hxxp://Google[.]com

Analysis

user interaction
yes
max time kernel
569s
max time network
559s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/09/2026, 17:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://Google.com
Sample260909-v4knbsda66

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3024	msedge.exe

Drops file in Windows directory 42 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1249245070\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1249245070\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2094195822\domain_actions.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_117075069\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2007749151\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2007749151\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2067223710\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_92392242\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2067223710\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_515537233\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1877238018\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1877238018\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1249245070\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2007749151\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1292677335\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1190124362\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2067223710\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1877238018\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1877238018\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2007749151\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1292677335\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1190124362\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_117075069\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_117075069\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_880562093\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2067223710\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_92392242\arbitration_metadata.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1190124362\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1190124362\v1FieldTypes.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2094195822\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_117075069\safety_tips.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_515537233\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_880562093\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1830060980\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1249245070\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2007749151\automation.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1292677335\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1292677335\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1190124362\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1830060980\crl-set	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_969771057\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_2007749151\extraction.js	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5596	msedge.exe
1684	msedge.exe
2532	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334487755615828"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{09ABC580-B4A1-471D-ACB7-5D119375896A}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{9573C282-053C-4D59-ABF0-331A99965736}	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{CC9EACF9-C61C-4FEA-B41B-18DC145B982D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
552	chrome.exe
552	chrome.exe
3024	msedge.exe
3024	msedge.exe
552	chrome.exe
552	chrome.exe
1060	msedge.exe
1060	msedge.exe
3436	chrome.exe
3436	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe
Token: SeShutdownPrivilege	552	chrome.exe
Token: SeCreatePagefilePrivilege	552	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
936	msedge.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe
552	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 936 wrote to memory of 3328	936	msedge.exe	88
PID 936 wrote to memory of 1956	936	msedge.exe	90
PID 936 wrote to memory of 5596	936	msedge.exe	91
PID 936 wrote to memory of 1956	936	msedge.exe	90
PID 936 wrote to memory of 1956	936	msedge.exe	90
PID 936 wrote to memory of 3212	936	msedge.exe	93
PID 936 wrote to memory of 3212	936	msedge.exe	93
PID 936 wrote to memory of 992	936	msedge.exe	94
PID 936 wrote to memory of 992	936	msedge.exe	94
PID 936 wrote to memory of 992	936	msedge.exe	94
PID 936 wrote to memory of 2992	936	msedge.exe	95
PID 936 wrote to memory of 2992	936	msedge.exe	95
PID 936 wrote to memory of 2992	936	msedge.exe	95
PID 936 wrote to memory of 4532	936	msedge.exe	96
PID 936 wrote to memory of 4532	936	msedge.exe	96
PID 936 wrote to memory of 4532	936	msedge.exe	96
PID 936 wrote to memory of 5468	936	msedge.exe	97
PID 936 wrote to memory of 5468	936	msedge.exe	97
PID 936 wrote to memory of 5468	936	msedge.exe	97
PID 936 wrote to memory of 3428	936	msedge.exe	99
PID 936 wrote to memory of 3428	936	msedge.exe	99
PID 936 wrote to memory of 3428	936	msedge.exe	99
PID 936 wrote to memory of 5996	936	msedge.exe	100
PID 936 wrote to memory of 5996	936	msedge.exe	100
PID 936 wrote to memory of 3900	936	msedge.exe	101
PID 936 wrote to memory of 3900	936	msedge.exe	101
PID 936 wrote to memory of 3724	936	msedge.exe	103
PID 936 wrote to memory of 2072	936	msedge.exe	106
PID 3024 wrote to memory of 940	3024	msedge.exe	107
PID 3024 wrote to memory of 1684	3024	msedge.exe	108
PID 3024 wrote to memory of 1916	3024	msedge.exe	109
PID 3024 wrote to memory of 2900	3024	msedge.exe	110
PID 3024 wrote to memory of 1916	3024	msedge.exe	109
PID 3024 wrote to memory of 1916	3024	msedge.exe	109
PID 3024 wrote to memory of 2900	3024	msedge.exe	110
PID 3024 wrote to memory of 572	3024	msedge.exe	113
PID 3024 wrote to memory of 4216	3024	msedge.exe	114
PID 3024 wrote to memory of 4216	3024	msedge.exe	114
PID 3024 wrote to memory of 964	3024	msedge.exe	115
PID 3024 wrote to memory of 964	3024	msedge.exe	115
PID 3024 wrote to memory of 5584	3024	msedge.exe	129
PID 3024 wrote to memory of 5584	3024	msedge.exe	129
PID 3024 wrote to memory of 5880	3024	msedge.exe	117
PID 3024 wrote to memory of 5880	3024	msedge.exe	117
PID 3024 wrote to memory of 2368	3024	msedge.exe	118
PID 3024 wrote to memory of 2368	3024	msedge.exe	118
PID 3024 wrote to memory of 5916	3024	msedge.exe	119
PID 3024 wrote to memory of 5916	3024	msedge.exe	119
PID 3024 wrote to memory of 5612	3024	msedge.exe	120
PID 3024 wrote to memory of 5612	3024	msedge.exe	120
PID 552 wrote to memory of 1584	552	chrome.exe	122
PID 552 wrote to memory of 1508	552	chrome.exe	123
PID 552 wrote to memory of 1508	552	chrome.exe	123
PID 552 wrote to memory of 2532	552	chrome.exe	124
PID 552 wrote to memory of 5496	552	chrome.exe	125
PID 552 wrote to memory of 5496	552	chrome.exe	125
PID 552 wrote to memory of 5852	552	chrome.exe	127
PID 552 wrote to memory of 5852	552	chrome.exe	127
