Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://gofile.io/d/...

windows11-21h2-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    897s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    10/09/2026, 09:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://gofile.io/d/866Kw86X
  • Sample260910-k2he3sgc96
Score
8/10
discoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Loads dropped DLL 2 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 11 IoCs
  • Modifies data under HKEY_USERS 5 IoCs
  • Modifies registry class 56 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/866Kw86X
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xa4,0x108,0x7ffd5cb9c728,0x7ffd5cb9c734,0x7ffd5cb9c740
      2⤵
        PID:724
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1580,i,12243627762981507145,6946537592098711960,262144 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1924 /prefetch:2
        2⤵
          PID:3024
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,3129545861623147532,15223083816673028554,524288 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2236 /prefetch:11
          2⤵
          • System Time Discovery
          PID:2800
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,11061110943281785652,13434801467971688606,524288 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2912 /prefetch:13
          2⤵
            PID:3588
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3080,i,10944791177190356161,10239040414308182131,2097152 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3148 /prefetch:1
            2⤵
              PID:2764
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3076,i,10709092264220170769,6433824189058936189,2097152 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3128 /prefetch:1
              2⤵
                PID:2620
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4288,i,50078562083940474,11615256488518578956,2097152 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4228 /prefetch:9
                2⤵
                  PID:2780
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4404,i,10654482195309720806,18431229584406129768,2097152 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4680 /prefetch:1
                  2⤵
                    PID:3476
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5624,i,11267543744544280467,15831082305789105093,524288 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5616 /prefetch:14
                    2⤵
                      PID:1120
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,17097962625751169365,9310050068707955574,524288 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:14
                      2⤵
                      • NTFS ADS
                      PID:1912
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5888,i,5789982088392992508,13977693904719195902,524288 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:14
                      2⤵
                        PID:5988
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=216,i,11212503415872506226,7671031277264912704,524288 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6044 /prefetch:14
                        2⤵
                          PID:5996
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6020,i,3183497088885991993,3817624955273172806,524288 --field-trial-handle=1928,i,8663517777312815225,16686974445731841981,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6156 /prefetch:14
                          2⤵
                            PID:6004
                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                          1⤵
                            PID:2000
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:2332
                            • C:\Windows\System32\rundll32.exe
                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                              1⤵
                                PID:1656
                              • C:\Users\Admin\Downloads\real\real\bin\Real.exe
                                "C:\Users\Admin\Downloads\real\real\bin\Real.exe"
                                1⤵
                                • Modifies data under HKEY_USERS
                                • Modifies registry class
                                • Suspicious behavior: EnumeratesProcesses
                                • Suspicious use of FindShellTrayWindow
                                • Suspicious use of SendNotifyMessage
                                • Suspicious use of WriteProcessMemory
                                PID:4252
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4252.1684.10112045840336543629
                                  2⤵
                                  • Drops file in Windows directory
                                  • Enumerates system info in registry
                                  • Modifies data under HKEY_USERS
                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                  • Suspicious use of WriteProcessMemory
                                  PID:3152
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffd5794b078,0x7ffd5794b084,0x7ffd5794b090
                                    3⤵
                                      PID:5104
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1688,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1684 /prefetch:2
                                      3⤵
                                        PID:4036
                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1996,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:11
                                        3⤵
                                          PID:4132
                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2272,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1664 /prefetch:13
                                          3⤵
                                            PID:4748
                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3580,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
                                            3⤵
                                              PID:5256
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4480,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:12
                                              3⤵
                                                PID:5632
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3904,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:14
                                                3⤵
                                                  PID:5216
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2128,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:14
                                                  3⤵
                                                    PID:4724
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4348,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
                                                    3⤵
                                                      PID:596
                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4948,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:10
                                                      3⤵
                                                        PID:5512
                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4116,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
                                                        3⤵
                                                          PID:5312
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4828,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:14
                                                          3⤵
                                                            PID:4884
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4124,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
                                                            3⤵
                                                              PID:1712
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3084,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:14
                                                              3⤵
                                                                PID:4896
                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3912,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
                                                                3⤵
                                                                  PID:5404
                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4988,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:14
                                                                  3⤵
                                                                    PID:4888
                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2176,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:14
                                                                    3⤵
                                                                      PID:4128
                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView" --webview-exe-name=Real.exe --webview-exe-version=1.8.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4132,i,12306828924646632284,7464207076558143228,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
                                                                      3⤵
                                                                        PID:1100
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://projectreal.gg/register?app_auth=1&state=O_IyIaNmiME59onqo6SbvBQpE4Q4Z6AKRgasFLD7uo0&loopback_port=58600&hwid=HWIDv5_c890f121c388ec41dace2fc4d28d29e70541ca7e8b5342b61f745c7976805453
                                                                      2⤵
                                                                      • Loads dropped DLL
                                                                      • Drops file in Windows directory
                                                                      • Checks SCSI registry key(s)
                                                                      • Enumerates system info in registry
                                                                      • Modifies data under HKEY_USERS
                                                                      • Modifies registry class
                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                      • Suspicious use of FindShellTrayWindow
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:5844
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e4,0x2e8,0x2ec,0x2e0,0x2f4,0x7ffd5c79c188,0x7ffd5c79c194,0x7ffd5c79c1a0
                                                                        3⤵
                                                                          PID:5884
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,15966033180548932202,4849749933744310721,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:11
                                                                          3⤵
                                                                          • System Time Discovery
                                                                          PID:5068
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,11450586288572454950,16464466010831002729,262144 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
                                                                          3⤵
                                                                            PID:960
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,12182912608940873555,3837988550132736754,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:13
                                                                            3⤵
                                                                              PID:4012
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,7667684486587862807,647441651209398797,2097152 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
