c24d8901345db6e09d3c23d935615e1320d052e8f2f49bb39acad337926c3907

Analysis

user interaction
yes
max time kernel
51s
max time network
52s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/10/2026, 18:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 45KB
Sample261017-wlm66sty3p
SHA256 c24d8901345db6e09d3c23d935615e1320d052e8f2f49bb39acad337926c3907
MD5 b8a26e3d981c70d7e73021dff907fd05
SHA1 3557615c52bd95468681333fc51b4b4947256e95
SHA512 99d25a96b1599866a0d3e9ce8ac48c69fce2624881c919a3d32b74ac942c819bcc012c2d1292955d6a3ab67c43af1587f161b8947765fc872f8006bb6b2efa3d
SSDEEP 768:I2sO7kL95YMT6YwQYT5dYJ5975HgtW0DfXMmC3dXo5wqY15GvgkTC7Ko+OsqWW8l:QLDbLwC3dIHsx/0
TLSH
T11B23173AA904CD2EEA579E98313D7D38619EC16BC25ADD28F2DCC53103C2D799663EC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3188	msedge.exe
4304	msedge.exe
4324	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{F59E9CAE-2273-44B0-82BC-8907519AF1B2}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{19E2E144-516E-412C-8D2B-666E8740F21D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2368	chrome.exe
2368	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
652	Process not Found
652	Process not Found
652	Process not Found
652	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4776 wrote to memory of 4684	4776	msedge.exe	84
PID 4776 wrote to memory of 3884	4776	msedge.exe	85
PID 4776 wrote to memory of 3188	4776	msedge.exe	86
PID 4776 wrote to memory of 3884	4776	msedge.exe	85
PID 4776 wrote to memory of 3884	4776	msedge.exe	85
PID 4776 wrote to memory of 4444	4776	msedge.exe	87
PID 4776 wrote to memory of 4444	4776	msedge.exe	87
PID 4776 wrote to memory of 4028	4776	msedge.exe	89
PID 4776 wrote to memory of 4028	4776	msedge.exe	89
PID 4776 wrote to memory of 4028	4776	msedge.exe	89
PID 4776 wrote to memory of 428	4776	msedge.exe	90
PID 4776 wrote to memory of 428	4776	msedge.exe	90
PID 4776 wrote to memory of 428	4776	msedge.exe	90
PID 4776 wrote to memory of 1620	4776	msedge.exe	97
PID 4776 wrote to memory of 1620	4776	msedge.exe	97
PID 4776 wrote to memory of 4820	4776	msedge.exe	98
PID 4776 wrote to memory of 4820	4776	msedge.exe	98
PID 4776 wrote to memory of 1392	4776	msedge.exe	101
PID 4776 wrote to memory of 1560	4776	msedge.exe	110
PID 1560 wrote to memory of 6040	1560	msedge.exe	111
PID 1560 wrote to memory of 4304	1560	msedge.exe	113
PID 1560 wrote to memory of 3040	1560	msedge.exe	114
PID 1560 wrote to memory of 3040	1560	msedge.exe	114
PID 1560 wrote to memory of 3040	1560	msedge.exe	114
PID 1560 wrote to memory of 2648	1560	msedge.exe	115
PID 1560 wrote to memory of 2648	1560	msedge.exe	115
PID 1560 wrote to memory of 5540	1560	msedge.exe	118
PID 1560 wrote to memory of 3804	1560	msedge.exe	119
PID 1560 wrote to memory of 3804	1560	msedge.exe	119
PID 1560 wrote to memory of 4448	1560	msedge.exe	120
PID 1560 wrote to memory of 4448	1560	msedge.exe	120
PID 1560 wrote to memory of 4204	1560	msedge.exe	121
PID 1560 wrote to memory of 4204	1560	msedge.exe	121
PID 1560 wrote to memory of 5308	1560	msedge.exe	122
PID 1560 wrote to memory of 5308	1560	msedge.exe	122
PID 2368 wrote to memory of 3956	2368	chrome.exe	125
PID 1560 wrote to memory of 2936	1560	msedge.exe	126
PID 1560 wrote to memory of 2936	1560	msedge.exe	126
PID 1560 wrote to memory of 4604	1560	msedge.exe	127
PID 1560 wrote to memory of 4604	1560	msedge.exe	127
PID 1560 wrote to memory of 5012	1560	msedge.exe	128
PID 1560 wrote to memory of 5012	1560	msedge.exe	128
PID 2368 wrote to memory of 4324	2368	chrome.exe	129
PID 2368 wrote to memory of 3500	2368	chrome.exe	130
PID 2368 wrote to memory of 3500	2368	chrome.exe	130
PID 2368 wrote to memory of 4008	2368	chrome.exe	131
PID 2368 wrote to memory of 4008	2368	chrome.exe	131
PID 2368 wrote to memory of 3748	2368	chrome.exe	133
PID 2368 wrote to memory of 4004	2368	chrome.exe	134
PID 2368 wrote to memory of 3748	2368	chrome.exe	133
PID 2368 wrote to memory of 4004	2368	chrome.exe	134
PID 2368 wrote to memory of 5700	2368	chrome.exe	135
PID 2368 wrote to memory of 5700	2368	chrome.exe	135
PID 2368 wrote to memory of 748	2368	chrome.exe	136
PID 2368 wrote to memory of 748	2368	chrome.exe	136
PID 2368 wrote to memory of 4708	2368	chrome.exe	138
PID 2368 wrote to memory of 3300	2368	chrome.exe	140
PID 2368 wrote to memory of 3300	2368	chrome.exe	140
PID 2368 wrote to memory of 2212	2368	chrome.exe	141
PID 2368 wrote to memory of 2212	2368	chrome.exe	141
PID 2368 wrote to memory of 5548	2368	chrome.exe	145
PID 2368 wrote to memory of 5548	2368	chrome.exe	145
PID 2368 wrote to memory of 1620	2368	chrome.exe	146
PID 2368 wrote to memory of 1620	2368	chrome.exe	146

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff83554c188,0x7ff83554c194,0x7ff83554c1a0
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,5262635115626488264,7453843329345233377,262144 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,5694986676818752933,298307212642946460,524288 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,2246628611035756705,16260446557560841587,524288 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,11664615037616082226,2582004283747017457,2097152 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,5074190204175169997,200861541074446496,2097152 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,16675544171551307653,13056175125538323625,524288 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,4863884320506862976,6276471154764970991,524288 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,12957972302844253532,4011016015815207372,524288 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,12957972302844253532,4011016015815207372,524288 --field-trial-handle=2368,i,16625506832334741328,3579023646376197592,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:1560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x210,0x7ff83554c188,0x7ff83554c194,0x7ff83554c1a0
    3⤵
    PID:6040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,13687615039197553843,17261200869812883626,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=3368 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,13737600631931876893,11420930885134941940,262144 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=3216 /prefetch:2
    3⤵
    PID:3040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,18052725469822690007,480971744538057594,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:8
    3⤵
    PID:2648
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,6288122612068844268,3575830768510814953,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
    3⤵
    PID:5100
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,6288122612068844268,3575830768510814953,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
    3⤵
    PID:5540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,16192955057590753196,15953546630613135146,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
    3⤵
    PID:3804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,5026410720657338222,16275043678622856939,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:8
    3⤵
    PID:4448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,1156269572009251796,12909039172104488523,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
    3⤵
    PID:4204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,10004305632619164729,14062081769217267244,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
    3⤵
    PID:5308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,17668072727306712911,13081249573494507479,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
    3⤵
    PID:2936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,2604863881202319404,14449917025865941048,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
    3⤵
    PID:4604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,13788748435589495845,18119235568679905391,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
    3⤵
    PID:5012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,11111027999091499679,16502943893034563837,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:8
    3⤵
    PID:6492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,17666354145232504670,12259865507960061817,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
    3⤵
    PID:6500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,7382532195448332257,14080171809032442481,524288 --field-trial-handle=3220,i,5627458130450247403,5668241807155370119,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
    3⤵
    PID:6508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:116