PID 552 wrote to memory of 4984	552	chrome.exe	128
PID 552 wrote to memory of 4984	552	chrome.exe	128
PID 552 wrote to memory of 5584	552	chrome.exe	129
PID 552 wrote to memory of 5584	552	chrome.exe	129
PID 552 wrote to memory of 1884	552	chrome.exe	130
PID 552 wrote to memory of 1884	552	chrome.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Google.com
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x25c,0x288,0x7ffd613ec188,0x7ffd613ec194,0x7ffd613ec1a0
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,559944985811613506,6980580980878685158,262144 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,1193990107510667997,10377110960564049903,524288 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,8582629405192901043,9020221060901493770,524288 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:13
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,244745208204149479,6451483838369048686,2097152 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,6601549327165731629,8645368711522910210,2097152 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4392,i,7969138272623050311,15406846096885582625,2097152 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:9
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4380,i,1398332528988093473,698261274561470299,2097152 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3852,i,10452935976287750833,835697056983093232,2097152 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,2577079422368323631,17484118060262834287,524288 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,1258841176125643063,5674527130263311818,524288 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:14
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,1285640340913277412,10307584267107645586,524288 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=3956 /prefetch:14
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,1285640340913277412,10307584267107645586,524288 --field-trial-handle=2168,i,13624325847006743610,3734703520633118779,262144 --variations-seed-version --mojo-platform-channel-handle=3956 /prefetch:14
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  PID:2072

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5568

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x32c,0x7ffd613ec188,0x7ffd613ec194,0x7ffd613ec1a0
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2084,i,16519684862307358764,5716347117970461472,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1908,i,2510375588339035821,11685882544500385422,262144 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,16670923132782444852,4736683985328710468,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=2824 /prefetch:13
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,600627586115217581,8015719233535855606,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:14
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,600627586115217581,8015719233535855606,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:14
  2⤵
  PID:572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,9130995863548710692,16341570051643008280,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,13795901543398318617,870879580538931048,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,14045314250263375525,15761965166999455990,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,2715446051409702667,1286008307239864992,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,6312069403694244971,17608183918628411594,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:14
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,16759319284540589803,10070523458041022634,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,7584327839427584656,15171533863489457059,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,6163861635745993607,5147661785729879898,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=1236 /prefetch:14
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,1671487199841414071,3827358113540668785,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,17036992337315997459,16713116867783610372,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:14
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,16289742054296074597,3679492706468737926,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,1115875983728184120,5374554906713472173,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,16220627572742116679,6512228791276182556,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5448,i,9393747369739877163,10742581627053485281,262144 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,5604709989095292346,6956823549834207138,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:14
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,17162461664252091511,4382380208653790491,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:14
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,9946030980274626441,2738224114759250649,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:14
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4052,i,10546805833922430899,15478503410072332777,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=1232 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,1978263638914941119,746492956975432634,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:14
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,18168722140996994487,16266381800934430360,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2732,i,9411017691591443482,10803958993758300857,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=1300 /prefetch:14
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3932,i,6928809229111637127,12654784935545384203,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,15899147809753856614,12116542828203448405,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4632,i,17979568060388801791,2348967869430948998,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:14
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,8742065521610936701,890286461167801261,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,13799439498925738087,461216359371086047,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:14
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,2858035609598810768,3992040813541507663,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=3932 /prefetch:14
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,349205407236674789,9797406980537333362,524288 --field-trial-handle=2336,i,15356550714158362168,13590247674342847527,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:5252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1396

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffd6099c728,0x7ffd6099c734,0x7ffd6099c740
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1600,i,9715899834618620536,13321314290696214506,262144 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:1508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1468,i,3824215470179212619,17378301106536739609,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2216,i,9503909875079831898,17403419442431604055,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:13