                                                                              3⤵
                                                                                PID:5232
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,17273896672296240356,1426239764131595214,2097152 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
                                                                                3⤵
                                                                                  PID:424
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,12646352796101706077,14101065309246352121,2097152 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:1
                                                                                  3⤵
                                                                                    PID:5136
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,11861206549632648513,14239318798914107027,2097152 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:9
                                                                                    3⤵
                                                                                      PID:5184
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4396,i,15542413094540217013,5054001443150526699,2097152 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:1
                                                                                      3⤵
                                                                                        PID:2868
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4432,i,14296801822375739806,12840622318740687774,2097152 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:9
                                                                                        3⤵
                                                                                          PID:4104
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,6954390354956467053,16782778511776704042,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:14
                                                                                          3⤵
                                                                                            PID:4896
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,6043872242483281970,9872096908087990985,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
                                                                                            3⤵
                                                                                              PID:1812
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,3045410447100733707,7470515199089761023,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:14
                                                                                              3⤵
                                                                                                PID:3588
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,2670787017081797307,1578659356175910824,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
                                                                                                3⤵
                                                                                                  PID:3476
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,1655862632521882206,5739636476294396081,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:14
                                                                                                  3⤵
                                                                                                    PID:4024
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                                                                                      cookie_exporter.exe --cookie-json=1128
                                                                                                      4⤵
                                                                                                        PID:1796
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,3820547560746156886,8411462745544768649,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
                                                                                                      3⤵
                                                                                                        PID:2288
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,3820547560746156886,8411462745544768649,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
                                                                                                        3⤵
                                                                                                          PID:1912
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,4476497709075986975,12151355058894171767,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
                                                                                                          3⤵
                                                                                                            PID:5056
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6684,i,9867542307169596241,6644363575191514145,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:14
                                                                                                            3⤵
                                                                                                              PID:4108
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,3973210642784661183,15446529514420901548,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:14
                                                                                                              3⤵
                                                                                                                PID:2700
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,9987921177712455326,1097189433115354582,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:14
                                                                                                                3⤵
                                                                                                                  PID:5232
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,4824318624111551073,11073360839971103330,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:14
                                                                                                                  3⤵
                                                                                                                    PID:1288
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6672,i,7889476349409130250,13384001166617707832,2097152 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
                                                                                                                    3⤵
                                                                                                                      PID:6140
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6888,i,5821424432470048636,5845695473491078128,2097152 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
                                                                                                                      3⤵
                                                                                                                        PID:3068
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,11908030986033344023,11513720704440277119,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:14
                                                                                                                        3⤵
                                                                                                                          PID:1700
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,7238551602897113640,5741211859763184365,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:14
                                                                                                                          3⤵
                                                                                                                            PID:2432
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,11677303641055801657,4589170068926531110,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4040 /prefetch:14
                                                                                                                            3⤵
                                                                                                                              PID:1836
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,5657615222246999217,13626088800306808800,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:14
                                                                                                                              3⤵
                                                                                                                                PID:4892
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,11324799759784703942,17757760020284427523,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
                                                                                                                                3⤵
                                                                                                                                  PID:1820
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,6082798604204457634,11780681873399281916,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:14
                                                                                                                                  3⤵
                                                                                                                                    PID:3340
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,11920415880876319370,12580858282968695934,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
                                                                                                                                    3⤵
                                                                                                                                      PID:2928
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,16294518475419011532,653229407246658712,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
                                                                                                                                      3⤵
                                                                                                                                        PID:5020
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4552,i,5111673040412015485,6129085740046504463,262144 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:10
                                                                                                                                        3⤵
                                                                                                                                          PID:3864
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,425504449796096192,11967548821172067506,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
                                                                                                                                          3⤵
                                                                                                                                            PID:5232
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,17609279207031897345,12668162222035560407,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
                                                                                                                                            3⤵