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3736

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff8218fc728,0x7ff8218fc734,0x7ff8218fc740
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2156,i,5724140577602695566,2192756598221228953,524288 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1820 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1732,i,329602841074245570,9868925502526087681,262144 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,3161544750399142452,10139317858121096852,524288 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2452 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,11660950379982113243,17751943711738437829,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,11686564548955628247,6074879603619600471,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,4875875426127989653,14324857986750497340,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4476 /prefetch:2
  2⤵
  PID:5700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,14534781520263832653,11345320908691908121,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,11045466031872155794,8443664568838147989,524288 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5604,i,762331356937556124,806416452334226899,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5920,i,9313237324914748688,4169642558453119361,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6048,i,9776349894978722375,4587225728470318111,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4880,i,9356729240947214375,17434966590748160351,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6284,i,9846922289555650125,1285415092332956047,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6276 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6436,i,8461223986663919435,10066621446755227664,2097152 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6376,i,8687715203376411491,13236875581617413634,524288 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:6860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6380,i,1726672888420188965,11321894329305655074,524288 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:6868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6364,i,18310645366175293371,17122475969015212390,524288 --field-trial-handle=2056,i,17664067256495227232,1582043470621168907,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3292 /prefetch:8
  2⤵
  PID:6876

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1976

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1f060e77-1157-4148-9cfc-eaae08acc712.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\1f060e77-1157-4148-9cfc-eaae08acc712.tmp
Size 130KB
SHA256 23aa8089c48065d19d976094990f8974934848ea8f14fe786c886ca844e6daf5
MD5 e50a724758cfa28d9d3b5886fae11e77
SHA1 e6280f45e823ceab0e902bf7e49c2a5d210ba9b8
SHA512 17957d20e7da2e5ab609cd3e4d0bd2bd19ca56cd9f6a44ee232d043496740f3d8250730b6fc3d8291fa5ac3c7eda5a81d6502718006b20c04f7547d3f4d04890
SSDEEP 3072:l+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:l+hFD+7t56OD9ZfSAppry
TLSH
T1FAD31232AA91C8BBC9BC6541B197A304DE76ACED41DE3A0944465F8EE05FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95a46dd0-c401-4fb5-b36a-77e4ea2add9c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\95a46dd0-c401-4fb5-b36a-77e4ea2add9c.tmp
Size 266KB
SHA256 cc477de0693ce58e2addeee923f221961159dbfc75d8cc70e627f4226dd47491
MD5 31fbbd277414c8ff768fce2c41ccbc81
SHA1 991df0343c3d31bb95def6064af537bfb25ea739
SHA512 69dddf522babacc9c4b6627ebaa5b819d35705a95addd55bc5f82d801ddc637c5b569c99381213744e37ff72dabc90679a9cde1873665dc7c7369fd03129322f
SSDEEP 6144:FVNd4BWRxlgJWRdOLLZXW4Tu+hFD+7t56OD9ZfSAppr5:LhlgIdmZXWauyFSXD9ZfS4z
TLSH
T1EA442373A3A4A9B3C8BC1511E05B6314CDB199FDC1DDB90949860E9FD17F98D0A0AE33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a769fbb-7769-45f7-ac98-55f13ef44a2f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1a769fbb-7769-45f7-ac98-55f13ef44a2f.tmp
Size 17KB
SHA256 a55c9d9bfbff27f4080d00af8282862be9cc6b021b0d1cf3b654e6d1857a1705
MD5 c8926c13ed1e541a9ebca052800d518d
SHA1 3522a9925410a3faf9a73cb924c1c1fb4dbffb5b
SHA512 0cc7f70f08f90753f1713955142d2f28c2b7b8284eb83bb86dea581036af8c57e30edda3af83eb81e1295de946e3c6812dc7f1671fca9c13e29cb035d90943a4
SSDEEP 384:j5j3S7KxkXqKf/pUZNCgVLH2HfgslA/7pLuLceS9YXOD32+ErU3tJHGT7LAE:jJ3S7KxkXqKf/pUZNCgVLH2HfgsC/7pO
TLSH
T1E772FA67BC4C9A3B4F94C68CDC267F4FADB5024B61ED886443FA582603D5ACB05062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3208ef65-8021-40da-8b22-d481aeaa63c9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3208ef65-8021-40da-8b22-d481aeaa63c9.tmp
Size 13KB
SHA256 9a6a1a203e031498c923572c9c014eb0aa5d53f8c055d2e73edb11542cc00ac2
MD5 3b5e59a192159042309a3d63c6d9dfcb
SHA1 4ebbd09ddef04cad66f5bb9bf6f30ed96afb5904
SHA512 ad75989bef2c982627f1d6002fb3770369bdce30fc301f41f36f614aedaaf1835426131632f14e2e5e0d57eaf8e72fafc52c8955dbcc0bb0a2074e18aa7cf3e4
SSDEEP 192:LR61ZdlY+8H/+uv78pAPRp2R8h9THsb+WNnhe6lS2eTxuzkw939arVyIsnAUgtaJ:LR619Y+hK4UX7JwIt2eczdNat8
TLSH
T19052B52EAD107A7B9CEBC21AE9617757DBF6102170D91E84EAF88D3C24E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c5cd908-fe40-4d26-9043-409b1f96fc54.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3c5cd908-fe40-4d26-9043-409b1f96fc54.tmp
Size 414B
SHA256 08ea685cf891ba2dc167fed17592198c217b42615beafc68df422f19af02ccca
MD5 8da5c032a5f71383f9ac61f83a329178
SHA1 f4d2e05244bd12149f59abb2780b2fe277ef4fb4
SHA512 9488b3adfd441ad72cbbb849152eb9d4ff274ab950fc446b180f936908321e71151c812c404f5fb650672605a4b85eea8dca710fbb3d1e695846aa70f9a83ed6
TLSH
T16FE061A6CC11EC375EFE071C61A2CA45EB54232B3B41890F363C811C8F7113686DADAC
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 20KB
SHA256 7afd08a6fa48f7aa2feaa0d6645167c8deb4da35d93c6cebd642ae84e0e1cd6a
MD5 889e965448ed97008fe359c3a7f474ca
SHA1 5a34aabccdda596bfc2ce721bf224d5816cfa3e0
SHA512 9be39d7aead8348bc9376cb9be531d01ea5cc52ee1a2503664d9c8c62f706eca7446497df00826ac443ab492881e3805f733fe626f16d9879aa9db299abdf2c0
SSDEEP 384:8J41pZHZwb42r9Y9chHiZZ/s3yAi8hUbK2xm5JqiR1ev7t6QOUKvW/:8J41p5E42BY9RZ/YwjK20fTS8QOUKO/
TLSH
T12892D0C9B5F07EE7EE6D40947F347B3C44A4078F0A6510E197E8A4628E104CEA3AE4DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 33KB
SHA256 2ca46e9144a9904ed32b14ebe3d94b2d4de0cf02f9cff6b31cda156bc2984d3b
MD5 6cdfcca442fa811ae598ccf8a42ca148
SHA1 808fd1d061557743a37d5e6e5fafe5567ff50cdb
SHA512 b6925c8e08f1a280f5a810719cc74072993af67f3d40cd9fe89a23ce7272ca41372959e617a0ada3684358e3e165cb9768e47aaead9dd016064d56990ab54963
SSDEEP 768:pcDVJ0xr1ZNCuRF4cbrSVZBPrG+ur6hKgBDJoOYrj//H1acfPqt:OQhdRF4c6ZNrg5gYOA7v1pqt
TLSH
T1EDE2F2193DBE96578A42B42C497CA0D9353C3E858593DD4E9154EBDBF83E04B0AA2DD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 27KB
SHA256 ec24c712d5e33f3737034b3045d611bb445b0f15d35c0f29f7709b205b758f4b
MD5 299c22bcd84340d5b21657fdec1c78e9
SHA1 8795434266aa48da71b86bb036a9e2bde8041db7
SHA512 a9eb44fa22007cd0a29c363a994148903a1648ef9121ffa6b2badd89912b226427765992e9f4376ac84dd4f5d1cca84bbc04e978a3af10cb5db2db3f0a7592f1
SSDEEP 768:ueWTfgTB8Ng4bulIpHTxqL/5UyVnXvDVFeUYcOyHi:ue2fgTB824bVpHFqL/5UyHIUYcOyHi
TLSH
T15DC2E1421004F951F5CB860ADEC7FB7917837CC9860E37A594AAE1DAE933A8C9DB10E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
Size 174KB
SHA256 4cc7d37d4938e4e69fbbf74ba045ea6f56552ae1757b0fde720e18351a2bdbe7
MD5 6dc69d1df3d518b0be9ca30253ab24c0
SHA1 471d627631b6b09818e0323438711b21c6a36c0b
SHA512 4c9e6710021ff8cc54eac7cb36b1d6f9a67ef75818ddf12c2257be0399f7e2a013779b3582b693aa8670626cbaaa29d296398a02991208e3d163d76e0c5557e2
SSDEEP 3072:GsXSdihZreaw3axdSQZH2fG6/h/p3XbzXPoA4Hg2yN9vyyTj86BbVO+x3ALuuLZF:c8+iSuS/fHbdRFy6j8GbV935uLT/
TLSH
T18C0423A7F072C83918B57117F9AD4D176E10008A5C6DCD82885008DF746DBEAEEEF19A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 142KB
SHA256 74ba3ba341f8d42ae8f4f116603981e4876e24bf9bc92a51b250099f0a33cc3c
MD5 09a7229f29b9fb89dff3c6dca149afc4
SHA1 d32745b429ea8081db4169d5f48fb831d8ffb677
SHA512 48020008048d58c79123e9a3d7e9671614690dfbd01009d9c2cf43c24065432fe7183a8d7cdad919ef1f2a34cd4646497e27126d11e9d8b8dca67e87ddc0c639
SSDEEP 3072:gBkQ5I2+3Y1iKstbB32791ftC1YNrJdH08D6Z3EPuXLV21OxoQG0ZPjp:gBdR+oiKsa7911CErH066pQIXDZPjp
TLSH
T1D4E312A8DB40F15662A5A03B55E816852F1BFDDA58C3421AF9B04E0988C37F73B0EC9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000023