  2⤵
  PID:5496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,6371751850234341127,15525839038231211003,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:5852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3296,i,4222320958388280466,5086802558035877627,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4668,i,852720966128211236,6789257102573143956,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4880,i,12977888679798988431,14657345766241676477,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:1884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5380,i,12378779275941236227,1228292375642104581,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5432,i,12306433397765929733,4324862500934283388,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5468,i,4765905416286116839,9475114837257309957,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5444,i,11591111212618172584,5572357445730523807,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5460,i,12589954955662699854,8319132682265366356,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5716,i,3016817673183100632,3867355861944562095,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6016,i,4606870326273317514,18385899366436124084,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5388,i,12091645794073802147,7810796778255266263,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5520,i,18400822413823265990,11376588741125955141,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5472,i,13929691500992748326,9994295517300896157,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3680,i,10982496907409912547,4103828790595498541,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:12
  2⤵
  PID:1772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,14521178000813710817,16524003565107610234,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:14
  2⤵
  PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3684,i,8689959594983742730,8340378246148529319,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:14
  2⤵
  PID:5924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3228,i,4435618844586142910,1265570693650744928,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=3912 /prefetch:14
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3608,i,14473285442099680587,1015267027571585009,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3584,i,15184595845808293446,63901222656698087,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:9
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6348,i,5657515586579606042,1472396602135864491,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6060,i,15124547049091016354,907091019588136346,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3688,i,11459833760467394002,1898862976919861529,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6608,i,2831429678910360951,12716407304045151202,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:5760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6612,i,12100179931451479984,12769330255734832793,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:14
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6616,i,3695552105526138020,10000442534329435686,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
  2⤵
  PID:4180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6664,i,11502537727251771181,14915974690600434699,524288 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=3560,i,9488355587984621521,13193454846714716697,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=3724,i,12435323086786633171,1796161856975514632,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6212,i,3311357360728433194,16803771398970231021,262144 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=3116,i,5083139009005083996,7350288359380844745,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6564,i,16888213283814153689,15110918476480194201,2097152 --field-trial-handle=1920,i,6683189641877502584,3342662562765192508,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:4424

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2912

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5660

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:2644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 418KB
SHA256 5f3bf5a2a252daa5e9f913b0f985cb9a2c329981f0147524933ef50fd07cffd4
MD5 77afcce4300f608b9d19560378cef5d1
SHA1 aa69cabf53cbe03819d3dac1a292c1211efc45d5
SHA512 e1d0576a696090c852fcf808ccd35043fefeb8389b4bdd43a4c69c513fbb4b71143515bc1885630e92ac0dce65c323451f936e6b1db1f125d04eb964dcd4adbf
SSDEEP 6144:2fUz2K0a07Q4fFHWKbMhtAeVM1uBKauutc5HRofR2kdR3Vi9Qrowl/7LF2:av124fFHWsMh/fKJRoZTPsqroSk
TLSH
T1F694232A9829F0A0F423770735F392A9A218D7FC957B962F818579FF0114DA1EF8B41D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 91883c1309b98df18de855febe68a5f5ba7224f8c515b9aa4b7516dd5cdfeecb
MD5 83dfdf4847f3193df5e77fc7e1b19bfe
SHA1 182b077b001cd503e441ea0ad956f0b8c8dcfeaf
SHA512 976e16f0495c13e1735f436c2079adb9c7f7a6c2d0d11322ef82c4cffb52084cee44b810cc32e83752d61b493ddea53f93ffa20aa51d3b8ebe58bd7c507435a8
TLSH
T14741DD042E4255EEDBCC013724E6001ECD2B0AE7654B4ECEB410CAE462892FDA7FC375
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1110b309185033107b0951d5b0bc7ce133e73bde02d3bcfb18749bd69b71c09e
MD5 a83dcaa3dbc57f58eeb4f891a7d297fb
SHA1 f1a476ad5de0d32dfe921a3facc2a10a8aa9f51e
SHA512 95a9e14db6d2c27f344e628ad54c28c367047b0571276d5d5e9735c84abee9928e2717224ab37f8ef7705aecf39983afd508bad4afff47d2231833f07504c824
TLSH
T10241DF042E4284EEDBCC053724A6005DCD1B0AF7555B4ECEB414DED462992FDA6FC379
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 c6aa449c872557ee7b00ff5ffa4415fdc4482488adc0eec1603c2e8d9f384077
MD5 31736156fb6a10151c252723c7c185c2
SHA1 d68ec84063720ef341cfcb6630f4290b3ab69242
SHA512 11a693e7be05bc28af15a5e4923af48fbc3c2891e4f3e61c623bb71f471e2d7b841df95633c61c1e5383325557756dd1c05fd450bdd292678e2cd1f32e659321
SSDEEP 192:DsXzsyRlEpJ8643JVfVeOMIGDa9RBUIuaPazmIfaWv/dfPA81XDrMnNPoNTg/ym/:DsXzsyRlEpJ8643JVfVeOMIGDa9RBUIN
TLSH
T1CD32AEF7C3D8C66D895156F49B26AF1FCE1A0918532C3C26C9DCBF4A93E2871D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 7c17844a71bd518d74e077da2ede88adb4f9771ed371cae86800570c63c2f816
MD5 2ae5341d2595dd3d7a2ca96806187d8e
SHA1 d2bfa0c36bf725fac7f0701656f5d8b7533660c4
SHA512 8859cd0d911a5a1e427b3755337e364fbe6f802c9c23b329ad92d6f47e8968da3a1dcda2a50460000ad93a5962e817db871c16714b0fe0af4185f2feaccfd5c0
SSDEEP 192:DsXzsyRlEpJ8643JVfVeOMIGMBUIuaPazmIfaWv/dfPA81XDrMnNPoYg/ySKsdRx:DsXzsyRlEpJ8643JVfVeOMIGMBUIuaSH
TLSH
T1A4329DF7C3D8C66D895156F49B26AF1FCE1A0A1813283C26C9DCBF4A93E2871D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 859B
SHA256 42d6d41aad2eb5b39f47d273715036339da6bd011824e3275943242889a021e1
MD5 e13f249cee246de7421c307073a00f78
SHA1 044d069829db6296509b57d2cf72d24cbe0fa7dd
SHA512 2dc1a239b97d36e290f710271fab307721e4897b178ac364fae13e93408adac58b062cdc750172cbc25be9109394e9c082e54a168ef4e68a315d21ebc2ae606d
TLSH