                                                                                                                                              PID:4028
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,2892633771535299398,14465582803709531241,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:14
                                                                                                                                              3⤵
                                                                                                                                                PID:1900
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,12489211506795792352,16190874062696835604,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=1152 /prefetch:14
                                                                                                                                                3⤵
                                                                                                                                                  PID:2524
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,7125691989048069849,11834120555896914890,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:14
                                                                                                                                                  3⤵
                                                                                                                                                    PID:4500
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3428,i,17596792175939977004,4893875687206876018,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:14
                                                                                                                                                    3⤵
                                                                                                                                                      PID:1428
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1140,i,1625769661043982033,14234781090769144423,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
                                                                                                                                                      3⤵
                                                                                                                                                        PID:5252
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,14785039411603675766,5251912408338747602,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:14
                                                                                                                                                        3⤵
                                                                                                                                                          PID:3480
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,12876759212448921128,3312238437969957872,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:14
                                                                                                                                                          3⤵
                                                                                                                                                            PID:3396
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,9160864953505642253,9291967827230443317,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:14
                                                                                                                                                            3⤵
                                                                                                                                                              PID:1316
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,1417352922319923913,18211671032966791285,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:14
                                                                                                                                                              3⤵
                                                                                                                                                                PID:5116
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,3218933166143002511,9956332870114803885,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
                                                                                                                                                                3⤵
                                                                                                                                                                  PID:1660
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,9377596314964840804,17496506501467273625,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:14
                                                                                                                                                                  3⤵
                                                                                                                                                                    PID:3512
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,1743963815961399187,6329084417623571786,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
                                                                                                                                                                    3⤵
                                                                                                                                                                      PID:1216
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,11836051451964957619,6659990777215161255,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:14
                                                                                                                                                                      3⤵
                                                                                                                                                                        PID:928
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,7464042950183430380,1672995569837605985,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:14
                                                                                                                                                                        3⤵
                                                                                                                                                                          PID:5000
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,10704273598603101485,18124793237313915501,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
                                                                                                                                                                          3⤵
                                                                                                                                                                            PID:3200
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,7613770118025804866,15583448274133401205,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:14
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:3556
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,5177394050255051326,1053565751075037957,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:14
                                                                                                                                                                              3⤵
                                                                                                                                                                                PID:3300
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7320,i,10613115536118848243,13859017590739433322,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
                                                                                                                                                                                3⤵
                                                                                                                                                                                  PID:4672
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7336,i,16137361745142859973,18106204138363662538,524288 --field-trial-handle=2272,i,201479122957674378,1719505507173800378,262144 --variations-seed-version --mojo-platform-channel-handle=7344 /prefetch:14
                                                                                                                                                                                  3⤵
                                                                                                                                                                                    PID:3524
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                1⤵
                                                                                                                                                                                  PID:4020
                                                                                                                                                                                • C:\Windows\system32\sihost.exe
                                                                                                                                                                                  sihost.exe
                                                                                                                                                                                  1⤵
                                                                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                  PID:4600
                                                                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                                                                    explorer.exe /LOADSAVEDWINDOWS
                                                                                                                                                                                    2⤵
                                                                                                                                                                                    • Boot or Logon Autostart Execution: Active Setup
                                                                                                                                                                                    • Enumerates connected drives
                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                    • Suspicious use of SendNotifyMessage
                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                    PID:3852
                                                                                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                  1⤵
                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                  PID:1644
                                                                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                  1⤵
                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                  PID:2764

                                                                                                                                                                                Network

                                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                                      Replay Monitor

                                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                                      Downloads

