a25c75451e36c06f53d88867d48cf0741a92ae1315e01fbc43558b1c16b0b0b1

Analysis

user interaction
yes
max time kernel
899s
max time network
900s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 23KB
Sample260910-a2ap5avxds
SHA256 a25c75451e36c06f53d88867d48cf0741a92ae1315e01fbc43558b1c16b0b0b1
MD5 ac13b449f35f08029f14c7b5efe93f02
SHA1 bb946ae75290bf3d11ca02836c6f802ab048ba0c
SHA512 828eed6a792874b027298621506c47ce34740682ab52bf19e63a084f773ad799e779f3047083187a0741e4d3924d31573c7939c779f5b7d3910375df55680cf8
SSDEEP 384:XIqJiePa6No9QjOtJKaKAKRKjcK3SevK2K7+sKMHiku:fJhPavQ6JfLU8c/evDpspi/
TLSH
T13BB2122550F5253311E291C137A56F5AEFE6D607CA1F522872AE0BDA2FE3E83CC53528
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1088	msedge.exe
2452	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334745265897214"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{08AA9B82-1620-43BA-8F67-C34CFE55339C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
3672	chrome.exe
3672	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe
Token: SeShutdownPrivilege	2576	chrome.exe
Token: SeCreatePagefilePrivilege	2576	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe
2576	chrome.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 3152 wrote to memory of 1064	3152	msedge.exe	86
PID 3152 wrote to memory of 1088	3152	msedge.exe	88
PID 3152 wrote to memory of 452	3152	msedge.exe	89
PID 3152 wrote to memory of 3592	3152	msedge.exe	90
PID 3152 wrote to memory of 452	3152	msedge.exe	89
PID 3152 wrote to memory of 452	3152	msedge.exe	89
PID 3152 wrote to memory of 3592	3152	msedge.exe	90
PID 3152 wrote to memory of 1764	3152	msedge.exe	91
PID 3152 wrote to memory of 1764	3152	msedge.exe	91
PID 3152 wrote to memory of 1764	3152	msedge.exe	91
PID 3152 wrote to memory of 1444	3152	msedge.exe	92
PID 3152 wrote to memory of 1444	3152	msedge.exe	92
PID 3152 wrote to memory of 1444	3152	msedge.exe	92
PID 3152 wrote to memory of 1288	3152	msedge.exe	93
PID 3152 wrote to memory of 1288	3152	msedge.exe	93
PID 3152 wrote to memory of 1288	3152	msedge.exe	93
PID 3152 wrote to memory of 2404	3152	msedge.exe	94
PID 3152 wrote to memory of 2404	3152	msedge.exe	94
PID 3152 wrote to memory of 2404	3152	msedge.exe	94
PID 3152 wrote to memory of 528	3152	msedge.exe	98
PID 3152 wrote to memory of 1496	3152	msedge.exe	99
PID 3152 wrote to memory of 528	3152	msedge.exe	98
PID 3152 wrote to memory of 1496	3152	msedge.exe	99
PID 3152 wrote to memory of 756	3152	msedge.exe	101
PID 3152 wrote to memory of 4348	3152	msedge.exe	113
PID 3152 wrote to memory of 4348	3152	msedge.exe	113
PID 3152 wrote to memory of 4348	3152	msedge.exe	113
PID 2576 wrote to memory of 2780	2576	chrome.exe	116
PID 2576 wrote to memory of 2452	2576	chrome.exe	118
PID 2576 wrote to memory of 700	2576	chrome.exe	119
PID 2576 wrote to memory of 700	2576	chrome.exe	119
PID 2576 wrote to memory of 4568	2576	chrome.exe	120
PID 2576 wrote to memory of 4568	2576	chrome.exe	120
