hxxps://steamgift100[.]me

Analysis

user interaction
yes
max time kernel
300s
max time network
300s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 18:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://steamgift100.me
Sample260913-xfpcqavvbv

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 23 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1087874313\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248503535\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248503535\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248503535\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248417127\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248417127\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_334974417\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1087874313\automation.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_810053152\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_810053152\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1424079568\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1424079568\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1424079568\sets.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1424079568\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1087874313\classification.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248503535\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_436850798\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_810053152\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_810053152\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1087874313\extraction.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1087874313\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1087874313\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1064_334974417\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2500	msedge.exe
1296	msedge.exe
4564	chrome.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337988890936684"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 19 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{4DE801B8-1C7E-412D-867E-0865D37A7EA3}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{96B640AC-2584-499E-AC71-6AF8448CF04C}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{0454C3E0-5CC5-433A-B083-03442FC32F9A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4056	chrome.exe
4056	chrome.exe
1064	msedge.exe
1064	msedge.exe
4056	chrome.exe
4056	chrome.exe
5924	msedge.exe
5924	msedge.exe
6496	chrome.exe
6496	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe
4056	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe
Token: SeShutdownPrivilege	4056	chrome.exe
Token: SeCreatePagefilePrivilege	4056	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe
4604	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4604 wrote to memory of 4380	4604	msedge.exe	85
PID 4604 wrote to memory of 2500	4604	msedge.exe	86
PID 4604 wrote to memory of 1620	4604	msedge.exe	87
PID 4604 wrote to memory of 1620	4604	msedge.exe	87
PID 4604 wrote to memory of 2132	4604	msedge.exe	88
PID 4604 wrote to memory of 1620	4604	msedge.exe	87
PID 4604 wrote to memory of 2132	4604	msedge.exe	88
PID 4604 wrote to memory of 4684	4604	msedge.exe	89
PID 4604 wrote to memory of 3124	4604	msedge.exe	90
PID 4604 wrote to memory of 4684	4604	msedge.exe	89
PID 4604 wrote to memory of 4684	4604	msedge.exe	89
PID 4604 wrote to memory of 3124	4604	msedge.exe	90
PID 4604 wrote to memory of 3124	4604	msedge.exe	90
PID 4604 wrote to memory of 2288	4604	msedge.exe	92
PID 4604 wrote to memory of 2288	4604	msedge.exe	92
PID 4604 wrote to memory of 2288	4604	msedge.exe	92
PID 4604 wrote to memory of 3556	4604	msedge.exe	93
PID 4604 wrote to memory of 3556	4604	msedge.exe	93
PID 4604 wrote to memory of 3556	4604	msedge.exe	93
PID 4604 wrote to memory of 5008	4604	msedge.exe	95
PID 4604 wrote to memory of 5008	4604	msedge.exe	95
PID 4604 wrote to memory of 5008	4604	msedge.exe	95
PID 4604 wrote to memory of 3960	4604	msedge.exe	98
PID 4604 wrote to memory of 3960	4604	msedge.exe	98
PID 4604 wrote to memory of 3960	4604	msedge.exe	98
PID 4604 wrote to memory of 4152	4604	msedge.exe	99
PID 4604 wrote to memory of 4928	4604	msedge.exe	100
PID 4604 wrote to memory of 4152	4604	msedge.exe	99
PID 4604 wrote to memory of 4928	4604	msedge.exe	100
PID 4604 wrote to memory of 2124	4604	msedge.exe	102
PID 4604 wrote to memory of 4472	4604	msedge.exe	109
PID 4604 wrote to memory of 4472	4604	msedge.exe	109
PID 4604 wrote to memory of 4472	4604	msedge.exe	109
PID 4604 wrote to memory of 4408	4604	msedge.exe	110
PID 4604 wrote to memory of 4408	4604	msedge.exe	110
PID 4604 wrote to memory of 4408	4604	msedge.exe	110
PID 4604 wrote to memory of 4216	4604	msedge.exe	111
PID 4604 wrote to memory of 4216	4604	msedge.exe	111
PID 4604 wrote to memory of 540	4604	msedge.exe	113
PID 4604 wrote to memory of 540	4604	msedge.exe	113
PID 4604 wrote to memory of 540	4604	msedge.exe	113
PID 4604 wrote to memory of 240	4604	msedge.exe	114
PID 4604 wrote to memory of 240	4604	msedge.exe	114
PID 4604 wrote to memory of 240	4604	msedge.exe	114
PID 4604 wrote to memory of 4512	4604	msedge.exe	116
PID 4604 wrote to memory of 4512	4604	msedge.exe	116
PID 4604 wrote to memory of 4512	4604	msedge.exe	116
PID 4604 wrote to memory of 1064	4604	msedge.exe	118
PID 1064 wrote to memory of 2644	1064	msedge.exe	119
PID 1064 wrote to memory of 1296	1064	msedge.exe	121
PID 1064 wrote to memory of 1028	1064	msedge.exe	122
PID 1064 wrote to memory of 1028	1064	msedge.exe	122
PID 1064 wrote to memory of 1028	1064	msedge.exe	122
PID 1064 wrote to memory of 1400	1064	msedge.exe	123
PID 1064 wrote to memory of 1400	1064	msedge.exe	123
PID 1064 wrote to memory of 1408	1064	msedge.exe	127
PID 1064 wrote to memory of 4564	1064	msedge.exe	128
PID 1064 wrote to memory of 4564	1064	msedge.exe	128
PID 1064 wrote to memory of 4152	1064	msedge.exe	130
PID 1064 wrote to memory of 4152	1064	msedge.exe	130
PID 1064 wrote to memory of 2140	1064	msedge.exe	131
PID 1064 wrote to memory of 2140	1064	msedge.exe	131
PID 1064 wrote to memory of 3300	1064	msedge.exe	132
PID 1064 wrote to memory of 3300	1064	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://steamgift100.me
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff6d6dc188,0x7fff6d6dc194,0x7fff6d6dc1a0
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,139154693140520177,15119814314550436576,524288 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,3722707110366178507,16878203113852902692,262144 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:2
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2224,i,10694859883985635220,3456037728997061322,524288 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,10997193341581043738,15366233960735972751,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,6111222783321265567,6617920637747602578,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,3281732207455239587,3969420867261639131,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,14576818105662567849,17429339121329685211,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5080,i,13760364480186720458,7476759678620236280,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5300,i,16061040371783818405,4854568537602913806,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,16755781674249349454,4115481540008553243,524288 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,8385093103770908424,12537569557433383690,524288 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,7196786838117064288,7892821692718790632,524288 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,7196786838117064288,7892821692718790632,524288 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5048,i,16495260703239976588,1059270493232322453,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5124,i,10173626831187673509,16539242668038760977,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,3117535548661757609,8907193340492834376,524288 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5016,i,11482576666036353129,8213908938371777905,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3744,i,3145582216704116923,11826806881968184745,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7104,i,16633685376048997747,15357868463689342113,2097152 --field-trial-handle=2764,i,17524934693873502053,7623738578646539171,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2c0,0x7fff6d6dc188,0x7fff6d6dc194,0x7fff6d6dc1a0
    3⤵
    PID:2644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,17146091219980480198,12712097565816759738,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1592,i,1575837716320588226,2481154169250482922,262144 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
    3⤵
    PID:1028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,1756490343311000753,8648804278760306353,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:8
    3⤵
    PID:1400
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,3457160579409712223,5977473629159505005,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:8
    3⤵
    PID:1392
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,3457160579409712223,5977473629159505005,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:8
    3⤵
    PID:1408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,9698661456136854124,4793147900993258053,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
    3⤵
    PID:4564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,13819538866926704405,6254529595867626743,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
    3⤵
    PID:4152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,16845254586221890692,1746177153261563846,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:8
    3⤵
    PID:2140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,11194642034951190466,17032501752213857194,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
    3⤵
    PID:3300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,14442032917134999006,17403278380405874938,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:8
    3⤵
    PID:3764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,13787645487784527260,2583525724370265898,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
    3⤵
    PID:3688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,12770538686146325072,5270932159742710981,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:8
    3⤵
    PID:3492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,3676620819226701621,9555156300075286339,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=1012 /prefetch:8
    3⤵
    PID:1260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,15095952687198885728,12623612152968480238,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
    3⤵
    PID:3804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,14894315048338862110,754977218431347995,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:8
    3⤵
    PID:616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,16761434080186517188,16243936919731961377,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
    3⤵
    PID:5492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=776,i,7902253734020223656,8021976094374935113,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=772 /prefetch:8
    3⤵
    PID:3748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,6767970545987811471,11289291797841351835,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
    3⤵
    PID:8176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5148,i,16749328457111014950,5209851492420375641,262144 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,16923078649441390957,14787689806982462080,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
    3⤵
    PID:6980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,6279526840139137204,1648524656216715889,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
    3⤵
    PID:7728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,16750684431693254057,10131934979656924399,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:8
    3⤵
    PID:7756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,2125584534106050311,10218120135638960748,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:8
    3⤵
    PID:7640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,4592807345199560250,14892894439436537466,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
    3⤵
    PID:7448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,4494364809507730396,10079461737947126342,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=776 /prefetch:8
    3⤵
    PID:1560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,6608034746533153780,12641561671728649887,524288 --field-trial-handle=2128,i,17085597013418647607,4468774242062026461,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
    3⤵
    PID:7664