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
Size 320KB
SHA256 670debc2829893aef9010a1012434e31d27c38e7bff614eb1211067e62904dc4
MD5 5f4c4f7c1abc74d49611a78f8dbec217
SHA1 eb8611c4de093496e88254925ae15643e675078c
SHA512 1f4a5ffb84b0099ab08fa9c3bf29f0c32960e6a82d946c10ffb1ace8a52a6141d6cc91b6a23cd75506565d7e8e235daa73cbbc3749873c7a8e740cc3896a6f40
SSDEEP 6144:gkT6OnfePdXwwjbj+cFXjvuH9IqLipMzy6itactk628zrLW9x7VopHvT9z:16OnUdXHNuHqqLipMzhP628z3WV+H5z
TLSH
T19C642393741FAC39DED2D46ED4658C54452FDBFA121786AC8E2C7CDA18722284FCDAC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
Size 771KB
SHA256 685d4579abdd49bce639befb4df458cc577273693670628e397e4e723a442bd4
MD5 692468cfbd201070302fd3e0f40c62ce
SHA1 9c9781c3d022fac3df2577365e7ea6c033489de8
SHA512 2c9589fde9ecab7157f89b2b31cdd09a000fe2b335f06e8e5958c8b012e18b72fbb7f56e1fcdc08788f82fc074486648245b5e8b9c6e70a14e4315df6163da88
SSDEEP 12288:DEIV/1oKcfE2JVs+PXLpP7lGtIIVupJqXNGXPa4LTG1YOEW0PDQz4uC/aygKjGeA:gSAEsVsGb7Gi8dc3X6YXz/1yxKYvZX
TLSH
T151F43322893AF000861A376714F9CD3A1DA7BD144358AE1FFF5733A22446CE657BED4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d
Size 51KB
SHA256 18a4c74af48941d10ccfc378c030a4f1d79177ba3065bd7c3846d90c75c85b57
MD5 e8aa4026af5d06d1bd367bf514bcbd99
SHA1 47c3bb74f93c8c86319f42646736453f9af6c9b2
SHA512 38e02a6f556208dc4aa1f33753373de57af16e000a6c80a214cb4f7da531c8c502eb76f2cd45cbb62ac153264d36b8bcadc765ea91262d5d5ab8feb0f7002a48
SSDEEP 1536:DxZamQ9In4TIwun2P6di3wPH7jVGGzo58:Dxwm54TIwun2CwCHVhK8
TLSH
T1503302A51B43DB91F8C61EA0D5051D2C599DFDA3EF468226AE766A28C03EF2B30CDD05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004e
Size 36KB
SHA256 aa416238e87afb4adf2145610733a5599519c23d1c388a6d9d68ddede9fa9c41
MD5 a5d1b506db2987609bf2a95984d2e234
SHA1 637f258772e215e4c895a1e370a1c2925877d740
SHA512 9092c4079092f12315d9f9c8d9a92453cf9d6d79e503189a340625cce10bd8a8a8ce05aeaff9aaee3ead34514630b76575c5e9d1bf09a7145dc17d8fcd1c6c27
SSDEEP 768:dLEL7YDg0VVxJWH0FyBr6LAudaX5ijJuiT3Td63jOsaZTLmTJowyiGdlyC6:dLO7YDz7okyVeEXsbTsTBgmQPo
TLSH
T1C6F2F21033B9558B38CBD5722A79687272CEA077185F66BD395FF803E94793824B85F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
Size 51KB
SHA256 0662cbfd8faa778adeb41d1ab89ef56c23c952252539a8f562bb33a00486e98b
MD5 d367ba710180121b32e8884063f65b9e
SHA1 01f2c3e925cf0df0547b4cf6ae1d30dc911063f3
SHA512 4fe549247acaccce36a4c81b4564be8c80fce3daa782c9b8de2b472d23185f8b728194d5e53418b93d825403b2995e74e675f75af625106a8f44f68cabe0ba5b
SSDEEP 1536:IrWrk4fhEVOvc3DUL1VicSWn8Kgo/+HgpzANu9BS8X:jw4mpTkricSWn8Zo/+HMRrlX
TLSH
T1E63302EB04E6F43381AEE269E47247F6484AD746DE2256B3646637F35C9C83112FE311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_vidbox.wtf_0.indexeddb.leveldb\000003.log
Size 16KB
SHA256 dadf1712ddf0a95f0ad608c6a1f75566e7a5b3eaea712949ae22ba2859a70899
MD5 fc1cdb674e73b14b2ad2903f5c344365
SHA1 d2024efb89c257a9d7b97433de08aaf5726fcf0a
SHA512 321452e2563ea0ab0df8bfe396688c4c56245e720c3371716f7ec16b02007a1ebaa4d3f047d0e5ec0db534c62aec569b04d28a7563f64d8252d806935cb45184
SSDEEP 192:yBuVMaF95miv8CfAYNrXReylHkrliO/JTxtHix:yBuCU5Bv8CYYNBXlHkrliO/JTvCx
TLSH
T19D7205057BD62D29F6770C7A907D1B886E3A7A80AC41FD0EA4B2715C4777E44CC72E8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_vidbox.wtf_0.indexeddb.leveldb\LOG
Size 341B
SHA256 ee923d0a2636f70c359536633394741499554549e2cad0b0b458641323cc0c71
MD5 3a0e054c97bf668b011b8e6ee8525c98
SHA1 0353a6f7d9ec1762ab9e222df1dca2bd3ffa90d7
SHA512 f3a1882611963dd1adf7b954c5b67fb3dfbf19931430def88a269be34297829311aa6f2d6b6453c9369c36d59b7a3dbf195726bb95f505bb8e43620cc4026f98
TLSH
T135E0266495CAC22F611A81721B20770EDFE7251DDBC9FA8A8F42E85871CBD08A4A8360
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_vidbox.wtf_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a6682fd434fea5e11b0c61981876346c06187979\040ad141-b01b-4946-ba6b-a350ef02725c\index-dir\temp-index
Size 72B
SHA256 fc348783126d17b611724953e05abeea7ff143a5663c98e735b0236674446c63
MD5 b38992726d3b51d3ec9ba22a9e30e189
SHA1 1a278384e8150cb48e4e70dec72056cea14986de
SHA512 76af5b09e9e5aeb34b9b6264dbee2f7dd49eb740e31eec1ff21b69e706972f63534d2c88365b5ea17edd0d34f64c13c9996c53ddc4bc8f33e6049f6557499385
TLSH
T1D6A00257CE534611C1054270607D12666F544E562302070788B829D5E85A1D38306074
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a6682fd434fea5e11b0c61981876346c06187979\040ad141-b01b-4946-ba6b-a350ef02725c\index-dir\the-real-index
Size 48B
SHA256 327fae029c94127c05f0c7dda21dafa50ca46688ea496a7a1fe544aee318ca65
MD5 44ef7bfb7c75285e034d70e0cd77b8f1
SHA1 56487d5ffdd141df511cbb65c2d04476e4c226c5
SHA512 a3d57a570de74bdf15aa678c10543f63aef51d45fa056ef5989848a0669e78903e0bcff044f36099c9751c32a68773bb822e439347b5b4439b792d1477491e8c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a6682fd434fea5e11b0c61981876346c06187979\index.txt
Size 130B
SHA256 7e80180a3a41a921a48e7b64d498b8076ab85b239240b5c3b68f8a050803f2bc
MD5 794e26b93650c9bb9f0e2c1aabd17a8c
SHA1 636f08138421e304427b53945312c91ab85ccba8
SHA512 e9e7bbdbc303661b7963c4c664423487a78266e12d2af7af144b0d66fc8796ab67027504b9233f7f1cba89378ff95dffaae089038a619419e4bf1c619e713309
TLSH
T17AC092BF47684038BA8390C1992C591862869C094EC9E9664936F85C52F4E22D05AA0B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a6682fd434fea5e11b0c61981876346c06187979\index.txt.tmp
Size 300B
SHA256 b4774f2cadfc80883c8e817248f0eb5611364dfce7d66f661fe37a3c33c8ff9e
MD5 faef1342599bed5831fdc1983d042904
SHA1 b10e160cccf194ee40cd5c7dfc1e884c1e33fcd1
SHA512 528fccf3bdf753f368ddaf5a4c6f73063e29f4b74750b7cb53d699afda83fe3e09b76ebf9b67a43b021bc354b5c21a2792d254272074660c1a5128af53f1933b
TLSH
T11AE02BBB2B674138B74394CB186CF81C90ABAD016FC8FD554472700D02F7E618074D0B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a6682fd434fea5e11b0c61981876346c06187979\index.txt.tmp
Size 407B
SHA256 dbd84db8f1cac7d3f27752a37ec5f5dd8e1a81b6751bc0c78640f317c720101c
MD5 315187796bfe8b378165c1d508a9ff3b
SHA1 d5204770ef3d3c0268e18d239300d9c2a5a29ba4
SHA512 d260d2b5bd5e40bb6ea21d6abb0ac85550fb27773d22207e2c53cc2c4b6ea0befbbaf31587ff74c53413cfd7628e40a77cbe1510e4b935057bdbb4231b533e14
TLSH
T10BE0617627A24538FA1398C6446CF41CA4A77C01AAD8FD0D4851700C02F7D658074E47
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 168B
SHA256 fc85b08419e096bda8d28982d728c2ce8bace6e556c476fb731c725428e040e1
MD5 2fca663f64df3daad23b224701640a3e
SHA1 ad8bbf58e10f0e785448368f4c0465bd70e22aec
SHA512 0abe7abf57c93fc4095984ee38e3cf27fddf9f1cadc514aac762941a1007f18f1dc0c74aaf94f39a8c7481edfc3f88e424ece04c65989c7deab863e3f90770f5
TLSH
T19EC09215E7416392C04203B295B294EC37B0AFEA8122178AA2F87D1AAC75168806E236
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 d5ec903039b0151589e2bc848c566f97a7ae4ae98922abc289d64c1e610f837b
MD5 80f580339c990070b32309720831d890
SHA1 2c84353d9d9918460cd994f7e1a37eae7b50834f
SHA512 fe18e2d55fcca9e9f9db719b4da290db0f5b1cb3f531b5c68dfa8e50359b7c9b0d031d5e0ac890cd58cc0773a0b9562eb1b84e9828cfa60b43b468ca30d66420
TLSH
T1FCB02200C2022202C00203F33EA080C8B220CF20C203022383E00A22CC202F0082A820
MD5 SHA1 SHA512 TLSH