PID 2576 wrote to memory of 2388	2576	chrome.exe	121
PID 2576 wrote to memory of 2628	2576	chrome.exe	122
PID 2576 wrote to memory of 2388	2576	chrome.exe	121
PID 2576 wrote to memory of 2628	2576	chrome.exe	122
PID 2576 wrote to memory of 2588	2576	chrome.exe	123
PID 2576 wrote to memory of 2588	2576	chrome.exe	123
PID 2576 wrote to memory of 2040	2576	chrome.exe	124
PID 2576 wrote to memory of 2040	2576	chrome.exe	124
PID 2576 wrote to memory of 452	2576	chrome.exe	126
PID 2576 wrote to memory of 5076	2576	chrome.exe	131
PID 2576 wrote to memory of 5076	2576	chrome.exe	131
PID 2576 wrote to memory of 1744	2576	chrome.exe	132
PID 2576 wrote to memory of 1744	2576	chrome.exe	132
PID 2576 wrote to memory of 1636	2576	chrome.exe	133
PID 2576 wrote to memory of 1960	2576	chrome.exe	134
PID 2576 wrote to memory of 4276	2576	chrome.exe	135
PID 2576 wrote to memory of 3672	2576	chrome.exe	136
PID 2576 wrote to memory of 4412	2576	chrome.exe	137
PID 2576 wrote to memory of 4412	2576	chrome.exe	137

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe3bf5c188,0x7ffe3bf5c194,0x7ffe3bf5c1a0
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,3512453293042969370,13620924031746469126,524288 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,8262020546697341750,2778068713775704112,262144 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,15420992105603234092,4155125334145439615,524288 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,4067189477878830886,17247587830752977078,2097152 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,12048310799183211103,7927429649918613109,2097152 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,1059857729679588875,6921332695522801648,2097152 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,13738715453360461321,18398634073329549500,2097152 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,1784642183881122664,10389138032045797003,524288 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,2863068205452462659,8666102738100348874,524288 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,12992499738574028936,11500032070995202011,524288 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,12992499738574028936,11500032070995202011,524288 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4232,i,1407351527815607525,10972255882526828695,2097152 --field-trial-handle=2292,i,9788290582546449643,14059260220575768938,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4348

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3720

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe3bbbc728,0x7ffe3bbbc734,0x7ffe3bbbc740
  2⤵
  PID:2780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1972,i,13143351710092398081,12590919530895299544,524288 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1744,i,4540225924604521231,15583847694914979383,262144 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,1440352302805410783,11458519441951065991,524288 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,13161895488414748487,3425633036269689266,2097152 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3308,i,16886723974493896436,9504360496178558301,2097152 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3828,i,2917691021306305167,12435255781841559642,2097152 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4460 /prefetch:2