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1300

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4680

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
PID:4056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xbc,0x124,0x7fff6b08c728,0x7fff6b08c734,0x7fff6b08c740
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,4496996038198465687,7163136897930313805,262144 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1932 /prefetch:2
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,17010608053349029248,13624220483871563677,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,3453923556464240490,4766293891732922509,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,4439227093099024995,6162115964166191967,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,17186563331980992741,18012906617731523072,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4580,i,16036631673418461210,2845409898125198976,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5380,i,14798005130478319180,16958290076551143116,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5380,i,1015350123930926028,7544785247002598956,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3412,i,612403454361728024,6123665980544745943,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3408 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3396,i,8308080128556340853,14611247591881185623,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3388 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3352,i,5643164060460033021,8261569221678650891,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3368 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3344,i,16947610285179235639,13145191970242284031,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3452,i,15972569652513339174,2599147983106016261,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5824,i,9694733654835546466,6315213686071494941,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5812,i,8929515572093175969,18372276445624243151,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3964 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5620,i,10663732832490029522,13662530801139202859,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:5692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6008,i,13966799937499720207,686854799993387189,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6136,i,10675220306568570586,14660457312713887427,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5776,i,15840353872840820927,16270149201887881089,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6368,i,14861587710850828095,7220484094921569812,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6372 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6532,i,8096773139006816846,2420788161217421108,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6524,i,1450888150026514725,5264881443701330509,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6660 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6512,i,8837090103649053226,4100599994582000869,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6924,i,7132845251602581364,582851568779725018,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6932 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7072,i,4929480847109060703,458399490543179360,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7088 /prefetch:1
  2⤵
  PID:5816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7224,i,7803765735234381900,3568590188344213711,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7236 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7376,i,14773846066616965796,8824723014045872908,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7408,i,3761890868785969299,8026970714653317155,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7520 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7656,i,14220044428587759049,267685043982315015,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7652 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7784,i,8244022904337957333,2985650816656499491,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7788 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7964,i,1450808596964918685,17335427086278174798,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7976 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8112,i,5860155003453669078,14796511484473681658,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8124 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8264,i,17860075063511932619,7046409250495451179,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8280 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8412,i,4292283293084968798,17001536210578634529,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8424 /prefetch:1
  2⤵
  PID:5896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7928,i,11359535901800662850,13782615162882018493,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8732 /prefetch:1
  2⤵
  PID:5560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7368,i,7970660142379784421,8604940784306574877,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:6248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8952,i,3329509689230501780,13857245028482812014,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8956 /prefetch:1
  2⤵
  PID:6256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9104,i,3852586393016838319,3866696810308644461,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9116 /prefetch:1
  2⤵
  PID:6264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9252,i,14431161986321677576,6523739493745673575,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9260 /prefetch:1
  2⤵
  PID:6276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9400,i,4081818620654660205,18425597973635957030,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9412 /prefetch:1
  2⤵
  PID:6284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9444,i,9140845530912037186,11072340665249655141,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9512 /prefetch:1
  2⤵
  PID:6292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9464,i,15376139470661194946,17353033244554216596,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9528 /prefetch:1
  2⤵
  PID:6300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9484,i,10288592033394375397,10836543707088552777,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9548 /prefetch:1
  2⤵
  PID:6308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=10308,i,12363473919748779352,3731104058333387199,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10296 /prefetch:1
  2⤵
  PID:6236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=10532,i,12474917937095404902,4056065272464839395,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9980 /prefetch:1
  2⤵
  PID:6168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10512,i,2029302823465387628,7189062605016531169,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10316 /prefetch:1
  2⤵
  PID:6848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=10484,i,5035923125701015975,4387054009682500540,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10736 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10332,i,1723614114419555509,18280904923437401871,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10524 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=864,i,4406756066171840760,9704559802137818909,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=6088,i,10718635829976625432,7952615141045544363,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10996 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=11116,i,2611420279981825510,15158822763448881854,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11124 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=11240,i,8110534338756701373,2863505296597757188,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11252 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=11288,i,12004937370715026476,14268016720879768152,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11300 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11496,i,3689318193027864387,1708993091320199824,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11132 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=11576,i,11937471864574225512,9770320283587101838,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11288 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=8560,i,16453109196674157180,16094334677055625635,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7252 /prefetch:1
  2⤵
  PID:3216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8268,i,13999465714856214047,15005075080006711103,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8396 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=7044,i,240537226804663244,7896139665940693294,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7404 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=6968,i,8236399254006534507,16113941587551551363,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11752 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=11780,i,11041991145375010124,3679853239247221612,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11792 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=8296,i,3951586583861593259,1574606137219948379,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=11896 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12036,i,16718516788239512037,17664124149947609468,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8300 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=12064,i,4757694708051816762,14295412723155900494,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8284 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=12232,i,4426954098841033333,17850519771637260919,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12248 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12380,i,4079267168489035674,16227151608448315562,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12384 /prefetch:1
  2⤵
  PID:1140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=12544,i,15042474019890499815,14056752361099228119,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12556 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=12680,i,7453362167370481250,8912078228505666139,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12692 /prefetch:1
  2⤵
  PID:204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=12828,i,13976993059259405068,17792785364154491908,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12844 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=12988,i,4942203349596051057,5257723571371370159,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13000 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=13132,i,1243967173622933341,8054725483936239104,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13140 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=13260,i,17505923248246607306,8694792237019690789,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13272 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=13400,i,14074840081165023297,5113785210678431208,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13412 /prefetch:1
  2⤵
  PID:6848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=13536,i,11128608666214198803,9290616103861058622,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13552 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=13560,i,10798520375584942315,14639169147909602461,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13688 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=13028,i,16819590353794399877,17607830061192692382,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13164 /prefetch:1
  2⤵
  PID:7192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=11764,i,11551516238360839928,5968496967000218047,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12700 /prefetch:1
  2⤵
  PID:7200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=14016,i,10077093359946750842,15527123275745065404,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14028 /prefetch:1
  2⤵
  PID:7208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=14152,i,4312184906341784694,12259956981999168004,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14156 /prefetch:1
  2⤵
  PID:7216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=13876,i,12598507904377758400,6026912102641045180,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14264 /prefetch:1
  2⤵
  PID:7228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=14304,i,8171284609281530590,14836049650352982876,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14424 /prefetch:1
  2⤵
  PID:7236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=14548,i,5479038038481900303,5382576233058513413,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14560 /prefetch:1
  2⤵
  PID:7244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=14684,i,12963693310586391802,13686365165539586434,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14696 /prefetch:1
  2⤵
  PID:7252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=14828,i,6798542853239985731,7403453021877213812,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=14896 /prefetch:1
  2⤵
  PID:7260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=14880,i,4751537688495391874,1794423969405388272,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=15096 /prefetch:1
  2⤵
  PID:7864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=12444,i,8035965381800612682,11415159448090555663,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12480 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=11940,i,7584339860301253970,2536175672811012649,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=13360 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=11932,i,2869789050841999805,14266290954352083099,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=12512 /prefetch:1
  2⤵
  PID:7240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=10356,i,14084095778189537341,789910633701459082,262144 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=10432 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=7048,i,16589966537164722384,7271834572723028504,524288 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7040 /prefetch:8
  2⤵
  PID:6164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=9512,i,17307762049314008173,13607276883711609623,2097152 --field-trial-handle=1972,i,972127385713968716,5515061879317888920,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:7660

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3456

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1087874313\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248417127\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248503535\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1248503535\manifest.json
Size 78B
SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
MD5 259f068207f60fb9d4448c02c27b74ba
SHA1 99131d95cce94750a928738a99caa5c710bbc924
SHA512 fa41eac9d1ca244d06083e3d4230dd94700861155359722c1d815d0d9933dcd39c113b6f0f6ea02ff7ee1acd2fbc6ed40267d557afde16f417e80b678e8136bd
TLSH
T173A02230AC02E23320C803B002B083C383A02C02302A388C0B0320A232C823BE2F323C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1064_1424079568\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1064_334974417\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1064_436850798\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1064_810053152\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

77f393a8-343c-45b4-822f-74775a9234be.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\77f393a8-343c-45b4-822f-74775a9234be.tmp
Size 130KB
SHA256 6f1054ed2cead6286dc78257ec7a40574b9e51cf9f0f9c7531121b6ebcb8aadf
MD5 335f5525bd3571ff13aed9a802400a3c
SHA1 7c9ff81fbb40ef58671ffa19cce8499b6cbe8e8a
SHA512 76cf06933312d524d99ffced589268bc721c5d2d211f5ea07b4e69bc57ad7c15c4b621aea015889aed3b733e360ee6bc05449f1eeec21b92458a8a94ffeb5a71
SSDEEP 3072:Z+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gZ:Z+hFD+7t56OD9ZfSApprZ
TLSH
T151D31232BA91C8BBC9BC6541B197A300DE666CED55DE7A09444A5F8EE09FC4C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2274d51a5befb0df3a20e1dcc39a65aff8b21ad5fb4a9e607f4bcdc45a8d4a21
MD5 06bbd37ddbc5a9f93b5d07746b939042
SHA1 3d00eb77d69eb9011f9acc08af38fc0f8b0e0108
SHA512 98c5960b0c76483199307e33b3168a8696d9bd00fe22f290d7b3d4a63ee4411280815e70ee3232d90bcb65e097af4fd1d33f00ac3150e8bfd1f278f59322b2c6
TLSH
T1D1E02B99C821ED6704FD475E64580742F751135736E0880B3A3D920A8FB113AC589C2C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 346KB
SHA256 06fb30c34e3d7cb64ec821dd7d1eee69613b4a84c3841c081dee7143c151555e
MD5 e4bc0d7ecc0b43b6b8bd71ed0d8e894a
SHA1 27776f4cfd2ff01e98221769cb4aa554a2670e6a
SHA512 4c0956fb89b264ceb8dcc20a8cf905a4ae784195e78c306d2c0577d2e4c0548b6058ecda0516a089dc97570864728ab60503bffd804af5d0934e5f9c8b1fa475
SSDEEP 6144:ZPNyy2q1x/xjj1YO1RKSXVSFAsamiA6r/dsaRDDQ9fSoA9pT1c/i:qy2qhGORKNARmiRRDkJIpv
TLSH
T1EB7423DE4C0A0C9960EAE1034BDF477B3A4A44E7E0C5EC52987C1DD26D9F2627CED688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054
Size 73KB
SHA256 f3d2fda12260ccf193da50e70fe5efb8b89d3c5d4e246eaa053f2cbf4fb07ca4
MD5 345c1023e3d262fb90bd367013335e0f
SHA1 30fd5c4da80ace38caa4fc0da1c950b6ea210787
SHA512 9ae18642326e9e10579bf7b137e14cf5da51953fd2884db14dc6050c4734ec9ad58f7afa35e1d9ee2d0672827845fba2a076bf25069ad40a31de93179c76c842
SSDEEP 1536:gJJpWKEN0+OUU0C2XYIyfDqHbs9hB09CfZlKMVOSUFV+qnCQalSYnUxMv:cjW1b1U09DGyQPKzSUFVXCQalSYntv
TLSH
T1D87312C66BCE83A9791BCF3D0D254488AB74C4F0329AEFC3957AA08D7515134B1C63A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
Size 62KB
SHA256 29e3c6c1aec37ac2af49f0a0318d6a4c0653e8e26ef8b3ee91b923073dd3c197
MD5 23793defc1323ea3f3e0b105e70803b2
SHA1 6239daff26359661097ec66f68636b5f3035dea2
SHA512 d699386dfee45ca8c6dfcecd8aec0dfecaa8822afad038e26f56c933712ae7ff9e55db567fcf275d8f2a29d98cd1734d93a9cbc1461d1dda39d1a7fa097cc63e
SSDEEP 1536:mXPI7rkkzxzCH6NGIvaSNXkkFRPvk9VkPf8z:swPzCa9kelvkfYUz
TLSH
T1215302F1179EBEEE6619A648DFCB720A4CFC5F17123531AE5D08991DF1B07672293810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005c
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005f
Size 21KB
SHA256 b7582acf1f182c6a66e203cd6eee889d409cd05ff4950975128a32fc3e0c0418
MD5 e126007f6b835ef3a0916864cf476699
SHA1 04eb8318f173d6fdb5417e92645502d93966b8a8
SHA512 5e169a71116c41508283ee7224b7fee51c6b737a909c269e062e7494c9e7a853dbd4a762ddd9d9f104d79965d5570c2511df5b1c08c840c2037a4901af8a7140
SSDEEP 384:7zhykQ67ifiZgQPmqN64Q4PBZtjCiMEZiRkCYzMNFMvj686avLDo1bo0/GZl:5VQ6kU5Pmqk4xZTF2Ct6YLDkpql
TLSH
T1EEA2C01F966DC059082EB5CC9795B522D0CB8391E5CD106FD8F54C2FB4B277236E8B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000067
Size 28KB
SHA256 0208143957e72886e8835d07ce7323a1c2ce6979f92b95a107b6056f703ca6f5
MD5 71b39382c0fa8caca79beca7c4026d09
SHA1 42dc6e4ea86ad675ad91b66117e575262cc602ad
SHA512 4e77e85a204e12d1ad394dba8f7013a453f42dad8beeeaa00f58d4fe080c0c1896f7472fdc4251eaed12f2f8957ed3e7eeb6040fd8f2c1c96e2b812fc3c43736
SSDEEP 768:OYj5wrVBrKnBeMP2uZXALAIN4BVbjFHj9o1kf1:vj5wnrMP2JNGnHjWkf1
TLSH
T12AD2F100EC23140EFAB3B05352D2BCC957958BB198A7ABA33C7EEB202D67593A35D410
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008e
Size 26KB
SHA256 279eb1a7233a9666355b486b78e5733081471eb668efd1e5107c9288b54f6b66
MD5 01e971e8079a0f7e1a802213eaa3d25a
SHA1 ceaa4fbebdb95f457bd709d6ba06a0989dabc6ed
SHA512 da17011863a263dc956385a6632bb1e636868268b9ccd7c2f27d00f61a137221e8578cb24691a9924ed385d4760c41236d7a7c92d99c192ac79f4c003b45d085
SSDEEP 768:E/TIs4lfAHwlbFyxxblvZg0Y3LBe/OO6AYMlqZlUZAT1P:uTIBlQ3pZgd3lexjYaqZlUZAxP
TLSH
T178C2E165AF002A74F914E2F6585396DFC2608C58982036FE17866CABB7FC4D578F2F20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a5
Size 40KB
SHA256 9c6958b60c09d86a51044b35e4ac627922c6d026810b57b3bbe6d4768a43fe45
MD5 c095649c230e1e7bd1b422934c0ef714
SHA1 3ce33b216a49f79c0f0108b3bdcf9777a7784e25
SHA512 28851b37567f9a887d6a3bcf5e4d245100d5364aa9908e1ce1487416f13d8f21d81e9a8a337b7f777d58de9ee76b288cb84ac4c9c2d070039e013d2648cc4f52
SSDEEP 768:zJ4pfPbZW9lQXlnzhaRI4Knr0jzFCU9NpsH1fVHzLiyX/e7WUv5PdP:upHbZme78IbrkFp6ayvsPldP
TLSH
T15803027330EC6AE2D12A1D366F4E86AF7432A57B9B183483092C807A61DBCC5E57D875
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a6
Size 46KB
SHA256 6500d1bc085ef9214321034f66768a72c1e14ab1507f4f30240e8c1bac402088
MD5 e0914655efd7c570ef9aa49972faba84
SHA1 98eb015c8e7ee8a3b3b06b506bf2a30b18fc6a58
SHA512 b6cc128eb24356e4a272a1d50ceb6b14bae32befd1cef710a69347e9760622c650d0bb7bbfb79f8c06f4205cc794fc6a0310495145a35571d6e27593997b263e
SSDEEP 768:h0G/MUef9Hbr0uAtwHE+0UMW+UGujalwfALQ9+nsXj3a61:hwUQxbr0dwHE+hMWNGujuwoLcmsXW61
TLSH
T14A23015D69C696FCA3A686F1A404749A252FFF58482F0B5DC0636623888F50DC8771BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b7

