 wrote to memory of 4292	704	msedge.exe	90
PID 704 wrote to memory of 872	704	msedge.exe	93
PID 704 wrote to memory of 872	704	msedge.exe	93
PID 704 wrote to memory of 872	704	msedge.exe	93
PID 704 wrote to memory of 756	704	msedge.exe	92
PID 704 wrote to memory of 756	704	msedge.exe	92
PID 704 wrote to memory of 756	704	msedge.exe	92
PID 704 wrote to memory of 2172	704	msedge.exe	96
PID 704 wrote to memory of 2172	704	msedge.exe	96
PID 704 wrote to memory of 2172	704	msedge.exe	96
PID 704 wrote to memory of 3200	704	msedge.exe	97
PID 704 wrote to memory of 3200	704	msedge.exe	97
PID 704 wrote to memory of 3944	704	msedge.exe	98
PID 704 wrote to memory of 3944	704	msedge.exe	98
PID 704 wrote to memory of 5996	704	msedge.exe	100
PID 704 wrote to memory of 3464	704	msedge.exe	102
PID 704 wrote to memory of 3464	704	msedge.exe	102
PID 704 wrote to memory of 3464	704	msedge.exe	102
PID 704 wrote to memory of 3884	704	msedge.exe	103
PID 704 wrote to memory of 3884	704	msedge.exe	103
PID 704 wrote to memory of 3884	704	msedge.exe	103
PID 704 wrote to memory of 2064	704	msedge.exe	105
PID 704 wrote to memory of 2064	704	msedge.exe	105
PID 704 wrote to memory of 2064	704	msedge.exe	105
PID 704 wrote to memory of 4220	704	msedge.exe	106
PID 704 wrote to memory of 4220	704	msedge.exe	106
PID 704 wrote to memory of 4220	704	msedge.exe	106
PID 704 wrote to memory of 5908	704	msedge.exe	107
PID 704 wrote to memory of 5908	704	msedge.exe	107
PID 704 wrote to memory of 5908	704	msedge.exe	107
PID 704 wrote to memory of 1088	704	msedge.exe	108
PID 704 wrote to memory of 1088	704	msedge.exe	108
PID 704 wrote to memory of 1088	704	msedge.exe	108
PID 704 wrote to memory of 5280	704	msedge.exe	109
PID 704 wrote to memory of 5280	704	msedge.exe	109
PID 704 wrote to memory of 5280	704	msedge.exe	109
PID 704 wrote to memory of 4972	704	msedge.exe	110
PID 704 wrote to memory of 4972	704	msedge.exe	110
PID 704 wrote to memory of 4972	704	msedge.exe	110
PID 704 wrote to memory of 4412	704	msedge.exe	112
PID 704 wrote to memory of 4412	704	msedge.exe	112
PID 704 wrote to memory of 4412	704	msedge.exe	112
PID 704 wrote to memory of 3524	704	msedge.exe	113
PID 704 wrote to memory of 3524	704	msedge.exe	113
PID 704 wrote to memory of 3524	704	msedge.exe	113
PID 704 wrote to memory of 2640	704	msedge.exe	118
PID 704 wrote to memory of 2640	704	msedge.exe	118
PID 704 wrote to memory of 2640	704	msedge.exe	118
PID 704 wrote to memory of 4648	704	msedge.exe	119
PID 704 wrote to memory of 4648	704	msedge.exe	119
PID 704 wrote to memory of 4648	704	msedge.exe	119
PID 704 wrote to memory of 1144	704	msedge.exe	123
PID 704 wrote to memory of 1144	704	msedge.exe	123
PID 704 wrote to memory of 1144	704	msedge.exe	123
PID 704 wrote to memory of 3736	704	msedge.exe	124
PID 704 wrote to memory of 3736	704	msedge.exe	124
PID 704 wrote to memory of 3736	704	msedge.exe	124
PID 704 wrote to memory of 6136	704	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/gnj0bm...
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8d5e0c188,0x7ff8d5e0c194,0x7ff8d5e0c1a0
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,2978708802292043976,9222167227855621511,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,5124836009054522773,7579020643661329640,262144 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,4807238234745942867,13860381717951771768,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,18081380992049208424,12540291350027064268,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,9715323069367765041,16210443060111172372,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5300,i,10830193329430730715,12504104679602628089,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,1504138347576813311,16082434935667123681,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,873105927037807671,1650805796785938288,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,15727115797141817634,1778133869069657212,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,15727115797141817634,1778133869069657212,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3684,i,7761928855440576966,10290130468151455889,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6360,i,7558224831602700411,14256567465165655793,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5420,i,18323688629467293446,13647179207444898221,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5228,i,6467929480979892523,592842956501851772,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5180,i,17250293413857461106,9448901952330605349,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6308,i,10748625699056444436,2830436223762566221,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5300,i,2388379440235617110,15590121749308882401,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6784,i,12877015770877908231,263909233593796370,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6588,i,7501563981976737074,4028285765606544360,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5160,i,8084998807801191346,15179683991622778523,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6796,i,15639165442848513647,15116102387144773416,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6696,i,13156958315272905777,265204485442324438,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3476,i,12720245139507676621,13703261357360605774,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6640,i,14320406838087988690,15977155965894407909,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,309421166454069726,12374932910691101311,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:8
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,15282429194821847702,8660823574451018958,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=3368 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,1743788553278512969,1508115550806084273,524288 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6820,i,6507835151994836151,5756340148816869134,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6728,i,8038501750373713758,16807946033489331816,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:1
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5252,i,16956135898721165148,639737411407552690,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3632,i,9069550716772320837,15397576625874947812,2097152 --field-trial-handle=2248,i,17204369112278992743,7416570932914175568,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x20c,0x2f0,0x7ff8d5e0c188,0x7ff8d5e0c194,0x7ff8d5e0c1a0
    3⤵
    PID:5200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,1396252504881188385,1009970890468713821,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
    3⤵
    - System Time Discovery
    PID:416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,7945422539424095236,3321472704908520307,262144 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
    3⤵
    PID:4496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,4219639145678791687,4882484491912348338,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
    3⤵
    PID:2324
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,2924215060752143371,8791050409639084392,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
    3⤵
    PID:5996
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,2924215060752143371,8791050409639084392,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
    3⤵
    PID:5136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4644,i,6714645589456746983,11431896155630757143,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
    3⤵
    PID:3284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,13796762092145921558,15391306513403533851,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
    3⤵
    PID:1896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,10180593612549090629,2676533574820622662,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:8
    3⤵
    PID:5700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,9633856301518296683,1303055548097693464,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:8
    3⤵
    PID:4272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,5320926188015314499,13019801138908128647,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
    3⤵
    PID:4732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,9992411185253682224,12580177025719601681,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:8
    3⤵
    PID:3408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,9322165030912444109,4863185587302970547,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
    3⤵
    PID:5064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,1831267352625902148,13190558915245101094,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:8
    3⤵
    PID:5352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,14344296942242015043,377138448087708161,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
    3⤵
    PID:756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,16919994649896924208,16796400413224818134,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
    3⤵
    PID:636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,5860807828047774174,370926726909497308,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:8
    3⤵
    PID:2424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,8554111507371022348,13261627947518079454,524288 --field-trial-handle=2304,i,15480400516555067525,6694740066085677580,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:8
    3⤵
    PID:2596

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1340

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3356

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2152

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff8b69cc728,0x7ff8b69cc734,0x7ff8b69cc740
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1996,i,7018768245861053976,3565186562655817998,524288 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,8868504369711704097,2791926592933117323,262144 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2312,i,7452652269704872287,13933185762879212013,524288 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2452 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,7589268345584181167,658991802761602670,2097152 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3456,i,14999947959637909318,11864857356849168947,2097152 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4344,i,15325387733702731730,4847029930372194131,2097152 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4360 /prefetch:2
  2⤵
  PID:5668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4656,i,593226362068239054,15567440193951167307,2097152 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,1450809165682420852,430028073992033860,524288 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5568,i,7382834659588614457,8239868126515405566,2097152 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3472,i,16034646382014790153,10684822093745857073,2097152 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:5712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3588,i,13799226241460345469,16926165966026996187,2097152 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4708,i,1932337616013322690,9521845195281084944,2097152 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5592,i,4170414885320473409,3422616179972026431,524288 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4808,i,17237747545974597738,6734897884312537254,524288 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  PID:5504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,16932725916016235151,499540682070928920,524288 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:5644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4712,i,4990254338308949180,9898070864853554201,524288 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:3636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3468,i,993754292947371301,221701113478832115,524288 --field-trial-handle=1788,i,6702023666938837615,8058197683352120838,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:4600