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,14711386009506611919,13141398401703038759,2097152 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,16650804319432035578,8803809710068198514,524288 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5872,i,2145394033720810178,2217844782666355751,2097152 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4696,i,11489479272874244121,9530562148307693151,2097152 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3520,i,6105663707356640728,8962304518561352190,524288 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3560 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3364,i,11409326508195694409,171473412658494567,524288 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3508 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3572,i,335148797109288382,6325387047294214838,524288 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3552 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4460,i,11053481385966853504,16631885890825881496,262144 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=864 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4464,i,13390345994525480327,7030202478565050864,524288 --field-trial-handle=2044,i,14533323691522517026,2410652281305016111,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:4412

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1408

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0e816b5b8fa41e26b280ba93756a130b7bc1c8a1295b4be4f2714ee40078638d
MD5 21541a90745050a7f5e2b25847e1a147
SHA1 dab2261c42a432214d289d4f101be4344e93f833
SHA512 7a65839e2312835db7328f3fbee2b6992d675860784839bf77f77b9a7a3219ab913b46593f96fdec98981167ac5443bf547fd0c6ff2f73a526f9cad7515811b8
TLSH
T1B3E02B99C821EC271CFD476D54500B4AEA2113571760C45B3A3C81098FB066B0785D5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 ad77ecaf02d45f530cb32b13a487a471421869103d25e010739a6d2d7350bdff
MD5 d2d3fe7ee92fe5dc837445d628005b27
SHA1 215a0c82f499808276cc7c9946fc281f38cc62bd
SHA512 9b21b9b91428fbb62085c5aea3c8ba24522036aec78c12b5865668f85a79dad66a5a63cc6b9f95d2d4dcd3428a0156c6cffde081621d22880dfbd7b8d24fd080
TLSH
T131B0121432D70500CF91033226B334013AB2082434030BC368D1F0974023FD1840B091
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 05b31c5c0de5681ee8850bb9dd31919ec40e8467893641334a8af39e25abcd9b
MD5 9b2a07108364bb349311d17faea8d563
SHA1 d0948affffeea1dd935d24ccc84e6ab432d4c03a
SHA512 feaefc758399d25e77685bae41300607ce979d8f6732aecd5c4a08843cec35e672e2ac1afef0ef59e626e56b46b2ebc8fa08ab08edd4cee2eb182a184cb5de78
SSDEEP 96:D0uVXJwCJraI1LTfkEd+4h4F0FjhSgR2bZK:D0uVXJwCJraI1LzkEd+4h4F0FjhSgcbc
