Automated Malware Analysis Management Report for http://elizgallery.com/js.php

Overview

General Information

Sample URL:	http://elizgallery.com/js.php
Analysis ID:	1561561

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Stores files to the Windows start menu directory

Classification

Signatures

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://elizgallery.com/js.php

Avira URL Cloud: detection malicious, Label: malware

Source: https://elizgallery.com/js.php

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.84.254:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49805 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200

Source: global traffic

HTTP traffic detected: GET /js.php HTTP/1.1Host: elizgallery.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: elizgallery.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ntp.msn.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: api.msn.com

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.84.254:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49805 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@70/187@26/169

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Temp\1ba59dd6-e3b2-4940-9d8f-d3903052d9ab.tmp

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1904,i,12433051424657817071,15734140815186576603,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://elizgallery.com/js.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1904,i,12433051424657817071,15734140815186576603,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1980,i,17459245928728119560,2368859028607615365,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6116 --field-trial-handle=1980,i,17459245928728119560,2368859028607615365,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=3512 --field-trial-handle=1980,i,17459245928728119560,2368859028607615365,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1980,i,17459245928728119560,2368859028607615365,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6116 --field-trial-handle=1980,i,17459245928728119560,2368859028607615365,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=3512 --field-trial-handle=1980,i,17459245928728119560,2368859028607615365,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

IP	Domain	Country	ASN	ASN Name	Malicious
18.245.60.72	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
23.44.133.41	unknown	United States	20940	AKAMAI-ASN1EU	false
172.217.19.227	unknown	United States	15169	GOOGLEUS	false
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.6.158	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.16.158.176	unknown	European Union	20940	AKAMAI-ASN1EU	false
23.200.197.152	unknown	United States	2860	NOS_COMUNICACOESPT	false
13.107.246.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.217.17.67	unknown	United States	15169	GOOGLEUS	false
172.217.17.46	unknown	United States	15169	GOOGLEUS	false
23.32.239.58	unknown	United States	2828	XO-AS15US	false
13.74.129.1	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
204.79.197.239	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
23.206.197.58	unknown	United States	16625	AKAMAI-ASUS	false
4.153.29.52	unknown	United States	3356	LEVEL3US	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
13.107.5.80	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.217.19.238	unknown	United States	15169	GOOGLEUS	false
13.107.21.237	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.217.17.78	unknown	United States	15169	GOOGLEUS	false
13.107.21.239	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
92.122.154.113	unknown	European Union	20940	AKAMAI-ASN1EU	false
69.192.109.165	unknown	United States	16625	AKAMAI-ASUS	false
13.107.42.16	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
74.125.205.84	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
2.21.72.80	unknown	European Union	20940	AKAMAI-ASN1EU	false
23.209.72.22	unknown	United States	20940	AKAMAI-ASN1EU	false
23.206.197.25	unknown	United States	16625	AKAMAI-ASUS	false
204.79.197.203	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
64.95.11.184	elizgallery.com	United States	31982	BRAHMAN-NYUS	false