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b7
Size 1024KB
SHA256 3d2c212df56d89cc06960b5c3be2490814699acfc0f63ade4c2c74e464e228b1
MD5 cd8269a4cb53a5b11ed5b152d2283795
SHA1 87e527438167994665a7f3a594afaaa9ae4f1951
SHA512 684fa8149e4e8e2550fa003dee6f131cc0d8f52aa36594444c0e9a8bd56a27539559f4a59dff08eb3818a4f47645d4270fb796c5c00c60f3a2b15adf8a792be3
SSDEEP 24576:I//8n3GW2sm6NXlOwpknYmbZTMWGq/lK0P9mc:I//+XXkwpknYGZYq/fj
TLSH
T1CD25336548CE4036CFB3A270507815D67B632EC7ABA5ABD7913171720B70FB98E07692
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cfd49e39a9b45e1d_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\cfd49e39a9b45e1d_0
Size 308KB
SHA256 debcb2ce08e10144fb696a552dc87d6b2a6974e34443457e9151ae3eedf7a81f
MD5 12d245fe99010b329fffbda222bc4e7b
SHA1 26aed7328b719066b2a5047772dff92c1247c5c3
SHA512 03b70c8c7454f91f25de1e7f97c56f9fd92775e0fec27cf48413fa16b6c08d873f5ae8c87c3594f3d57d31220b334cdb7331a47e16ced7d5df774006f4872774
SSDEEP 6144:pXydzR//bN/MoNNc3rTgHrgTYAayqZM3e4O:tKR//Nc3rIr6Dr3e4
TLSH
T1A264B70457859E36CF6B93F581638A66723245583FD39207A3E1FB392C163EA9DC2C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe8b7ca011cc9644_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
Size 301B
SHA256 ed85cd0e35f895f82766faef5c74cf47728b90123f6471c5ffd527ef58128094
MD5 6d25675d72a6c4088f1365f50ada52df
SHA1 19d8bf9054d27de0e616c2d7769f6ceed502728b
SHA512 ae044a132335132df137de57603e9e81128605ff91eb8fa8aeca3025a3384e9343a8d5122ee6bebb9a387ada41a9e5a38db475c0b5a5433861c4d47d2b6ab077
TLSH
T1BFE027F344A95076CC178470DD577145C607554404D7D0DF571C50B3A6949F688502B1
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 529bb688446da2077989b057c845d15fed006001ffa074da6d8b8f6a7fe500d0
MD5 0a4851b3719acb090aa71bcb6f56f85b
SHA1 38ca011ac88d9cf5f0767cb63831def7911b6ff9
SHA512 8646df7e86c45f1975733592022516333c62fc4423f030e020b190ceb71f388cc41da1e8146b6a3769c4c0f09bc1a8d5a60e3b666a92a7b4ba2467a8d6282d16
TLSH
T1A011664162826602EF5806B3FDD8CD35E037CD5CB80D8F2CA1D9C3D57ACA6B281C998D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 7df6a03db038e258423e4f14e3504cfc23e7c172c8e1e38e98413511c659e417
MD5 4d4b4263476fb343d30e381f08581a3b
SHA1 f3bbcea4959197127a705a7be0fabb1925ca1315
SHA512 55e524345184a3be5e0380e82d86de264218227517bf76962a686db9cb9283ce9516a3b007a8d0408e169e19056c5d70e129668f21ddde0d12c02d6d4dc2400d
SSDEEP 96:99126kZn4mcJgnpUA5Bo9mfbb2QrUrAQV/EtzXuCfnvp:9fVj2iAiOeALXuCZ
TLSH
T17391EEC0A1C56512EB5BC5B17BC28E67F0378860A79F1F1FAD81E7A565C76E040A28EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 f724f9e72148898fd462aed0c9bbf08ba9061e714d618430e7fc565db9fe81ee
MD5 0402257c9c2c31aa875d4c204da6139a
SHA1 e84438632fbb9b1395b3bd2b694c1cee2f8443b1
SHA512 0c6fc6b82e0a7048d1fc4b905e1905b301b10c37e3f0736347249e5689615b6669c2554f6c0c43fd124241109fe6513953a6d7695d4ef79cc7a2eece1854f37f
SSDEEP 96:Z9126mZn4mcJsHMpUA5BoImfbt2QrUr+QV/EtzmuCfFTvM:ZfVtmzALMe+LmuCu
TLSH
T14AA11FC0A1D56512EB4BC5B17BC28E67F037846097AF0F1FAC85E7A5A5C77E040A28EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 4f5086a166b31462043b0840c80bb83a0b0e41ccf6cd0956cb767ffbecc1bb73
MD5 fe04fd4cc329481943d57c2d3b649ede
SHA1 38d5c6940d7700f9084c0f2833d7fdda47bb26ec
SHA512 ac18e499f321c7af6ad1c26f1ccd002ffc61466cf5ba0db45a6d852ae1eff83ca6b1ead295422f21adc8b2bdc81291a9926ae8bab01a983d2faa96a48bc35109
SSDEEP 96:a9db6ovVnWmcp0nH+HMZnWVv6BUolmypgGds12SYUgXQVRBtzmuCfqFvjP:aXmhpZzv6dYQXkmuC+P
TLSH
T14BB14190B1D52111EF47C4B17BC24A73E02B4560A79F1F8FAD85E7B561D62F282A28EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 c8a33861ec38055586c4a1ddaacd249d57ba12e7e240f7040df7954a3640a8c8
MD5 f8c61b8d44b4ba1247721dc06bb79064
SHA1 89d02eaa2de6726ccf0b350fe40767207422057a
SHA512 bd280d22dd6348b21629ee979ce401404b853488662a50e45b7432708786cc926d0bea96ba5a80d4f86d74d8805982470cdfdeb05c9e9ec1ca1d3f2bb640c825
SSDEEP 384:Dt65peFrsTdlGJvegJs5jbLod5KoCUsaSpJgDif1DrZp1WeN4jIzIltv+KwKfKSK:nrls9pbj83FyvMKMeHJRlApI
TLSH
T15342ACF3C3D8862D891156F8AB157F1ECE291928531C3D27C8D9AF0FA3E2871E25564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 55KB
SHA256 4a450d50a6a6904ff6fa23750f0a98f249cdf48748d718389a8002f54af1986c
MD5 2ea766cd5c858844cd6c10dc3f5cf127
SHA1 09ca3688e86a63e1997a76c50ea18aa99f80d1b2
SHA512 3cf2a895388295f0510364293d4562744fd6153deb7dd153a0452bca382e045a75bc75eec6a017176d3ed85be8bbbeb3f360aa0c40c5c32738ed85fcc235e42d
SSDEEP 1536:6ukw275UdfprijsdAbHm+qdwxGZDKBIW9GMAe6ivOHHp2zXBDUenFXw8sMK0JpAX:A0
TLSH
T11443CEF3C3E8432ED91156F85A942D1FCE682969131C3C768AD57F0E93E2832E34665E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 10KB
SHA256 e46ac62ada674fdc9b67be8c37451b792cc9c1c5600a329dc9b618450fdc9947
MD5 5364b0b552d7534387eb639017d69062
SHA1 1a57dfdd847a517669da7816e20261c3a2827423
SHA512 e69916284378afb8846ebece92fa815a5165d3168cecabdd9541a0e8ebce5f80eb052644e44bf032519ee9e90fee5e1abc931c9ab60d54ceb9cff5d1cdbff39d
SSDEEP 192:9U8UeJeU6ncUsUxUtAUmQUmXUZUvUfUZUNsU4UIDUDnUEUrUSU/U+U2UQUzUiFUh:9L5e9chSWA3QNXaMQYgsxpDSzyZ83/L1
TLSH
T131228DA3D6FEB49B142A0CE71E04BD1929BDBC360252FCF8DA97817C7089CF72616456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 d8f83aa379a0bab9834f2255658feec7c6aecc4cc53217ed250ed1f72740f0d1
MD5 08a35e330a489ef666aa96406c963cc7
SHA1 8fbb22b81b5da14d96267a1ec0ff8c7cb786d589
SHA512 5e6ca5954319e565ae2b2bef86baa6a853f0e5554b65e6ec40e4dbce603d078bf6adc79e475835cbbd92de9c78225d6135f1c66bca24a5381689eaffe32c366f
SSDEEP 192:7R1sbaiv73pAPRp2m9vHsb+WNndC0/2e/VyIsnAUgtaJ:7R1sGubUXphwg0t8
TLSH
T1DD32842DAD20757B5CDBD22AFA627B53D3F5102279946E80EAFC893C24E75CC6227407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7c7b3c87e52ecb86bf8c080931734fe5ea26625f7af4acf22058540950bbf555
MD5 f4d9e6391244169267b77a2c34c26c58
SHA1 e26aad2ad3511237a1c4c992c6be8772ff721d51
SHA512 becfb3a24bb44b8aff88509d433fbf614437314f500ac271ee6b94fbc1b2573bb853f441258dd475e1b54016eaadcf509ce321644fc74f7c9cdb64c9172fada3
SSDEEP 192:7RpcBzsba+v7OpBPRpl3/Kq9vHsb+WNlZk7rIvt8Lsk2epVyIsnAUgraJ:7RpmzsG6KXXvhwQkesGe
TLSH
T14342952AAC2065BB5DDBD22AF9617B57D3F1202179946E80EAFC893C20E76CD7217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 fd2a8724b087020ee7f8b6113cf6ea4c337a212a5fb4a979137ca4bab5ab9ced
MD5 cb60b61f7c6e565186c34377d5218391
SHA1 6296dccfbcfc890fc6ef2a0cb963ea05d513cd82
SHA512 03729420d575873d09700b54f877ee970e32fd8553f3e1aac696198141045308d0a7b1e1b50800a9edf42b898ede460a387a77011558c1968a155ac253ce3c2f
SSDEEP 192:7RpcBzsbaFv7OpBPRpl3/Kq9vHsb+WNnk7rudYm2epVyIsnAUgraJ:7RpmzsG1KXXvhw0IYUe
TLSH
T1B042932AAD20757B5DDBD22AF9627B57E3F1202279946E80EAFC893C10E75CC7217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 71eebb800218573efeae171842dabfe9a93a15c61b54d0d93b63833470a46d40
MD5 53155c8f5268b73b9a4b746c9cdd4f3b
SHA1 dfc52211e9432f862bb103d911f4805255b77dac
SHA512 10a51258d25d9bc3d99fd5f382696627bccf8ca6e4453ea09d2eae334481f1fac2a331ae83b57451e8f6d8cbccedfe23951e612ebd8c0549eca2854d25ba1bd4
SSDEEP 192:7RpcBzsbaKv7OpBPRpl3/Kq9vHsb+WNnk7rudAuk92U2epVyIsnAUgraJ:7RpmzsGGKXXvhw0IA/22e
TLSH
T14F42942AAD20767B5DDBD22AF9227B57D3F1102279946E80E6FC893C20E75CC7217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 82561c3819e78018114d1ce12c41425a475955ec2e0c680fd8844a1cb9a2925b
MD5 2be901875b0113b1b5998eb89be1b8dc
SHA1 2a1d08f28bc969c5733ca3ffe93abea98fb7e44e
SHA512 13d7ca823883f09d8a2c89eb5b1ac73fc7cf3d2562d11abc56a8743e345b0f604252d83603f778ace3bff851b312ac4a5d9c9aa29bd5f70e6acd293f627f6ac9
SSDEEP 192:7RpcBzsbagv7OpBPRpl3/Kq9vHsb+WNnk7rudAutq8J2epVyIsnAUgraJ:7RpmzsG8KXXvhw0IAH8pe
TLSH
T1F742832AAD20757B5DDBD22AF9217B57E3F1202269D46E80E6FC893C20E75CC7217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bdd11261a21e9927f5a15e5309987f1e1f62a31bea8fa4066dd262ca3372ad37
MD5 836f293ab1e5483071308ca392520259
SHA1 560f5f405ed3e3771b3bf8fc0eef2ad0d7b9f8e9
SHA512 a403d4e00d3a16a57f01b02e66eb00f48ddaa72d9751d88409953596cd81eefbf6ee9b0b16d838dec16b55447eb6ef8a7cc2bb7a2a6403b24063d791f33ea403
SSDEEP 192:7RpcBzsbaHv7OpBPRpl3/Kq9vHsb+WNnk7rudAuuFWC2epVyIsnAUgraJ:7RpmzsGPKXXvhw0IAtWYe
TLSH
T18F42842AAD20767B5DDBD22AF9627B57D3F1102279946E80E6FCC93C10E75CC6217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9d89f527467b6e72ff9568df2d456ba0246a55cf2d551bc73ab8dbabfa5dddb8
MD5 272ac218cd83fb9353acf184ed48fb54
SHA1 3f8b865597cc72845b0a2faebe0faec9f2c351d1
SHA512 6eaf26e68ea4b1c0e2afcfafa65e69a8a4404073fcb8e59b3cb8222a4de2f7145cf2bcf634ae4c9e883ec4a70e006636c6f44688b17f97b54c380260eaa01e8d
SSDEEP 192:7RpcBzsbaIv7OpBPRpl3/Kq9vHsb+WNnk7rudAufsuD2epVyIsnAUgraJ:7RpmzsGUKXXvhw0IABuve
TLSH
T1D442942AAD20757B5DDBD22AF9227B57D3F1202279946E80EAFC893D20E75CC7217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5757fe81ddab050be17065c878f42aef6978ebfe40df9c8fc459b8b1ccf245ab
MD5 f68fea88b160aea64a2b17a7669a5a10
SHA1 dd764d461460bc5f9affbf2817d091c58627ef00
SHA512 3266f58b9ce0b122d6a210c3d615b49f425b8b93c488527f3915cd4e8721d1faa0b43ca106582c5503edc8ac3394476aed641d18bbc3ae1dd363bc4b84fbac53
SSDEEP 192:7RpcBzsbaRv7OpBPRpl3/Kq9vHsb+WNnk7rudAufsuD2epVyIsnAUgraJ:7RpmzsGBKXXvhw0IABuve
TLSH
T1B542942AAD20757B5CDBD22AF9227B57D3F1202279946E80EAFC893D20E75CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9586e9b8536fb0052cba64cad5eddd8e17479eda280d9b52e783f89cb9ecd84c
MD5 0ea2bae0af3ecaf140508dd00cd7b84c
SHA1 369b1df7ba8cf343669b271216991369a9c06697
SHA512 b758b89264a3818cf2e6e74ee6b045bca9ba83ea08d1ae988781bd31b05e3c022236f8b0eea7fbf11c15a8adb610e871da8646842c08649fcc9076ac9d10d597
SSDEEP 192:7RpcBzsbaRv7OpBPRpl3/Kq9vHsb+WNnk7rudAutq8J2epVyIsnAUgraJ:7RpmzsGBKXXvhw0IAH8pe
TLSH
T1B742732AAD20757B5DDBD22AF9217B57E3F1202269D46E80E6FC893C20E75CD7217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ec5b77c2c0110210ac77daaa27844d15a9d57a89051a8393e68d76350a86a488
MD5 fb8b2c3e828862e630509be8700e3297
SHA1 e0beb1de61ac7fff7c9d9a4808e728d1291484d3
SHA512 c8b078768d813f32ea86b682ce3e7c99d9387e116d02bd990d6d56e6ef1f2a09cd5f202fe91149e6b15c24c160997911155bd07272a8d456de4029a79f43a95f
SSDEEP 192:7RpcBhsba+v7OpBPRpl3q5q9vHsb+WNlZk7rIvt8Lsk2ep8yIsnAUgraJ:7RpmhsG6KXXjhwQkesJe
TLSH
T17842A52ABC20757B5DDBD22AF9617B57D3F1102269946E80EAFCC93C20E76CD6217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 555095f294d7e0bc61b1cec534acafdb95b26711b2762b23d937843888356202
MD5 1e9c8f2d4c0cebad2c2398a685346b5f
SHA1 14aa3c1409633d90cade83bb027553da6e83222b
SHA512 4950fad681575e74b2b7ad2a049973563a7df90e8b2bfe902eaaa933576f3e16116b1092b2053fc8737d4c531a9e364880df791fb58181e94d4a5d0b6e854b87
SSDEEP 192:7RpcBzsbaMv7OpBPRpl3/Kq9vHsb+WNnk7rudAuuFWC2epVyIsnAUgraJ:7RpmzsGYKXXvhw0IAtWYe
TLSH
T1D642842AAD20767B5DDBD22AF9627B57D3F1202279946E80E6FCC93C10E75CC6217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0e447601d324e91a9803911a3c11facca10f282a86806ae4e23292ccbc218a2b
MD5 245f26e3665cded0e9ad797383613615
SHA1 dd02dd6a2e3818f0f63edd32fc42050b625699ef
SHA512 c310ebb304f4add2cec891d59690550523d66c47990c0c527e062f8b2a79cc300e371c25865b4a9392cd4d1e951fe234ce35fe5b56ee14c48d0ae0018d460613
SSDEEP 192:7RpcBzsba/v7OpBPRpl3/Kq9vHsb+WNnk7rudAui5EG2epVyIsnAUgraJ:7RpmzsGXKXXvhw0IANE0e
TLSH
T12A42842AAD2075BB5DDBD22AF9617B57E3F1202279946E80EAFC893C10E75CC7217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 1b4dccf45efcb8cb0933dd5f55598d4d1f013c4724f4ac1b412a9649d85c3418
MD5 bc6b2c3c2912a66998978c146503da29
SHA1 265e3e5d2b06333a397f63e4bde702d73a00f9ed
SHA512 531992c27f78fbb3d690d67f26861f3b489fa48aed6478d150ea42dae2de9515656238ea3515b38e1948f99cdf6e6dfdc0bbcfcc6caa070fed5381c3e1dd5b35
SSDEEP 192:7RpcBzsbamv7OpAPRp23/39vHsb+WNnk7r8XQoeJp2e9VyIsnAUgraJ:7RpmzsGSKUXihw0Aeze
TLSH
T17E428429AD20757B5DDBD22AFA627B57E3F1202279946E80E6FC893C20E75CC7217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 eff4472df129bc4e2b803cc39a1ba520374d3b607d22cd6393104a3be124b9c2
MD5 8607790a422ecb522e4c0dbd3b269b34
SHA1 e5c7ec8f685c74ebdd01a67f0e763209d8676d75
SHA512 27cdf461b3cdb01cf1d4a2f802f426248ba3f5fe8ed4c31dd046a71cdb0f38b25a10db78f318bacc40577b31c54a1cd046ec06e134194cc0934ab8961d501a55
SSDEEP 384:ftjDu7KxkXqKf/pUZNCgVLH2HfgslHEXODDK+ErU3gbHGVQoiTCGY:ftDu7KxkXqKf/pUZNCgVLH2HfgsdWOHH
TLSH
T120521927A88C9A7F0FD4D98DDC176F4FACF501576568486852FB9C0803A6BCA114E2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