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5964

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping732_1967933026\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping732_617029565\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

1cd6fd02-f9f5-4d60-ac34-faf6766a6ea3.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1cd6fd02-f9f5-4d60-ac34-faf6766a6ea3.tmp
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e381901b04286cfb084156f6192ab5c5f1b02f01c064725e85f7bad6d7834d67
MD5 5fd3a5a9aed871820729c5a11d148a1b
SHA1 3737cc2563ca193d0ed9034631a05359a67c8ed9
SHA512 a1ed0bf8fe9b671b936e282527d7bedd188c6939ab4086fd3a4657a9cc2d1bf7ee3a58b013f12dcbb20e48ccaba91e96bf7a94753101e535c03870e31e6b2d0a
TLSH
T16EE02BADC971EC371DFD075C50500745EA54130B3B40444B3A3C851E4F7573B428685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 56KB
SHA256 d1490249059b9cb0d8f6677be2c90f7dcfbbe75e48c309d5eeee2c5c06a3307b
MD5 7b5133418554f13b499f44460a6ba45f
SHA1 de62f6c38f6f045ee015c32a0d45a21f7c825b07
SHA512 9a590c9e0c3d00c1be1f3143be7700e83f3b8e68a4128039bb57129c9fa024ac8c1a9d536fc1b913815ab33f6eabaf178991e7ce713080e0b732b7612c0c564b
SSDEEP 768:wIY+qNHuE3Mak99vcMT3Bhl9rUEmeVFRuETkbbJVd92RyJdnu2dZnOYey+h:Q+sH73aDlhTWeZq92oLOlnh
TLSH
T1A44302284CD2A183DF738BA7F0E7BA4E95A0612C2F91CDB01ED5411A3D954293F68B97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
Size 680KB
SHA256 4b988534ae8a048e2c937d5250e50fd395226f8706210f42eaf5bbdea38bc343
MD5 9b5d4c74fe441ad9de34f9947fdf7666
SHA1 178e67f208980cc6a567c4be2e3712706a608f80
SHA512 bb92c9c858837a8906f62c6513f8c5cde5b82a555b8c14754964911aec4826535448cdfd5f9103402f1dc51f2b18f309d6c71c996168519fec3dd756b1964cff
SSDEEP 12288:DKcXDN175FhmVjJnCwS0VIwQ/jmZetDdcxGce5IBA540SxlQ994XfBJWJxJVGtro:jB1dFhIVTIPqZscsXmB6xSx294XWbmOD
TLSH
T1C3E4334CFA649490532778F1DDCB13B605F1F4D72ABB9D85E12D9A0162F647888E2FB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 23KB
SHA256 68e696de4167517f425a4c26eb5dee21b69bf4271370be4e3de32964e194dbf6
MD5 57362d5da01616eff5635f054dbb3c75
SHA1 9015cce5ea09a71ac643ddf70d9fc5332f04af74
SHA512 23e9bba7fa32ac8d9412aa6186906941c69fcbb4f4359c1bdd0e9069724c0fc79ed97db09d3cc55c8de25023b04911db56421f151f40615028906bd1e30f5f2a
SSDEEP 384:sQ0CmKDocW+K+Ol/kJnnt8w0N16+CMAEWryYTjc3LL1HhMmpuDNN7yW0NB:rFmKDo6K7/kRnt3a1qMAApVHhMmYXyv
TLSH
T108B2E0A6A16E673B60F8D04E36F52939DFBBD6A2F309C2B9C28FD04DB560A304254157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 34KB
SHA256 a0845fd41732511f1d41894297a6785fbac0fb6a689720b2292e25f2dd2b309b
MD5 f857f3570adc6c24a43a4c2c4f8d0f39
SHA1 559c7ab2d2a7d8c70b34e792763f53c958511840
SHA512 7c84ce563036832e5fe554d437ac9848645e56f54b0f9730be909556dcee107a5c1cb8add1883983b73e2b275be9483750248102e22bf06e65969fec021c3aa1
SSDEEP 768:cRo8ILWNQ/0VZOfOmg2ewlIW6dFgxgVyM5G5H3qPps:B8I66/eZOOmVlIt+xLa6
TLSH
T103F2F103D237023780661BFCF69640F721064B83ABE181D9FAC271EC83A5FA56AC56C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 37dae296a058083970f9e31990804fec4f371545a81c776cbfdaae2c843ada86
MD5 34d18706423142e74fa98307389af0db
SHA1 2dbdc434bd8cb1200a56ca15f369067dc7c4cd07
SHA512 edb3d0ce79ff722edf94d09d7193b9414014d1cf32e1a26c11b6aca88d883f336a34420a0f90633b1ddcb654bf3e5d01893b325693ba846a79700544dae07262
TLSH
T18921CEC9A3C82841FBF065FCECC909C565A4D36553074F0A8CA1F6D0AF537BAA3090B6
MD5 SHA1 SHA512 TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 17KB
SHA256 96a298c3954b544293af214ba7713198b05ac223ff040c8ff90c81d2ea31bf2c
MD5 3e8c8d815b86a0a15af0c265734547fa
SHA1 bff6b500b9d3a607d5702376a11a1b66e4180047
SHA512 aea72960018814735346cd665f796ebafb6cd9782ce8e77dba36b82f12c2557dc704271f178098f4fc1d471a0f50b85acb4e85ee0c9ef2feb513955479826451
SSDEEP 192:Y22qpw+JHmwLzPmqU0AlIqFFGdUoWNZeHobWBYyvi2maVKCmhwMgoyfc9CvqQrka:d269tUrDXG+wu2VQzs0JeqeSMgTKB
TLSH
T177829F7759E844DAD6B6D1B394FE114A2D21B80A36CAF4EC72C3304C18637BB2599E1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000012.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000012.log
Size 168KB
SHA256 2ced34c6de210a3aa023dbe7c804c4eeb8886486c63f5ce3f09fa0af1fa2fdba
MD5 9391bb0f1156424cbc3a166f3d01587c
SHA1 d9e98c73beb3c4e198e729a5e530c84be5eabc41
SHA512 fd21099585ec8383c5c0df21a661e3b8845a3019ca14e16d9dd66a21ad0009280eef394017012ca262a9a78577794a9996b0442bea14995ad52924145e5e79d3
SSDEEP 3072:nuZAyX3g3Ai7shdXj5afWU1WWP8ZWN02i3NWUFWWxC7Tw/V8qLlj++ap:3
TLSH
T1A3F3B4627262D6C5F13E83B7161A4D0AE232E6C4D56434B1BFA13E0D27FA7483E54B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 17KB
SHA256 d16d642778c45c308e389ad3b7c2d289df99aa5660ffc2ece690bd65c758f9b9
MD5 ebbf3cfffec5cbd55d3b7d52fa0d76ad
SHA1 d0287219f776d0c8eab6215b98382b611c97b3e9
SHA512 dae13d20d29f748d57612e94497765c3359744ea64ba342c256e5a46e7536ebf7b754f52299689fa9d2e84457613e4113f8bbcd213cb97b4ae02a571fdfce1fa
SSDEEP 384:plDcrtUrDPft+I9wu2Vlzs0JeqeSMgTbc:Y8rftDwu2VlA0JehIbc
TLSH
T1D282A0775AE954CBD6A6E2B6A0FD025F2D26680A35C6E0EC76C3301C14726BB259CE07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 4KB
SHA256 261fdc05ae2b17239a39eed0792c20ad9419945ef512aadce58a35ccb333a704
MD5 94d5d3f2b649ac0eb108978339028fbe
SHA1 87390f15502f83c8376d6da813e08778ed2ef51b
SHA512 de5b35229e902b774a43c95a4e9c2929f5a599086bfb8633f75a2bbf964cd83e80626f8d8cdd58d33b96be58bf291dfddc18d26b84214c2d00ee4689108de63f