Submit Download

dbe22fc0-f0ac-4318-8208-ce6d3d8ed025.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\dbe22fc0-f0ac-4318-8208-ce6d3d8ed025.tmp
Size 266KB
SHA256 f70feb12255eb1769171ce82af7c96b5862318920226bf7697e2ff9863a46074
MD5 4bd258ce25a40cfd8552cfa7aefb8777
SHA1 6c9300f3907b39ed5fc1ed1a6291ec9b9e387ca4
SHA512 a7cab0aa0f7cdb60fe37fd43f393296971f0b7004cfdbca5e624783e9ad51adc0ffdbabdff4d13a1027b7ca7dafc4b1d9b309feafe4a22622cdcbaed35edf010
SSDEEP 6144:kVNd4BWRxlgJWRdOLLZXW4Tu+hFD+7t56OD9ZfSAppr5:chlgIdmZXWauyFSXD9ZfS4z
TLSH
T104442372A3A4A9B3C8BC1511E05B6314CDB199FDC1EDB90949860E9FD17F98D0E0AE33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48e58f50-60d5-4870-a83c-cbb4351d266f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\48e58f50-60d5-4870-a83c-cbb4351d266f.tmp
Size 25KB
SHA256 8f3e0ef4baa8a0fa078528d3fd7d6bc3eec0c4167ab18f521e7163fcb35ef5ba
MD5 0110bd069f5f89b767b77bb402bb1acc
SHA1 277d414953b7bf45c600ccf7c28e18586785bc3b
SHA512 1f8d74e79cd2fe0fe1e59303192ed994f867e6022ba193e993884c834918f65b942622e1afa434a53da7f05a25323b9c8fdbc6453aaaf1b9abe2857666d9514a
SSDEEP 384:nsiFiZcIh3sN28TUNTUlI475mgTapK2fLBVR8+cnlQyXmRgL/7IzsoU:XFQh3Lwg/J5BVR2lDXmeP
TLSH
T1D3C24B32EC64DABBECFB8A99B74A7603DEE04153959C9AC4D5D95D1C00D71DD030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6cbd5e24-8459-4c0c-806a-1ea6e39fb047.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6cbd5e24-8459-4c0c-806a-1ea6e39fb047.tmp
Size 26KB
SHA256 4260c6fe285ccf162751921c0e813926307db2846217ff011fc806afc4ef26ef
MD5 19f772a015f2a24000a013cc630bb26d
SHA1 d4501a55bbcb327d8bf1a09a3d7a8df106bba341
SHA512 7af532daa03447c94ff30db01ac2421a376ef8a3435ccbba0d64268c1cd71a3240b19054f775590394870247c665a5d1bc2ff9a8bae62d3290547d71c3262f0b
SSDEEP 384:nHiFiZcI63sNi8TUNTUlIm25mg3P6K2fLBVR8+cnFQysa+VY9gL/7IzIop:CFQ63bwgSomBVR2FDhgfC
TLSH
T191C24B32EC94CABBECEB8BE5A74A7607DEF04253959C9AC4DAD85D1C00D759D0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73bd3a1b-ec42-4504-ac19-c942ef5273cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\73bd3a1b-ec42-4504-ac19-c942ef5273cb.tmp
Size 25KB
SHA256 fe896bc7c2eeecaa2c85548deb4872c8e6338d3a75faeae009789b6b630f5870
MD5 7898dc7c19f906283c34a94137408ee7
SHA1 113e4f44c03e73765d03756ef6e33e56324557f2
SHA512 b44a1c5f47c056385892427e48870426e1b156da978214c7bbdf150dead6d87b9229e513f8856c6479d115a143ee4f45e8e3cebc6afeb8535dd75e341cf8cc54
SSDEEP 384:nriFiZcI63sNV8TUNTUlIm25mg5NnK2fLBVR8+cWLsa+VY9gL/7IzIop:GFQ63YwgSG3BVR2WLhgfC
TLSH
T1D7C24A36EC94DABBECFB8FD9A74A7A07DEE01163849C99C4DAD45D1D008769D0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