392a55f164c516bb_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\392a55f164c516bb_0
Size 63KB
SHA256 e708259509e34bc86cd404b0d00c25f99e19c3ae1212215bcc3f8937ebda4e73
MD5 882d3d2af38564b87d5165248f966045
SHA1 a9989ac55f17c324808770a6650a44a275f8e355
SHA512 6f8ae4b8fa12786503b24b5a046c842000af85321a9d927e10d8e9b5bfbea9cfac932f2a43a0e7d27d44ecf9706395b75cfd0ea1fe652f4aa322e5c15d996bde
SSDEEP 1536:HiF3WOjiEu5XhviJCtdyOx1yS8ot8/2NkYR3i6CzZ:HiF3Pin5hVd51BCz
TLSH
T138536CD97721B0B7837B60F1505F1607B13AE5A7B008C4E4B198ECE15E54A6642BBFBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 e72c4f6b047d30067dfa6e391a6cb86755feab5589d850575a56706f55c6df1f
MD5 5167266b06c08b4a44cf9287b69cbef6
SHA1 fb397dcca544c8d103bcb2cb2aea63bf07df3919
SHA512 32f241ca6e4ce19b73ef3a411e11a8fdcc8f2d038286a638532f40ecbeb6cf7ab2c9a8316b61fc66d9c23997ea5333cefe26b6d2606e8f186b41e31919e33fe5
TLSH
T155B022200008A002EAC2C3328BC20CC0B3202CC833C3000B82F0C03C8C82333C200FC3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 18e80b8659b6e84fca225a291aa243a2cd642ac2411ebaef145791074349eb1f
MD5 e53b6924e0c837e115b4aaa898fe334c
SHA1 b9beb0bc82acf05c8f74e91e3b0045e3724e9560
SHA512 4603f78cf3b563fb27dc573e204ee60553eda6f13a4bdf135c4a90f461501c5dbd5b1c91050b78487f595a819cda058e6f81dd497adcb87cb9f456bf5a1fca12
TLSH
T1A6B0125200489735C80987B18BD018C03354148043470B0711C0C15C4C021728804362
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 144B
SHA256 45b0022be6caf3c9df3c97ccb09363406ca21eb101504a3036d87d6e2aed398f
MD5 924316edf648eff99cdb42eac3634acf
SHA1 aa112ac5706476507d85cd5c340c7d978ecd8810
SHA512 29a05250f96bc2015fb7b63f0703928371aa4327cd2fccb9fc75543d27346510a301923645cdb34a9f7dfd5144466c9a1f12e3b828a1cfce2b8eeb9bc42a2c75
TLSH
T125C012D01019665DC51692B947D200D037445C916355550F31D0C2386C00032D24335E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 234B
SHA256 1031a20a3bfa29c3df205c32063c4eaeecd4c845f40f9d66c7636ba1c91e9876
MD5 77879b51e8105bbba426c00bfe728895
SHA1 418cc0c35cee8ac11d9a7d72126c8df2e09b437f
SHA512 53520b28a1f90f7614c0455cf3642543728882600a7488d08530ec0efeb6cae2c93b06b8c6c39f54beaabca1718bff3bfc2e104fdd1060a40a8224ba44c58667
TLSH
T132D0A7D71771985B4330D694202C205DD0239D599C89DCA8B90C7263A07D633C912679
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 150B
SHA256 770feef8d44947261cd07da2ccd376adf5e5617fb5aa102d695575baa21c8835
MD5 774101130e60341411876c4e112664cc
SHA1 9613947b97d0212674bd856b9dc8df122b9450fb
SHA512 547725a82292fb36ba99c8d575e511da1c2b664434a7b3073436a85580488f6979a218e2436ac9051a25ba99cba6b0be0b576e4268689f0b8a79deaaf77a40d8
TLSH
T17AC04CE31511459F4770EAD8251C751DE517C2884CC5CCE8A40C5212617D9278411669
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a4e50.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5a4e50.TMP
Size 157B
SHA256 0763d4e9213e6e268476c9fe1e40dc41c648f0654f721d49144ed6afe5155ea9
MD5 baf764f50cad6aca3beae6114b246fcc
SHA1 5a04ffd68d24f2932d0b5d894920bda1053b34fd
SHA512 915b2b507e28fbb56145b65e8691c3300f65f9232f4fdf132482ca09833c75a170eb8bbf244b884207b83a08729bb4e4b49e697b6947a58bb572fbd8c65511e9
TLSH
T149C08CE31520059F4770A6D4202D310DE027CD884CC1CCECA40C321271389238400638
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 259KB
SHA256 559ec794ab0a0a9e0c31862cdb8b8086c015dc34c2d3d3d6188aa2ebfca41b00
MD5 f595a17a8e0af7c95f341c571100bd55
SHA1 5083b095c34beff5ae4ba93a4a09a0b65fa35f99
SHA512 87e271a307689ff31a164f6795cf28f300f922bf1cf6d36c9561a29f909420114bb0547ee43e2a361730dc76534ca1982c6711d12cad9d025dbd9ff21ff5250b
SSDEEP 6144:j32gTyaH+TaYER5E+qXsBDo9FYtumiXb+hFD+7t56OD9ZfSAppr2:j3PyaH+TjERM8VftcryFSXD9ZfS4c
TLSH
T1CF44126765A9F87F88BC6252A0A76700CED0ACFC85DD771D055A0F8EA0BE50C06E7637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 ab1b627218667af1683bdeb5bb198a7373cd63aab8ea5d8e16a236c010b55ecd
MD5 1a209587b1379870d187d1af5ffd57c9
SHA1 b1d1b995d4c3ae24d1b36b40833690d5cb906a06
SHA512 442a32e685ff6c514d30336389b4e10433e951138b1daec54bd792409b981983804894be5f49be7e5a4cb04481933560f1d86249d0a1c46aeeb34ca1963f3e63
SSDEEP 6144:1Y2gTyaH+TaYER5E+qXsBDo9FYtumiXb+hFD+7t56OD9ZfSAppr2:GPyaH+TjERM8VftcryFSXD9ZfS4c
TLSH
T1954412776569E8BF88BC6342B0976700CEE0A8FD88DD771D49590F8AA0BD50C06E7637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 e096d79e353beb8074f0ed48b9b76e4589978cfd42c1c3f2b4b4fc75decebd85
MD5 32c9a9afac6754bd213c89108956b741
SHA1 3b9b052bd69c48288c1ee732e72f7f91d8826169
SHA512 7126b482cd9b8453dbfdc924411c2c8f1d963b4a3bbe3492ae349ebdd438fc03339ee50f633e5bd1f6764b8c815869970ef6fa9daecefc1c299ccbb7e5cec155
SSDEEP 6144:wW2gTyaH+TaYER5E+qXsBDo9FYtumiXb+hFD+7t56OD9ZfSAppr2:XPyaH+TjERM8VftcryFSXD9ZfS4c
TLSH
T16A4412776569E8BF88BC6342B0976700CEE0A8FD88DD771D45590F8AA0BD50C06E7637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 04028d3a9fe20f65aa6952a2c2f70792622ae550cce3570970aa936a2659629a
MD5 545ad2fa8488352e58ba99cf7c021374
SHA1 c8f24c274b63b71c32eec48a9f0db2562a2e0516
SHA512 b52f6dbf4ba43f6c994f08b662556af228da4e59a27ddd01726db7d9ca62cd6a0859e913b4a8331e683f47a43ba11c6117e2c7bc6ff5ced45bfba0d8f0b24727
SSDEEP 6144:UW2gTyaH+TaYER5E+qXsBDo9FYtumiXb+hFD+7t56OD9ZfSAppr2:rPyaH+TjERM8VftcryFSXD9ZfS4c
TLSH
T1734412776569E8BF88BC6342B0976700CEE0A8FD88DD771D49590F8AA0BD50C06E7637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 faf9e397972a41a862fbba435e6e28a6eee0a17ef55e9a0839dfe42d9354f2a5
MD5 db58c365b3203906ccaaabc72d36aa9a
SHA1 9735b055dc8b42216b396e1c5118d8a5707674ff
SHA512 2d9fcec125663ad3b281e43a791b97d5a06fed491b86777540f9433bc715a92b06d9bb85eb5105ed67be8ecc203dfa09270bd0ac0de5218cf29e17d96f4731c3
SSDEEP 6144:U02gTyaH+TaYER5E+qXsBDo9FYtumiXb+hFD+7t56OD9ZfSAppr2:3PyaH+TjERM8VftcryFSXD9ZfS4c
TLSH
T1FB44127765A9E8BF88BC6242B1976700CEE0E8FD88DD771D45190F8AA0BD50C06E7637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 19732f3116c452718e40eb2df710ae33dfef5ff831749e8fea5553433b531606
MD5 583dad2a491c96aa3a4ea372982d945f
SHA1 1835eb1ef7583764d4a2b395eed8aaeebe02bf03
SHA512 f54e380728bb911d89396b8b896639f1fba9d598d0a321324252091c85ee5aa4a728a1771de2a311d7e9eddaab0b010d64d10cec6080758d8814f716343df24a
SSDEEP 6144:VW2gTyaH+TaYER5E+qXsBDo9FYtumiXb+hFD+7t56OD9ZfSAppr2:4PyaH+TjERM8VftcryFSXD9ZfS4c
TLSH
T1694412776569E8BF88BC6342B0976700CEE0A8FD88DD771D49590F8AA0BD50C06E7637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c02af0b53b7fa79987f046aeee8ae8328d6e30eec401b85fb659fff3686e22d9
MD5 60b4515826d1c9f4b017a7d286115708
SHA1 91a906bd437f5276b450fa960823a1d8884f5b5c
SHA512 49ec0ba508a1c4d76e366cceb731579d594d5a8727c9089704a8f0f492164a13db6579377d36e91cd39359f1ee2ac85e2aa9a737f1640db34a67d8a1c0d408df
TLSH
T176D080B49D685AE4D0A5307D1335454173DD97529603210D65D10A150D743D31551CE5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2db06989d036b149c47a875b7fc911ba4f9ebae506301b433b5bd68a17d4dbce
MD5 5ffe9224739f52f7aef011455a466afd
SHA1 e5de9b7e44a873b30213d6a65ef16d0e1d490137
SHA512 2b0397a8920678a89bdedae139711818c069ffe5f1e2a6931b78c13045fb63d49bc468cc21459a17d00104411a896d4055af00ab82e34205b286721861fa8b81
TLSH
T19CD080F4F7448A64E59664B93235465973FAD7109907252D74D217441C447631254454
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 69c2152732c9a80207a5d1ecc2f2964b59d5273db700087cd35b2e372a4d4126
MD5 777d9767bdfc05046830cfc1a86b7ef9
SHA1 276fdc69a07235259ed677cbcbfacaead0071d4d
SHA512 98b66dea492d77afcfb0a5d4706ff14f5c1c5dfe62f522dd078afd0c1d1bd6c3d3a1d1e85672ee28363c65b2af586e7b8ad2e80ba17acc114bce2f8bb97ca614