                                                                                                                                                                                      169b31e2-bfce-4947-b103-a6ed5f394f7f.tmp
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\169b31e2-bfce-4947-b103-a6ed5f394f7f.tmp
                                                                                                                                                                                      • Size 116KB
                                                                                                                                                                                      • SHA256 b205a92fb8bc0cdfaea8b1288d8ef254d51924469fb009de0893a75b3d51cd3c
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      61b6f8dd-7606-4c12-a34d-2c0cb12cbfbf.tmp
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\61b6f8dd-7606-4c12-a34d-2c0cb12cbfbf.tmp
                                                                                                                                                                                      • Size 414B
                                                                                                                                                                                      • SHA256 f19e42b33cbd5acabf12b51f1f6244c517f1d6a1486de067980ea1a44af19e22
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      BookmarkMergedSurfaceOrdering
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                      • Size 6B
                                                                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 9171874d7fa400e1bb757971e7719dcc89311df15f7dc13d9128f3b69d796c89
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                      • SHA256 dab36900b95d91a9218a546234977494c4e547b24f9fa1ef2abab35aa1524814
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      SCT Auditing Pending Reports
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 193e49f567802de3bd52b0a54089376bc6af759236a9cc9af5e8fa03d8ed0ccd
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Preferences
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                      • SHA256 456567654739de644f095976264618d90847f2aed45a1c3674866f0051fa0ce9
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                      • SHA256 86a708718cf15f4439caa697f6058448e2b7016cb1cef9cd2e54315587d87208
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                      • Size 120B
                                                                                                                                                                                      • SHA256 5c83a9ecdc17b257f7e4f67f4c54c9354b732f51eda1d14314618c6a5d2b879a
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index~RFe5880c4.TMP
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5880c4.TMP
                                                                                                                                                                                      • Size 96B
                                                                                                                                                                                      • SHA256 aa907e50538c7f23a81625aa962286f8f8082edfc7f46a3617e4959d3ca28f66
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                      • Size 115KB
                                                                                                                                                                                      • SHA256 9f788349d2b53454de8c1904b5a0f4d4788a952fe2e30652c779ba726bbb9e6b
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                      • Size 116KB
                                                                                                                                                                                      • SHA256 dd85a66288066158cee3279e0694f3002bf6f2574a172ee30fc2940b545bffc0
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      blocklist
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                      • Size 105KB
                                                                                                                                                                                      • SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      autofill_bypass_cache_forms.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                                                                                      • Size 161B
                                                                                                                                                                                      • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      edge_autofill_global_block_list.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                      • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      v1FieldTypes.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                                                                                      • Size 509KB
                                                                                                                                                                                      • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      settings.dat
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                      • SHA256 940cbc9ecbe8080b4f78231e8ea559e5f25ba4586d9b9c7484580010ea141f8b
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      settings.dat
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                      • SHA256 3d6022b8b09d410224e6f49ce6c5693abe531fcaf66bb13ef03126afd2691fe0
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      LOG.old
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                      • Size 769B
                                                                                                                                                                                      • SHA256 793f267149a245435b54b7446840f5ecec6d8a56b4e3835d11fb896aaf759b22
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      LOG.old
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                      • Size 331B
                                                                                                                                                                                      • SHA256 35e7e24e8df5e0b0a4e99d96595028095c5155c8827fb65e0046982c3a441dec
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                                                                      • Size 158B
                                                                                                                                                                                      • SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 5da19a122bafc3ad607dbb35cc06f9b4668a91da530f38f572216478785f2c0e
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index~RFe5932be.TMP
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5932be.TMP
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 f2fa13bd4ab1fd229a9568e8271a09fba69e500590dd19779412113d2936557a
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      SiteList-Enterprise.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Edge Profile.ico
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                      • Size 70KB
                                                                                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 98d1e4d9acb4ecdc44dec30c6a740f5436160608f3cf7f4885f80b49b045b696
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                      • Size 111B
                                                                                                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 47cab216e951b3f32d4dd14e55af2ced7d679b4d3fba9321e0bcced1ff62c531
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Preferences
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                      • SHA256 b7a2fc9043d77b6d04f826e04ce4052044b6c11fa586af9c7d94bbd008aea959
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Preferences
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                      • SHA256 4826b580e4c529c8a6ff1af5df07bdfc68d186947082557fd9920cf5249dbf15
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Preferences
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                      • SHA256 4ea3557289565cfe249099b5c6dfcff4b8d02a7363e3426038ee2b3a3dc66c85
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                      • Size 37KB
                                                                                                                                                                                      • SHA256 c39d51c937e939b1b6aaa6c3855ea6a9ae2599e1b3316068199c0483e90ee4ef
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b38f76fc-0bdb-4056-95ec-6b53c77ee934\index-dir\the-real-index
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 196e89df73d7033be6e2e9ee6b55dba0940422fad598126694dd114662c58f49
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index~RFe5d6506.TMP
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b38f76fc-0bdb-4056-95ec-6b53c77ee934\index-dir\the-real-index~RFe5d6506.TMP
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 406358a90ee4fe8a3a2192f264525a6679942ab60ad156b05d68719f5d3adeca
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      index.txt
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                      • Size 371B
                                                                                                                                                                                      • SHA256 5d037a77f742e5d991684b26a0107941d55c1d2ce6c584f1f5aa4f3e31ca667d
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      sync_diagnostic.log
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                      • SHA256 e700229d6ad94bb21afe835fb59f7ea3295db6fa67d7ecfdb853194eb3985e10
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      .usage
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\.usage
                                                                                                                                                                                      • Size 24B
                                                                                                                                                                                      • SHA256 fac0a85e4f5907c8036b0052214b777ddbacea9420e5903526272dc76bd4c7b6
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      00000000
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\00\00000000
                                                                                                                                                                                      • Size 1B
                                                                                                                                                                                      • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      domain_actions.dll
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.20\domain_actions.dll
                                                                                                                                                                                      • Size 82KB
                                                                                                                                                                                      • SHA256 e5c9378b540360fb4ab0b16bf40ed18bd99cf4a8a5a6923f4f240d373fb441cb
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      data.txt
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.24\data.txt