TLSH
T1F4C17CF793E48A7ED41196F0DB256E1BCE2D0924522C3C6688E4DF5B93E34B2E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 734d9abf4e9def452208504303191776cb37feb9de67d74015d55754bd8eeef9
MD5 2eae90ab5b1839c9cbafd32189de2144
SHA1 80a3544a0a915309ec2916d07923f391d50e6ce7
SHA512 e438d6d7b097b4fd9f10029370d0206b3b95c4d111215bc88b06e7548aa525643de1867031680d026d8a9e5798246567d93f00dc95ea9db999202038ef28fd38
SSDEEP 192:DHoMLFpbRaI1Lzk012+454PA4mFjhSgceUK:DHoMLFpbRaI1Lzk82+454PA4mFIgceUK
TLSH
T102D16DF3D3D88A7ED41156F49B252E1BCE2D092452283D6689E4DF4B93E34B2E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 197f77da333809fefe7f130f8640298c665dd3f9a64f273e990b49d9e1b0258a
MD5 298b29d39d15f296fbf1b0417526bf21
SHA1 f54270de8ca64a73e1addd3169fdbe95cd349123
SHA512 2023a7acca050a86ebc99163e4bae992d43636c4c36a6cb0ac8ae803b03cd72100cbae30e33c2ecb1cfacc73a29e56ead561de9c521686554e09507d14770c1a
SSDEEP 48:YALlq8qdZmZdZDPhDZxzaXYfoKsOgmzsc6sf4skfsL1osGKsVWMzsuksl1sXCzs5:DHoMLFp/aI1LTfk012+454PA4AbfNa
TLSH
T197B14CB7D3D88A3EC41156F49B252E1BCE2D092453283D6689E8EF5B93E34B2D24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 0ed2d3e53c7cc9fb307c019d8d3240ab0a8f75441133a54e740e9210635e61a5
MD5 d10933dadd82fc32581eeb7d6d7a7cc4
SHA1 36b64a8b5d442863395cdfb59b80a8ca441b51d2
SHA512 33094627604a1c5dc5861c86b7b09402a82566d502216e7d028ea3b6b159332db2a4d380b0c64eafa8db332440a7fc3d1ccebf3de5a9fc85f37c30eac27dc675
TLSH
T1A1019EEB967A716750AE99BB0E0478091F71783405916CF4DE9B82BCA0859F31F25463
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3e4a2a4f98d6e2c0790d893e851789e7442cbff1516cd6e4227615256f12c9a7
MD5 c04987d1371b71e119b143e2102b490b
SHA1 cddf89e1b06e09106624549c0870ce830921254d
SHA512 ffe215316047d5570b7722f0cd1877d11d5291df1b52f8feb6240020c19e0cfe8c70f67fb2cdc54c9ffa4a5ccf7613d429aa100c22633138d26c811e84783767
SSDEEP 192:VRf1oiwreMZ0C8VrTv7AhAPRp2l9qHsb+WNn3Y0Jl2pfoevas8jVyIsnAUgtaJ:VRtQDGrk8Xmkwo0P2pflax8
TLSH
T16C42B72DEA14793BACDAC32DFA667763D7F5203521942E84E6FC892C15E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f33b16cb5a40186ae98f6f21beacabc90f78a8ea0508fbc410d5550d7fedcdb4
MD5 05c85a9dfdcf505cf726a5ecb15dab86
SHA1 b84f180ff2336ce4623e87e1cba7296a30699552
SHA512 744bda273ad3d31d884cdd05789ec480ff351d627c8bed4825421455a18f1220764d2b5ae186bf014be4f4aceccba7336e18837828268f8fe5cdd0bb57292c9c
SSDEEP 192:VRf1oiwreMZ0C8Venv7AhbPRpznR9qHsb+WNn3YrBWYJl2pfoevas8tVyIsnAUgX:VRtQDnvkZXlkwogYP2pflaXDD
TLSH
T16152E82EE910797BACDBC329F9567B63E7F5203560942E84E6FC892C19E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b02d80946eb97bf45417b236ce4dce450768e52ea311f1072bcd8c472d66a9f8
MD5 aaa1c246c47bdb2ddcae6935ef2e4478
SHA1 14b915596d971dad2cca03b1ebef839d1b301969
SHA512 ff4f44aa8f23d5c4fac759453e0628147afbdec9eccf3bab7d36482b93dad71a3f651745ab2ca2fca81e3c8538c7c91684c21dabc3687bead3758f71660cb85f
SSDEEP 192:VRf1oiwBeMZ0C8Venv7AhbPRpznR9qHsb+WNn3YrBWYJl2pfoevas8tVyIsnAUgX:VRtQ5nvkZXlkwogYP2pflaXDD
TLSH