TLSH
T137E02BA6C921EC3B04FD0B1850A54E46EA5513073B80855B3A3D52084FB1A3B498981C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 3b0f1e80f222b6bf3d91b08b44a6ca0d6dc20ce99a8cf3c9ec5a60547080488b
MD5 cd66f76b976aaaa4deef1fa6de811a93
SHA1 0fef1a942b9388f90c45c35342bb678a4c413521
SHA512 10a1ba18137df074fc1bbafbd4344544eb87567fd86cbbc79956eb6a26426410555d9f02e2d2def47b342ca4c83b3b56b41ed50f2d1ab58d7a751c13db2d1787
SSDEEP 768:DG9zrz8/i5oXXFdmMiIFWBy7RNTuek9zSk:i9zrz8UWdmfBy7RNSzSk
TLSH
T19B13903D36404E1DFAE2113DD80B6A36E376D8A8C1C7464F367AFB227256F5A5C5E041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 f2684389351661a5dc7ec7ac7e2933d673e1277794f58f3108f0dea58dd3c7de
MD5 9d01d79f99e5c8a1eca701cac2fd00cc
SHA1 bdbdf2692351b8fd834b7c94b9b6fe83d843d8de
SHA512 7070a05c0a4bc9135cef10a39728e4d4698191dc6d3205499bcd687e58061a44277f377f2c958603a51663a1b45e143ac1c043c8dac0fa49dff70532c21e704e
SSDEEP 1536:da0mTL/AUL/fXs9blg+qFPlSUmG+L/wL/LL/pgP5ssSc5nWZjA3wckkWxq1Nbpn4:d/mTL/hL/ujL/wL/LL/O5+qDbVblmv
TLSH
T17D4481F71951A01BCBA802F9D2133E3ED177415D2CE1E8E9E5784CD62825F32B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 8260559f596db91c3f926a0c3193a3bfc6b8cefd66801b461020a9ab3afefff3
MD5 3ce8a48728ed0f9c1f48165e7aada44d
SHA1 b9fef59854d8dfaf587e149d796179a937a4e0c3
SHA512 aeb6a4f903cea172816007a5ca3f831bde28fd606e6af2b9a7900c36100760cd4ff53c8c8c43ac85bfd6b8a1c27e0f3c8987e7fb8fcb5a246bb21babae35fa2e
SSDEEP 6144:C9tyW6vyiU5QM2yuPylYMZAtm5aqhsZc+:vFU592yAylrAyalZ
TLSH
T1612528EEC7682C82DF6B8770B0E0D9077E712182B65DD0D3A944C5D897D2B8576E82BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 e1f8a416a59e7cca517ceae20a59650eb6a9ceac63dddfab4798926255fe87cc
MD5 98e8468375295d32208e413dfa601156
SHA1 2e6dd83b94ce2a08409f4bc5f8485ba1b7f88dd6
SHA512 88a5631b2818a197a9793d4f6cfee2f578e20158417c7145d7a4c488ecaa28d618bd52e89e3fe6737323c3d2363563d13f2095b056214efff44d79ba3ed404e0
SSDEEP 24576:HNW6MwCYmUuOgVTdKW+jT1GTOAhNmkxkMfy1OJW/UkEI8pdu:tWVw7mUiVTdMjJKHNbxbfKgIK
TLSH
T110865CEDCA6858C3CD639930B4F0ED477C7413C3F965C1D68898C58402ABBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d173fdd617b9bbc182ce3dc42610b4cbd2a0b82e43e94c6cf1e82278fbfaee66
MD5 4e910f054508c1b375ff0b5ad415e9a9
SHA1 701d75d3ecd1acd4e58e34873dc45dd4433cb318
SHA512 db6e7db622af7ed22273000402812692c387750c02d3db80eb4820ffc84a6e86e7f1c74fb7a5355112744dfed7a1220462702190a96f1f67861504b19b170fdd
TLSH
T13B5189C881E45A2CFB19D837E37A2D86DA5859404497268E32A7FB717C0B9C2D87C0DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59048a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59048a.TMP
Size 3KB
SHA256 bdd8fecc5aaaec50866f621eb7117fa003ee28000ec5edcc75bff0a8a8a1245d
MD5 75799e851fd796e13a9d1f11067563b5
SHA1 d898ae8d208b69c43c19ad95636faffe8b9ccbca
SHA512 d3fe437d4917300a681bdf454eef7e3f262c577d95e66ba7805850e39994bdcaa8e16639ca83f87793707c76bf8426ea9784c8c7296c6f24fe8836db499e91e7
TLSH
T16B613D8181D2446DF7A5C973D2F91E8B3E35994098932D4221BBFF758C0BF85E16C058
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 2245946b68b5ac000b78e92327c5cf70d0f741e8ca61e9bf9153c8101bb87cb1
MD5 51c17b30c658dfd07eebca8b4e7ae584
SHA1 2205d7eec34d3690703aee83390634f6299a0693
SHA512 65565b7412618e70b037582f1e9f1e63cbba35190b7be4961204ba91d9afad75e38a97641cacac585dc530b9129741f618c4d3b527885feac9f025d8500a8e77
TLSH
T19AE0D89464C7D51D59D0788A91246F18D2817956D7897E032744C8C07602002F397A87
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 570B
SHA256 99def1b557f19f04c1affc6f247d0451f33fc10ec42e73792223c3215ac98be6
MD5 d4ba0ae0bb0b9faff3da6f35fdbc3c8a
SHA1 fb3e9dec7f35a9b1d94e54a5659dd0de484055e7
SHA512 86fd07c34b9abd4c52ba19eae291936f92bc6d38a75c021edc1dedbc15617669876180cd99f959c62476d82ec6bb9f5fe4c6cb4d82cb037efb76d99a4d3d9c51
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 8fbe2ac68e2b28ccda3b438a48a0005d3899082328ea297a1150a60932214242
MD5 203fac97821c8eb62946764f408636c5
SHA1 bb33f536f928fff45c959bdfffd899e8c227526a
SHA512 d23550073eaefbf14d61d2f0f3e20a086d1cb917e599c3a4b7f59206a4df389ac5c15c55c9df9085ff0fc679d52cb5c268bae3492e4afba475428527408e1d25
TLSH
T17EE0264805CBF36D955D789382AC6708CBD23512B38C3A022BCACC80F242245B3EB3C2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 16KB
SHA256 f10d0e5db66cc6aa03fa676dffcd590291e5a895be24e20c6258b49598b19af1
MD5 68d053d121bc77a3224686e5f06bc796
SHA1 8eadfe72ce7fcc83ccdb3f2515fe17f6acba081f
SHA512 7d2f4733f5bb510d2fe891ff2271baff27a8e6425bff16947b01f3cb2285e797ad77b908213122265c1403864143f6f58dbf1fd97ec990a9e369f984cc86cd95
SSDEEP 192:a5QzbJwRSyQVEEtXNJnrHotnsnIh7OZGQ:bJwRrK91mnwIh7OZL
TLSH
T1D77284B7180CD457CAC528D6C6B3ED4DD3438E3BCE96FDAAD5A885AF06AC0343676142
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 b7103ca35f0edb497ce840a3a63e525ae89cada89a135e07dbc817807b0807e3
MD5 54fe9c572788f013f87a0345392b5126
SHA1 be449ccf4561a1efab56ea2f6ddad2ecdba8e6ba
SHA512 6c878df1d872fbd9bb5cffe27862b52b494d7489a2a98dd7674ccff1d6e7a174ad6317a22d84ab1213b3ceb291d6f9298034ce25c21052ae5a955bc189042b5c
TLSH
T11FE0DF6086DFE12E6286206B82297B28D3B13616E78C3B025B85D985B486404E3E62C2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 28KB
SHA256 0361a73e9a8e397b55b032e02829f474f77f109b7a9fbbc93bff4c48e1af1021
MD5 4f0cab3152ced009aaeab42cbdf29b8c
SHA1 c8fb1a0789a25038144474994a28cfc5d1818d0d
SHA512 be5ea43472afb0c5e1483db2397e149291799b347d03364d84ff9b69e08275e0830fb12550dbab8de6c4b821c76b451e40b3dcce72cddfb8c20639cffb8760f6
SSDEEP 96:LeMatUaA5IFvJgiABiBwpoJei6V3qgPsT1gqWgMHUzmgbf1tTh8a8GINsP5YMxce:LLaSaEITuvdK39+cL6OJj1kV0dx
TLSH
T18DD207EFEF103522C6DB16327CEA8CA56876705BA753D2BA09FC91210D306C2783625F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 58bd33449cca047c36dce9f55ae0657aff617abd82be7f4150638bb67511f135
MD5 523ea6f3dc57732b253fe445536e5d0f
SHA1 74c5867f242255b4c4e9f43ca9c2b0afffdb9b5c
SHA512 58146e2429ab68d84afe3dcacc0d0729ca84d8eb5a7773a111edbfcc4d26bd8a60868974d892b525f1e5b49f71472ab0267957db65ef0a357cd0e3519ac47d5b
SSDEEP 48:YALlNQ/OC8RCDtkCD8CDmTgyYCsPzBCKCnNs1CwCYfC2CYhC+sFUCLst/ClCbs78:D8OTEkZhgzB5GytHfrj/HGblGwJwfl
TLSH
T18281CDF3C3E5822ECA1195F0AA147F1BCE1D0952436C3D4A84E4AF5BA3F24B1E151B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1f3759a615fb30ac5b6f56aec3f4cc9da436e8866f3165995d2f92af7678eeca
MD5 0fd7b22b5e4f6002e91ae1ab5877566e
SHA1 6895782c2c2fc03267c3a491e0d74b9f70c84955
SHA512 2926d9cd2f919438394a25ac09f239938c731d2d133c9051bf99c00025c57d61c742133ce0710e9172038619bfb1550cd3f309e4673f982598565f0ba6fca38f
TLSH
T15A51AAF3C3A6866EDA1192F09E14AF1BCE1C0442436C3D1A85D4AF5B93F2471E112B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1012B
SHA256 557f9426748bfc24a1ff4db802fd9abd90778bb286dc89202f2f66dd7a6f892f
MD5 e03d05336ade98993bf6f292696ef99f
SHA1 94c4823181b30892b6754da5e1d97d4059dab9dd
SHA512 f4ee63cc2e06f5db70249fb6bdfb39876294da4cda1fed52dc5878b8ef08c4892b3f8de55c10ab4688541f9eee151e70533e5b6fd72af5bfe45a574adfdb04b1
TLSH
T14B117FA3C1BFB43B246818FB1E447D055A7AF8360342A5F0D66F527DB0428F36B06026
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ae3366419d1e75ef4ac4e3827dfffcaa58f42f86abb10c1981ff4d5a1a9858bd
MD5 4597a5e7c6f16ff63b160cf4f9623903
SHA1 8d07dae45bfe6445fddfa07fe7e653e776448673
SHA512 c79a8d58f85968e182815eaefd9ac04bccf4988532177893f8266055a3b4c2ade6ea561cd9145fa8adb24d5cdeb14ed6d6cca4243338b80275cdf2227d23681d
SSDEEP 192:sxZXRfMOX/fbswMpdpsHHW6+WN5hDx/YRPK/LIgrJ:sxZXmOX/fbswUiHb5X/mA9
TLSH