T16B11ABAB9A7E785710BD59BB2F05BD092AB2B835016178F8CF53829EB0862F74F15007
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ba841c7f4f8f24b4f91892fd86b253cf9622f6059a59395af6f5390d21c7cfe4
MD5 27e4a837db54518b5aff44b7d4401d19
SHA1 35604c1dbcf0de13fc97f638d4877500db0b6ff3
SHA512 51a7030d7df2f9f2957decf1598ae2cac55c948ea248eccdbd5a8b68397cd76ead99d674027a7c4b7841866bc600eef5b44819389284c4d811e76807b6ea9655
SSDEEP 192:jRYcBz8b4ufv7gAPRp2ExV964Hsb+WNnKf4F0RZ2RHzj9/kws3VyIsnAUge:jRYmzez3VXZbwAR2Nj5MRe
TLSH
T1AB42B43EBA24697B6CDAD319FD217B53E7F6102266952E84E6FC892C14E79CC3213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 7a29a671f8cdea78de199b0c36874c0c509950c162da3136b813788a866e5a11
MD5 bfbe023a1525d663770136343c75fcfc
SHA1 8a1195174dbcb9a1e65f558a09d0e7669ece1811
SHA512 e491ef29c672fc53598665692f9e99a1def889e6bc66b8eee7d6c59d1052abea7762c0b00365db03b7a5c6afa3238d7bc0a05bf8efbdc38f644cd2e563d9c946
SSDEEP 192:jRw8b4lfv7sAPRp2X964Hsb+WNnKf0Zzj9/kws3VyIsnAUge:jRwem3BXUbwA0Zj5MRe
TLSH
T17632943EBA54797B6CCAD219FE217B43E7F6102225952E84E6FC892C14E75CC3217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 49ee12c5561b64ee7b7916e988c18c190d7193bd46ed1bf21c7f3eac1b7278f7
MD5 9e4284a985390f033f3a9cb3fb96be4a
SHA1 33c6074dac93172fc72c8de4db8bc6ec18d3ed3e
SHA512 58b803edaf9370d0934644198025fcbca0969a5d3acb0c4af40b912edba6ce3924ce25478fb9d44f0fd9b339f8f1f3ad5c0a849930840d1948f3c92fe6bcbb4c
SSDEEP 192:jRYcBh8b4utv7XAPRp2EtXt964Hsb+WNnKf4F0RZ2RJzj9/kwa3VyIsnAUgE:jRYmhezN+XL9bwAR2Hj56RE
TLSH
T1C342B53EB924697B6CDAD319FD217B43E7F6102266952E84E6FC8A2C15E79CC3213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3325303ea0ec183b48ac4cb07b8ad7f4d349ce36d6552c0269dc240191e6a590
MD5 5a254f10e2370b598c7c92ef8b0ead56
SHA1 2102a0e35c7237e3fa0ed5e15848e2fa125c53f9
SHA512 ba331877c0551547c39792dfb831a10cadc97359f7392613a267241754b867c3180a016b0c938fa56d0127ff4b314c8733e8b5410bee3a1d6dc7ac45dd0f771d
SSDEEP 192:jRYcBh8b4uPv7XFrPRpsgEtXzI964Hsb+WNj8Kf4TMe8zj9/kw43VyIsnAUgE:jRYmhezHxTXsdkbwtleej5YRE
TLSH
T13A52B52AB96429775CDAD319FD217B53E7F6202266912E84E7FC8A2C14E7ADC3213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0671e180668c79ed25d6574c0d94243de16458dadd93ce0112f85f60f8f40947
MD5 0a0c3ee326ed338c39412da4ea2a69a1
SHA1 7630b1be5b306617edfaacbcf9c8dd63071f7d0a
SHA512 162be12e5971ec37e902592ffa4d0743f0df85172183cc81c234f89fcd128be580af4ba92489dbd3f321e709905d0d47db0a243144f1eb35781c7c6e4c21dbf5
SSDEEP 192:jRYcBh8b4u4v7XFrPRpsgEtXzd964Hsb+WNj8Kf/vU+TMe4zj9/kw438yIsnAUgE:jRYmhezkxTXsdxbwtk3eaj5YcE
TLSH
T1FA52C52AB92429775CDAD319FD217B57E7F6202266912E84F7FC892C14E7ADC3213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 65e521a2dd3c976c3301cc8454af023c290f83c060d5549bea9c5d640d0e2bee
MD5 3679ae55a6d81ac69438b918ee7512ab
SHA1 88611e5592919d483795eb33c353da33679e3125
SHA512 c3b5a0d6826d9af6600b183a0a560f9176b4b91781f77253032ab7a3771baaf8036903eff4766c1435641a32c7e5715c49e026077b9c3430dbf118788319fe3d
SSDEEP 192:CRYcBh8b4u3gv7XFrPRpsgEtXzn964Hsb+WN808lphMBGMTMe/zj9/kw4qSyIsnv:CRYmhezsxTXsdjbwCh5eLj5YTE
TLSH
T18152C52AB964297B9CDAD319FD217B57D7FA202265D02E84F6FC892C14E7ADC3213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 390b2d3da343041b4bb8f377de5389830979e5acb4b3a32e271d3fc5ca5a1343
MD5 f1d1ecef56c7515367970c4fb9982059
SHA1 f06f19e7b260ec45dd7c1a7473c6305622fd3c3a
SHA512 a5481cc24a9c749706ccf1c802022ff66c5e4d682f43b0c45ac900e833baffe27ddc9adb95fce5e8f155b66a2304931e49547d326b46f4ed7e1b489b5b41a529
SSDEEP 192:esz4K6mQ7KxkXqK4I40pUZNCgVLHrKHfFKslEZESXzKD/pQ+ErUkKN93jCxBRq2q:lzjxQ7KxkXqKf/pUZNCgVLH2HfgslzS4
TLSH
T13232E827A48E9A3F0FD8D51CD8136F4BADF5425262280D2496FBAD0803E97CA115A5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 704aa21fb6417ba3eddf54792d87526ba95182820f7447089311a25d8ef6f07a
MD5 1d8cea31b9af72006d1f9b4a633f5629
SHA1 38efc51b906e9dcec847e45db30f960b84c9490b
SHA512 0419f2e54de430a6d24a5f3b0eababefc4275850fbba3658603e85366f1852550cb45b8178943d6f6161db132b70e6d02b0a6f032bd1efbdf86badb44426a5cc
TLSH
T1B7B0220C02CC320FC00A8BBA8ECECAC0B3B20E003B838CC3C0E0803288A32038303300
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 e7585e37480685fcf9dc864cf1fe100d40368978592c3a5c5c786769020cc9fe
MD5 962146125325de120df8e39fd08687cb
SHA1 2155eebc198f7f8334fc0a6b98e284ef2d403564
SHA512 8206d2d8faee6b00a97d13ca693d1f82af7c2536e391145c109420b00eb9c6f0e33c0b1b296f71b14c4900a97020a3d7bfdd23f367afd33a645fb35a365e1ba3
TLSH
T1A6A0025046D08C1FED00877770E22755669A4C28A96763C394B18889C85B3C48112154
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a418e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe5a418e.TMP
Size 48B
SHA256 7e4c16156ac034af05a24b539cddd4d3e83ba81cf9d61decdd3cdbfadfe120f8
MD5 ebcc0038d101867c884faa566bbfcc80
SHA1 7e7719562b26d571ff8fc048b7c5fe0ac4894148
SHA512 72102ea596d94116ebf5bea978e83378903fed60966ce0af90cfaf467f414e6aa507cc98b7e5b721afb2705f178e8638d0dfa5c96d917c02f00ef808feee53d9
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5c2727.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State~RFe5c2727.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 150B
SHA256 46458c63d1d22f2901fb4fc2e47acabb3e8cf3a2b4d7824f27d72c0e06eaea72
MD5 fd80edd6503a2548a8391f52cd85ffd8
SHA1 4caafcdaa14cfa4b506bcc8b52a99c1ea1b8f2c6
SHA512 d3d7bc8705d645560700e23b0cd3ec00da311b5e2ea5e2e5059d42f051bda05315131e3c5b91d06177898878d678b9d80f6942c934c3c8135e445d1fc23fc6f8
TLSH
T198C08CE30505558B8730E9D8201C322CC80B82888CC8CCE88444A00220B8A330601AB8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a5bec.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5a5bec.TMP
Size 157B
SHA256 24dbabd32c4077538c5217b68fd3558fb182e4dd174e83ff8b94276103ccf881
MD5 f28a78f4c3c022d51f1a0d6efeb74d06
SHA1 a93c72fdd9d0ae8125e7a1c2309f1669e3cc8012
SHA512 62bdb65d0cc3bd0420072b1146947592ddc6c8a1021c67da36f420aba84046a098434660ce22498de004bbb25797bd95cffda69e6275b18df1816df1217ce322
TLSH
T186C08CE3052515878730A4D4602C320CC81B8E888CC8CCE89405B00220B4A334600A78
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 298ebcbcb0d72fa7a7845b6ce4d84be6d088313fd20644a3a4f4b4596b403338
MD5 baad1e9cbee03271d7fa57c2c5bab52b
SHA1 e4a622cc81628645ade82a05099e5b1d88c89814
SHA512 53ec05caa2c67e639d681afdee61fa6128ee32275a11b1c5c87bc914016295fa7ebd876272d53a3bc9e7ea23e48482c48f37c685fe16206dbb0fdafd5927bad4
SSDEEP 3072:xUmM6VrEdet95hgHbme3mo01vFafICORj5ls5QPgMELS:xUmR4mUlm5v0fICy5l4N7e
TLSH
T111D312F5AFD365DAC6BCDC4C512BA621DFD6F0A73CD02AE856C21B5D2543A4A0102CBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 2bb37ae81e2e0a780bcd8d27e5e7a1c464c6def728b69551c8bb445f7bea0c7f
MD5 fe4fca42603d89742945147dcc405a22
SHA1 af91b69479ea14fc8266958be4867249caf89ba3
SHA512 3756864140776fd5f138d61069d2b2051edc3cbb329d47fb71ffc1a33b899c6531bd872d8a4b4722adb3e9e6bb2cec97cb8a167a2f1df6c8a491ec1400ed64c9
SSDEEP 3072:1UmM6VrEdet95hgHbme3mo01vFafICORj5ls5QPgMELS:1UmR4mUlm5v0fICy5l4N7e
TLSH
T1DDD312F5AFD365DAC6BC9C4C512BA621DFD6F0A73CD02AE856C21B5D2543A4A0102CBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 ad2f6fadba18465a03687bde4db8f8baec3c4242ad92b57f716610d1ebd32f26