SSDEEP 96:AI/JNi/JCzsZzpuWagih5p+IccbVbX3F8sBx7Ac:A8DIZ9Wp+iZJ8GAc
TLSH
T146A18DDB464C43F89041E122C51DA4D5CCD9BA07A74C9F38AD9EA6CF27F075AD2DA071
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 108B
SHA256 077f34368a8cebc495171a48bb2dc5d6aa7b64957ddb4ff0dc3bb38dc136cc43
MD5 12763b0eca530027ff67bb9d6426defe
SHA1 f1326c6120a249906645f60e102fe5c85a9eb3a6
SHA512 8cde4adc1a054ccc4a841942d77991a1eb6fe8f0f9940229cce9467e4bd215e5b1ff6ca8c4981a9fb386277692e9fe0ebdd32db83db7627003e0156f13932768
TLSH
T1ACB09B2257959455D0B40D7095B79042812575050D57D50F2254051950535009A25726
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 754B
SHA256 dd6078492042382b5defc8c6522edfe0549fb27d89d06d8b31f3c2cf3dcf9dbe
MD5 646b160eddb2db5cf127dc0099b16f85
SHA1 3ef6effd7c1a8be38dbe7567359ec7e8304235d5
SHA512 a331b10fece368c4ea0a5450462ab9de26214fd833c613a7f5b78f47ce93af33399b239d3a13deb6465a6eef2c34b7093ae9822dc8fd80e19d06f25b981df842
TLSH
T1A501D450EBE5B4E6F664407000BF796E7B09B1CE041ADA1F219AB1AF68336019A5193E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 518417dd01005f903cff929879610d49018c468b1a10b4c4ddfd82d46d4959c8
MD5 8496292bf64fee2f65596b4959462f94
SHA1 a96ccca8a20c5e3162e57b0fa27e5fd4137d8321
SHA512 0b63a1b5a1c2c98c828243163af12d46544018eed9006c29f5e3eae6b5899a956d17d67f8fafca62476fc9a9e329d1d210560f0f607f756ed59d95536047791c
SSDEEP 384:DHoUQV2MGkCEPQevmhgeLS0iZRxupaaOK/4KFxR/Z3zAb2AIIkNKan060/vVn/yw:S2c0566m
TLSH
T1CF52BBF7C3D8862DC81126F49B157A1FCE2D1E2483283D6AC8E5BF4B93E2571D21169E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c707d015b100e1afd83a582064cd035f2581501a77b7573d051ba112ffa280fa
MD5 4a6d24c82eb1801bd4b3e1e6e91e8ed3
SHA1 969f80ebf0cd982cd9abac1dc1cc602001ecfb5b
SHA512 d67fd2c3b3a0bdf9d6f0ca4f025c156cec827f18022476ba1f0f652dc37a4c077112ba57fc3ba568f1394bbfe2d04d815aeabbf25d881e3de18a9b6c1f83e1fb
SSDEEP 192:1RzcBzR33IYNunv7OhpAPRp2qz6STv92Hsb+WNoCUQ7NBUyiE1K2KfkwJEOVyIsB:1RzmzRnINvyhUXfQwDvsEE2Kfpve
TLSH
T1F162E66BA850697BADE7D32AFD117717D7F2102160D51E80EAFCC92C20E7ACC222740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 daa22e32cf91ab5d2fc5f71409c57d0520389885e8c9d57605b791ade39e5eaf
MD5 a8ab1246afeb08f9f04220f74439740e
SHA1 0f52b8d6b5b0c05ce147361d84f114a03166a5c0
SHA512 ee4e93d404dc09094ed880f0db105296e6525a7741185abe900654caebfda7eac183cd411db773306e6ea26bca64825efd34f530a3e7aeb216d6217ec201710f
SSDEEP 192:1RzcBzR33IYNujv71hpAPRp2F66T292Hsb+WNoCUQ7NB2kK2KfkwJE4VyIsnAUg8:1RzmzRnINbBhUXlQwDv2f2Kfph8
TLSH
T12C52C36BA86069BB6DE6D22AFD517717D7F6102520E51E80E7FC892C14D7ACC222740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0753701b550dca1b390f7c4cd10e1deb04bf18d58f220b06435cedf89ade27cb
MD5 775a26d94e7f810cca75ed0e23b83368
SHA1 3b6f6644801d2eba37520161a26983ec5e03b1ea
SHA512 2cea84165b7955de011e98e1d1951daa19920af2f02c5881bd72acd459b680148b6774189dc1d097b6664fcd314c9e2f97b882d038f3ca6ae37fc2a8759b1cc5
SSDEEP 192:1RzcBzR33IYNujv7OhpAPRp2qz6STv92Hsb+WNoCUQ7NB2kK2KfkwJE4VyIsnAU/:1RzmzRnINbyhUXfQwDv2f2Kfph8
TLSH
T15352D56FA860697BADE7D32AFD117717D7F6102520E51E80E6FC892C15D7ACC222740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b2d245309b5dec8e5cdf66746fffcef90485e889aa3d34178962eb6f23e13c79
MD5 64c1b5798501b577b211e9540cff02b4
SHA1 527b327ff7ef893f15490cf0b360307780caff4c
SHA512 166d024d69d798369d984c21fa0e18ffce965bfe87d028be1afc33c84d8e17e5df906843f428196d07b6520c619c0de3aef9b6f4e41b90e1dc8aafcee949a527
SSDEEP 192:1RzcBzR33IYNu/v7OhpAPRp2qz6STv92Hsb+WNoCUQ7NBUdpQSK2KfkwJEOVyIsB:1RzmzRnINXyhUXfQwDvkQJ2Kfpve
TLSH
T14D62D66FA85069BBADE7D32AFD117717D7F6102560D51E80E6FC892C11E7ACC222740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\41fd641b-1a83-4cc5-b552-fcb0303d81a0\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\41fd641b-1a83-4cc5-b552-fcb0303d81a0\index-dir\the-real-index
Size 576B
SHA256 ce508af3d3405a8f5ddfea5a7e1755e97b714ee8d88762219b171b15b29ec958
MD5 20df11789baf9fb079306ee37aa0f5ac
SHA1 59f61794e0e2fe44770af9d16fc8299e9077d7d2
SHA512 c1805eac33d1fbf00e9d7cae53107bb1e0574af07c3f100349ed86cc59eee60812f0297d2a2ea72a00b0a291848632f074820e9633cb512da87c65e7a45e719d
TLSH
T100F02B603BA20B7FEE59283801232800136DCC84D20BAE0B0818417A6E2F203EA41E70
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ab1b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\41fd641b-1a83-4cc5-b552-fcb0303d81a0\index-dir\the-real-index~RFe59ab1b.TMP
Size 48B
SHA256 3e846c5856c49f9c59b878971c961435116be3f5a7adaec8f610d6cd682a4faa
MD5 f96a11fd64fe86cd1da7905e75f7ea89
SHA1 490860826ecdf483db984c97e68032ea661559b6
SHA512 1f9bb26b6b62601f41896854df77d63febbe8c6c43fb2fbc7e6fb3af1615c62a2473013d50fcd9451d3159c212951ead794c564daa9233fa4463e7ced2814c47
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a0501c0b-e453-41d4-a7af-d08c6f8a239b\index-dir\the-real-index
Size 2KB
SHA256 aa7445018826ceeb77b3a7f0fc315b051c04dd15a1b619194261209fec7a1415
MD5 0e70bc3bce3ae5de7f4d601ea0c370d4
SHA1 646cf9005802bba490e879d9a0908c1914a0ba8c
SHA512 cda310e5f76c8ba3a94fc1423fd682deeb72e3cbcdb61228080dfddf4ae3d7b7ad2f743f69123cfb4d663e431a739407a0cfd66359ba1c2a6dc8b33f48a4d1b2
TLSH
T1A941444CCC806BADEC7561BE299815F657752D38FC5CC29245A4B2A53403AB81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a0501c0b-e453-41d4-a7af-d08c6f8a239b\index-dir\the-real-index
Size 2KB