812726e1-7fd5-463d-b3d5-0292adf2def8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\812726e1-7fd5-463d-b3d5-0292adf2def8.tmp
Size 30KB
SHA256 35394a3c41c0744026102bd2c7c5e1ea02462168da8fce0c141e7d0bfc39a6c2
MD5 b7803af980566e6ba51fd048cc4cf8b9
SHA1 dcd4dfa9b11ed3d3c98d93ae130ff7312e5aab16
SHA512 6c1e670511b31148405c1aa0d15f33c9d248467b08b398c027500e9c12f16fb2ff254feccd54e5adfb53ebb380d20446b0a430599467ee31bcc78d9651d3bf82
SSDEEP 384:nsiFBQkUSvGsN28TUNTUlI4D5mg1gpK2fLBVR8+cn6bnA8uLozMKwIr+jkxgL/7P:XFzGLwgJ/5BVR2688rwKwIr+AxLA
TLSH
T1F7E21775D894DEEB98E6CAC4A249B643AEE05233C58C9A8CD5F97D3C209F1FD1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86eae2de-84d5-452e-9072-7390bc47e919.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\86eae2de-84d5-452e-9072-7390bc47e919.tmp
Size 26KB
SHA256 4fb25c21f4b2a80c4b30c53088c80740d42166307cd81aed10ab6b64f6692f2a
MD5 6c68991e7eef96dfec8b3b6e860d4b2e
SHA1 126e8ead5e8ca7e286a89505e6dbb746b0de65d6
SHA512 6c215a35c5c8a1fe2d2096e77b0391c3fed50007e2dbacd62ca4cbd5a07aeb4836fe5e8bd0c288373468634c8d0fefe4c5718a250fdfa20e45b7ed1c0805e36a
SSDEEP 384:nsiFzQkUSvq3sN28TUNTUlI4D5mg1apK2fLBVR8+cn6QyxgL/7IzbIIlq:XFdq3LwgJT5BVR26DxLA
TLSH
T117C24B36E898DABBEDEB8A95B34E3683DEE05213D58C9AD4D9C91D1C00D72DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 28b62a3db7a5d2dc7d0616b81259ec388417e0c112ade2395c9934bffeca26c6
MD5 e41e3ae3661d9f8a37283ddbc07dd67d
SHA1 bbe9d4921f3283582d624215ab8cd50831de7e40
SHA512 f5639aa82cfcdd064e05545bb0809d1eaaed3d06bbd7545f75d6c8b57af8446fd7d30e46bcd87c8e74f4062ec8265eb16a2b26492761e618166d8a61c75f2bbf
TLSH
T157D080157D573EFDD6AE7176155C9580B540CF634717155007170D184D5029258D4ED9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 74c3d6ccab863895dace4818ca9321bdc450f8d715178020d97edddd9b366146
MD5 22418b5970cb068be2dac480e709ab54
SHA1 f4864e7395df95bc6493c738daaad8f926e7f8fc
SHA512 c4f30dc903f0171e5a0e173da39e7a72bf492f6f6a4b5c17dd16d96e31ea4c15697ddc5642c8e329ef95ce2b0192dd23bee3275f1e15c919f33e5b3763236b0a
TLSH
T196D08095B9D73D2DDF8F5571174DA7C07100DD7615170474071B060C554075164D07DC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 deb72d0e550e6d1c5e9e3a873334af9e60b9b63bc3481c301ac76493de8cee96
MD5 d85c7c9046520dcf56369aa4919a51e6
SHA1 deed32ed6a1131f0c6b803a5cc82b2ee17136013
SHA512 aa0d3a9cd08ab8d4ebb7cee87ab1b781cf590f9da951781b14da1f90b28eaf58e2d579ecfb710569f95ce2f945f7028d7d559192f855e5becd2c7082bdde927f
TLSH
T165D01295A996392DDA8E5571174DA6806100D96615170474061B060C654076164D06DC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

474acfc0-eefc-4063-b54c-c6a866823fdc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\474acfc0-eefc-4063-b54c-c6a866823fdc.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5221d5f0-8802-497b-9206-1a60346d01c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5221d5f0-8802-497b-9206-1a60346d01c6.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a7c91f0-ed01-468e-8482-b53011e7085d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a7c91f0-ed01-468e-8482-b53011e7085d.tmp
Size 11KB
SHA256 95f38b3e6bb7ad18738d6f722932683dbf0b07db457e623a754995d925600bb0
MD5 93cbf97a12cf0cc45c55d36d52ebd166
SHA1 ad99850a235ddf85a904ae1bf70a203cd14c87ce
SHA512 baf8c66804fc01c37d70be54cd443ed42837c74b3ab496d18cc5ee0dabff61318011f06128ce3bb9d276f80be8312556ccbf4803496c6a17b545ca3782e22832
SSDEEP 192:sxZERAkj/fwsKQZZ54zodpHNHW6+WNGYbItR0YrJIgj/J:sxZEFj/fwsKOZ5LtHbGFMYJjB
TLSH
T13B42C715AE28AA7F9CD7D20DFA55BF53E7F91032A0955E44A6FC8A2C04E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8fa8a7be-89b0-413a-9b8d-fba544fa8765.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8fa8a7be-89b0-413a-9b8d-fba544fa8765.tmp
Size 12KB
SHA256 00138d25404a8bb680c4d6fd4d5a348cf65e7c66d5fffdb11a3a2ca019155641
MD5 18e4fde0908314259e6e91458bcc8b50
SHA1 f499855c49a38bda282df00d0c254fbe8c0d3c4e
SHA512 1319fe660c9f456fadbab6c4047cb8534ce6044b49bae5c997cc8241f17319221bc943c45e22ca273dbea6dbfeb18e8855cb9488155249eb8673561a26247d49
SSDEEP 192:sxZER0kj/fwsNWpVnQZZJ4zodpHNHW6+WNGY7InF0YqTIgZ/J:sxZEpj/fwsNWvnOZJLtHbGJ+Y0ZB
TLSH
T10A42E615AD28AA7F9CC7D20DFA55BF53E3F91023A0955E44A6FC8A2C00EB6CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9147fddd-6add-4422-95e0-22e3b222d656.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9147fddd-6add-4422-95e0-22e3b222d656.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