MD5 6d517da006618a78005670cb685155a9
SHA1 60b094af7f24410c4b98428c7d92ad9c283eac2b
SHA512 44bf7d2f4164db52a7f05c2cf213ac82375b6b926d5858e2318ebb3e1c714a4c818258d450df571e4ca14a4cf217a835cda167e28831941578f7209d84d9423b
SSDEEP 96:gC0d+cAOIt5aDVmufj7jcbRDotok5tCD7B6/dGyv95SVhbb2Jv4a:gC0LA/TE57cDUDyFUweSVhbKl
TLSH
T195A1F971B4A95EB75D75C644F9827E83DF68A117AA226F80D9DD1F0C10E70EC1382A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 045c12c3213a08dd3984669038a56d0e76e1905f7916a26b08e7ae89d4d4b5c4
MD5 62a3a440d606e6ad2449f9a0a5ea3937
SHA1 802b18b1cf33e591fdcbd0ade091e80d6df56735
SHA512 35d89d6d527dfe35202c6cdb7fcbdeb480621db0b456ca6d77886b6b3ed0b335c33c818c743c8cf7e3b2ce3a95ad3146a88d9a1d88b37eaf9db9c51968c8d03e
SSDEEP 3072:wUmM6VrEdet95hgHbme3mo01vFafICORj5ls5QPgMELS:wUmR4mUlm5v0fICy5l4N7e
TLSH
T174D313D4EBD365A6D7ACDC0C913FA621D7E6F07234E01AE457C6175D3683A4A0102DBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 66034ecea74fb11d60dd692738424eb3bcf312940e4df38344771f6db866043d
MD5 67fd0236e9c07bce303fb373c210b9de
SHA1 f5d34045c2a3579b92f91377fef009bc6f921fee
SHA512 ada8885c765f09736179b195ce704f6cad6f0f198b82389af91a0c7bcb873ade55698caf3c23ad5e595d2cd5d20ca2408a255ee463b6b580a6540604762bfa33
SSDEEP 3072:RUmM6VrEdet95hgHbme3mo01vFafICORj5ls5QPgMELS:RUmR4mUlm5v0fICy5l4N7e
TLSH
T116D313D4EBD366A6D7ACDC0C913FA621E3E6F07234E01AE457D2171D3683A4A0102DBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c7dcc6172e121dcfb010a75dbecd29977e4ce81295a4bf9f5bdc1d47a8a4d5a
MD5 79cbab071ceed0006ea70662c68f0a76
SHA1 d8c8a444df926ee92c7658d2508cdad89f35d35d
SHA512 33cbc88c0fae6888a753316031abca5bb49fdfcb3c5eb08dac6b3df6a733dfc8d6666f37fce2e7151fc1f2d2a3b4639c7adeada50e5f13e7a3253e3d6dc9a77e
TLSH
T10AD0C0A069109FCCC544203222F1010092004A12DA00D2480000B225CCB40C229BFDDF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8390e67a6bbd347b886f8fd9e6d185b3466edad6028bd8d705d76f4e6a76ea85
MD5 b814db2f75a59b3e24ad2c957c2097cd
SHA1 a385423f486cbb4c7ae19a2c5b193c9337e1ae5a
SHA512 e8f67332525d9e81fa5689dfcda5747bcccd8c851a935561b8ca154ca2baaf1433c3c70b52cd839a740fdf6702c6f40f5b0d019aa1076da8aa9d94c3ccf2ffc8
TLSH
T19FE05DA9DA20A82708FD032D60248687EB0413862A80880F3A3C90188FF063B0189CAC
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 a18636e4d4d779be1b224b41d9d534c2eacef0ac55538a206c17358dcf10c1bd
MD5 534422d6304620438277e6f82d96fe22
SHA1 38482bfc7798f510b7d0341264062d8939271f5f
SHA512 17ef1a60d014e6337cfc32754d014a1d52b1069a356b4229308ff33f7682384ed56b280c6db47014900c47bb5d71cd0495e93c05ebee0ae9fc61237f23bc2683
SSDEEP 192:ZjwPRjhjtjpZ0usAguwforInZiXkc4BSSfEsN/m:KPFoLcInlXZo
TLSH
T11E136F3EBB846DA2CACA0A3C780BDB755331D52AE9C049571339B30C8A52F9618CF617
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 c7e118a08b3010d7b8a2d7b9d61d836596114884eabf78ac4199701fbc5eb184
MD5 c0c8881805f244f54c787df88e540c46
SHA1 dcbc227d5b51dc2993e23dc9043f4e4c33d1f927
SHA512 97d800d3cb283a7c7eb6f3b4540216687f54af47340d2e04beb7c769c43592220e2aa3c0d35147c34d41b090b70b6858d76e46abcc53818d7d0c9d23c7d9ba3c
SSDEEP 1536:JIgdL/TVL/r+9v0BPV4uKmWZGPp8RfFEUk4xRKW4n/:JBdL/RL/a9WhgEMRKW4/
TLSH
T1A6445EF31A51A01BCBA842F5E6033A3DDD77451F7DD1E8E9E1384C852826F21B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 b71a75b1622797627220adde013d27d32f118ce54a8d2ada85f96d4fa35f9472
MD5 261de016288ed0b3858b5ebb64e9d9e8
SHA1 cfc487b5501f29a61245879c3bd571e280e37f14
SHA512 87c56587d8d1abe2b41d5fde6047467ac058f4c2be36185037ada5f8089485167e08ae5af75f21c19f629b9a4f6189dc305919f9a07617eeb38befd834cfadf4
SSDEEP 3072:6v9G+XNF7JiHv6K42n70QaZRYMDkiKBWRBB7:6Qw/7Jc6KBxmy2QWRBB7
TLSH
T13E2508FEC7682C82CE6B867074E0E9077E712183B64CD0D39944C5E997D6B8176E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 42090747f445a445d95555bf5c300750c63dcead0653810c593e7f2fa88b7591
MD5 6a0bbaa3b8064dfd1da5699dec8b7a29
SHA1 920c863228df6040cdd1ae9feecaeb6c1b7e8212
SHA512 d35e8ac01118fc059b04f2ebc65c6711875a004470f6d3cc31b9196db398e9445d810991106d8ae01bdfa2a099c32b7c975dc79f1c247de91b79cd509e293d67
SSDEEP 24576:bH9yij4MP0StZl84JIfZZ4dz7L/2ncKhKU3VM9dvZ:bdynMP0huIk3/2nV3G9dvZ
TLSH
T10A167DEDCA785883CE63DA30B5F0E9477C7413C3F594C1D68898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 024921bd573aa0b075e5260c3c1ac3e64ae15c11bac01b2cb2229617ce8eb589
MD5 262a5b5980e195cd5f04ebe7d8d3aea6
SHA1 c96d4d5009d0fa9b6cc78b10917961035abf73ac
SHA512 f3e64febd4e0031e7116a0f951c76efa28a8f0ed209d8c7f61fda380b066c146af5ddba3c5b98491b8a915e204d10d23690f8054e423ca934a2774b9f33dbf47
TLSH
T15A61A67553F64CD2DB29AA7AF0E9B46B32F6807A46473E00E2846F349C05F355BE2113
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5973cf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5973cf.TMP
Size 3KB
SHA256 dee371245a864c33a00c91a3c50b2521c0e1b71fa6d8dac03d9a527a93f695ce
MD5 c67f11de10dad37bb8881dd0a583af6e
SHA1 1ff7e1482fbba5f9f2afcd4a8422afdf32ea3e7e
SHA512 5507b83797cd043fcf9dc469bb449a35d5412a37cbb6fff718ce68692c8ecc469d5cdecbe8d5c81e251626d0773dd2e94df508e9ccb3db816e97e08582b072a0
TLSH
T10E51847553B64DD2DB29AA7AF0E9746B32F6806A43073E00F2852F349C05F745BE1113
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 a52a1a2b556d0f7420504b48a5e810876d051293279e85a59c8ec1c0d9742f2f
MD5 7216d11966dd28835a15475808f2275f
SHA1 bb9d6678ea4c04d3f8bb93156e1fab002bedf54a
SHA512 968a36b7b54ff80133c7ee2b74d262703b218d200bdc5416ee5888e4fe84812839ec1f364cf98184af06e0786a892d96b0afe693dd9eb2c59931d4cec0d38e9e
TLSH
T162E0D89C95CFC55F591039C34138BF08A2C03A4AD78AEE8327158CC0BB4640DB68695A
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 214db6f45fb4173d14485618b31602644161e0743cbded83c27e703346b561a9
MD5 d6a323bb993cfdb696a645e385eb1a24
SHA1 929d1feedb60873d931a40caf3fdc9873f8e9965
SHA512 71873a7bc31285a8174007f90df1dc4b75f233bf838b7035a6cf93dfe1a5cc19dbea590fb6ff7a93ea631ff6c749798ddf10cca969c485b3be52895cc247c770
TLSH
T17BE0200C94CDC11A5614659743BCBB4892D03A02B3CCFE05274D9C407601245A3C9564
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 5c22313a1d14d17a7d9715bd7b30d1be007bf7bfcb39e18f6d4675ef11999c70
MD5 c79492f2f65cc80986838afab08a1476
SHA1 87cf9ea34f42f083eadb9d7e703946087ef73cbe
SHA512 c9e426280ef49ccb74c2c00fac09e4e98a6b9cad6d6a7ef8c3bc677ab1f28e7fb0e5479ed722c32b0f4e3f8200350a58a0f3238ddc7a7a9d9e0b1535ee388664
SSDEEP 48:IzBmw6QU1PzFCD5ByzpQepPoR8/ZadHetOpfpkAAXsqY2jEUEXhmGv12mT8p:UBCxwlB5epQRIadHetOUAEYOPA1Q
TLSH
T153B2F5CF2E343823DF590CBA313A5974DE7BD21C2E69DCA9382048210CF8A4650396AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 9aa0af60562643a4a438c8ee3f3a854ae95cb9d0e03ed7430c17790429b1cc0d
MD5 cb84032fe9ecc2e07160d8fa3202f78a
SHA1 2cacaf08eaa980e264bd5e5339a7171c93f80d59
SHA512 83f686bd8aa0bbd97fa3ca4dfcf6d9b2b5eb64e14ffc54b3020b9301bae0f62d3f40c30bd89b7d1cb5fe4546184825791ae530170c5b41ae94b0995aa4e5a306
SSDEEP 96:QmbJTtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/LHibbEOVpZf24JkMfXSFR+Cw:xbJ0H+bF+UI3iWGVoWN3qL/D8VVV63
TLSH
T151241F5F5F343712CDBD813668E744A36C7DF03F8B5226DA686114B5CEE2642A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 6KB
SHA256 bbc3b4dcc64ab1daafcbf49720ec9fbee2a12038aaa5463f4c928980e060ee8e