SHA256 826e4e298b52117652e00bdf1d2f97c9e961d4c5f6e7f7a01818fab6bda795b6
MD5 627b2a6ea7e08ec6b02b45dc21eba6fb
SHA1 66f6fe9b6490e972b0d271fbeab6efc50349cd5b
SHA512 aed8cd7460ece53bd565c4ce8aa5154437ad1c11c53c3cf8bb3c10d858ff65e81f4d2f0a16dec0a272f0fc1cb8c48f80b488791f0b106b0a886862f2e9e61d69
TLSH
T1F751304CCD806BADD87151B929D414B297353C38FC69CB628198B5B534935681B47DFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594b57.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a0501c0b-e453-41d4-a7af-d08c6f8a239b\index-dir\the-real-index~RFe594b57.TMP
Size 48B
SHA256 ebcde4befd6c9b3579b78110f1320d4940869d535af9b32425ba0981b5f3d6ed
MD5 5de337f8c93e3b31c5816eab59d3685b
SHA1 2ffcc5a8d6ba81def357dba391105c7b0a10133e
SHA512 51c28e078bf05be6f09ec7f3913615fb61a5e7352ff2f6698a2ac5d8d5397466ed220a8e2551c8132a78099ce2b801405357e5a66d9850c37f235263506bad89
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 ae3492ed880bf91d70a796ae019b5febf4d77274a5519f7968035e4de4e6e923
MD5 8ffa45e7c970e27f57cfcc4659b84c85
SHA1 5f921064f730b1eb4637bc630afb5c84073d1161
SHA512 8847b8816ce01e7db12909030de9ade00f8fc9a36516549149b8a13eb60e6382e311ac69b9963fd6528b28162d54912646cb8365af85419017d730bc2cc4d06b
TLSH
T1F2D022D792304C276A72AAA5223911CE461A9E06C8D5ECF49848B052B4BC703C802A2A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 9cf2e9515e390bab1736e634e76a8b56f4c99e6e3d531683f2a1f240d94fef84
MD5 b06773e4b8e42219ba30dbd3828ae14c
SHA1 3c6589495e43295c652c093ad711e4105e39d2c1
SHA512 3e2ae49cf3427aa5b8f75060e6dd6f18f2db05c257327b42fb9d579bdbdcbcb1f8bf69888d7903e88f5ebe0313a163e6e4e7ab8bb0b0658ee43faba7f3e7cef5
TLSH
T1ECD0A7CA5571449366325FD93438B2DD832F5E888DD2EDA84548B0057279913C431B29
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 ee396f59bfb3ea814290c0f39ce75e5309bb2abd425416c25e886b1299497dea
MD5 16f762c73d2d1d43bee4c208896b68f9
SHA1 e29e1d7885088ee8e761e068b733bce2a1af9998
SHA512 701290d429492506c75018dd57abf1e43838bcc72fcbd6b80ccecc16226bab5bf69c554e65eb86e6a248ce3efb3923ac828fa5ae515d611b490c4bdf4bc82e16
TLSH
T14FE06159E5720485BD734E913935609D83BE7D444E91EC545484B0096375907C115E3D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 6a2d37eaa7261c971515109831a4ce603b25f4f453d8d4b81f456a576a843b22
MD5 1cfb36d5979dae7521419be4560a9a9e
SHA1 eefd323c272a7fa67dd6b7d9622ba481a6f883ed
SHA512 00cf34422eb7cf98294ebd25252d56bace1431e23f5eb7a8f37a6badc49906cf0f5baf46e5dc178eb3c1db86de3fd26d9a561f12b4c43422606aa577f6e39617
TLSH
T115C09BD3153045575A72ABD5113857DD971F4249C5D1DCF4504C5005B47C953C802629
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 a7ee61b5078435d56fe467c4ed1061b787d1c0aab6ec220105ae1c8c93a7eca3
MD5 3273db62eccdcd7ed5b9cc5d425aa639
SHA1 106973aa7ef7924e54b27a1b42a013a6720fa8b6
SHA512 7a33197c90b7abdba251e0a0cae8346a17c2ebcc42b866a43fe6624793a34ee3697c596fb0fb5e93589c7028b61673e1480dfffc825df403a30afe67d5628df2
TLSH
T1E6D023C7057044937772679A303C65CD421F5F05D8C3DCD458447143F1FC553C812625
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 9bd4e3db7490585b34cbaf7b780c1d0fff20b25daa2e6cc35152d5cfe32681ab
MD5 50e2788ba1e8fc5ee067ee75082e96f0
SHA1 c6f33be0b70de387f137972cc7b8a1cb4801bb23
SHA512 2446515d2be2861aad7060e81e1e6c28eb9b38bac7a74c5b620da5db803405ee32d9569873084b952da48f3f27e3489e0c277d89c61030b817057586b9e381b3
TLSH
T156C09BD3053045975A72A7D9353877DD971F4249C5D1DCF4544C5006B27C953C811629
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 383B
SHA256 ed707782cf51044505de8c7d4c1cdebb1c607695adb7f0d8696fb425931c556b
MD5 85af99ae70b2811d3d6266a6863cba7f
SHA1 08080b07497cd3587e9859a990e8bd5cab26488c
SHA512 625dc844a1c6ffa51415383b8eb10133eb96fc83e44741a1727a4286eeadbb4110d4182c463a5da11579fadef6a0171dc58ec6b22b63c9ea0e9013b3548d9d6c
TLSH
T186E0CA5EE5720095BCB74FD13C35B06D83AD36484FD2EC545484901D7575907C116E3E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe593b1b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe593b1b.TMP
Size 137B
SHA256 07199041c2c0fc4eb68867c0762a44235674126c4f9553bbc9ebf6963be143f7
MD5 44204cfe669d86b849f5e8590f00ba36
SHA1 67272ed1130e5962165d2c0bdc1f6af7f013ee29
SHA512 5fd8740318e264571ad5b2b5dd1ed883d05d9da014fc844d62c879da1cc1e0628ba404246bedc9873fd3d44812d285aa53482b02bca7891557d1566896e87f75
TLSH
T1D5C09BD3053045675F7366D5113857CD971F5D59C9C1DCF4504D7045707C953C905629
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 c6a46eb9635d9489b2c2940f9ef58800f2cf6a9bf583b53dc57ab4255c8f10ef
MD5 c56cd7fc8668639011fe82fdc94f1c58
SHA1 154aa1f2e1887a1f7695afbed860dca5a7f12c40
SHA512 ab13a23ab740da189547236cda2657ed4de8d1b5053d33f11fe92d3f43b7e1e1f8563105c2e20effb7605d357076c4392e4cb342b425fbaeb06d2a4e88d6c404
TLSH
T1E0C02BC38801C300C00302F4281260C8316CAFACCA0E270001E8351F5C261205028110
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a32c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59a32c.TMP
Size 96B
SHA256 2ca521ca0487e4f4a1e1202f698d3fe5a246f8b8d279c5df4389fcbebdfe54e4
MD5 dcea9edb8503052fd09e778c8dd201b8
SHA1 9136f5a4487be0c7d5e14e9cab30a9b1b7d84764
SHA512 26940e0cf8a23c6d61258816a887ebf0c9d76d11b89089772e64aa3d407189030e973e08201478dc32fde5e7ced925e85c3f05f1c7f1f618b9cc83bcd9c5dbd3
TLSH
T1B1B0026FC2266362C45203F429D599D87170EF29E703222793F0AA66EC396A04525960
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 323c5d69e9f532bde6d42dd84983c391cf3cec518911f9364daf2665fb639436