T1F552E82EE910797BACDBC329F9567B63E7F5203560942E84E6FC892C19E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3eabe3700569ca190d2d3d485785ca85db1e4614d28fcc921f56b4988025ca4a
MD5 79bfd220993beb5da6f8eb0d4b913d28
SHA1 7f4a1849d3c3bc7777e91737a8324c0fa4d86ef9
SHA512 7f69f05bfd755e5aff5aaf66681ef27deb1daec860b6db28314e23eec837e6c698a31510611c05fc776b8ce77494dfc94638c83d1881f8124a4278d531ba4925
SSDEEP 192:VRf1oiwreMZ0C8VeTv7AhAPRp2nR9qHsb+WNn3Yr1K2fl2pfoevas8jVyIsnAUgl:VRtQDnrk8Xckwo82t2pflaxND
TLSH
T15F52D82EEA14793B9CDBC329F9567763D7F5203560942E84EAFC892C15E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e8fa0035f8c94d658d5ab222b430014f6d5b1d69ed76a8ca51b5c744ad3fc869
MD5 1a58f0fa7fec28afb98e8c40f2fb1aad
SHA1 bf141c6eb56dec0b65bd7bb603c76a084eb0c0e6
SHA512 b63dd55f4191573fee9865864003c085897c194174bf8765a3b2ca7401ba18c9b08f13defb22586cb0b870e2c3bbf64c30d1e5d6ccd69aa4abc5fc5f7d01d054
TLSH
T1A5B0128184625112C04202B4354218D871245F11E60A974343E1B922CC655A28419050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591217.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591217.TMP
Size 96B
SHA256 f85ad0b3907463528673011c73e72f2fb2620a45153dd904cc635635e70faa95
MD5 d9dd09a73aec691a16823ed548920f46
SHA1 857312691cfc6405176b16717899a57b65b082f5
SHA512 6ae453f7c58d6725ef415e57dab9490da32f99f688944d29b1b32dc5f40a5c2ce11210bc1fb5acbef30f0fd18f2b264bdc07757103e9ce071cfc74e91e54c904
TLSH
T118B02220E2A22202C00203F020E0A0C8B030CF20C20303A2A2E03B2ACC2AAB00223020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 57ee22911c5d31c3aacb805b5bdc5833d22fb95460986c2d2882f3ac2988db47
MD5 63c15886e697c80b58aab8f5fdc77c6e
SHA1 5c287927a880b64aae37860f299a5cd8fcb24d24
SHA512 5d4573dbb6b842de150f00dbbfce29ebf1d31b1b14dff3a16635b5dbe65b014b0d2c261ac0ae0e5666e41544d1e6dc7b000cb75376e99ca92f2c20485cc06223
SSDEEP 3072:pdMEgf1PpGP03XQ0H+GESr/MRbbXwxkWpBvGm7D5Lk17ox1tIpud63U8BehbCBiO:sR1xTXQ0trg9Xe+m7Rkm1tYpBeh2BAov
TLSH
T1D83412A2DDF5FA36859CE61FF00E132E6EF24CA6D534C7E14C9D9E0826E4AED0581D60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 195426726bb205beabb8218be6d2a954611ccad432ccf093a105c9e457569ba0
MD5 3306aa02179dc648d4e0297e550f6ab9
SHA1 00831987800ba55a8a0d5d3b1677cbe1991d1791
SHA512 06d5dc6b952449ad4bf7fe2a037f0c1387d1a62515e0088f85717e2e583ac646e530d94e59dc63edd5275ec4d5b516f5091bd104aa6ae93e80fec4c96f712311
SSDEEP 6144:aMR1xTXQ0trg9Xe+m7Rkm1tYpBeh2BAov:VR1xDQgrg9OZ9oBGcAov
TLSH
T14A3413B3EDB5EA3689ACEA0FF00E122E1EF18D97C534CBD45C9D5E0426E85AD0981D60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 1e706fdaf4f0d299f917205f8c26fe1e1d2614a14077d3a7c5a644101f048c86
MD5 2db42fd3cece3afe06bc6dce84de963e
SHA1 571a5831eb3459904e3781d543cdfe58c7d5645b
SHA512 2f6fd615d6e1ae980c1b30f6ca542f3493b226c14c3f06ea4db71d6fff63f386bd81be3f2d7cb25528e9541d5e2ad60c2f81a7aa9c0f8e5bf88097ed35ad03ab
SSDEEP 6144:uMR1xTXQ0trg9Xe+m7Rkm1tYpBeh2BAov:pR1xDQgrg9OZ9oBGcAov
TLSH