                                                                                                                                                                                      • Size 151KB
                                                                                                                                                                                      • SHA256 1c271b4577299894f3067f9cc9c1ea1e65b773d00ace564931e0cd8f6e6e584e
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      OperationConfig
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      OperationConfig~RFe59b6c3.TMP
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b6c3.TMP
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      office_endpoints_list.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                      • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                      • SHA256 142768523a0073c95d5f4443e01e4fccdfc93a706fc90b0e97574861f252316d
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                      • SHA256 484228d13cc67d536da50c4a76c2ad786d8ac3e5d5d972d22700cea0bba14d9b
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                      • Size 29KB
                                                                                                                                                                                      • SHA256 e467b7cd27adcfc37ae64b51e4a1a0f6f4e71040dd0e1e46f4696594e25ac802
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                      • SHA256 c02e83d963e4a52e6b06fd6933b3ecc30df68d350f85741ef11822bed6b1278d
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                      • SHA256 764d0d32fcdc15e36271761ee81807757de058b25a8c56b0f25cc9246f3dc3ec
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                      • SHA256 3801f84934dbe9872ae5af5e4e779957642c3e2a5720fc567e9709e91e708434
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      safety_tips.pb
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                                                                                      • Size 163KB
                                                                                                                                                                                      • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      typosquatting_list.pb
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      typosquatting_list.pb
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.9.10.1\typosquatting_list.pb
                                                                                                                                                                                      • Size 1.4MB
                                                                                                                                                                                      • SHA256 f33ef5edf4edd45b7c9ae5dbba08241f9562cadd7c7a853933bdc299a6aa6126
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      well_known_domains.dll
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                                                                                                                                      • Size 572KB
                                                                                                                                                                                      • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      nav_config.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                      • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 372B
                                                                                                                                                                                      • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 492B
                                                                                                                                                                                      • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 daa704ae58dac475370bea2bc4f2d004c2d26bbcdb85f70132b75038897ee2b2
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 612B
                                                                                                                                                                                      • SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 252B
                                                                                                                                                                                      • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 c791047491f56b55cb8f41e83dd3f19fbf1a7b478e6e626b05c62db50c728e86
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                      • SHA256 32fb66fcadc7947c6321c9ab2c00ab78d36595768bc2559213f6343bdc7fc7e2
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                      • SHA256 7f5487e44c49264a16f07492d1c886f8f62b3b2093f45598e6e8479522f7f91d
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 9bdd6a024afa1db2188e65c8682e2d4c6a368c9347f577648de73a80b3c68e22
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                      • SHA256 e4f53826e1139e11d6856c9f6ff294fa5f9c4f20673ae9caa4f035fd22297389
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 49d123bf2473c05a20f7a392fbc09922b1156717b461bf3f184aabd930cfd6ac
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 a1c77989fba5da5b15e6b586f2ad6a8250047f9d6591f5e2a33207ea766cba48
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 c2840c56785bda81c1071c67c8803bacb156b0c625ea599b63fc77f0465da7f6
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 732B
                                                                                                                                                                                      • SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 972B
                                                                                                                                                                                      • SHA256 ff2333c17048bfeb6f6976f16f4e5f8a88fd57126a97a8d900daac20c2ed6d2b
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 340cdb1ea8958f214ddd84236212066e3ae3362c0efc98a906c9064b4fca0265
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 ce012fdb8d369cb3d3e3dd4350534b012960cbfaab1295aa7f74df9e444fdf49
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      metadata.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                      • Size 852B
                                                                                                                                                                                      • SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      b72bb8ce-d1b7-4456-bafa-12329e303f67.tmp
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b72bb8ce-d1b7-4456-bafa-12329e303f67.tmp
                                                                                                                                                                                      • Size 13B
                                                                                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      account-vault.dpapi
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\account-vault.dpapi
                                                                                                                                                                                      • Size 298B
                                                                                                                                                                                      • SHA256 beec32d3a07aeb06daa75a0b0a5a23808fb925a12126b6eed3d1cb69c5168c28
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      protocols.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      crl-set
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                      • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      settings.dat
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                      • SHA256 eb753b1cbbbb3152cb9599055b470cd322b530df0a09d777d836465d8bc7104d
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      settings.dat
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                      • SHA256 b2c750fbf816bb672f00573475cccc78fa951b32de33ef0e2bbcede686b8e14a
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      throttle_store.dat
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Crashpad\throttle_store.dat
                                                                                                                                                                                      • Size 20B
                                                                                                                                                                                      • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                      • Size 576B
                                                                                                                                                                                      • SHA256 6e929cd4bab3467e53b0e53f973b640769307b1000d2c2dca098a10b1d304c83
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      the-real-index
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                      • SHA256 70078c5e803fefbe4b6cd6ab48bec2f2ee635df64726cf94e7cd3edfe9f13ea9
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      data_0
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\DawnWebGPUCache\data_0
                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      data_1
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\DawnWebGPUCache\data_1
                                                                                                                                                                                      • Size 264KB
                                                                                                                                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      data_2
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\DawnWebGPUCache\data_2
                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      data_3
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\DawnWebGPUCache\data_3
                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\Extension Rules\MANIFEST-000001
                                                                                                                                                                                      • Size 41B
                                                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Network Persistent State~RFe59c01a.TMP
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\Network\Network Persistent State~RFe59c01a.TMP
                                                                                                                                                                                      • Size 59B
                                                                                                                                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Preferences
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\Preferences
                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                      • SHA256 a044348bb58af13e584f8b1fb05a45e940286d6e8e45fb17f1ca84e29ecf83c5
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      CURRENT
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\Sync Data\LevelDB\CURRENT
                                                                                                                                                                                      • Size 16B
                                                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      d2477abc-c4c3-462a-b19c-e6ee616bccbe.tmp