MD5 33107b44605454365d5fda08c500602c
SHA1 696c0df126bd4e320cabeb2b82d70476cad32092
SHA512 68da5a506c9984dd02549bafe45f4bc29630f418752813a906a56c932512f2f0fd3464d86fd629263ab7852d54d2a9dfbc464874e24763c20dd1267ac5e1c52a
TLSH
T183B022C0B3000003C3033F30C0C202C03323BF8003238E2300E8E0F0C80220ECA200C0
MD5 SHA1 SHA512 TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1392_552654372\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1392_743954375\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1392_743954375\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1392_743954375\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 68e75849d6148acb7192b86d6d6205bcc940e4cfcb31d00d37e02e0b6e2deb14
MD5 eef16857ab038caabb6988a1ff34cb69
SHA1 74d27e3a5c15a093c46b673831a138a65ba0951e
SHA512 1a8fe7c73ad266929109796dd5df4cbc20639bcb6126fcc72a9ca8ff9b04b361be167c8b0460f8c40284f289d09b54b461b13eb5dc53b24f59642bbe93afbf4c
SSDEEP 6144:QCeZVsvtMb8gmYSpyMfCOxwm7Rkm1tYpBeh2BAos:kovtMb8guNfCON9oBGcAos
TLSH
T1DA3422369DB698330A59AF9E104F271A0DF28B538438D997C5CC1F4936AE39C0A57D78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 be5bdc3d0628c07b3d8428d4bb1184dd209cfc1de67a34d1cbdf8a6990ee0af8
MD5 b40141bbd15788f961d8e761294b1403
SHA1 2ed93a618f39a7e4ae6d38ced85f56af26dbf5d0
SHA512 3c0cc294872e75de810f25859963ae5fe47855fcaac1638d91712db39eea9067003f7d3556edd1d7a27c3094b53093f149d79410f55fbc31fa35781147364485
SSDEEP 3072:SGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:lm7Rkm1tYpBeh2BAo3
TLSH
T14DC312275E71E9375D79AB4EB08E0B1F1EF14AA6C930DE92C8D85A0437E97CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 986c9db756113118d31d106ead179e9487169b2f6040fa1af70871bd39c97015
MD5 1d0a2cb65d16ad3388067118b276d16b
SHA1 2a9d9087acd9bb2c69bb040235cac42216cfcbc9
SHA512 89fe56516acd493cae87384f77cc7ce2d22c7a5a89c951016631a8288cb629467d600b37fa87452a1dbeb29682ac0b60d857446882ab2e7d3368fa0327f6fe60
SSDEEP 6144:IeZVsvtMb8gmYSpyMfCOxwm7Rkm1tYpBeh2BAos:rovtMb8guNfCON9oBGcAos
TLSH
T1343423269DB6D8370A5CAFDE108F171E4DF28A528438D993C5CC0F8936AE39C0657D79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dd7796929e25b7481ac9bfb39d0ff633f397d26802b1bbce3ed377f96986e8ba
MD5 bdb8bdbd572dfe712d2385875aaaa438
SHA1 0816733137bca4f5625a5c3a81998c6d4da2849b
SHA512 1c865cc89d10b2713358f4d3229e03e8ba233a4258df3b01ab531111e475c7f8541e1c407894555474cac356b9ae57aed4083c61e4d1af12dd955b9fc8d33046
TLSH
T176D0A7E8599DF5E0F03A1D3A61244600B29C1AD26D53A30AE16805099D6E05222D55DA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 51b89eea9f115a56d1fc7761dbc5429c3ab4a1dcd69096791d5b5178b3ab10ff
MD5 12adac44798c0b644146a39778dbc5fa
SHA1 8396529ab10f81ca04c17d80adb12d84e9dd0588
SHA512 c0825055915f5ba6e410a7ca2555b692f410a52a93008be94bdc4c400e55ba991df41fb489237e5eab4081b0995e0eb9971a068cae82852fafd3faa71abb9baf
TLSH
T140D0A7E8B78DB560F1670C3575184615B2AD5B816C23E319F46921495C4E42223D8189
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c2ea72b955d5d0d97a915b16a10d7feae0d9e07fcc20aa2c78c63039d992bf10
MD5 72adae0d40055367f8e77b060f5b5c09
SHA1 4b875d5297d9fe86086097999466717186ee153d
SHA512 951f8661575d9206e2f08e5eb16f6cac181a56f9548a71cc326a3ea3b385031a18bfd70eac316ea7b4f6fdcf9adb8b7599619ddf3b6240f5a7b1f6962317c979
TLSH
T137E02BA6DC65ED3708FD071960195657E75113172640495F3A3CC20D8FB462A85C585C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 61c1174ca137b46e1fe9b2956c0c8bdf12edbe2ae77b88dd06ddf769ad393f8a
MD5 820550f70a39c68c330fa8c69226f56c
SHA1 9a6aa53dd9b717170476d88f35956cc1084cc4a0
SHA512 069dd90b3ada2f70411be08a3157bfbe1608d1b84678dc3d30a409b1fdc7dd9fbd9e6168f2d6b9a1140459f6d9e8f689208a47fb6b09b0eabf94cebe18b40ae7
SSDEEP 768:FBqofe957VxrJQMGMrM8MdLWhHnG5KvShx2oP6k:FBdfUVxtthHnG5KvwxHP6k
TLSH
T17613E87E3E691DC6DAC2463D490F4A362B3AE830F6E8474F3BB674C2432674A095ED45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 849008d4a30ccd3dcd69f795d1b36b9e559992ecc9b815107b53dc73a8d29a89
MD5 3eee01fb4679a57684b1ddfb357ee06a
SHA1 5380b305bff848a85c64f6d9fd2bb6c7acd715c0
SHA512 9a93155f88700e9e1bde0c77323e0d85c677653364c9498c37dcc3ba00a1358db3d39f0c3b8051c225ab26c401a796e733ee4bc57ddc5d990dbf27eaaf6c22c2
SSDEEP 1536:eoL/cl5L/chFexMnSkoBgiL/C8L/8e3zwGwm2L/I3rfwQ7h66Q4PcbQhtjg8cek+:7L/uL/HxMnuxL/PL/8iCL/I7oR6
TLSH
T1E9446EF74981A05BCFA802F5D2133A3DD17B055D7CE1E8E9E6784CD21825B22B6BDE84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 9343f704069ecdedb86eea58a6ca4c0bc6553cd185ae33e3f747eb8235f0aab1
MD5 5fa35e951505cad71243c273a085ac23
SHA1 19d075556ba8203d2c2cbd3804e0177554039286
SHA512 aea085018aaf1d4dd5b1e968787c09ba594b6cb8d1e774d7ee89106d1f81d0e80d6bd8fda20afb34e48f8c28a331b28d7251154eb86ae55ef40cbb0dcad46d99
SSDEEP 3072:9Df9y+HI5/uCBLHx2b6aJN3QnlcZcPoFhZDyrvMFnCvnFyBl:lf0v52gohN3IcGUhZavMFnjl
TLSH
T11C2519EECB682C82CE6B877470E0D9077E712183B69CC0D39944C5D897D6B8176E92BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 11ae1ffdcb1b28c9af970b714bf8cc588c2425b62c1fee71a5c90779a070c950
MD5 a1847e598651bd69f4e99744b537a504
SHA1 616277ad9d78139bbbd718803e037838348aaed1
SHA512 4d007e242dedf956443c72e7e16dc82089435adc892dc79bfb3c2e3d8a6d0f76ab3e47dc2b53ed58ed88632d2d8fce43bd7be0ebb76a30eb821b15c9cbed1a13
SSDEEP 49152:7Y1RmkqLlPTY+Py493sIYNj8iFMzRp37t:7C5qBPTKRIYtF4R
TLSH