96d8ef2e-fea0-4279-9a6c-873c1faaff56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96d8ef2e-fea0-4279-9a6c-873c1faaff56.tmp
Size 414B
SHA256 ff1cd6de8ce129e236147c94718ac9dabffb1a901000fa373992b1c5090e973d
MD5 9bce638da5189fdcc742abdb68d5b44a
SHA1 50be89b13c10c8b365a669fc7f901953911f0d64
SHA512 6e455fe7a59eda9941deefc83801d0cd17d40bf49b5a9c0cf132ae1e33a80d3dae34bfa6cbd7c3a88da44b3b9c3d3a1958ddf77798138535ccfd0412150ac5b1
TLSH
T1EFE02BF9CA69BC3B1CFC072950540685EA4513473A80C44F373CD10D8FB177A818786C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 874b5a8ce7db813f0c04684be653c8ad5a61f8926e22bb11ab2e534376e002aa
MD5 41f59104e0d9864b571254399724eaa2
SHA1 9e89dd6f0792bc4f9e161328242fd3aaea9e83a2
SHA512 97dd476315f8f352ea7f54ef07ec9662c5e80266964f5f2be7987a840fc38639050dff1e46277f1a60a02104294da8b8c529dedc3020c090603191125d29e9c2
SSDEEP 192:m3m70rJY1fhrdOZvBykbgxiB67ERhq0jIiLLZM9ms36nyHsOym+v:6mDOvwi/PZM9F6UsOym+
TLSH
T1CF131C7F36902E21F3FB11BC86979B340B76E631D8C24B2742F6F1044A1678A9D4F256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 67afd9a0efbab5d301ad01aa97ae0c53d6082568a312bbb6f5b3ff08338f290c
MD5 5375e51b6244d41780eb27a645be9cfb
SHA1 82c1725f9021fc80edcdca0ae24bd72577dbefdd
SHA512 aa6637e89592feace450a5284f19debaa15a1cee6e4b95cd2ae6f5bfec65c93281fb8a242ff7ee82c86fb451610ad6757ecdee22ced4e654a2e8f0788d6b4514
SSDEEP 1536:TaazFp6L/+bL/3ARO5w219d3xUdimabOUL/UDzL/QL/8KD:TvOL/IL/F39hL/UDzL/QL/8
TLSH
T1694440F71951600BEBA852F6D2033E3EC1B7455E6CD1F9A9E1BC9C812825F31B6BCA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 6ed210a04a5f1cd3ceedf42472b190ddcb301433b1c30b4d63a25bac86810d5f
MD5 fac4dbdb6e5a9be7f68039f0c27d6ced
SHA1 5fd189342f3a91075a60753f120cb5260edf9a7a
SHA512 48f4696ee44d3383a2ee0d18b7719716ba1427e6e1300583a15bdd64274d9772b4a5db12092f528406d7cddd910027dad5f22fcb8a99a867254c8eb03d66e3c0
SSDEEP 3072:rW3nbev51t6AifouoervOtMMehWxF402BOAb:yev51wAgZbOtMMehQ4hBOAb
TLSH
T1542539EEC7682C83DF6B8770B0E0D9077E712082B659D0D39944C5D897D2B857AE92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 71275ef635bb67fe7ff8a65900cad7958394458643f20ec7d2877e3bf3980f24
MD5 94f44e22c8489ff934613deeaf7d6d2d
SHA1 f45f90cf1ce197b001502ab9c9744f5119a59515
SHA512 857e63f7c876c41b4416353553e555733ebc81ca1fafba0b42d518a297e95ed282228d98984f3b2b3891a5c398f8518f4ea6ecc5e7da35f6eaddae49de11fad7
SSDEEP 12288:16988jQKr9pIaLjNc9DM5FZhAbuXJTQXWlFLFwD58CCZWtEkvg01D32n0McVKZgl:ZWzwJDdmIyGKxJ2DU9eLTKNr/oL
TLSH
T18D166CEDCA7858C3CD639A30B4F0E9877C7413C3F955D1D68898C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

5d94b1f3-a716-4784-8730-ae140b1378ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5d94b1f3-a716-4784-8730-ae140b1378ff.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 db9e2cbb238a4a4d7281cb1177b49ec67ef0a2b3e0e8c356fe03573c31147e1c
MD5 18f1332faf82f3c2a924361e5807beb3
SHA1 774eaecff83e0f3a96cabd79a7b48d4872a56128
SHA512 72af2face425c86f8dd6808c133377c0aca838c1df89189fc9e11edb93b7e21dde81ec98d1c1c5d16b82268e73f958d77c721f1b98e586b6b68792b37df0e25e
TLSH
T159E0D89558CEC22E5714398201266748C3817567D791EE071B05CCC17707601B749647
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 d54ba3e6f4f8bf273a13891aebd025979884da7a4f2a835e594f4a382c93f3b4
MD5 ddf11e78cc9bcf944c580553c6e16d73
SHA1 fdba0c5340b7e03ecf1fdf055d3babdcf9ced304
SHA512 c4cc91a65ba3214b8ff75db6594dd769ce9387ec9c05132cf247ae99ebec9984546d6e3df4df1fb352d419d6d8638fb09f7ffe6fa3af44bf70f43d9141526abd
TLSH
T194E0260415C8C12F911C789B0368670987D63412B3803F0E3F4AC8806203F82F78A381
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 bf09e9f985fa46f9a930cbb32aec3e8718f77634c98abe245b6db9c7ee86cab2
MD5 feccd1b809dcc30605d1e44365744f28
SHA1 f0f5b9e1229ea04d40b480be8a117021e9fe47d5
SHA512 36cf9f6d573b09bd51bd6033d2cc490dc59a075506fb48602f043586e25914cea2a55e4ccce174dff3d7a47c88efc276c32ce9424444c19d013299ddf03eb938
SSDEEP 96:njOWiIU+bGz83uy3+u4tgp4DLjGQLBze9z3ZyZpjBHMsDEuspU0wbtqrOQpPfR4A:nGf+G83uy3Ct7XBBK0H7DXspU3iV
TLSH
T15214020E4F243721CDBD917669E744B35D7CF03FCB5266DA686114B4CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 d9c857997f730813954d23687c43947dfd7a4074f680aa306747888d6472edeb
MD5 1662f52091547035c986d48d14a19a69
SHA1 103a85d8e94fb80cf5f8dc5728b5d95c694f495b
SHA512 4cbd8ba0d5fa2cbc44a460a42d4d08d06ae45fca6a7cf97133c71c3f13908dc86261be07c04d39d469ab073f64d2d559a1a4549a4def072f943005201ad3f6e8
TLSH
T130E0D8A185DDC13FA658248B0254770DC7A13417D6C4AF4A1F04ED42B147604A7D52C2
MD5 SHA1 SHA512 TLSH