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Default\d2477abc-c4c3-462a-b19c-e6ee616bccbe.tmp
                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                      • SHA256 c793814767c6e6740673b8116e8cb328c6966ed4f6dc43144bff24f7b032eb72
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Local State
                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                      • SHA256 72a07dd6e0a404db21d2f927f501e022bf547dabd28b96d73ac0f5f735abde39
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Local State
                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                      • SHA256 129d83c4e6677ea76d2878cf90e8d62eb2e7ec6e4b3196c3fd3674f56853b024
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Local State
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 e0354746eeb5684d835972753ab552eb25669e903b50ed8c3e967ba92293115c
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Local State
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 37b9e81227674797808c317ba27dc0f1fde2e32def3fb2804f46f066d8714f8a
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Local State
                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                      • SHA256 d347c16859401f6881e10aeff4373ae14b05e9fc455c133982097369b28fc414
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Local State
                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                      • SHA256 4f278e8e3023d01dca858d1ce7d62855c019281c39669c8fe78cbb89524444fb
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Local State
                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                      • SHA256 3b6bc2be081f7289995ecb66bfbcec0730ed973ac85d2f6d83b9db705aa4a34e
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Local State~RFe589778.TMP
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Local State~RFe589778.TMP
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 1d77355c574e1e8062b634871df743146baf03ffdc0ca02c8d01c174f8cd5b73
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      crs.pb
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\PKIMetadata\46.0.0.0\crs.pb
                                                                                                                                                                                      • Size 233KB
                                                                                                                                                                                      • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      ct_config.pb
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                      • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      kp_pinslist.pb
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                      • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Filtering Rules
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                                                                                                                                                                                      • Size 2.1MB
                                                                                                                                                                                      • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      LICENSE
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                                                                                                                                                                      • Size 24KB
                                                                                                                                                                                      • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Advertising
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Advertising
                                                                                                                                                                                      • Size 19KB
                                                                                                                                                                                      • SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Analytics
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Analytics
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      CompatExceptions
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\CompatExceptions
                                                                                                                                                                                      • Size 689B
                                                                                                                                                                                      • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Content
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Content
                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                      • SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Cryptomining
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Cryptomining
                                                                                                                                                                                      • Size 552B
                                                                                                                                                                                      • SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Entities
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Entities
                                                                                                                                                                                      • Size 68KB
                                                                                                                                                                                      • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Fingerprinting
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Fingerprinting
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      LICENSE
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\LICENSE
                                                                                                                                                                                      • Size 34KB
                                                                                                                                                                                      • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Social
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Social
                                                                                                                                                                                      • Size 754B
                                                                                                                                                                                      • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Staging
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Staging
                                                                                                                                                                                      • Size 36B
                                                                                                                                                                                      • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      TransparentAdvertisers
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Mu\TransparentAdvertisers
                                                                                                                                                                                      • Size 105B
                                                                                                                                                                                      • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Advertising
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Advertising
                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                      • SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Analytics
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Analytics
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Content
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Content
                                                                                                                                                                                      • Size 5KB
                                                                                                                                                                                      • SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Cryptomining
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Cryptomining
                                                                                                                                                                                      • Size 32B
                                                                                                                                                                                      • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Entities
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Entities
                                                                                                                                                                                      • Size 128KB
                                                                                                                                                                                      • SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Fingerprinting
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Fingerprinting
                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                      • SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      LICENSE
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\LICENSE
                                                                                                                                                                                      • Size 66B
                                                                                                                                                                                      • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Social
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Social
                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                      • SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Staging
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Staging
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.fingerprint
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\Trust Protection Lists\1.0.0.38\manifest.fingerprint
                                                                                                                                                                                      • Size 66B
                                                                                                                                                                                      • SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      keys.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\cache\webview\EBWebView\TrustTokenKeyCommitments\2026.8.3.1\keys.json