T17D868DEDCA6898C3CD639930B1F0ED477C7413C3B5A5C1D68898C684026B7C5BBAB769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 148KB
SHA256 f6df33bd9f900aef854bbcc49362ad71a94592f000896e91581baad4a83ba278
MD5 ef6485a7e11fe0b98a0575b6f1a3134c
SHA1 65a693151dd0ba4be4e641d2c45c7adef078ab6f
SHA512 214809d744ab050a25eb2c3207cb211674e6bcc85b0dcc3d6afa3472d6ee43433011a292a7cb8163ad9a96418c4ce0f14276fd0990decc9c45f6bed214827580
SSDEEP 3072:9uK7atxDb5Kq6m280J1zWrpLbohOXhjHdlm2G4UbdFD6NLuRYtX:9N74nYq6mB0ir1oqH1xNLuWB
TLSH
T122E312901A4D669F6329B53A9C3A23D52B30F3505CDDCF03A6765CE1CF22E271279399
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 33KB
SHA256 375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
MD5 d989f35706c62ce4a5c561586c55566e
SHA1 d32e7958e5765609bf08dcdefd0b2c2a8714ce34
SHA512 84b9347471279e53ec5f151caf47fd125b9c137d4bf550a873c8f46e269098ea5e2882b1dc1fe3b44095308df78f56d53674928f44a1e76d3bd7dc9d888d91dd
SSDEEP 768:Fsb/C/gSkvc6qtankIsBB4vk9NtXpam223MlyOYnp:FsbaY7cT8Ov4vMNtXpa0eYp
TLSH
T1D4E2F1BE842830C7A5177F9CD4E7CAC051C94048A2E794BB4BB15ADD26B8B43E46BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 25KB
SHA256 2fcda32a86bea80fe0e301f3faf1fc81a48f05447fbbdafce096449da26745a2
MD5 60e1910d77b2f40536da8a50793f5e8b
SHA1 0bc07c9048d8294f54314269e04f140b020fca67
SHA512 739772a6ed143874c32731d149f691f58e5dbb52bf9eb7944748878f4cc43cd32ce334bd53244c13aa3afa518fd0058d8c53c2f8475f216029bb4e9e30391405
SSDEEP 768:9qrz8dBiizDKyPBn0AG2TSY5ND9dnVpd4CFEYW:YcdBiEDDuOSY5lr5s
TLSH
T10BC2E16CC8038173966A30606D9341E3AB33CBE998FD44751965FEA847160AF2896EDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 97KB
SHA256 2ab58e4446c5357cb27e2a014dc323d76cf8c906fcfa157fd3b2e499e9978280
MD5 587934a8dda1fd21ad57503e8ace655a
SHA1 0bda76cadee880ad7fb26976ea9d633d118ee950
SHA512 8e73191faf4b88748bbd6356259f94e8fc77b322510905672dfaa8583fc40e3fd1e103af1d7c2ca1599f0628d3ba345ea9428ef9631be45a4cab714072169df8
SSDEEP 3072:Fu9dBZRBgXNvwhzHykPPe7bVy8AGBbIcddctKo:89dBDSwhzHHevYaGcb8
TLSH
T14BA31221D9492BC5D05A4FF3D26334DA89924B36B71AB314CDA38B868081F7877D26F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0da2b892b5829cd45cacee26c4b4fc5f4a92ef40262df558cdf3c9dc412e0327
MD5 c37bee728eafd94d7f470f59ecf73835
SHA1 de7b01262739dab39fc694862049d9831df7fa58
SHA512 1896371ca394f30a2d333df7c517685092d8a21291a47d7fcaf69c4e084a32a60a9bd675af78b6af88c041a2d85ad5246ede9cc41b8b635217c4b65297ced2f5
TLSH
T1E1818D398F421426E3D00071D3F108C4B73989FCFA832F9F61E4C8F469267A6642AB08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fdf3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fdf3.TMP
Size 3KB
SHA256 34b3445ddc73c5ee217148c690cd78418ca26e303dfcdd9e64dbfccfbcc3b753
MD5 4e9a73666a955f3f4d847d16185439e6
SHA1 aad179680fa8d40a66e55c078d4b02e3016641fc
SHA512 b6c4cf7f5d0a6070851ff36318b09486bb3985b846b92d1f4b2a22f97bc3f85a2bb176dcd0af8d2f7a95d60bbad85c3c261052e65836bffacf1a358b09e305b5
TLSH
T1087180398F424469E3E00131D3F115C4B73A99FDFA432F9E91D498F4AA157E27529B08
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b7be84f3158ec8ce6b38c3daebdaa27a4d21192e048dce8417cf2859c2b7dece
MD5 ceca53ded33cdae1913aa264f72659d5
SHA1 aafb19aaed02ce0bf4a67092c4c5f317b4de165e
SHA512 c458a2e68ee9203eb84946e4f04a8b2737a31feec29ced2541d1ece2ed8b4cb2437365c358212844aff2ce31a1434301727a3828d20f84b3034f22c1a67d288d
SSDEEP 3:MsEllllkEthXllkl2zEkl1h5/l:/M/xT02zndl
TLSH
T1BC4404047FC00405D50010704011D3D10770F4100533F743345144537CC5541CC00030
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 63466d8aabf0a01cbd155d6fa7251aa4bc96d3254fb2b79aa20825952d6b2b8a
MD5 116044c1215eb9faf4b132b87413bcf8
SHA1 2a9867f53c18ce08f233d14e939e2d063019a56a
SHA512 fe2af623fec93feb6038182bc4f8de1847ea3dd57c41c5953c6c7f206b2d3dc3f2b6a85e539267d9d39495ce7b36bb774eb1477f2c829f72d202afe9e376b221
TLSH
T115E086D405CFC32AD06478D382785B88D3D13946FB8C7A371B6A8844B213745E3DB2B0
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 653c95f91dd52ded832b32e0026702486809d12ea35b0cc76bd89e31e9825f1c
MD5 a41b98c2c6a364e43e3ffa26dc0ebcdd
SHA1 26d779f490d6ca7ebefa225a8eb6bf7d3fd157b8
SHA512 d4cc4134284bdae43a9054f6b55c80f111e65a579fdd5b9ec67f2edb48903c79fdf02ab0f87645acaea33713093b4f83bec645b4ff690c2c7c7e0895706735bb
SSDEEP 48:uzBmw6QU1Pz1M1rNPkvi6xVqKRmYh64VTz7VIs1t:6BCxm1rNcKkVqKmA64hzis1t
TLSH
T12C92B6835EB83003DB560D36223B183D9D3BE17D1FB6DCD4782594228DF9846A079AAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 75c5cd83b6aefce5d3dcb2bf1ac3a595bd4fcdbcfc2f3888b4d5cda4630278e9
MD5 589ffe4f7fcc292b2cc04fa7097e1cb9
SHA1 cb8b7d18c515c3a83c35e64da47d5806a16f613e
SHA512 e3907c5f0340ddc65a6d51e19235d9aa6dbe6362022202456f2a7a3f123c7f2cd1c1e543e679742c69c764cc9fe2e27518307ebd6c59d101d9fc31b81f81ad0c
SSDEEP 192:M0f+G83uy3Ct7XBBK1ACaZQJvO1H7DXspU3ij:M0/83uICtTBBufQ7DXspU3ij
TLSH
T13714666F5F643315CD7D417168B748B75D6EF03B8F12AAD978A104B0CEF2A42A06C8AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 0e151bf6a835ab7a5df0b4b802db4dabb6e182567506f034d81ea3177f2493e3
MD5 e95607c08e734afea9cdd87d214bc346
SHA1 ed89b024fdf7136e44346177981c784ce4693b63
SHA512 92d03d050287e3ff463ddf87a8a4eec63dd70b50d01a3e445130b4d293b521fadf5a703bda7475dc07dace6bc67a294fc448b8baab724424be58609f8dcba680
TLSH
T15EE0D8A044CEC359A104309782246B8CC3E03A06EB8CBB261F09D840B302284EBC72F5
MD5 SHA1 SHA512 TLSH