T1B93413F3EDB5FA3689ACEA0FF00E122E1EF18D97C534CBD45C9D5E0426E95A90981D60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 0e911813f38b25edae3f11ad42c75a89919c1d2fdc8b7f2526d823ccfd314d2e
MD5 b47f63fcdd6fcb1c50e9621f74f90aed
SHA1 c897af169e5c95f740fb153d34c11ccce13d1b92
SHA512 1c6f50ec71d7e2ff6fa2e04f79546b97d774a5dd993ded2f422737987be889dd89e5b20118eb4ce5bc8ef11cc000598362fb521dc654bba780de82fd932260f2
SSDEEP 3072:ALGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Jm7Rkm1tYpBeh2BAog
TLSH
T1B8C3123B5D75EC3B5CB5A74EB08E0B1E2EF149A6C920DE92C8D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 4a5c59b9253a769bd032dba8d670b85d527b82f951dda886c735e0fc0404be39
MD5 01981570a4e3abd1c36d61c93ff398a3
SHA1 feb92eecc2b433b93903e2deaeb5ec89c8a1b986
SHA512 c81bf28fcd78160b2e58615426d3e380847f3c1edf14912ad87c8ff2c16972763e4d12615611436dd4d98a17cf17f8dd901f185774d872feb4b5b7d72012d669
SSDEEP 3072:KdMEgf1PpGP03XQ0H+GESr/MRbbXwxkWpBvGm7D5Lk17ox1tIpud63U8BehbCBiO:1R1xTXQ0trg9Xe+m7Rkm1tYpBeh2BAov
TLSH
T1D43412A2DDF5FA36859CE61FF00E132E6EF24CA6D534C7E14C9D9E0826E4AED0581D60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22df140cf27633bb5a5cfb41856accaa97390f0e68ea50ce283a05244e70c75e
MD5 8309d4388bf9ad61f64efb2cff858a46
SHA1 5d506ca1d6f3121b4913ac8dd94595ef742deb8f
SHA512 c96144f89130652cb71678e2400de8c4bfd6104eb4607c508a56a32ccdaf7e724e084d306bf7a01138b4da19f98f2e33e355a539958acc257501ad3d4835f6fd
TLSH
T1F0D023207E7DB5D1E1271038E513474032DD55F63547520BF550451E5D7A4C393DE9D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b6a359cb0ebedea2ad1754fd63d50b9fe373e5f52696d16d8f686bcb604364d2
MD5 a8548495c7ac5fc1e8232603db9612fb
SHA1 2b23f44f4af516f2a22fb7835e87f6f481b783a5
SHA512 ebc11e974f0277b10e2d4fb8d769f23bd67b5103b9c9fecc7bfa5e14719234d0d8e17c596d24f8823ac959d81d18acb594f772e2d8e8fe15c5686745f36e480b
TLSH
T1D871B634023540ACE36042B1A4ED65457DF481E8FD375F02A1CC7AB7AE0EFE4A76AC49
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bfe5994aa28fb66559db00ee302a230dc97e836e88cc9286a4c4fc11553e6a92
MD5 96262ed2620e6adbfa3c4e9e515e8ede
SHA1 9dfd88063e293a91e0b79fa6e03b32c152053ad1
SHA512 0e645d8215493d87c1025c9421727d75060bae0a8e58a6bf120fc53493ea4322ea820a2e3cd77b6086c7152fb5a13f5e22eb727936bf6668dd0e77fb0607e1bc
TLSH
T1C381A43422B100ACE36281B4A4D965417DF042E8FD775F02918DBAB7AD0EBD4B366C08
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58acc5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58acc5.TMP
Size 3KB
SHA256 dc690ee4cafd0a26a18c515e97336fce8e49f20814a1836777f34c23c9aa6ec7
MD5 a3c8c470f009081d9bf71c5d44d85605
SHA1 48d8ebc9726f9772524f491cdf80830b272654a3
SHA512 dbf12c485fd50b5105b927c65001d381c7b7bd41aa7b27470cc88da6cbcdec929d27d8546ada790503bdcb6ee2fe330d31a39271741c0b9060bb0c2485fb96ef
TLSH
T13A71B734013600ACD36041B1A4ED65457DF481E8FD375F12A1CC7AB76E0EFE4A769C49
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 672ff8730fbf7e6cf9a6bfa535f7393b2b8da0c03fc62a138f54c6c60db389a0
MD5 0d2985d292c47d61795993ecaa5437e8
SHA1 5de3e26047dcd4ce73dba93df9eed76090b518fb