T1CB22B9526F24A57B8CC7E20DBA25BF53D6F9503295D41E98A6FC861C04E7ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 abd3fbc26766dcfc47532a4f1e57c459da7c0c0218d2b79aea0296aab30413bc
MD5 511c48a24800ac36ae6994e2707bd3c4
SHA1 3008269a08190b0e2f0e1d124850c42cf191d236
SHA512 1e6fb81e28ec4d8615c40822ead8cae940a251ff144a790d1755d81141f34bc712ced75598f4e92e28d6fc5940e82f4e7fa4ea0cf79fe788db14fb77961cb505
SSDEEP 192:sxZqRGWX/fbsClWpVaEtvbUGvddpmYPHHdhi6+WNSTGNqe/16hDx/YRvlxiFIgbd:sxZqrX/fbsUWvaMYm/HdNNd6X/mdw5
TLSH
T1B652F9066A24583F4CD7D269FA15BF63E6F9102296D45E98A6FCCA1C04F77DE2203C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5ade53a1292677ec35a0453551992d10afe1b0077d3d78de115ab55aaea38816
MD5 ccb52834f333cf4b651a76fd59d3d48c
SHA1 0a330d2cb63d0436178f4c447c83cd7b7e186661
SHA512 f3838754ccee52a8808cb05bf42b69124aadf78d3ef1be404e0180cac03a5b6efd45d35592d9df1d580a106ed49c3ccc4aabe17f917c8b6fe549832ca3070fb1
SSDEEP 192:sxZqRfMOX/fbsCdcbbU/VdpmuHHW6+WNBe/16hDx/YRPp/LIg5LJ:sxZqmOX/fbss7hnHbe6X/mJz
TLSH
T13442F7026F24693B8CD7D259BA15BF53E6F9103295D45E9CA6FCC61C04E7ACE2203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ee8cee13bbf16320a6c8a100f2041093a82654aff84182836cde224785e9a12c
MD5 c25556b6aa080bb493104eab41d924c6
SHA1 13da2a72cff068abee5d891dcdceef39c6591b61
SHA512 1d07f5e78d7495c1af3a9c337b245b58610b8316bebcc1e6b4395333b038b02cfc3ee0293a72d20b0c5e6b889200fdb63d163675287ddf349c61739f4c60baa0
SSDEEP 192:sxZqRGkX/fbsCiWpVo//+PtvbUGvddpmYPHHdhi6+WNSTGNqe/16hDx/YRv23SLu:sxZqjX/fbsvWvoH+1Ym/HdNNd6X/mu0u
TLSH
T13162E8066924593F4CD7D259FA15BF63E6F9102395D44E98A6FCCA1C04E7BDE2203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c8c353c1a1d19b730551b21765b573f31a9acc76e419e167b529e6356ff70bdd
MD5 a63eddce6f6354b88c1f00a61cf8c80c
SHA1 6143f8003c5df1cb864cf9c4f321c887fb69f348
SHA512 14134470df2e5ce3bfd5c25a448efd84bcd48d3c7a68ea393f0282d9b8a2a7e7b720e2f121276e198a7f65de10336ccbe5dac46f76dc44d9ecba5cb3649c76dc
SSDEEP 192:sxZqRGkX/fbsCiWpVt//+PtvbUGvddpmYPHHdhi6+WNSTGNqe/16hDx/YRvlxSLg:sxZqjX/fbsvWvtH+1Ym/HdNNd6X/mdeg
TLSH
T17362D9066A24593F4CD7D269FA15BF63E6F91022D5D44E98A6FCCA1C04E7BDE2203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 976a96f92828e2ab98870895c4a5e29c2b531368fe9f616bf26ff2dcc736246a
MD5 e322e5606febe72c5d9f5bd816005d05
SHA1 c623a184adf5897ad990b081cbfd949457736ab0
SHA512 d0ff659c6b1c0ea1a2a340a93185a36bc37e7d6662022d5c181a13b880ff7dfdd13555d384c0a34fc575c8d825cb40eb9c4638334496c5199ab6b84cc08c6360
SSDEEP 768:UeK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3zroj+oH:UeK9uzYWvcQWsu1ja0HL7Q3Aj+oH
TLSH
T110C2F93F640CCB7E4FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1562abee-9fd6-4021-91f0-17508ca33825\index-dir\the-real-index
Size 96B
SHA256 d14db597cda038af3731e8f4a1c1d3cfb4bbb4b012b9e1b03f924065e2ae02f7
MD5 c4096a99ef2322dcf1a48851bc0c382a
SHA1 13ab046a0d47df064dc76055ec595e35ca31b541
SHA512 1d794561b95457118f080126705098043278d667df73745ecf2b5ea9498bfffbc5774f13c91f18caf3d6b1152770c2b65394c85225f95d95e8fc6dbce9f17e2c
TLSH
T120B0245D3740C04DF001137444C30400F1404C400145331F35D470FFF4343D0CD01044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59048a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1562abee-9fd6-4021-91f0-17508ca33825\index-dir\the-real-index~RFe59048a.TMP
Size 48B
SHA256 ebbdaa788f896b1c1eca661fe7b54e953d94f9ef21d111a49d0d746dfb5680c0
MD5 6ec55b668b951f3d9e45ff298cdbe626
SHA1 5eeaddce6dec5fced56ee53adb4a39ea7af21c0c
SHA512 0f11374e67057adbc85ae8b5b4504b91dc71d1a1bd4d1628af6a16939a777b8282a46397b0448f1a7e82ad699d89e5d0133f47832f5173680347526e7e2a383e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
Size 72B
SHA256 e902c83cfdcbc9c2b68b620aaa9d54da6bdbefc7736fb8fe60d4c15101ce22e7
MD5 5ef86deef39c19f0edb38c4e654dc294
SHA1 16b12c89cba4e02daec53095ebc97d1e5f660887
SHA512 b2cb2783e91a4add5bd4677bde783550127a09025f90d9450156a16721830d7e798592d10cfdd4de028fd9940a2cf96fb555af3b34ea0980fd11809161140eee
TLSH
T1C5A0021403D41068C42615BA15FA01425302C9140615134B9098A355DDA14D58D8571E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
Size 72B
SHA256 60740adb1fce7fcbfe7e5bc1f98204511ca7e297920e8eb6db27fe2e2fb31bcb
MD5 a3cec472cc8aabadae16c62f16959747
SHA1 bedbe7f8075dc75c9de6c5484bd50195c9a6327b
SHA512 caddcbe775904fe2ba2bf23b6ad64259b0801e293bc4494d6a1a45fba599bb4e9bf90bc07e61729f6a900fada57ab75cc8f5b79bfdb21bc99318dc3333654303
TLSH
T151A0021C439C2005F41212F5555242591304C91122411B0F64A24354CC50C824DC600E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\568da5b2-7611-4c39-a336-da0d40f37a75\index-dir\the-real-index
Size 72B
SHA256 279c936e35c3feab3308dd87f26b9a7bf30054105cfcade06254bdf92b736fad
MD5 c7471c6d8cf2f5924214235bd4fa906b
SHA1 a7deeccfb70ce18fef69c67bc9203aed39d807ca
SHA512 f23fecb2259bef5de4201af6ad03849638b9297936cba73428b4d3a6b3187d8543d005ec67cdc0bd3b7622d74aa9f2357fa19a410862ec44fc4aaf7ef501bc72
TLSH
T1D7A0022032561045D91009B09D428259738BDD118802474F71B096A59C511FECA11691
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9d957291-41be-45b7-812f-cfad2bd00ac8\index-dir\the-real-index
Size 72B
SHA256 5b1917cbdbf17f5707cbd2593869311fd10db5a7caa31aaf559b12961a021220
MD5 6d422b9faca6b66422681c51d480cc63
SHA1 314a7fc4f9764b1be4d916b07120e3304e94594a
SHA512 cf55c785be7a3571cb2295897f45054059caa28140e7f34e3fefc54bcc801e6b8a837af8552c15d734c1ace5d98b73b7722b4077d16aa1fc8d7dc8cff2232b40
TLSH
T1FBA002E687C0704CC4B5417119139245620D4A1A0115AA2DB6AAE167ECDC44455759D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59048a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9d957291-41be-45b7-812f-cfad2bd00ac8\index-dir\the-real-index~RFe59048a.TMP
Size 48B
SHA256 14efafe0e4fd3ca9d3c7f354d71e7191a26858f652292dbc5a822988495d5535
MD5 936bda456d5cb6fb5de275726079307e
SHA1 96a142c205737f87c3c0ba7e6a547ceba0dd9b4f
SHA512 bb0db4a621d77ef203850a814ef7505364dbef4b0c1d0fd5bd56b6d66e45b5aa4a1eb9d08925a86824fc4b12849528eef5c278ba17b490a08be4b44cee2f66ec
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index
Size 3KB
SHA256 24acd078131fb1994254900418f526ad5ccb104e1756d97ba4fbf16c24403435
MD5 ae7f7527730339e69633f872e7d3840e
SHA1 fd712ac3eabcd56b5e06e0562cacfe36b4aa3533
SHA512 3143c1026a38a38bb1b565fc89c08c6ef094ddda0b567874e3f3e93a02bbfdae116dd23ebc22a2e81561ad5cededa0527b28d1e550f6cd81703abf8417eaeea9
TLSH
T18C51A54E4D035F6ADDA8627124B518D1233829CC13A85E1BA5FD813DF8C3B686DD9BAC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index
Size 1KB
SHA256 328a58190a725aba449a79e37e0d35a4f08521842b966bbb7335be6a2a017d53
MD5 304b4f0a75b597006c3bfe2b9f43b2b1
SHA1 39845a48aec4e27b2e047abcca21686ce464e07f
SHA512 c0b1cfd32ceced4f5c55aafb22c9d040412a30f1b5328dcf850bd0abe6fc3fe27bf12f54ef6ffcd2c4234aec391d403a5b97622e18ba9e755ffdafd6d5a4f25e
TLSH
T14B2165825D525F57FD90233810791896B330E2CC03547A1FA2FDD13A9C96740BD858DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bd6f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index~RFe58bd6f.TMP
Size 1KB
SHA256 c22a9f6c0baf5252c20a342cf6bd45117ea2ca3210a7fe9ad28363b950e31863
MD5 727205d0709de77ef6844d0188cc4448
SHA1 0ec923280988d405f590e99173afd1f2ceed298d
SHA512 e4685e8b689b57311efcf687ff2725ed0667acca2da000802b6d141bf035932e771a94ca367bf0f7a1fc5bb0344caf9de8f2d900c5941644ae85afe9dd2b16c2
TLSH
T1B921546201635B67FC4023B649AD59973335E5085344774F53E6A139DC81B44AD879E4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 04f1e4bba178c52c78ebef0c79af58a3e3305cec5d1d3446b7516918bfbc6934
MD5 81af65ea0942c286d245dbb942647667