Submit Download

0713285e-d06d-4399-888a-729840ca0514.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0713285e-d06d-4399-888a-729840ca0514.tmp
Size 6KB
SHA256 afa0719e872a45ad0b734e65eeba783aa320656eee0b791a2fb46719573efeef
MD5 fb8b1e25d5a2abdd4ea921ac3de287ad
SHA1 16cc9b699804716aa6607d906106cc97b4de10b1
SHA512 0917364dde6edd63dc1f0e8dd7e162bfbc53eec2be9ea5afe3731b58b9ff7894d3630b61f3481ca53460472bcf7650039e2fa6978241aa25af87d189f75aba76
SSDEEP 192:D1vbn827dUm6raaij6y4AqWDh4B4pxk34R4Q7HT:D1vbn827dUm6raaiGy4Aqgh4B4pxk343
TLSH
T1EDD17BF383E9C65EC91156F49714AE1BCE1D0614832C3D6988E5EE8BE3E3031E25965F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 6f2ce766713f187c9b46364880901588e2548d3afb0e1383b13a9b549a44de8b
MD5 296099e2eeabda5dbb39e0ea1d0b2d53
SHA1 58e95cc2999185fbe4e1791a6caa7577c062f3e6
SHA512 4d7e03ff4ebfe8762dee32b2faf51c2c89b78e32f3e67a82bdb839c7af61c25302ded7995ffd7e0d4082d9c7bcecf32a3f314b86fba8dbcf889fff2a588c8bd9
SSDEEP 192:D1oJw9j88NNrmj6yPqWDh4B4pxk34R4Q7T2GhCl:D1oJw9j88NNrmGyPqgh4B4pxk34R4Q78
TLSH
T169E18EF3C3E9C66EC91156F497146E1BCE1D0A1483283D6A88E5EE8BE3E3031D25965F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 925baf8c8cd32e5cdf62ec2b4f80d8e4e58c27cb6069e11e04c4ba757c48a0ce
MD5 8d617961f373b494a437836b97b06d33
SHA1 457401b974bfd3867f3b75222526bd157afaeb34
SHA512 271153767763144e1b2061189c9775bbbeb27b3cef4bdbe819f20953909063bc60bcd462b5ad727c93a63f0217e790fa8b5fd35e931f506e7d17e4a4e11f47f2
SSDEEP 192:sxZZhRZyMqZjK1Ml8gkO/fBsToWpV+cZdszodpcByxrMHW6+WNR/42AfrbYPJ3x4:sxZZhiaO/fBsToWv+czvcHbErbmQUJG
TLSH
T1FB72E706A974597BDCDBD219FA55BF63D2F9116391905E44AAFC8E1C00EBBEC220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 842e05e49659044c0aae08f048f3c998940dc2adeb33f254a952776c16d5e610
MD5 d8b03fe5a36865a07a2ddde88b1d28c3
SHA1 a1254fca4dc68335ac5753c30f53986d5c0d3cdf
SHA512 486206c249e21726ecd94f81885b143357396295abf0672520052a7cce6370fffd9248321f53e11215ecea3f1f5679f2f2939a82267277c4e58d64625a74eeee
SSDEEP 192:sxZZhRZyMqZjK1Ml8MkO/fBss49aZdpzodpcWZaKHW6+WNRASNz/Yvlu8xQ+i4Ix:sxZZhiMO/fBss49azCXHb5/0QCjG
TLSH
T11172E806A974597BDCDBD319F645BB93D2F8112292905E44AAFC8E1C00EBBEC2203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 69690d2198cc306427fbb8202494acb3e58ca790c539ab8396a31bbe3545a3a8
MD5 9166f7b9794665be027a1291532d1ec5
SHA1 48981e4fe99bb26e05e00212afb0383a9fc696cd
SHA512 1519e1ca6e5e68d98f9a18776fedd7dababef57a24ac9285707effaf4f10fe9913e2555e74f75ec093c5981b2a824ccf2c42231e4e98c2f38b6983b65a1cb30a
SSDEEP 768:ZYsv8Od/hWvFvQX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQro9RLG:eY8Od/hWvFvQXu1ja10Lm2Nu/S
TLSH
T1F8E20C3B284CCB7E4F840E9DEC26AFD66DD801CB66984D5447FA884C02C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 773a9e710124d4f0f22d65e658cca0c769bd1eab7e54732f9c3bb4753dbbcd0a
MD5 9efe00aac95a4acfec0356196f22e12c
SHA1 6e936cacd11f0729cabdf913601f17b855748567
SHA512 c535cf53d93ae46ceb402a3f9cf94560f3929a1aa715e93e0b89e8c1f80435ab7c8ddafb00d79caa7c2154460c2aa6105e33c0448f8c67e2b6f9d1fdc0824e33
TLSH
T1FAE04F9005C9C379B21931870268974892E47927E7CC7A272F968D447693644F3D75B1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 592B
SHA256 85a4734ddf6654d1c0fb8eb1ee55cf72f5d4d6c39e67fe152a2194b5e44cafd4
MD5 8d7a71b925d98573663c6ccf385d6baa
SHA1 0800746f8c13d72a330a0d7954206914fd098672
SHA512 8492e6fb8c55810e6ba01d7c638bb1e41994a721ceb6fdd149a0ebc41d6f38d00b09d00031b9944ed0d5cc220339c77a7c03928ba0f0d197a8b95a9c1f5c08a4
TLSH
T146F030512F001781E5BE05BA428313735176E14DD3650E2B8AFDAB2A9D2BB123F80DD2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 93fda9dfd57a3918a9e49ad9512b37c06781a6181e961da60f98d74ea9b53639
MD5 5e46f3d4431560720f5c1daa3a1c764e
SHA1 8a50f269f235940121c81dee61dac4db94d8279f
SHA512 299c183876c1532f6607d5232d6ca70c692dd7abfa0fdda10f3b1beb79608e6ef5518314f773e455e58f08731210941edbe00f1873b75c98d402d6d37a6ca5b7
TLSH
T1F0E0D8F016CDC36AB155308B8224F74C91F27902E7EC7A362F19D6407346640B3D7570
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 f92e61c86284bab918c8f970ece365c53c79a84ad0d09e2addf806e78aa5113e
MD5 ced46b2a5ed4cc235ec6c623fb12f44d
SHA1 e05d88e5d0f955f851ce316d81b4bfe88a9f9cf0
SHA512 e6b756561c9eedcc59ab0bdc279ea3f9d40cea61e529974110b30de99f09bc1b8e22a66644c00898e5d3a30fd3d807a836e98f9e40aeaf567fc62e7fbb265e98
TLSH
T181E048F045D9C379A025708B4265EF48E2F0FD0BA7987A666B0844407A41354F3BA5B1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 30fb2667b34dd2bf677d2cd48cf35133e9be17e63548f2bc74d4d0bcaefa25c7
MD5 3c982baaa2574c4b379f8c5236dafb29
SHA1 fa1ca348f4ec6c5bd1f470e61407b33a54fd26dd
SHA512 660abe49614224a2329b77757f5c5482540078c70ccb6886c0bd678f0574b5e2966c3063f267d333dbf71cdfcc91e1042eb2e9654be6682c90feb0172910050b
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGo:05ppxnY753RNBvRJJdt7p5J9/nx+
TLSH
T139B28C5A703A0212397E298CB39596364F4135A33058E4BF7FB814A14F67E225DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 68a772cd1ef5eee2daf0cdfe4caf3affe76f685171e2a14441923eabf2120f88
MD5 8a5cf6b9cba69853eb6dbf6b34853b20
SHA1 dd7b574189e5392d4fa9baabc0205dd631a8a8a9
SHA512 259cbafcb3e813f3c68faf12f9d9de4e77b3504b52e417ffaa91cb4c0825b78d30725272a9d7d68045c1dc9f297293caf5af8dbee22fda3627a4c2417ad0398f
SSDEEP 192:P+xWcnEZffT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxDnExfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T15324730A7B747001EDE6D9725CB080771E3CB16ECF22A6915DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 5c580abdaccc6a2d62c23a241aa406a05604066e12cc46415c5ac2385c057600
MD5 711822a94e5b2459942eb3104818432b
SHA1 45a756155f641c1042bbd4eacd0e6d8853b2e9b5
SHA512 697cd27a50c167cca13236092af3f49c2b8dc4866f46f5d5cac8da07ca244a1f50184b2b7dbb86282b9b2b2d6ba0d410c5d434029f869baf007bcaa4db4416f1
SSDEEP 192:mQOA4AsBDl9HNCsMFP4fld1QRIIIYboMIMCDYcYjC0:GAhsBJGsc8QRIIIYboMIMKBf0
TLSH
T15852622D67057B3BC06E2F7613564E589BD5E8830277226D30621C5F9EF3A5386C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 cefab739b2caa2f732b645e09919b75832f96440928c1bfba1d2a60d25155825
MD5 5106d049853b6c0513108b4655b03824
SHA1 8b7ea044c4f64de87e10aa3f4171e638f92fd685
SHA512 53f1ce2071b382d2167c916c250305682a15d722ad0e17fa4bb6e852fd01d3efb2336ba957cc1f50e4583b3d728135d6b6897086d5724e47c232ad2dc39bc8cf
TLSH
T1ABE04F91AACAC36EE21430878168478CD3D13A07FB887A6B1F05C448B203244F39A6B1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 9e72a48b3bb2f1ba346703a2f29a6e0cd440630caa078ef9bbe2e36b2bfeb664
MD5 9902aecfb8c02490e757eae2dfc7bc94
SHA1 3431d0b700243264392ea8624dedecf95716c8fb
SHA512 8c5e0431b8f2b63b3cf35aebf7e479cbcc056328c9158472240e7a0ab071eaa332a7ea2e23c15633f96dc78955b28917cd948442d526ba0ebfb82aff117d51b7
TLSH
T1EA219D55F320C159E18E863AA46B9B261378E8129FBCEC0F847D24352D72E045E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 86263f89339669e6e96436d946094745d753ebe10f69ae1b065ca9f1f979c178