MD5 74860bbe7f67082153ef5ce096f28e42
SHA1 145f040237b01625b4d8daf3be2b7dd1eb298f57
SHA512 cc15d0b306f314c6c2f793b56eaa961ec0b75773cffe089f20e71be165297f49350c1ff2431e0876e0e4874c5c633789b88c2f881fc1af8a534c2bf4eff863f0
SSDEEP 96:nJX/fpmmpnkaqhmwMf9Qc+uFrW56TcUzxEw2rkpzGPw5md6bGb:2rvhdbcfWAT3zuwiAmdhb
TLSH
T1B3D1DF5CAAEB4049B6F7BE629BE5395E587DB6533F0D989900410F4F0A23C01DEA173B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 40c7c63c95bc4b743a6ae9c49ba1e7765326ec001a08133adbc01bd08861fdf2
MD5 5502fcfe1a77ec020be4690b0fad3800
SHA1 83a2bd48dbc2e309110f310b54b91faa253b8edd
SHA512 d184648e2694c50ddbf2aa25a9f42e78639da061c51400201e2743746eebfe8cb54aaade2f8b3a03ef156199320c4160df89d2224f1f9a5857aab926a24599a3
TLSH
T1A2E0206449CEC16F66042047423E7F0CD3F03D46D78DBF016B0E9880B545108A7DA6D5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 d1df32719da266998903e59ef3d61f3367632c11cf9a3d834d2f4daff8df38d6
MD5 ec7aa78697b1240dac45aad8844445e3
SHA1 2c41b692f08f112dfad2369a12d3284de9b4dc76
SHA512 edc9b82be908a5832e8fa0e8a3562524ad08507994b4f9a92de27b7b266f84de4d369926bd68aca62720475de26b175b3a7aa561b16df21aa9e70b94c4cba939
SSDEEP 48:Txk/LopFMaty423w/a9NUuT7GwG77xzoH8w7jLwANHNHNt33HNHSNXL90:qDeMatha9Ue8wISXRSNXJ0
TLSH
T1BFB2968E6F707112C1F08732FCD1455B2E3D142E93637A5A8E4054B38DA165FF9120AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2d495ab16addb3be488ef1090d87c80a0a4f0fc5d93a352db46c9331e7b5a3d9
MD5 40b9bc8a47249e42269ba67d091517b1
SHA1 4259a397c5089473a42214bc210b5ddcd119e918
SHA512 3a9e427908f84354b5e3b18efa57ee1858cdc8f86f4df7e8be43d48e79bc348c1f41b74e1614b52cdf54594ad7cbb665b165a1a06cd29456e86d74e829d355ba
TLSH
T170516BF7C3E4962D8A1196F4AB15AF1FCE290914432C3C67C5D46E2B93E2871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 80b624f916f090306f16cd8ee25fcc446c94380ecaf58de8b70171bd230067a2
MD5 18cb1661d2dc1d4ae192705ea7a0f538
SHA1 d1bd4140c9a56927510c6dc81a6a9e61c22c5c05
SHA512 1c728439fb3d987b9cd618ef124e23651f5f41575d69cb16c6771c3365245314d560fc5b4b730f9cb75fa4fb7249dd2f97d637356358524ed82fed158f8b4dbc
TLSH
T126617DF7C3E8862D891196F4AB156F1FCF190914932C3C67C4D4AE2B93E28B2E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 72f8936667a92506715043c7891479503ee04b05837f466d7d826e0610b68bca
MD5 96f632d337ec175fc4c4ed41036726e3
SHA1 4f3a2f6c16c027d45d087c801c7c73d92315ff08
SHA512 60b042a0093e48da6ca5ec195a6f16f0e678bda24b017f2fa34f05fc0bb069f05dfbd82448cef98443cb0c217fa5b68f1366b99435c4ce297d80d425ca7dd25b
SSDEEP 96:OIEumQv8m1ccnvS69f0k3Q1fyQ2nFajUjQ4mPsX4g:OIEumQv8m1ccnvS6C0B
TLSH
T1C6F221FB0327A105C98445B0E1019F8EAF17011B47B6B6ECA6D41BF3E6934E2B57C76A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 ee2e4ce4b6c1bdf0d13a1df04ea7bbc19c4931ba50a0a4d866d4c4665ef7af0a
MD5 da9b81088d3e9d07ed0459fce3bfd0d3
SHA1 d2b2d8f9ac8f36981277e0161650c06a413e2fbf
SHA512 e9969cbccee7b52a96a87415e82c017e8148702634ef51702de56e192c093d9b1bcc0669cfb9c396427e110721d18d7740918c2500c7a9f47d48475d4d973dfb
TLSH
T1CCF02BABD56F747310B6987A0E00FC4A2975A8360210D8E8CE6E43BDB0855B61F1111B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dbc64e760420027dc2e19250b6c9826fd43fe10d763aebb9cab0a1d0e94761d7
MD5 43ab54e296896107891762a2959411fc
SHA1 308038dbed2b8e9eac3380cc6cf227c0cc6a7263
SHA512 d7f53b6542125f99bc9f55f70ea99617f6dbc10972011f93ca7003119206ab63cfb898700c6265855fd749000681913c82815bb5b239e0abfe9fb62c93a0a5d3
SSDEEP 192:sxRwR5bC/fusVWpVSprQ5fzoA8pjEbwy/g6+WNXA1Ii/YHIUyhRg1IgIJ:sxRwzC/fusVWvShQUy/5Y1/n3qs
TLSH
T10942C8166928A93B8CC7D21DFF65BF63D6F92132A5D12E45A6FC8A1C00E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 db5336ca272b83652cbdf01716b49b7308dde34be695d65b4d520ceaad9f2466
MD5 e110ecc614cbadcc85eed87c0b974c33
SHA1 d7714ecd1f97229249cffa202a8d3e95ab157ac6
SHA512 5d55100ac0d7ebf21e1823d4e036986a6285a3d1c1ad682778361dbe6a68af8e585ffbd417d49fd7fe5b9a886b240a728c69a0a058883d0dca27b29ac1462db1
SSDEEP 192:sxRwR5bC/fusdWpVSaZWyH4JCzoA8pjEbwy/g6+WNXA1Ii/YHIUyhBG1IgtJ:sxRwzC/fusdWvSMWAyPQUy/5Y1/n3k3
TLSH
T1E442C8166928A83B9CC7D21DFF65BF53D2FD2136A5D12E45A6FC8A1C00E76ED120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ab6ae6d7ed52c8c8472ce1af73b9a0b42e9489b453957042264c7ac38768c5a6
MD5 2174ee1d36018ed8cad00171e96d0c4e
SHA1 2120b905160bdae4d25c8a09c8be96be75487463
SHA512 d6f1281d1e3ae9bf30adc7afb751305ce6669a682e99f430c9e79814e8557d6e617108771b65745b05de7578255b7d78e353e26dde209fd5e6e1491a2ff34f0c
SSDEEP 192:sxRrR5bC/fusJWpVNaZWyH4JCzoA8pjEbwy/g6+WNXA1Ii/YHInQhBG1IgPJ:sxRrzC/fusJWvNMWAyPQUy/5Y1/nGkR
TLSH
T18242C8166928AD3B9CC7E21DFB65BF53D2F92132A5D11E45A6FC8A1C00E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7e958e7a43c83d94a97248966192d310d241a51fc3c76acca398e673400ede88
MD5 85b201cee294bbfca9142f71dc011b06
SHA1 24b6942f83c9bd3914cb3b4f9b25ca0ac51e1a9f
SHA512 76a62e26a3304ef8ac64ebd296ad5307a5b8f2eeb12adf42ba7d40100e3bfe0bd3e5385e8af9bb857f2c5fb8d1f044e00f55c799971afef06860b7363467fb72
SSDEEP 192:sxRrR5bC/fusJWpVSaZWyH4JCzoA8pjEbwy/g6+WNXA1Ii/YHIUyhBG1IgtJ:sxRrzC/fusJWvSMWAyPQUy/5Y1/n3k3
TLSH
T1B342C8166928A83B9CC7D21DFF65BF53D2FD2132A5D12E45A6FC8A1C00E76ED120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 4a94c95c258234c0b15ec3de51420ff6823a02d398a5f78236ec7aa44fc49d94
MD5 0eb2f87325505b5e909085ff9131641d
SHA1 2baf3959d82601e34349856786f27de7da82342b
SHA512 456e71d6f6368a27a8ac967583e0b6af0a18931cd36046d87bdac6e226cedd766afb26c3b145383bb5ff59d6736ca86fa69819dcf8487929888244b975edac90
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPtrohMp:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vw
TLSH
T128B2EC3B604DCB7E5F800AADEC19AFDB6D9802C79A988D4447FE990C02C77EA51194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 431f12c06e54e4a8925daad9830b598fa5abf9cb5e57334109375166813a951f
MD5 72ca44b90373d606cbc77aa947b861a9
SHA1 2d479cd9d71fcd2534a6a728e4c5f2b3db22b03e
SHA512 116803b7b0f99532194c7052111ab7e20c91d62c18b80c516b82ba9f526f222a1508c5233204846e347a866fcb7efa21424d95689fb24c18757bfb6b8d742d33
TLSH
T16FE0261405CAD17E741920430334AB0AE3E97917D3CCBE023F85DCC07646508B3D65A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 29259e85869d006172be62471785c11cbb051db3c27500d3d723c9b0c9c61377
MD5 f2af54ad7886451011edb062bc8cd244
SHA1 92c474262d546a61b14cdf8cd156b2bcd322b333
SHA512 b0101a92e2caca3b1719a479accdf0cd87303fbf5e422ea5f4f9d85178d7245a80b7041c388b9e5941218fb9f62252b63b0ad2d9ecb0cd70581ccd2be30f22a4
TLSH
T1C7A0025D51C54E00CC0541F02452514557624D662E3187434C94F1C48CA34414192168
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\db
Size 44KB
SHA256 59a4eb8121e1bfbc6615d22b089b60e169f20fd05e187bae48f1ce08bb6f5ca3
MD5 97904d767eb9492efc4415b1d49d3d3d
SHA1 4722fd5d6c54f81efd0b45dbf772cf4ca0c68fe5
SHA512 0c4f02ff89a559df27c3dc4d775afb8b69c36208bdc0847db120c46e73b82220ec065be4c9ded156dc060a01a965993cc3d45b9a74cffd73f65e62ae8c4b333b
SSDEEP 24:TLxtk/9JhPaWMuz62ZeL1b3IeNSllviteteX4TDQeU6Uw9q8zPq8yzRfJhIv1MKk:T8Za31b3fEvTFULcqJzxXIO3bM2v/6m
TLSH
T1F713F99F2F547041D2A98139F09A8EBF5E7F350C8E836CD169A056B24CD242C582F17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 fbdb5d5a49548f0bf52a83087bc04857d9a00fac7c307991aa954eb3a050dae1