SHA1 6d1997c42eb8da52cf00655a84e08c38fdf363eb
SHA512 9c685930cc150f4755101f86ee57317ce3cb33fb152ed00ace6a3c69d70d66cb3b7068deb4732f5b9003432d207022c16102859656204144d6e062be9a03e08d
TLSH
T100F022F37FF72815BDAEC3D6343545B40521BC18C818AE8F916AB68291B672A7418C72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 619B
SHA256 79e0211a37fdf5bfe021d5e0b1737b577364d03e582552ea9988f8b0bc7bcdca
MD5 7f1b5f1f5f861bd4d36c7a6541a31852
SHA1 c634b25b19604f3ac7351b166458ce3f210eba47
SHA512 12f9238f23da3fe06d6b36141f660956bdd5ccfb8db5b28ce73bef72a88b2c0fa051e69f3ede91f6f1b4321dcd40e7ba3522434fe4fe2366c4c1f563289b1a29
TLSH
T181F022F37FF72815BDAEC3D5383545B40522B854D418BD8F41AAE29291B6B2A3418C72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 ea0b53d07347a1b98d3d4cb3475377583c8122b31b407f1da939fe84adfdb78b
MD5 67fa34d8b67e9880069b45ce8bcad0cb
SHA1 7ae4dd69b9993820df38206479ef2b4206af2f55
SHA512 8bb2859f448aaee3d4064038476762e4155c0c6f7734ea9eb243dd3fc25772d6d69b89bc74a13ec805c434a1a2fc3de80969c41c5f5cb1eb31822cc46d0e8ea5
TLSH
T1DBF052F37FF22914BE6EC3D1243548A44025BC04C808AE8E806AA38321B2B2A7419D72
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 5KB
SHA256 38e324b22de2d8e8ae46007ae865d28a59cf558b01d3cddd18391b29f4f96b06
MD5 5b892ba727033a0ca051694da1b9c97d
SHA1 505a15d088cd0646648f3f554581d3296f59cd9d
SHA512 c0e963b9697c28a33da3c9989c6a69c0995655bfb58f438ff5ca94b5ce303fc1285eb2497d800f2c9206651ff4998a81db7ccedaf5d826153ed2a532868085b5
SSDEEP 96:F1m5HeG6+vQjj6JD+vQJ+vQjjQ+vQmfl+vQUn:F1YH2+qwD+i+qQ+bfl+Nn
TLSH
T1AEB1AAE39B149053C9C9A6FB2039F6D9551DCA066FFF87A615BD8F6E52402D23328B0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 87c5f86de5e953bdaea38d969f50ac78367671df402d7673a67448513c7b27b8
MD5 905273551077429d00a332462fae3e44
SHA1 18c18be79b31580dffec8a46fa2b70475e58fb54
SHA512 84f22c37255b27e3d79ae7ff4c37407d4c30bfd56c5885884c30898ef2952975cfd62d67519379cfc679b7cf9b3006f52d5fdcd2563b8cb1fb03f8fa57310433
TLSH
T14DE0D82005D5E1BD7167208B0158AF08D2A6F527D3CC3A011F81CE806286504F5B7A91
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 4c4963feec3dbc71ea34043e9a309d75bb1fb6a7a887939e2e9df70a6b6a7852
MD5 58a173346e3fc95a23b13b126ba80f65
SHA1 1389895a6448a92f51f20605a15d796657c9e4aa
SHA512 195821b1c2dcd56ae51e183c0f37cb6b8c3985bcba35ec7885c8ad327f5230508ba7efb9dfffdec20daab8e2cc4b5954368541a97f93a7139714ebf330d55ddf
TLSH
T110A00211C99B844CC2480170952109495290A8A909053219F0EC526AD8E8051519600E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59045b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59045b.TMP
Size 48B
SHA256 09351a5079d1b648a17fd37585b134c1d2468d929e013642953057b36df1f7a7
MD5 0d1d0e6a816a9911bcb67c7ab3584b69
SHA1 b3b381ed38020b68f00ab3ec6d09993cba3701a4
SHA512 1b2d5c3d478befa0cc9a7fddbba00853ecdb97aa711531c9f5676a7479ab847586397a5ee534fbc2582dbddd39b5c00b86c44b6b34d7ca95b91e55fd17b003a1
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 256B
SHA256 768955685a1a1924dd3669fe3f23bc91374a6de07b2da96064eaaf6492dcd27b
MD5 26ec57ba66e6fb81c28822d4a37cde61
SHA1 2c4bf1bb2dbf3f2b49fe96c21fb14ba7ef82052d
SHA512 dd2a5bd200ac69990645d9cf080bbab7fffb919607dcf5a35c2b29002d92b1901480c3934c549c7f11854fe9a24f6fa58a809003cbd90c7a112007f2d662c4ba
TLSH
T195D0A998332882B3CCC60B38C2F28B128200E843404C9C1BCEBEAA334D4263C3D80CA8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 15f1e3ba4e1a01a8e9d7de867df0e6a188ee5c7b29d7cffca2fe23e63af5b8e2
MD5 206cfb2264f253b40c86e6a69af75e22
SHA1 4ba5141fc3b6e4266262e83e1bc17bb281acfe73
SHA512 935c47a73a2b9ae49f92d3cddad564a3caaf70ee1c12035e80be09eda4f9003fae85bdab2a4705d4db966a49b0ddced2e2a0952069e7bf8f58041babd4c4f0c0
TLSH
T10AE0D86015CED7AF7186208F4369F70891B3B522DBCC7E592F49D58062461407297291
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 e48049dae77d55d050faad02e72f661204acee0dd69289420a7ff15137c46301
MD5 fc8f8e8c49240d9f8bdfe58e42dcdb45
SHA1 4dbd7215a943c02ef0e274ac5c0cdaf56026e319
SHA512 7521c7533cc7785e5c36e4757fc303ce60b84e023f3f6ca55a9da252e455195e228b7d78bd04fd5af27749fdef396b22492e335da63c5be5fd2944bbd70507df
TLSH
T1E8E086B045DEE7BE6145608B43A9FB1C92F1B9269BCC7F8E5B488490A141144B2FB6D1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 92cb1e0c81bcd10fe9390fa221082293bd737a396bd5983275cfb229d154129b
MD5 bc5f972c4c72a9b40d71dc031dd646c2
SHA1 c7e852b9dc8c4115ac26aa980e0dfae029e5bc77
SHA512 8f477670d8131fc2da504a4b28968994f242ac8d06266a740f8bb457b470c8fd9a981161c5f9fc8276c7adf2343fb595eeb8486b36241e7683406cbd73110816
SSDEEP 96:K0mgyR+isQMoIo77iKoK6tiUomqqrUilPHKlZH1VRI5YMiBRK6YinRmP3gBgo3eZ:XpnwxRxBg
TLSH
T160E1F152307B02407DBE254D90A5971EA25131B33519F73F7BB901A28EABE095EFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f6b823729e0e2686015be11da2466f00423d638f4b536c0c0f2f85e9820b1208
MD5 bdd150a211b58d40853a29288b3a99a5
SHA1 6cbdde7910136272d424c8a1c229684f9100ff1c
SHA512 1960c705cb7bc2ab069ff3fa01d7071b64009b3c755b0e9f464dfc7336564b1494576dc3f3a77cee2a13ce2f045a91ee6adc416d960855682d226d3774f5d089
SSDEEP 96:K0mgyR+isQMoIo77iKoK6tiUomqqrUilPHKlZH1VRI5YMiBRK6YinRmP3gBgo3e4:Xpnwh
TLSH
T15791FF56307B02807DBE244990A5971EA25131F33459F62F7FBD44A14EABE484EFF8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 10f79269cba211d82f660455bf9dac48b0c1655da2b9854d1ef046b44e65bb23
MD5 3d9824434114a782cb331515bc6bcea4
SHA1 a67a518556a06c2d1ae1c53545400d626016490d
SHA512 67846fdd290345d92ecde512c4079f7833031fc2316e309946e3635f1b78ad409b210895ce75e36ff2bf61ded9fc2fcbf0e0fc13443e6e3d87fd2b9a6215ae88
SSDEEP 192:P+xW3HywSwfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxSIwfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1A824640A7B747001DDE6D9721CB080771E3CB16DCF22A6926DB654698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 7ccaece42ceadb36c367eb90a61dfa05cce8a235511f5b195c883669ac5913cc
MD5 3d190d0b64b79b3f52e19682acc1a5ea
SHA1 72e7c76530b700e10584efd164a3e778e92f3143
SHA512 9eb11d565389dc73942de32dcee11ff5923b76301806e1aa24df084c0ede8655e99593e6e07ab66fbc8f55aea48e86917672f384c9a0b4d9be0a81e723677e93
SSDEEP 192:OdO5PAsRlrH+Q2sEF3Tc95QkIIIbbLMIMNsYcY:15Iszh2sQA95QkIIIbbLMIM2B
TLSH
T16D42842F26091B73C09E5F3A139B87945AD9898191B2612DB1532C0F8DF3F9782D12FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 e5d3b1d07dba927db8c9ea2eee79f77061d6e2ea9ea9a55adfd5810f0d674279
MD5 cc9e77ef8a8f1629c1c6a42bdbe51a1e
SHA1 007889bead41b5d2873231b79f633272b4fdb28f
SHA512 ba9050936ec8d7b8828be4790e14820152e60a85407394495159358eabf663de824172c766132d969b99becd03005bb9518ba194421343cbf9285c55debb81a0
TLSH
T1F1E02614A8CBE2AEA159318701A95708C3863A13EB8C3A0A2F41C584F246108B7EB2C3
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 616b162e9b52b8a72925200547e656760ac450c806f8489ddfac8064a278e8c1
MD5 cee00481a4737a8322ad1d21aac531d8
SHA1 5de0267a087b8361d2de57d72b012e559e9e3f79
SHA512 424e4e7d68dab23640acf718dc2ed2ea02706d43619a843b63ba4a54be30f39056d0e45d7e63f7468ea18771534b7c1b63dcf0a0ececa2c572e3692d9a77ccb0
TLSH
T15821F166F324C209D6498A7A243E6B251778E402DFF8EC0F547760643F76F440E5B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 42f20a37529c7d26f3f6951ffff14e34416fcc3d5f5e069142a2c533953455e5
MD5 7c96f57cd6fa52a26bb48ef7f330d06b
SHA1 4896ed68e875f8f3dd8e0380878e0fc3d77fba0e
SHA512 b01f808e473f3f206b1e5505b50d939b2f5cab3d54c93a00fb4abef2da5625b67f12ddd121da8e44662e335f5c5a0b5464413a209c20753996baa03ea5c9e676
TLSH
T1D1E0201464C7D2DF5155318301A99748C3963913EB8C3F052F41CE84F24614577DF2C3
MD5 SHA1 SHA512 TLSH