MD5 67b821449423fcd413c2b35e304c68da
SHA1 9d9eddf7ecdd4c949596ecd60d909424cebed13b
SHA512 7885f6de28471797313b41a8931bebcaa8cd1fd450a6e56d4a69a84c84f4bf9c4ddf3d03c7ee1c2a7b12cbe8775ff2ce7cf037c964da5266250e3acaccd722da
TLSH
T1EDE04F90A8CAC3AF9214309381789B88E2D13D47FB8C7F2B1F458C48B613246B39B5B1
MD5 SHA1 SHA512 TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 6935c41774e2de690c3ec02861aa587bdbcf538e4850c93f3e689a8e2b1d23cf
MD5 80111593d92dec7c5783ca9d316762a3
SHA1 ffc336051e113ca716dc36fbe77078c7e6a6ca85
SHA512 07a7915885f86766f697fe52d7b319df80c524ce41165507bba68e3abeb558de9cb2aa8acaabd673acaac888747f9ebcc966720bd0597dc61892726fd9bde010
SSDEEP 3:MsEllllkEthXllkl2zEelU/:/M/xT02zNU/
TLSH
T12C44040C7FDC3445DF1411744411C75007F0FC300D135753347144335CC75400C00111
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 2cff33a6a3773d70ae0fe7c8e8dfc95af946b82b65288a9df151a7cf253af866
MD5 6b476de8b11bc83bb3b9f6a5f7ca3808
SHA1 8b0d5d1930e3c3932c4d9aa8737dc8821bfabaa1
SHA512 7070bea69d45093ac15f0ce38280565f222d06e528c511e1915970213a02e35963d8b6f53d2a45d2108060314e8de4e517793462555aea91357f763c85937aee
SSDEEP 768:sFDF8wgbk5uDG045Zcd24BKWEC8G4LNqgjNJv:8FS1ycIWb8zRqgzv
TLSH
T104D24A32D894DDFBECE69BC5A74AB6039EF40263C6CC5A98D6E86D1D109B1ED0307C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 2b58c9cef21652aa42961002f816b1653df32748c61b8a9fd773f973778effb2
MD5 490ee90a2c99ae8a586303563f28acda
SHA1 ab740edc6e1302aa0acd9b1f0b0e32cf86c89036
SHA512 858d91c4991114e9645fc83ddbee7fd77c7890a31c93c9af65b01adeef1a614660daba8339a857fb25bf888fbf6df699723fea85ae5931c5009944840ec98ca9
SSDEEP 384:npEiFiZcILsNB8TUNTUlI4yQckCrEp4pvBfxGJWJ45Zcd2eRL9Dsa+VY2NG0ty/n:pfFQLEwgbkxuDG045Zcd2Y9DhgjNWx
TLSH
T188C24A32E894D9ABFDE78B89A74A7603DEF44263D6CC6AD4D5D85D0D009B1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b5ce604517bf3098309bfdfccc652d092920f5362eedb7164e4747485e49093b
MD5 2da14fd0fd73189d8d48cc63956d04fa
SHA1 2d348ad795d51c96de10a9d4f6a7698e0fbd92d0
SHA512 971f18b4f03362ea10d6163d46f2ce7b368845ce601e320e1b5871084f067b91f23b25d4c537f18fd138f608f5042f2ee32e40c9ddc1e2b3d76d9b395ef6c2dd
SSDEEP 384:n/iFiZcILsNB8TUNTUlI4yQckCrAp4pvBfxGJWJ45Zcd2eRL9Dsa+VY2NG0ty/77:KFQLEwgbk1uDG045Zcd2Y9DhgjNWx
TLSH
T13EC24A32E894D9ABFDE78B89A74A7603DEF44263D6CC6AD4D5D85D0D009B1ED030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 a3e0a8545e2c1617fd78585cc37c0e5eaa1f77472290429d2d4b8a849f383845
MD5 21ebe155abd65ce6551562dc2d4c7d72
SHA1 084452939c89ed2067fe94c818874c6b9d915a77
SHA512 6f75d9a65811a8efed450f03bb1e914966eff4f350cdf919457854c7437892cbc194f5c1c4dc9f5e5d7e304581574bc2e49f0720de0fff0f7063f11040672c85
SSDEEP 768:KFDFEwgbksuDG045Zcd2YKSx1xCxK0hgjNWx:yF6Cycj1IxBhggx
TLSH
T1A9E22872D894DDEBA8E6DAC9674AF502AEF40233C58C599CD2F87D2D209F4F90346C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 1b7b331420aaa2037796a8ce29a7e7d0a70b862e540d171f03e47b5dabddf71f
MD5 d0a765400f1304555a9066eb8222bdb1
SHA1 75a156239b5681fc2cc592993758492c74260e51
SHA512 c770aa12d8330fcdefe46207a110a8766d6e98ee2042884da17053d064f17d2552c0ceecdb8999a2d913b36609be79d2a3aa005769e6e02cabdcf345bae531d3
SSDEEP 768:KFDFEwgbk7uDG045Zcd2YKSx1xCxK0hgjNWx:yF67ycj1IxBhggx
TLSH
T17EE22872D894DDEBA8E6DAC9674AF502AEF40233C58C599CD2F87D2D209F4F90346C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 3e75ff834fea529caf1d2249419952047e219d8b1f312cf3992bc2d8077bd1b5
MD5 8765a0c9bfa2719f0d54a0bc3aaf4f04
SHA1 54f9332a3a328e5723133a36b4f8f10888fc1f3f
SHA512 4c8469d6ad701b533a484dd51a9eca71ed7706345014e0510ec66f9b4f20cbe188f02bfabdb62ddf1d819276d08970df05224b3a832a31cdde17bf410bc2ec2a
SSDEEP 768:pcFccps3GwgbkUckDG045Zcd2ZBI8p0MLC:Gs3odycqI8p0MLC
TLSH
T100B25B36EC98DAA7EDE74F89B74A3A07DEE0126785D859D4CADC1D0D00971DD130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 1cb60ee4f3147a8e703857b6d347cd64f644a29751a7f3a6f311da534a678b4b
MD5 914f36118786aeba55c0d97fed0a8bf2
SHA1 d3bec8fd4dbeaa16e69a1a5302f0830fff7a6e81
SHA512 6073e92ca3069cb4a0150acb754a0ec5d86147deac55b1622bea3678d28db6f03fc5689677adbe9a1c5fcd4c471227ff47b0a07a198ac05e9e57f2c3b3e63f98
SSDEEP 768:paFccps3UwgbkUx7DG045Zcd2I9DI8p0MLC:gs3G7ycHI8p0MLC
TLSH
T156C24C32E898D9ABFDE74B99A74A3503DEE04267C6CC9AE4D9DC5D0D00971ED430BC19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 8e7c79ee19abc989628961c585b59582dd533aa6715605044216d5a7ac5338f1
MD5 ff2a96c13383b1b9151b468696502d5c
SHA1 f81f0e2e4afdfff9c15b85c1362cc244171659d9
SHA512 4e87c27f538179272993989cdb49a79ae1b41b15a0a2cb8ead4629729d5496619196b4f9825c6fba15c3e59bbba036f4645843673545f8eb308142706e743fc8
SSDEEP 3:MsEllllkEthXllkl2zEelSJ/:/M/xT02zNSJ/
TLSH
T18A44040D7FC41405D5D410704013C35107F0FC1017315743345144535CC754C0C00440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 1c674d647d20f4440b5c69c67e09c8fab4997326eb23d0fa97d8b65c8f01d713
MD5 884500b2951419c573b4508cbe48678d
SHA1 ca750b46e105bcc719065b93cbd5a91c9b3fb858
SHA512 1b4c52b1d80409bad8e0b7ad36fdbec9e3f279a0aab5a198c09050547400b61ac4d899db7eb4642cdbfa1ca8e60496bde33c14d2311fd505c9b45897ef38473d
TLSH
T1493122D148380ED6C4BD0ABE748739FC84E8D72AB1E430782888E9944B6E65D705143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 c66ffef4bafa83cf908225224ea26019f66103a0ca4efe65914e13b45bec56b3
MD5 b024060bddaa62bafdabd50648d6aed4
SHA1 7353c490653d11854e5fadf434c7c1858e013050
SHA512 07c7a0761b2fe9e1f5be879f6658682559c9ffb7e1c02af038d9c7b96dbe0979cb3cdddce279b6e6479349ed0f89839638553c516761f24c4316c667641b03d0
TLSH
T12A3122D148381ED1C4BD09AE648739FC44E8C32AB1E8707D5898E9951B7A64D744583F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 102518c50f12d8fcad29cd22e320f2a4eb6653bf9bf9237a66ffb6bf1a9d9a6b
MD5 a3844e49c6a4accc27febabbce87366b
SHA1 72474dc67674ca3e97ec5b9992c827354d2b168e
SHA512 8ed9304aaf0608d4269e903e7a75e082723d6663240e2ba76182ab833920588710d0fe07c10ec847176ccaaab5660603703d244bdb7ec63913a81bab2ae52552
TLSH
T14F413749B3E9014CB3B66F5A9BF6A8AD487FBD772E0BD45E00110D4F0A62A00C961B33
MD5 SHA1 SHA512 TLSH

Submit Download

0305eb08-6cd0-49bb-9dff-13d707f49c0e.tmp

Path C:\Users\Admin\AppData\Local\Temp\0305eb08-6cd0-49bb-9dff-13d707f49c0e.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

0e8242cd-9b7c-4e2b-a48c-01ae8499e38a.tmp

Path C:\Users\Admin\AppData\Local\Temp\0e8242cd-9b7c-4e2b-a48c-01ae8499e38a.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c505131-4760-49b5-9e12-158ba43da2ea.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir732_1199502676\2c505131-4760-49b5-9e12-158ba43da2ea.tmp
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir732_1799662828\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5136-980-0x0000022555700000-0x0000022556700000-memory.dmp

Download

memory/5996-256-0x0000023A8B5B0000-0x0000023A8C5B0000-memory.dmp

Download