                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                      • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      settings.json
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Real\data\config\settings.json
                                                                                                                                                                                      • Size 207B
                                                                                                                                                                                      • SHA256 e4f38f124eb821848eb57d6988c5ef865768188e54d1e8f0ae34c59e9f99dd21
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      33ac49d4-a5d8-4821-83d0-429fb27667fa.tmp
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\33ac49d4-a5d8-4821-83d0-429fb27667fa.tmp
                                                                                                                                                                                      • Size 1B
                                                                                                                                                                                      • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      01206d3b-298e-4296-86af-f46d5bce8899.tmp
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5844_1708575334\01206d3b-298e-4296-86af-f46d5bce8899.tmp
                                                                                                                                                                                      • Size 157KB
                                                                                                                                                                                      • SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      17a3c50a-41de-4ebf-b63c-ad4150d238ff.tmp
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5844_968532056\17a3c50a-41de-4ebf-b63c-ad4150d238ff.tmp
                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                      • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      content_new.js
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5844_968532056\CRX_INSTALL\content_new.js
                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                      • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      default.dic
                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                      • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      real.zip.crdownload
                                                                                                                                                                                      • Path C:\Users\Admin\Downloads\real.zip.crdownload
                                                                                                                                                                                      • Size 15.8MB
                                                                                                                                                                                      • SHA256 e2e2db775b80969ae530f72b6d536581855989bb7dcd3fee9051af1112a3f057
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      real.zip:Zone.Identifier
                                                                                                                                                                                      • Path C:\Users\Admin\Downloads\real.zip:Zone.Identifier
                                                                                                                                                                                      • Size 151B
                                                                                                                                                                                      • SHA256 53971376330e948c40f87457afaddd2ed0b6d387838eae89bc462c6546a942ec
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      Other
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1085703870\Sigma\Other
                                                                                                                                                                                      • Size 34B
                                                                                                                                                                                      • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1085703870\manifest.json
                                                                                                                                                                                      • Size 132B
                                                                                                                                                                                      • SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_121548572\manifest.json
                                                                                                                                                                                      • Size 76B
                                                                                                                                                                                      • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      hyph-as.hyb
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1263984558\hyph-as.hyb
                                                                                                                                                                                      • Size 703B
                                                                                                                                                                                      • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      hyph-hi.hyb
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1263984558\hyph-hi.hyb
                                                                                                                                                                                      • Size 687B
                                                                                                                                                                                      • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      hyph-nb.hyb
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1263984558\hyph-nb.hyb
                                                                                                                                                                                      • Size 141KB
                                                                                                                                                                                      • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1263984558\manifest.json
                                                                                                                                                                                      • Size 82B
                                                                                                                                                                                      • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1333630723\manifest.json
                                                                                                                                                                                      • Size 113B
                                                                                                                                                                                      • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1481059518\manifest.json
                                                                                                                                                                                      • Size 69B
                                                                                                                                                                                      • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      LICENSE
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1688508062\LICENSE
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_1688508062\manifest.json
                                                                                                                                                                                      • Size 78B
                                                                                                                                                                                      • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_223194004\manifest.json
                                                                                                                                                                                      • Size 1002B
                                                                                                                                                                                      • SHA256 dca3cd7a673d0776a085c0b8958a85bdd8392923db21a0b55f4d37210f752322
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_467289533\manifest.json
                                                                                                                                                                                      • Size 116B
                                                                                                                                                                                      • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_621684424\manifest.json
                                                                                                                                                                                      • Size 102B
                                                                                                                                                                                      • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.fingerprint
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_658658683\manifest.fingerprint
                                                                                                                                                                                      • Size 66B
                                                                                                                                                                                      • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3152_658658683\manifest.json
                                                                                                                                                                                      • Size 135B
                                                                                                                                                                                      • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1023818831\manifest.json
                                                                                                                                                                                      • Size 135B
                                                                                                                                                                                      • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1052192337\manifest.json
                                                                                                                                                                                      • Size 177B