SHA512 fb5a7ddf58737ed57000bf7297eb1604a2869dd5b0c8c059a70da7b53d9a2e600479d2031ebc0c667e293c0e707ac9a78f78e2a67ff9dbe90ca57220be3e2e6d
TLSH
T16F41BDF3C3A5866DDA1195F0AA14AF1BCE1C055743AC3D5989E4AF1B93F28B1E001A8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c6c64d6fd47d0dd4d89ed8d6b80b6812ba383adbde05d57fb9716acb4c0121a4
MD5 3dcf1ec26d89f027fe71de77a941f2e3
SHA1 c2fc9058f0e1d4f0b630c1aac32ee42805d7158b
SHA512 556c51e56e35399cea607b3f4299e4e057abaa7bc98dc0ad41f9e369c66354da0767a8e21351146e2cf2946bcae43be9444b2017e51b8002f1b1423236feec56
SSDEEP 192:sxZNRryM/jK1Ml8MWu/fwsEnsbIdpdwHW6+WNGYzQoctIgULJ:sxZNtuu/fwsEn3iHbGxUd
TLSH
T1DA42E841AA34697BCCDBD209BA51BF53D6F91572D2940E44A9FCCA1C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 b96f39825830dc1b90fa206bfc0b74b14d45369b2cfcd7f099eae143f3365895
MD5 5002f63b993a2f52b515e44518b42510
SHA1 003f7311a3413c8a6c43114b309972cec725acac
SHA512 8741bc22f08a410828f8d1ef2e93ed526b21778d3e3844dbd75745124b602ab2a103b8cfefdc29c88182129e37844e00c5f8eeba3d44fdaebf847347c2678f2f
SSDEEP 192:sxZNRryM/jK1Ml8FWu/fwscWpV0nyYeb75ddpmbnHW6+WNTSp3/YTr1YnIgbKLJ:sxZNtLu/fwscWv0n0jEHbE/7Od
TLSH
T1F962C642AA34697BCCD7C21DFA51BF53E6F92472D6940E44A9FC891C04E6BED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b2935e78f9fc5b4ffa2f880f14c2196d46a4f89f8db15dd218b6423bcad46d20
MD5 0a7319851caa7ee813bc420a34e7bfe0
SHA1 4b311977a2383bb3d1d57a7f8ad758c6c4dfcace
SHA512 f9ccae77ed24a15e678577d9090822669e04c4f082e9fbb4ab578e23676175ebde837f3e068f6c58011a800208ec0249ecd5b320b1093b65226c2bfcffb381a6
SSDEEP 768:HmW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjIroIliMYR:HmW7kf0Wvqidau1jaa5LA3jzfR
TLSH
T145D20B3B680CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 1KB
SHA256 346bdf98c841bb40bf6e8f038a667ba80807a0c1027d228215ff8b8b3a26dafd
MD5 5117fb903483a41754a1e3fe1d2514f0
SHA1 0417408f28148930e5b2db4bff6ec52df94d1afc
SHA512 bba7dd6681395bb0c43d3dd4e55de62169198c218fb3c58d34e94a8f57855be42dbfb886756e4f06771305a52a27ecc9126b9b3000ffd54f48db8961bb8067b0
TLSH
T1982121898E91956FEAE489F110B7B5E43370DADC6712A3A38C3C72362D273592E5F1C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b5de.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe58b5de.TMP
Size 1KB
SHA256 e4effe4a06ab8b0640fd672b21c3c80bbda9d00580bd6dd47867a918d0953cf1
MD5 2d533189342a9ce9102409afbe8bc198
SHA1 4608d9b5183f3e7c08d88b552494287b89e1b452
SHA512 115b3232969fc33147915ec1c1a38d91cbaadbb509c6e53513454b1bcf145eec3464752f249e395d73905f343ffc5d9ee2e8a15aad7d27fb05f9584f4faeb946
TLSH
T1C321108A4691590FECE040B60552A4F83374C9006322B3D3983D673A5C3579D6E4F0C5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 681c571380ca83226177cfd04612ee2085bda075dc0dafd84c4d0d4eacd08e2c
MD5 a4ddd9ff295b7a5672d2b0ab18e9fa8c
SHA1 4087c52611d54c1bb99f6f2cf1124bf103ef2979
SHA512 2085aeffb4c75d7b90087514aa17ed9204c7813cdacb5d21f231a461a1ea18cb4d393d54dcddfc7b887a3f900b46b439c250e0a576c0adf1b6ccebfd20c4005e
TLSH
T17DE068BB2DFB1C20AC7F97C538B054A085853818D504EC0E3027A28730F23612406C21