MD5 d098b73ae8fad8bdcbd7c57ff751207a
SHA1 f6fdcf85a73678dd50a2d1c5bce880bfd1c1ecae
SHA512 24e5f8f4748033e8ba9392ba93364da3e39d32ba7f9e63cbf1b1d88eeea71c6de3ff0b4d15d1483aac306c711e4eb4c3f55e2819fc92bb06d0be715513517b74
TLSH
T1CBE0D82415CAC63B7149208B5334FB0ED2E27903D7CDAA113B09ECC073061447387560
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 342f828cac14e11ebdf70ee139be05a331d21cc6ebd55eb8b18d1e78907981ee
MD5 686847bb41d694f9d26ca7d3f3d05816
SHA1 31e7ad38b99591980da55e1becd6cfc63004013c
SHA512 787b3a49bbcab970fded4da3df6918ab8e06537fea057b6a27a4a822fd7222eb59eaf49601ca8e2b017c2ccb764089179858ed7c7ad1147c6ea01cf81e61c872
TLSH
T10EE026B855CEC639540470C34374BF0CD2F17D0693CCFB866B188C40BA02558B7FA9A4
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 1f68e9128e624859dc2e06f4f08bf1c16046a54e4336e891bf49d18c2d6082cc
MD5 6a7e6911b9bf7c3d112db3b0ed4abd21
SHA1 23dc640f3fe22fa5118c1f2f93ce657afd7dbd43
SHA512 5c7098280b6cc3cc879ba961e876fcfd46653463de3e93eda5679d9688e28cc6f97736985b7f206922fcdd194343c756e2d0977a8e93446095f369e9117607eb
TLSH
T1E251150030FA03D5783EE94A8579A69F824539A63115EE3B7BAD44E10F26E044DFEDDD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fc806a56ffb5f67e2b05a21c60693955bff31c5a80350b1e4b1710b857ac90b0
MD5 bf820ef15fa32171ba79bd5548864f65
SHA1 4259240f9d6d68e1af793e86392bc935245434bb
SHA512 ab0ad02da40773c068216a8de9fda2cf9a4401e22f0c4a168eda34e92fc80b9a065936702539893c941f2ab86b337d57131d2d91d0ab238d6764239b3950cf5c
SSDEEP 96:K0msKPKqmrKKgIHnEL3pl5gFtGz//gK31/hg7P/2BHtArSnbZdBkRdY:KnlOnEL3pl5qtGL/T1/hiP/2BHtH
TLSH
T16591390034FE02E5787EE84E8579966F824139963259EE3B7BAA44D20F66E040DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 7fdc3de9fa46c69c9c2c1252d0c54e6a0493a8c58df809fe679cb005e4ad8a99
MD5 55f6e7fc853d9936479ba0e54a740def
SHA1 951d463a2ab742533dff86835039d2aaf22cbfb4
SHA512 89b192170f53abc2d18ddb7e350089c75df9ff3bf00f037727eb05de7436304b6260f6ab97ccb0343311d80a9df963ca5501219eb96181c8205e7841a702d062
SSDEEP 384:DNrRZyCSDnxTIC1NnMEhIKyll7svbFKfk7:xFZJSDniaMyI1l7svbF9
TLSH
T1D044840A7B747001EDE6DD725CB080771E3CB16D8F22A6916DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 99b45c0e9019884b44853d0b047c6dd4304471e996c5658ba39d0ac5ad9e2c64
MD5 d66fb76c347171149f1f2035e41e9e96
SHA1 61be9e65bac5cbf61fcd843bdd12af84f9d212bf
SHA512 357bbb7944752e1bb52c2e9efe8eb5425ac5a4772108926074093f999bfa8278ef8dad2dcd18058b7924dc42e32b19a9b999054cf675fbbbd1d3f15f6713f676
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:zEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T1A452579BEE743212DCEA83319AD001E17E7A903D8FC1EB0255D610115FB5691A71E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 caee163683f7f3866da5e574cdb1ea41e8b6262caa369b34dd27cd00da20472a
MD5 8828da74d276ac72f3a72ff970b969a4
SHA1 cbe4e0dbb6e05f7b97b5a4df77e6c80e549e537b
SHA512 63a507073f9f274adec98def033a41a24b43018588f1ea3596e81ee2bcff6e605db5e70eb274cb7396dc36284e1a06f3e06db88988dc1456ed90ce7593d5199e
TLSH
T10AE04F9132E920F4FA8CE942D22D3A0BE0843FA5160ECE71335E49944B4480C4E2ED3A
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 ed947047eb92e83aa5570f5ff5af8471cac6bc52648cfc7a6d5b287328b190a5
MD5 54eea156d2a563e6828e5f03d4cf1456
SHA1 2df39b76709000b36740300b10a0016340415712
SHA512 e56fcc8a2f2ade67c9c1c1012359889eba33e961ac07db305c3cb421af66d403a43f27c929857fa3e0b8f70b4918d7f1a509c68c3018731ce3e32b3f9e130d66
TLSH
T1B6F0AECB6E030577CC02507150336783FF2189CB0024646703CD202B2A1D2F1C5CC0E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 b79687a35017c4d6b2135dd5d70254ef0005785924776425f4352047e7da7347
MD5 ceb034559fc6cb85c58030083c46021c
SHA1 7e04391600dd2395eac89a4338c6dc55bb95f85a
SHA512 262a4fd2dee3c916ea31724ac71d7f9c380eb3e910fda20d6a6902f80a02bf11284f1edc2bc846c14ab60b6559d90d70d2f76f989ca455737221680bc34f5037
TLSH
T138E0201895C9C2AE7614218B0238AF8C92C03F13EBCCEE062F05C844790110477C9565
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 c5e544d586ff2d72be03a442e0087a70dcab901bb7c45239f1121076e2f0b2c6
MD5 caaddcb91ed3685ee80efe23182c970f
SHA1 1841c9d4c2467c7be78913821752fe6f5bd91169
SHA512 dae0ce2be1bbc0ace2d2198b3df6c700b0f5680fff66276b8f59b5340f4392733a97375be71957fc6cc30bd97ac85e5e3e91417cf00bd7707ebd258126440869
TLSH
T13D219E55F330D118E54E923A60AE9B261338D8438FB8ED0F44B570652E72B542E8B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 dd14ad718079255aff627836ed30e0eb715dcb3f6ed3ed4a62ac435e055dfaaf
MD5 b7e56ed3738685dfbec7f8cf1914da3e
SHA1 6ce8422763145f99b0005340bba707dd79dff0ca
SHA512 8d1d726f734886c3379f246d0581ee20f9e6b20fd17127c20791513001ae48cb52fb15a2023138e14dd9a037015159f85d0080211393b8598634c84433e2c431
TLSH
T1DBE0D818B4C9C16F525021870278EB8892D13E02EBDCEF052F098C446B11149778A561
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a63fb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a63fb.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 5ce4b70714a14d6edd3984aff6ffbf91500bc469237550e8fd2812a4b6ad0e23
MD5 c2cc02209692a818860bc7cca262985b
SHA1 eace9a5e211534271e6c46edbfb65dcd62031ffd
SHA512 ba7e89b94315fd7c09b67a6a9ad133e4c1b566da570f2096d931cc8263bac30d4f9ec28d491e3f20ed22b7bb5b71ab7037692a40d790e4a0d5292d02fde33f58
SSDEEP 3:MsEllllkEthXllkl2zEflxI/:/M/xT02z
TLSH
T1B2440404FFC0040DD50010304051C77033F0D4104535574334D30473DCC75400D74440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 9319a453c459bfe130c27749277bb17b6e06ca48999e91ed97badba972a4c84c
MD5 e0e3fa179d9a9e2d1c1aa98b7a29606c
SHA1 099ce220046b005d8a30592c9389ddc390a15145
SHA512 ee3c0d1e3e88e8ad601cca2a03cc27ab3b013e9892c2e153444ce9876a9fadcb7f4aa1ee7ac916c9f131d5840c06b5d14e85689b8c93f79fc12db5066c77dbdf
SSDEEP 3:MsEllllkEthXllkl2zEflWhEt:/M/xT02zb
TLSH
T1C0440204AF808549C9001430406183602370E45505115743289508229CC69C00C14010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 db0b341f9d27bce22e985df98bb3d24ce3aedb03ed5d3170182a86b404626d52
MD5 5efa08b3662790c4de35bca311141537
SHA1 03ba9c761683ac1a4668c9778905a0da7d391e95
SHA512 c50e470607cbc9cf7f7af74fc01a9bb2e585205b971cbee6c29da4ee8a7f518677ece16a55e7b05ba997d0c7cfbae0f5a648fa3b1e3646fa7a9897e58727ec40
SSDEEP 768:Yrv+4UNbds3DmDZIO0oGEMNzc4ReyIs2MeVH1S5D:YbsbS3yGFtc44bs/EH1Y
TLSH
T14703CF32E8689977ACE6A786B50771133EF9611B82C81ED0C5DE6F4C4A4B1DD031F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 364b08bcc8efa3b70cd6d9d07ebb6993a75415488c32f52b858d8e8c54794946
MD5 9af4babb30f519a874d9be4c4c6e1d15
SHA1 461e8d05441bd61a8fef4263ddd59e2677cea466
SHA512 27ff01436be3d5360c487ecde8e617953bc61e8eabdb662cae52d892c40fd7d577873f43c60c5d8a179daa3934818912e0a38b3ffe5d9fc0e9c3bce4d4826ed0
SSDEEP 768:rrv+4UNbds3GHcDZIO0oGE2Nzc4ReyIsPeubG+Ey:rbsbS3GoGttc44bsG8G+Ey
TLSH
T135139D3DAC24993F9CEEB345B50E65237EA8113BC1B41998C7D91B0CC53A4ACF74B952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a63e9dd0b204f30efa6c73a2e0361034dcf4d90b3604627bb2a97b0108ea2050
MD5 417e570c0973b7703fe8ed88ba9932b2
SHA1 e028f63f4fab5c89a076f868d30152be9e7495ee
SHA512 e7f93bdd03fd2a6b9f5230a3d2edc8938da4edd876677750a5c762c4c3519fb18be7f6d84d1cb13341cbf2f4458a394675c4ee69543b24c24d8f82cd8d0cf84c