Submit Download

9f3a1631-b46c-4cfb-a7d6-bc60980355ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9f3a1631-b46c-4cfb-a7d6-bc60980355ed.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 58e1be21905a7c000dc26b40d28b1e428fed3a1f434cdb17fdd122df4cda3a40
MD5 2798225a070f876f48eaacb7c6986d75
SHA1 337519ac590af2db8c1187eb02d43a616e54bcca
SHA512 a932bb319d42011fe4ac38260a6b381609554b7bfed6169ff583950c6e391e35e1e8189b50385c864390c4c9e1acc6a11ca04e12bdaa63b248d3d739764a66a7
SSDEEP 24:TL68LbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfBMozwORaXkOZ2+AwH:T2SLopFMatSaw/auUOt8BMozwrkO/AwH
TLSH
T1AF924F4D1F306111D0F09B76EDD689672EBC201CD3A37A8A9D1460F3CE939AFF0095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 b6c50952ecbb5bc22c3b3946df1b2cfacbf093643718ff9e984c1801a60179eb
MD5 8b3f23e664eab35c541e9399ed401dda
SHA1 27b0a3180f3c40b6637b707774ff422ef7b2678d
SHA512 142e020f38271117305dd3debc95a339fb90f0f9995998d6d6759baaf366e662c3f21a95be95d26a34bc642a7b49422179cd63cdcd19fe49597a57e2177900bf
SSDEEP 48:TKIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBTlf:eIEumQv8m1ccnvS6X1TFdf5nFXP9XH4g
TLSH
T17DF2FEFA07276105D98444F0E4009FCEAF0A014B47B2B6EC76D447E3F3A21E2B6B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 185b3699e8c1a040e663dd12fce59058bb97d6086b6f2231beadb9ec328c5d05
MD5 1cd10ee08e06ebc075489d18d60d7a2c
SHA1 87fc3d7f4a93e85fc73a50a81899b571f2c1c6ba
SHA512 24e7d890edf0c1994a07b4cccb90f61175eec9891526abaf29712e1fa1654474f4b0feab400f04c94ca0a747cbdfe3fea60ab5b787681aa6832a1a096895c39e
TLSH
T15EE0D8D3A0BDF4BA1039487A0FC4B806657AA032016170B6DDBA937D70D10B7275201D
MD5 SHA1 SHA512 TLSH

Submit Download

b83872eb-23cb-4761-92fb-80c2c5187bdb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b83872eb-23cb-4761-92fb-80c2c5187bdb.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e7fda26e-1624-4d33-b1b4-5bf91757e78f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e7fda26e-1624-4d33-b1b4-5bf91757e78f.tmp
Size 2KB
SHA256 35682f99b85d8d5977a1ad484b4002507cc276cd2f7d64ccb6e51ab93fd3b133
MD5 f0a2d2aa0a4838000ceda7614ee0fa67
SHA1 60e9418d4be9d8c78b375373404faf490dcc05cf
SHA512 c1541340d7121efb30c6af29a4a75228ca48f528613e6366ecde13144bfc265c595f2e3815c7779fb7a7a93e5bd1bd6c9f4bac545678e3cb40ac1dcf02647a77
TLSH
T1AC41A0F783F4866E890196F0AB14AE2BDE1D0515432C3C5A89E4AF1B57F24B1D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 4bb0ca898b86793d8404bda9c4973ba173cdbbed9da7f9847ec523ab5a4be4be
MD5 5860dc368d53eaad9c17848c478832bf
SHA1 aecca6ec6d7df36904f903d004c5969d5324c79f
SHA512 d3d9886d96c7e6545848c60be18d10433844e4fcfda4b57303f1b0c73f300d6c16d917f763ccf4dd49bb007a776cbee2726f9b42badefab56d9d79b3704f9eb5
TLSH
T142E026200ACCC17E621B6053032993088BE5B43BD3C43E0E6F88CAC46247E0DF296693
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 90327ace43cbe617696a1426e5c94a24a8df24a322ffb09e08f79fb5f4f09fb4
MD5 d38137be4dfcf0dc0f24d882a29e5f34
SHA1 77463dbc52d2d2dfe368bc277ac596ff94936fc1
SHA512 9aae80588edb3632051370c7688fb75c4934470393bc7c105e8cf8e12cd1f732a5247af4f13485138473b131f20bdefed0c36e6dbba3a928d1c961a12c7a2f2b
TLSH
T142E048741AD9C32F628930DB0254E308C7B37467D7C46F192F08D780634B644B767782
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 8d4a44ca1eefabbc99d258201af1470952085c6f8df67777d26f576b5be14c2e
MD5 8f4103a3b22b8c8bf772efc4a81f93ee
SHA1 9f15af014c9a15a5d982f3706c82903140af2214
SHA512 c15c383b418ae702051c1fe96b6eb439edb60cd0fb9d3c3f0de4e98ab81a494329dc38e4ede12e2d93811b0cad50be158483f36a92e6b16b5f67e9c85f0ca96b
TLSH
T14DE080754AD5C33E5344608F0264E71DC7F2786797C57F4E6B0885406207644F7797C2
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 7e3501924aadee161110f0fb111a204ae3d3b2be0ab481b9cb6734ec32fd61cd
MD5 bd950e710fd9a1cf4c981910d621a619
SHA1 df12a9d58be905169730cfb9cbda59e5f292ca22
SHA512 6f6a71d051b60596679fb48787fef19e87590b65a8cc4c88ad660184633a6ff3f54c143db6bce931db58236abf34771064ddeae48d50ebdec03cc97a101107e6
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXsfFW:OtfFvpopPxrB4Rhfs9W
TLSH
T18EB2361571BA021038FE690C81B6972F464232B33259E63B7FBD14A69E6BF045DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 29c4f452d309eb3eba96e7284e7961dfda3e8da36d91d12f99642f3b830f38ae
MD5 14b3f8b6f950abe96986f2dd5a4e538d
SHA1 9e6a856cbf5df837a99d170be795a15c18998243
SHA512 a6a671e1bc8fb1f19cbbd9b769cd2b13aa2b7582863a6e7ef691733fb1a4f57ac788f5dfc52477f453a4b36594f95ac61e6c458f7440dafe0ef9f7dcde4b2b01
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXsfFxPJB5g:OtfFvpopPxrB4Rhfs9xRBq
TLSH
T172C2401535BA021138FE390C81B58B2F464231B73219EA2B7FBC44A69E6BF045DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 132e6c6f63c2c2889a4eb170da92c746d8a9a66fd0807cc1ed096791d18fe5e6
MD5 b18ee97435d7b8a81b19595191f33e9f
SHA1 3de7a9dc3cbdfe49915e68096d58cb92fb43a164
SHA512 6720cf7c0f488d53de8d03e3ff3136d165facf8d77d93a6025233af5df47a2407fb474333b3b0dd93edd17a287450b110a5cd5896f6c252fcdbee6d666536917
SSDEEP 192:P+xWm64fT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxRxfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1FB24730A7B747001EDE6E9725CB080771E3C716DCF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b75b450a-ab89-44da-972c-8625c7088dbf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b75b450a-ab89-44da-972c-8625c7088dbf.tmp
Size 12KB
SHA256 d0f324f3336dd56032a229b0a07179a8abd7ef2f62c523204dcef9ea41c71289
MD5 75f6a74717137af84b5046d06114d8fd
SHA1 080a61d0c90f20cb995c71100ac834ee03f2bb6d
SHA512 b1cf505fb9d318b372f77929d3aa4b13901e17273bcf83a7f77f3d160b57f85c8c32117336860b96256daf5676e717c5ac7dffafbb8ac31fbd5bcbdb213b0b49
SSDEEP 192:sxZER0kj/fwsWiWpVBgZm4zodpHNHW6+WNGY7InF0YDJIgZ/J:sxZEpj/fwsWiWvB+mLtHbGJ+YhZB
TLSH
T10042C515AD28AA7F9CD7D20DFB55BF53E3F91022A0955E48A6FC892C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 c128646134a3e0ed44fe2cc1284cc0cfd99f828759e8999c899adbd1907d9ba8
MD5 721f655106847db4e644f9c9e93bfb83
SHA1 8837d43e3ec63ae10c9ccb874472fe26130dd447
SHA512 8d8d04028f313c0bed1de6266e08e752f70ff6ddad70bbe1ba8a6265697700d153bc6ecd566b3a21712b439843d199afff37f34ed1382268a768f6cc498952d3
TLSH
T1D45193C0B3E954457EC9BA41C22D9503A4A63E7B220EDCB57B3E84F48F498180F6FD62
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 bd4e57755456479f979e2ce1b700632a75f87cd3172d893ba097139d85ec705e
MD5 7e6ac62b855fc2f16562d947f70a777e
SHA1 12a3ac567dbb168b6ed1b67ffa519f858abb0ded
SHA512 71fe4741e4b44e42e4657f2887a508eb76cd384fa0a45f0fa1fc28a68e3dd1f3f0b7139cb6b4397f8e2997590ee38f076d161b753ec91471865b4639122e0c2e
SSDEEP 192:42ODTAs7lrNUQ2s5WPIBD3QxIIIwb8MIMWrYcYw4:aDsshR2swsQxIIIwb8MIMqBA
TLSH
T19B52713D2E092B33C05E1FB7166A4F945BD8C84112F3226D72A1185F9DF6BA786C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 2fc5b79eff197c4de6b48669294dfc2397f54ebdcd5f74bbc12a062a48dc701f
MD5 3b46f1a11b8b231cdf22cfad00504316
SHA1 ace5f75bb508e71e7fb9560e91a72b44f368aa5d
SHA512 b6d0efea8c038cae7482d4d73b528c5ee3bd304015304be5ce8e80b62fcea14a1243a35d1c6354a3e217c363d21baf54c772189caef04c0955e3d79d06f03aa5
TLSH
T13EE07D10BAC8C12FB11D308B11255789C3863813FBD02F0E7F09C5C4A607B80F78A382
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 e95270795338859cb7dac08e5d81accc1814a9aa45f45d6b848b6285d8fc4ccf
MD5 17cbf99bbc6be452e6b3274030e04cf1
SHA1 535118a6dae1c18e1b0a6c262c489c29bfded53a
SHA512 6562ed025d0bfdfcef1c8e28dc7d53fbf879faeb9fb12335e8b6239ea39a3082ad609668beddd71c0d5fd2ddf13e473e932c61278bc6fd73994cb6c753046c62
TLSH
T1AD21BF56F320C149E14E863DA06BA7351378E8529FFCEC0F45B964356E72A001E8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 ae070bb7364cf552c92335cc2b2eb57f35965df389c112dc098ec8a05a5d7e49
MD5 7b8d38722ab974feeac94d2c372338f1
SHA1 62b1e1cf2ec1d82b83358074aa0f6810248b67b9
SHA512 043d39c352cfb0128fadc92cc55319b1c777398fe4c3ffb91280c7e48c8b1d0aa7fc32078280778197afdb2f1f1a91492116ae00aa4256e8f6da3835c517509d
TLSH
T163E0201075D4C11F5119308701789789C3973813EB907F0D2F05CE845707B81F74E242
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 9f5a0cd7ccdc3bfdcb3d6d440064be386188394330f06fa1d3f27185d76138f7
MD5 4871ac798d7e982329a6321444ecf220
SHA1 af7936f962dab730e177a6c48c9b8722c2792290
SHA512 ba6d80722e1ac2f1a432e78f1705e91039c5726c7b4cbd79476b40b7c7915b679bacb92d8abfc73e236919279a61e58d12c90980946085d5a41273cf0d59e4b1
SSDEEP 3:MsEllllkEthXllkl2zEflf:/M/xT02z
TLSH
T12144040C7FC00405D54010344051C3D05370D4110513774334D145335DC7FC00C00100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 0e489b7e42a214f67a594e43dc9a65c63e5ab73a07a82d643e10077cef586af0
MD5 3e9b036075c0617f50097fd6f4c48977
SHA1 63a62e05b2eb7318dee9509c2fd8b3ffda9e8ce9
SHA512 c1660a2d57ba97ec3c7fb55794d78b723816c164f7d13249d043c9e32af4bb7e7bcf960061b6636f65d35abd2c01dbd648bc6c7265ea659fb199a501d2243e85
SSDEEP 384:nsiFBQkUSvGsN28TUNTUlI4D5mg15pK2fLBVR8+cn6bnA8uLozMKwIr+jkxgL/7P:XFzGLwgJi5BVR2688rwKwIr+AxLA
TLSH
T1EEE21775D894DEEB98E6CAC4A249B643AEE05233C58C9A8CD5F97D3C209F1FD1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 e521a3dc7f02277ff4f80e0afaad0d94ddbf4f67b05c079b902b43824b97f00d
MD5 6056464689e40a3476f77d2f1ab10b00
SHA1 d6e3594c347daca4a60389a9851eecf8542deec5
SHA512 223b26f857186ad4a51cbc1a4e3449b266f1c478dbc072b6272c3d702686420f6b101dff4b6d83d612f12ad7f1c7790a9a8c6f12b14e5070b704c61bebb76813
SSDEEP 3:MsEllllkEthXllkl2zEflffrz:/M/xT02z
TLSH
T1634404047FD44415D510113040D3C7501370D410055157C334D34433DCC77400C40007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 4KB
SHA256 c0a2bde89445b2f426b3871b32a4f7cff2d17cd189d886c72af469b982fec5ff
MD5 175f52a637ae1c72eaa142b060d06b91
SHA1 ae910649f68a9377f06435c2baee3a40a421b53b
SHA512 c92e56a63a124595c43c68a36030cb24b07d5308d2c5cffacc570acf4aa63b0bc7a474272b64343325f675926d2416b353c287ae49a5e57c2cdf7e579f3f2d5d
SSDEEP 3:Hqn3llQ/8QuQll/lZAOSl5eqJ/cSFYojpuyOV9RUIU:84/ZlaeyEGy2
TLSH
T1EC9112821A00CC73DC856B3F78C2009ABF721A010E86E8104074CD6287C57057A0896A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b2f8ad3725d70b6d401f76bdd7ad1dcbf2004a528edf1505ba960cf42d925793
MD5 a340599b076501137a0619c9d53fcc34
SHA1 ed70e2f556665e328296a93d489b4b789386584f
SHA512 c306149beab2cb0000cda8aca2a6778305b886805cd6b368f1c65cb73d2b00ad88aa8a0188e318ddcdf92febad805fcfe0d63739418eadf893611d748e439543
TLSH
T118412A58A6E91118B3B77F5AAFF6986E487FBC772F07945D10010E4E0A62B41C8A2737
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 7aa06f4a9ae1ce232977b7661dd22a7ceed1fdd139503ad0510a8f7fa114fbd9
MD5 c0fbfc72bbfaa7969b8adf13f8b41ccd
SHA1 f9758bb1ac85f543da13b98d3a8ffeb3c7e95f64
SHA512 4e3fe74c7c261ccbab36a3599f69d2ff47f0a8bf3d41a06d42b84b8e1d2879ff7e62305e1c86e866ef170e47e42c2601a6f94634089f332f7a4c76f1d7b3f1a3
TLSH
T1B6514B5CA6E90018B3B7AE5AAFF6796D983FBD673F06D49D00520E4F0626A00D861737
MD5 SHA1 SHA512 TLSH