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fa56f1805032745e7a9b161b82911f341173a46d0903cac1c028c284cc924443
MD5 dda70b9e2a76a9a2b9cc5739502c9f82
SHA1 a8671abe4632ea3aca35bd709360c4309d01e877
SHA512 08731a636f405d5b9067caf4cbad6f99367726a9bc2b09d6dfc8b654ca8a3b77d649d8114c8e2ed1e0cf35346caf753a87f09ae98b86b8192df66c4741da035d
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTT4IHKVG8jyJCIfKLag/nI9Kck:KIbCKcT4wKVGKaCMKLaQnGKck
TLSH
T100915755323B0A0138FD7804A26A8E3B9E9236633419E46F7BB955760E2BE115DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8eef7713b6e13632cc753baf3371f2ef0918b88d702d816c34a208a46cf92090
MD5 cdb48234b7a0b7db4c58d2f2daaa5f9c
SHA1 8b584178f30e90516301873b5fa0bb59bca737f4
SHA512 8b07f0c6e791140afaaf043340d88c455722d36fbeb810b479932f9ba4a882b81dd917eb6d60d2fff435403bf7233c37fb06a6e9f1fad924c5a8124bc30d4fde
SSDEEP 192:urm+xasuheOwQxMGsNmQQCBbzvQmiU1yRj4aGBPKUq+FdGe5AMV+2TdN6qfqva+7:5ZcIhsNmQjbdwMrdV5+2bXsa+VYUoq
TLSH
T171828D711C746C7B59F2A291F98737079FF89127A6C86A44E6EDEB0D00EE7AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cfaa2d7f3b62c4d7c158b80f555ec1ff1476554c5171317d3634dabe8e5f60ea
MD5 63c4299ace498c2f063cb92247b52e26
SHA1 30d7cf6a4fdac86c1dc14561cf32f6c35f8f21da
SHA512 2cd0137a9fb35c5d70bbe20ede984047efd15932d842903a19910336a4d8821539f42d916b216badf7b7c265ce39f64454dab2c8b820e9f45ec72fed3f66e111
SSDEEP 192:MONM64BAQmiUyw1OW5GBPKUq+FdGe5A0aDixU6:MONM6eA7QWUdVseU6
TLSH
T158020B396C796C7B9EB2AE45F58737175FD8103BEA846B44EAE85B0C00D724C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8e364a22dc36534d2b45aa1225de159de15754c2fa2fab439e6e542e6a4bbb9c
MD5 4509e96c94adf1c16e11ee0f5597afbf
SHA1 9443d495d485cf262b2ef2b5f5a4c198899b9e40
SHA512 f30c9406afceb9f7ca87a1b196f6af5fde3039490fe74f1a38a668cafb2f73cd507f06e9d855b1c16fccf7f57592efb21633638f8b4bfd4ef56a9848102b0365
SSDEEP 192:1ON364BGQmiUyhOc5GBPKUq+FdGe5AMV+2bWw6qfU6:1ON36eiJcUdV5+2nXU6
TLSH
T17B122B356C746C2B5DA16551F08737039FA84237EBC56B44F6ED6B1C01EF7AC2706816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 cad537e160af4593e534deb140086e4c070606fb4f2a19fba3f5d216cdeb54a2
MD5 7d5947b2c8b0e0ee803db3f51f6e7a72
SHA1 8d1a0bc2407569d2a9878e76d18de95a1c71d677
SHA512 ab977f20323d9db23524b2fc55bc037174a8ee336d87beb80368d429d0b6d04a745316ed7c2e9351d16947c497ff9e574b49bdfbd1ffcc5929e390544d631a89
SSDEEP 384:9ZcIhsN7QTmbSrd2rdV5+2bg0UAStLKfUEaOK+Y4MkKKsa+VYUoq:lhIGd8VlbzSGVK+Y4MkKKhgPJ
TLSH
T133B24AB1D8E56DFB14A1E1C59A42E6126DB85137868C9A0CE6FDF73E309FAF81312412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 114e73e481266f6f22acf2ac2cd9c381e290b73ce666dd5416dfb7e3451a1d39
MD5 f49069f8ff7dd9a83457c2737f0e2feb
SHA1 e42cb8dac28b8c290cf398e1c01e367961347560
SHA512 78ca69f3a2bd77af070d96304a6911a4bc7c02eb0972fa8510674b71a40af50227d361067c90bd8294e5e2b55543213055620eeb2fa3316974b6286c30d6bd73
TLSH
T12D411758BAE91148B3B76E56ABF6686E487EB8372F4B955E00010D8E0663B40D871B37
MD5 SHA1 SHA512 TLSH

Submit Download