Submit Download

c8c2dc07-c970-497f-92ad-2e30263a9289.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c8c2dc07-c970-497f-92ad-2e30263a9289.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 e183d087943e281ff25646fc5e45e1862c4682075fa2ff54ba39028f021c2cdb
MD5 6f31022428740ea688e2e1a22961ca7d
SHA1 51b343bf5cfe29ba8b40c4675eb2bac5f0acdfcb
SHA512 f0f0137f4f30b1c200c7a0820757d486624cafc7db790dada5c85bf816f7fabf9c13676167aace1ea608456bbb0bab778233b35c45b2bc52700fbf766ee19961
SSDEEP 384:yZcITsNxrTNAbjsGob2OjTV+WOiGewjE+2wihASDSSXSsn4MKwIr+jsa+VYulzoG:ATl0bNnzODjElwpS9nFKwIr+jhgbl
TLSH
T1FEB24BB199A46CF744A2E2C5A946F2136EB84137D68D2A5C81F8BF3D309F6F81317C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 98714574b939d0901c52afd7995efb36cb09bd0be173a9d363252dbb1591a6b1
MD5 1f0bfee6b4136d4e47088ae0a5bad080
SHA1 3826268cb0ec4eb55dad0375f7a00f6b437b2b7b
SHA512 fd0b253629b8daf8a3c842a56d436505aff4fe8444a12c6f6565065ca4ab3d662d31d03eeaec6d2349b188d3f0038db24756b206e9e5015119eef92458328ae9
SSDEEP 384:nYZcITsNIaTNAbjsGJb2OjTV+WOiGbhW3xA2Uk1r+Da+VYuldgL/7IzEo8:mTt9bNnzOThAW2Uk1r+GgWT
TLSH
T183A26C71A8645CF748A2E1C5AA46B7136EF44177D7882E5C91FCBF2E209F5B81303C29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 49a6d6e210e369b23331d1520941335e87ab7d5fed9c8bdf5fba1105fd18a63f
MD5 66282b3be6ffffb76b6cdd6da23f8316
SHA1 b3a64776d55e0c5ee7bcd31d6df01a4a4e5053b5
SHA512 3b3d981a32917327cc77b1be329d05803c1b4d225fd50a753fb813602bd3774714d5a52e4ac8d9f4f91c060f5c86b2d2901b86e79bab489cc88a8a1254fbaded
SSDEEP 768:aFgTxwgj9bNDFgh4bEMOvOfe9ruHMSjaVumcAW2Uk1r+NgWT:VTLB7bE/GG4MSjaVFUS1aNgWT
TLSH
T1F7138D75DC94CEBBACE2D7C6AA0677039EF44173868CADA8D9E96D0D109B5BC0303C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 029fff46c8e867878dda46e2662516be07297a49d654516fafbafce46763f105
MD5 b03fe5096bc670d118a74f099444b9e8
SHA1 09dadde3753351adba01b89b0e361c2c5617dff0
SHA512 ea5dcc9fe87c25be5359729f250025867c5382e2b679ffa16669b261dd3c0f4a1ff0e3d28ad6ec73c31d8b3244908f7fc548a37a09389a5c8dfc5679d896f070
SSDEEP 192:SONu6ygpQmiUydytOCTVg5WOiR0KzPmAU6:SONu6lHJtOCTV+WOiGUXU6
TLSH
T1D302C634BC682CB79DB3AE06F48B37139FA8116BDA552F84DAD81E1D01D766C2346C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4b1ab865cf14e3f7d44d7e2506cff8223003aec65dcd6287a357c3d1a932f747
MD5 e60a66daeed2217a159f1b44464240d7
SHA1 eb8ce3fedd27aa2802077168770d365e59609d9f
SHA512 7c86472defe672a6332cba37154ba50e6c889736874f7bdefa8f199dff5034cd306b0c39c57dccb0ce6e4b9867804c8987fbc73d43c06eb1194e2288e5d51e25
SSDEEP 192:SONu6yFQmiUy+yGOCTVg5WOiR0ewjE+2Y3UR/9U6:SONu6wGGOCTV+WOiGewjE+293U6
TLSH
T1B5120835B8386C775DE2A645F48B32139EA84167DA867F90E5DC2F1C01DB6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 8449c9d166586583046b6cb53ec7bc976856b166f758f1d53829c8e1fb6d1160
MD5 3331ddb35b09b8f08256efcd8867b068
SHA1 2c29efd062bcc1c9768f02936539f7296f628c78
SHA512 17c2bc27155406ee2b59c32312cc62ac9b5ecaced1eba07576ad8aed02d2ce303193d86a2ab42400941830ea4348d0435a397a0b91e97456d007cadb56c0122a
SSDEEP 384:yZcITsNxrTNAbjsGhb2OjTV+WOiGewjE+2wihASDSSXSsn4MKwIr+jsa+VYulzoG:ATlNbNnzODjElwpS9nFKwIr+jhgbl
TLSH
T16BB24BB199A45CF744A2E2C5A946F2136EB84137D68D2A5C81FCBF3D309F6F81316C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 716abf9fc79d40d012c5414c55a6e9675e99c3426b6a1ab28999df8583369ced
MD5 8e2be18efb2acf5bc772ed51a072df55
SHA1 f59a9fb87126fc48f80ce4d3668deaac8298eff1
SHA512 816848ad002466d5cea7f72a033ba9a55f8a82018dd62e426ac57511b2d2af05d3012ef599e570c18835a2c69fc1240858f8baa6ccad3af05fad936954f32329
SSDEEP 384:CZcITsNTrwAbjsPUaOjTV+WOiGewjE+2w3sa+VYulzoG:wTs3ZnzODjElw3hgbl
TLSH
T1B2826C3169645C7799F3D285F88B32138EF89167D7C92F9495DDAF0D00DA6A8230BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f93a4c36ee8b2d9f8e6a2c070d0a48ce16da8313fea8ffafeda766d4334bdf64
MD5 ea0c985c3f069ecf470a3f9a784dfcd5
SHA1 86b8c33f49802b04cb55e9b266c48e28b284f8db
SHA512 e6c6af1ba17e56a0e93e37dc884334b8e630f9f1ddd4fe281e4604333c87ec697c3349d763c8efd20ae8e3473b8b8e0fdbc713bf7c0bc9ea57697bd6f2519820
SSDEEP 384:nWZcITsNIrTNAbjsGJb2OjTV+WOiGewjE+2S8sa+VYuldgL/7IzEo8:ETE9bNnzODjElS8hgWT
TLSH
T126927D7039649CB758E7D245FA8B37539FF81063CAC52F54D5E8AF0E10867A8270BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 64e5559286bc171904387f252e6ebd2780ee713d9aeea5d44903bb6a07b7f11f
MD5 a3b06a0c70343c05bd1a4c093453d21c
SHA1 85ea0f5053941755a1a1d5eeeb86ef542e16ce79
SHA512 6a980e3dcfd1759b3b620688e9560c2eb100c56d5644f021af68dd11ed1cec94f6b59cae4c5e176cfd1a950c3ae1f9b2a5003db7713bf3e8b931d5fc5bb3294e
SSDEEP 384:nfZcITsNIaTNAbjsGJb2OjTV+WOiGewjE+2S8sa+VYuldgL/7IzEo8:3Tt9bNnzODjElS8hgWT
TLSH
T132927D7039649CB758E7E245FA8B37539FF85063CAC52F54D5E89F0E10867A8270BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 ac13741e1cde3bc0c4705b7a789b9e50333e3fa4e249b127f41d8a2849bf495b
MD5 da02fbeba6e982d260ecdc6f5776b320
SHA1 19cd54b28234b3a161d6c3aeada90dc40d32807e
SHA512 790d2b1153967409f190ad244cc9d25e005b5d5e5f915869bf13e6d0bc5b150bf9d2c17a7e116591c65da87bd1312017be82b301484594f78c2ea12fdf1f7764
SSDEEP 12:TLpOPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3isOmQQtudyzQdz/zcQAK:TL85UOl0afDdWec9sJR4UGDB5fc
TLSH
T1D992C422B9352463D8DF0B76F95348D10DFD16AFC9A7B804DDD04D6109A2BC266551FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.8.3.1\keys.json
Size 8KB
SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
MD5 ee666d1b2290efa6cdbc89ea3d317333
SHA1 a8bdd2c1d7e76fef48a735a80524243cd453e0bc
SHA512 7b2b577c9a168f626a687ee158cc20fa0ad0f816fb0583abfe45f89222d1762eb4fc619e029856618479fb6096a02eb2f9934cb46334fa781cea5cbcec992ee9
SSDEEP 192:uNtGbR0m0GflPAyR9Pm4lOvMwkoR9PuGMXcy:O7mZpKjA
TLSH
T17F02B6BF14A41182CE7FC16D9F0774B78FB03C066BCA3A83925BEA49484196D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e12a87c0f147de16327150668052f6118c9773c28e52e6c7ae1bbb3526b01ce0
MD5 ff583c0c61500bca79436b53d1095222
SHA1 fd3e4a5f7684830cbba79a74da6929d7d80b0262
SHA512 08be5ac41a0c8cdeb3912a80fc7a65263aacf883b4fa7d4b3c034f76c11afb1ddaab0159e974e2a6217d1747903321279ba62ac2983ea0cefb0e07dc39e37629
TLSH
T1A241095CB6FE1148B3B76E565FF7B96E447EB9772E4AD49D00110E4E0622E40C8A1B33
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 7501fb51e9184b3155f794955f63c99cb2f7869fa5c0727a8e4369bac9113bb7
MD5 d07150b072e23a0920503e1bf7338bfb
SHA1 79f43d2dc98bd4216393db24ff4b7b5498df91d7
SHA512 3565b9ef5470fe84b43a6cbe817562a253f771c17bc4562ae3415d6df4c278f6ab9a3ecfa625e4962ab86c5cef13dc8e7eb8b572cbd1d0cc3f638d565f6d5c80
TLSH
T19B510E58B6FA1104B3B7AF5A9BF6B95E84BFB9733B06D45D10110E4F0662A40C8B173B
MD5 SHA1 SHA512 TLSH

Submit Download

55731625-3f0d-4c5a-8395-75b7ae8d0fd6.tmp

Path C:\Users\Admin\AppData\Local\Temp\55731625-3f0d-4c5a-8395-75b7ae8d0fd6.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

b8c2bd02-57b2-4bf2-b836-fb309bed0479.tmp

Path C:\Users\Admin\AppData\Local\Temp\b8c2bd02-57b2-4bf2-b836-fb309bed0479.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbe3bf8c-08f3-47ec-8398-410026d65732.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1064_163146444\dbe3bf8c-08f3-47ec-8398-410026d65732.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1064_483265458\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download