Submit Download

0f89f9a2-2e91-4e9d-a4a3-0cfc43f71d57.tmp

Path C:\Users\Admin\AppData\Local\Temp\0f89f9a2-2e91-4e9d-a4a3-0cfc43f71d57.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 82b036fd5b91e6cb509316522a896be6a5c1ee95cbcab38ffbfa794122c2947f
MD5 52a5d3a68ee9862e1c2357fd91f8bdad
SHA1 3b3bb87a322fbb33a55a7a2bec2c4b7f2d8ccb05
SHA512 6c3c457278a30aa1091ea08f68508e90bd990f955fe35873c74bd052475cf1c93b13b787da5af9e773d3462f15dd6ae43407e243b2389ea193bf2df24ee67122
TLSH
T177414CD03936B63B8B874BD960660C842561E190233FAA5CEE0B5474BD5CEE2572E7CA
MD5 SHA1 SHA512 TLSH

Submit Download

61e73cd1-8dc3-4896-9116-6072c30b4cfb.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1560_1165187698\61e73cd1-8dc3-4896-9116-6072c30b4cfb.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1560_1165187698\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1560_1736538505\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1392-205-0x0000023380000000-0x0000023381000000-memory.dmp

Download

memory/5540-931-0x0000024D2BBB0000-0x0000024D2CBB0000-memory.dmp

Download