                                                                                                                                                                                      • SHA256 45365e90d3acff2e5fb10c9b757b61c676642330dc7017716633d829d8ef60d3
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      english_wikipedia.txt
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\english_wikipedia.txt
                                                                                                                                                                                      • Size 269KB
                                                                                                                                                                                      • SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      female_names.txt
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\female_names.txt
                                                                                                                                                                                      • Size 26KB
                                                                                                                                                                                      • SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      male_names.txt
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\male_names.txt
                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                      • SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      model.markov
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\model.markov
                                                                                                                                                                                      • Size 44KB
                                                                                                                                                                                      • SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      passwords.txt
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\passwords.txt
                                                                                                                                                                                      • Size 233KB
                                                                                                                                                                                      • SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      ranked_dicts
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\ranked_dicts
                                                                                                                                                                                      • Size 865KB
                                                                                                                                                                                      • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      surnames.txt
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\surnames.txt
                                                                                                                                                                                      • Size 74KB
                                                                                                                                                                                      • SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      test.txt
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\test.txt
                                                                                                                                                                                      • Size 15B
                                                                                                                                                                                      • SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      us_tv_and_film.txt
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1268389417\us_tv_and_film.txt
                                                                                                                                                                                      • Size 159KB
                                                                                                                                                                                      • SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      verified_contents.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1437722279\_metadata\verified_contents.json
                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                      • SHA256 721a6439a0b19869aaace755c9e795f83aed516e4b42d8a13f4fd978d0586d18
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_152500308\manifest.json
                                                                                                                                                                                      • Size 118B
                                                                                                                                                                                      • SHA256 3b016193250b039b35ac491c466e94318296bcc7ad261e5eed2c0d308502c446
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1797678527\manifest.json
                                                                                                                                                                                      • Size 119B
                                                                                                                                                                                      • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_1801054440\manifest.json
                                                                                                                                                                                      • Size 141B
                                                                                                                                                                                      • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_193586605\manifest.json
                                                                                                                                                                                      • Size 43B
                                                                                                                                                                                      • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_2006676612\manifest.json
                                                                                                                                                                                      • Size 238B
                                                                                                                                                                                      • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_2030091309\manifest.json
                                                                                                                                                                                      • Size 53B
                                                                                                                                                                                      • SHA256 920ebcad2d6434116e19e96be9f39cded421dcfbeaf67c20608f1ee2bb8387e8
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_2052649653\manifest.json
                                                                                                                                                                                      • Size 85B
                                                                                                                                                                                      • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_2102944896\manifest.json
                                                                                                                                                                                      • Size 165B
                                                                                                                                                                                      • SHA256 880b2b81f96f7ec0799e2939e82955327f65a8e4edadfdd89cfebb70d8fb6f2e
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_496405814\manifest.json
                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                      • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_642514723\manifest.json
                                                                                                                                                                                      • Size 160B
                                                                                                                                                                                      • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      manifest.json
                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5844_947711700\manifest.json
                                                                                                                                                                                      • Size 165B
                                                                                                                                                                                      • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                      Submit Download

                                                                                                                                                                                      memory/1644-2083-0x0000021B65D00000-0x0000021B65E00000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/1644-2126-0x0000021B79500000-0x0000021B79600000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/1644-2201-0x0000021C7B2E0000-0x0000021C7B3E0000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/1644-2143-0x0000021C79C60000-0x0000021C79C80000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/1644-2123-0x0000021B65C00000-0x0000021B65D00000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/1644-2144-0x0000021C79BC0000-0x0000021C79BE0000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/4036-178-0x00007FFD7A5E0000-0x00007FFD7A5E1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5256-276-0x00007FFD7A5E0000-0x00007FFD7A5E1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1380-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1388-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1382-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1381-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1392-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1391-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1386-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1389-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1390-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download

                                                                                                                                                                                      memory/5512-1387-0x000001E61F4D0000-0x000001E61F4D1000-memory.dmp
                                                                                                                                                                                      Download