SSDEEP 768:a33nWcDZIO0oGeTNzc4ReyIsMk39KQCdE:a33nzGeTtc44bsb0QOE
TLSH
T1DCF2AE35AC258C3B9CFEB346B60A3653ADF8513BC5E85D58C7D94B0C48236AC671B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 f371043a0f481e0e1a38ff51fc1e099544d760d72e70324041fce13a9d21f70d
MD5 8f4d94566b2177af9420e7af370a13b9
SHA1 164c02677799c9ea1de7b864201f8ce140a3cec3
SHA512 e72befe184f61fcb8c379d62f43fb5201fe86d81e5f6d2b85ddf34ab4429f1c19a082db0c61345b5d510902d89fd610df458eb76c1c23203437a620085499ca2
SSDEEP 384:nVZcI338NgW5EbMuJIJDZNfNoXOVSUUd2GMX6CETRzcoXfK86sfxEZxxsIj4lK/k:t33WWcDZIO0oGEKNzc4ReyIsM/ECdE
TLSH
T102E2AF32EC659C77ACE69386BA067643BEF5911B82C82E84C6DD5F0C054B6ED035F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 adaf72c7b6834efab1e9c35fbca312a332d7168d00f88b3dc616ba844c8c6690
MD5 29b1feb0f2fcf9553ad096ebf76da68c
SHA1 c0c486573527483ffe33534e6f55fbabd9c44a1d
SHA512 e17fca0e01d414d9dbe7173ef7aecfc565d86bf089a6399c615b3b1ba08991730a5325f39072426f8e27526d68fbc750374ad58129311ea41b060bc10d03f1ec
SSDEEP 768:Xrv+4UNbds3CecDZIO0oGEZNzc4ReyIsM/E2:XbsbS3CbG6tc44bsmE2
TLSH
T15B03BE32F8289977ACE69286B50775437FF8615B82C81A98CADE5F4C0A4B5ED131F813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 59KB
SHA256 49a929a28b77f06838d2a55aa91f47212053601a7c19299121169c9b50172474
MD5 60b80993ce956816b6f4f992410e3a10
SHA1 cee18f7b4a147fd81877aaf2267a497220acefa5
SHA512 fec3735d713eaf4c6bcee94729ef08ea3acdc5d691cdd5ed983dcd2642532b2411b77877190f385a5d11a37efcde31dc5c8c9d3808f212ac9b0bbde3f02c2913
SSDEEP 768:AFN33Hwgvf9ZQMNzc4ReyIsUKTOOGwhSAxhOC34zidppDnQEE1xk39KiPCdE:M33xjtc44bsUKTbhS0Qe4z0nqQ08OE
TLSH
T154536BF598E3C93AD8AE6747673D2D429DBCD267B4A85884FB940E0CCC525BFD70A801
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 0d71e55a60560bc4d2fb350423111ea683cdb0b82d3bbfa3fc09406b41e84bba
MD5 1ff9d1615ead4d22f485fe112546d2d9
SHA1 a9ec2c58a77e148924b0b25d55a1e47caf681b8a
SHA512 849878af7dc6a6cdc3d5e4b07fa920372a0f91e66cdd43563e3a38b995f4ed52b8191e35727269f0087d352cf360c2c6e55ee1a43f871695008ddfecbad9666c
SSDEEP 384:n2ZcI338NgP5EbMuJIJDZNfNoXOVSUUd2GMX6CETRzcoXfK86sfxEZxxsIj4lK/k:k33nWcDZIO0oGEKNzc4ReyIsM/ECdE
TLSH
T158E2AF32EC659C77ACE6A386BA067643BEF5911B82C81E84C6DD5F0C054B6ED035F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 62e913042af7ce5f7933eb47004c2cf09da4aa8c0aa895ad780b1ccd74fb55a5
MD5 aa617c14e3e1c991aa620a039beb99f4
SHA1 aa6aa02c94684aed4719301a5c3e5d4b74b94967
SHA512 b38af7c5271f0073afb1f734db40d1362b73c38c771c5c783495fd50de0e0d8fb0813c932252a148411037c1f72dab977909c6e24019964293dece6b570f9276
SSDEEP 768:6rv+4UNbds3RhDZIO0oGJNzc4ReyIsXqeVH1S5D:6bsbS3LGJtc44bsaEH1Y
TLSH
T11003DF32A8688977ACF69786B50776137EF8A11782D81E94C5DE1F0C4A8B5DC030F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 72c3f5f1fb1beb08acb09ec468b4f21775648c6dc399b96e636e03c37f5c8199
MD5 6fffbb37a25451ca0fd1ce8b982bd702
SHA1 ee40866929229bc347edfc804e39a3c5cc43adb8
SHA512 12428583e6d01cb824604849c36a07a1e8fa4e989833b90dfc76b8ca17621c72308867209d2c01fca5956783d24393968b7668b119a1b1b6b86c4bfd4ec73707
SSDEEP 3:MsEllllkEthXllkl2zEfly:/M/xT02z
TLSH
T14B44040C7FC11CCDC50034304451C37033F4F4500511574335D10573DCCF5400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 daa704ae58dac475370bea2bc4f2d004c2d26bbcdb85f70132b75038897ee2b2
MD5 ced9e4d151ba7e09b2807d061d2e8795
SHA1 5775520d9091bc0cb37afffa22f77f4125147b68
SHA512 136346ba203b3a12d03d8f6a8154e2166e539f06afc9bb342bf55cc7345dab0ebbc21a1b8eca50aff719cd1e1fb454f0499bf6300007c8463ab980dd4bbf3b1e
TLSH
T14A21F0A11C3D1AC6D5BD0DAFF0972AEC54D89312F8E834342898ED58913A51E3151C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 ce012fdb8d369cb3d3e3dd4350534b012960cbfaab1295aa7f74df9e444fdf49
MD5 9ecadcfee8e22df226f556fa73f715df
SHA1 0fd31a2cdb0625bad0f8bb6fdbc7bbd5d94e8892
SHA512 7a995f1a47c5ed74a12eb7ccc13e44de0e7b70aad270fe33ebd6d233364c6786efbe72a2d3d804087b6365585cb05471870b18bc357f1d969a25f45fbefb1915
TLSH
T16611FC921C7A0AC6C6BE0EAFE0833BED44E89316B4A8307828D8E958913941E3051C6E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
MD5 1a8162cc03c34509f59ea81728419884
SHA1 459f726ff17ed37a212bf5291cc592b4745c3c06
SHA512 129393fb77432dda8e2c4181dc778f609f56572e69213f9f8cffc544b845119929242d41078170b2dc72a678116df340544edb181c2aff069f8cd4ac2a541083
TLSH
T1E8011ED14C7E1AC7CABE0EAEA0872BEC44D86522B098347818CCF864917940E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 340cdb1ea8958f214ddd84236212066e3ae3362c0efc98a906c9064b4fca0265
MD5 a164ee15d0f9bd144a073da31e53783b
SHA1 5d713111b2b1e99f17704c4102e8decaae6f3649
SHA512 efa998c576126973c6ff6841f4c77c86a387bc9db50a3b000222cef170bd7463c027d55a384b7070f16a5e99424ad0e5285fbe7327017a157908c16b40631370
TLSH
T16C21CEA11C7A1AD6C5BD0EAFE0832AED54E89216F4E834742898ED58A23D41E3451C7F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 ff2333c17048bfeb6f6976f16f4e5f8a88fd57126a97a8d900daac20c2ed6d2b
MD5 b5b4a703ceb94aceaf4175e4de754cfa
SHA1 baa31117b9d7664e41a45d501fa7ff49260b22c4
SHA512 0eaf3f0d2adc5b26b43864dc08f4bae37cfcd4428130bba34beb206775d7a76ada8640c727123d6eac432909b882a49c00af06ba7f7a2248701a449ab3aa8425
TLSH
T1661110915C7E1ACACABE0EAFA04327EC14D86717F4A8307418DCE958917941E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 a1c77989fba5da5b15e6b586f2ad6a8250047f9d6591f5e2a33207ea766cba48
MD5 093410af29773c928c55a7005b0d3ff0
SHA1 b055205bfaf7aea639c85d237eda57f51d90091f
SHA512 37662d0a1d175f4771c083fd7371140812caa7718a86e979411d2a10e81dad858e36d9ac02c26960296cf47f0809f8c74552e108e7b955fcda455de386e8d254
TLSH
T116311CA1583D1AD1C5BE0DBFB0972AEC54EC9212F8A834392898E968963A51E315083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 49d123bf2473c05a20f7a392fbc09922b1156717b461bf3f184aabd930cfd6ac
MD5 ae55f93136b118b8ad8bb8697714b706
SHA1 6ae028ea7ea58bf0901b7a6fd445dca7e3174ea8
SHA512 1b61dd2cba0b73d15bbee0980aceca91be7a6e458e25e9f5e414832ca74464fd4017bff15c803b56cdc30e637296ba1e2cc6231199d2bb8d4fa4788c40b24129
TLSH
T1EC3122A15C3D19C1C57D0DAFB0972AEC54EC9312F4A8343828DCE9A8953E51D3450C7F
MD5 SHA1 SHA512 TLSH

Submit Download

e90f173e-2c75-4425-93c9-94719d5e7225.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e90f173e-2c75-4425-93c9-94719d5e7225.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

11ae06da-d9ca-4b6e-9538-f2649cb4c5dc.tmp

Path C:\Users\Admin\AppData\Local\Temp\11ae06da-d9ca-4b6e-9538-f2649cb4c5dc.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 40ae9602629e850d54d561bbef89b7bedccf9557ae47a367e6918e0803731679
MD5 e2ba9eb0e33cc8cc8d91b54aaca86e22
SHA1 6957000ad682d6f2c4cf8cd71845ffe98b05e9f3
SHA512 63983b89363f53de22a299b5e9e99b39401a4f2feb1d1724a9bb032d9646e2e701da14c357a67ee3def85c4d0fc8e255acdd106398fb43b66fa3c417ee614bf3
TLSH
T18911D2903A35727B4BC687E4A0754CC56950B886533F5A9CE91AA070FE2CE91A32D3CA
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3024_1141485839\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3024_1648470085\CRX_INSTALL\_locales\en\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir552_66117562\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3024_1292677335\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download