Domain

Country

Flag

ASN

ASN Name

Malicious

18.245.60.72

sb.scorecardresearch.com

United States

16509

AMAZON-02US

false

23.44.133.41

unknown

United States

20940

AKAMAI-ASN1EU

false

172.217.19.227

unknown

United States

15169

GOOGLEUS

false

13.107.246.63

s-part-0035.t-0009.t-msedge.net

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

13.107.6.158

unknown

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

2.16.158.176

unknown

European Union

20940

AKAMAI-ASN1EU

false

23.200.197.152

unknown

United States

2860

NOS_COMUNICACOESPT

false

13.107.246.40

unknown

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

172.217.17.67

unknown

United States

15169

GOOGLEUS

false

172.217.17.46

unknown

United States

15169

GOOGLEUS

false

23.32.239.58

unknown

United States

2828

XO-AS15US

false

13.74.129.1

unknown

United States

8075

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

204.79.197.239

unknown

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

142.250.181.65

googlehosted.l.googleusercontent.com

United States

15169

GOOGLEUS

false

23.206.197.58

unknown

United States

16625

AKAMAI-ASUS

false

4.153.29.52

unknown

United States

3356

LEVEL3US

false

172.64.41.3

chrome.cloudflare-dns.com

United States

13335

CLOUDFLARENETUS

false

13.107.5.80

unknown

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

172.217.19.238

unknown

United States

15169

GOOGLEUS

false

13.107.21.237

unknown

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

172.217.17.78

unknown

United States

15169

GOOGLEUS

false

13.107.21.239

unknown

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

92.122.154.113

unknown

European Union

20940

AKAMAI-ASN1EU

false

69.192.109.165

unknown

United States

16625

AKAMAI-ASUS

false

13.107.42.16

unknown

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

142.250.181.100

www.google.com

United States

15169

GOOGLEUS

false

74.125.205.84

unknown

United States

15169

GOOGLEUS

false

239.255.255.250

unknown

Reserved

unknown

false

2.21.72.80

unknown

European Union

20940

AKAMAI-ASN1EU

false

23.209.72.22

unknown

United States

20940

AKAMAI-ASN1EU

false

23.206.197.25

unknown

United States

16625

AKAMAI-ASUS

false

204.79.197.203

unknown

United States

8068

MICROSOFT-CORP-MSN-AS-BLOCKUS

false

64.95.11.184

elizgallery.com

United States

31982

BRAHMAN-NYUS

false

IP
192.168.2.16
172.165.69.228
172.165.61.93

192.168.2.16

172.165.69.228

172.165.61.93

Name	IP	Active
p-9999.p-msedge.net	150.171.84.254	true
chrome.cloudflare-dns.com	172.64.41.3	true
elizgallery.com	64.95.11.184	true
sb.scorecardresearch.com	18.245.60.72	true
www.google.com	142.250.181.100	true
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true
googlehosted.l.googleusercontent.com	142.250.181.65	true
clients2.googleusercontent.com	unknown	unknown
bzib.nelreports.net	unknown	unknown
assets.msn.com	unknown	unknown
c.msn.com	unknown	unknown
ntp.msn.com	unknown	unknown
api.msn.com	unknown	unknown

Name

Active

p-9999.p-msedge.net

150.171.84.254

true

chrome.cloudflare-dns.com

172.64.41.3

true

elizgallery.com

64.95.11.184

true

sb.scorecardresearch.com

18.245.60.72

true

www.google.com

142.250.181.100

true

s-part-0035.t-0009.t-msedge.net

13.107.246.63

true

googlehosted.l.googleusercontent.com

142.250.181.65

true

clients2.googleusercontent.com

unknown

bzib.nelreports.net

unknown

assets.msn.com

unknown

c.msn.com

unknown

ntp.msn.com

unknown

api.msn.com

unknown

Name	Malicious	Antivirus Detection	Reputation
http://elizgallery.com/js.php	true		unknown
https://elizgallery.com/js.php	false		unknown

Name

Malicious

Antivirus Detection

Reputation

http://elizgallery.com/js.php

true

unknown

https://elizgallery.com/js.php

false

unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\6915b6cd-324e-4070-86df-b8d7df7b4501.tmp	JSON data	6DC57CCC2CAC159D13ABDAF28E42801E	B8613ECE9181B7E98FBB2B09BEE5D2BBB5D89ACA	B99AB4F35314E41459D3E93643450ACFE971A7328A4A68FFB053A04D95BAFB48
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\45727950-20a0-41db-be05-3a4fffbb1166.tmp	JSON data	8574D972959B295FEA388493B825FDF1	388510DBD841625F1DFFC1347A4C41B8AF07B23C	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)	JSON data	8574D972959B295FEA388493B825FDF1	388510DBD841625F1DFFC1347A4C41B8AF07B23C	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-6742210D-1EE4.pma	data	B415558B421E973795D71198550862DA	9144CA9F3DE4311298C2906FD6E3CFE72D8B029D	16A980EB7B2C91C500432C598FA8328AC6AA0C2D23F740F9E775C7ACC1B67550
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat	data	6ADE03B9CDDBE3063CDE85FFE2FA23B8	BB954F44DE116EB35F4FC46372CCD7C0E8024868	0794BB4D5A452DFCD4E3082DC11BE7E399BDAB5CCDAB1DA7AF7ED2C2834027FB
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\1a4657f7-ff8f-4f0a-91d1-a3be4b8259f8.tmp	JSON data	5CC9A12D38BD47F3874F22295EC428CD	80E2DCA9537DA6749F7A9D2D00A25CB27E357E2A	ADCAC765FC56E701A3BF6B047B0FAF0141E3AB5E913259B5655392168EA2FBBA
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\1d73f5ff-706c-4454-a946-efd628da9ee9.tmp	JSON data	81BE2227F2C1B40B91B3264E32FC8077	EEC053640F20B692DBFF37FCAAC5732B3A4D9F7F	C426AAC68D8BADB4CEB2FD5FC721FE260486AFBAE488038B9D918801527C9136
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\20f89159-2057-49b0-9948-623c2a0e9fd2.tmp	JSON data	61DC33A6CDD3A4F497B6844B034F7CB4	9A089A8D36F2CC23B28839F2ACB1277DFE038DEE	400B17DD4B6197FF541B32C91945E2C7FDEE269D3477979A006E7633973B472F
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\696ad080-bc6e-4a0c-a1cd-ea61e2999583.tmp	JSON data	E60674565EC37B92E60C0065FC9A0E97	9EED3A345C55B17CB1659D187D73095DFFEA04E8	6379717B29F26075CF81EC11E78FEECCC5A95DD1EBB4B74AC900FCEA0B8962B0
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log	data	701057EDCD416C80FB618C959EAECA1B	AF1EB3BBB729D8FB8BAED7E1C754E5A5C61FE439	7B8FE24D6D41171B4E00988F650F746462C1F375FCBA1E8D820F1A553E88EDF6
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG	ASCII text	D2DC4F350F45C0916FB6FBEAD2CAB55E	04FDF59673223779636343BA3F25816C6A8D2709	36D64458B22C6BC7F45F156887493D87BE078A71DCFAE4E69C7FAE8844B3F4AA
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1	3072C22920DD4F2B5F9764503483AF40	97B3C5B3250DD489BA9953344C08519B5D4BE266	EB5FA2580C39D4E9A95031D6EFA3894A7158B1060C20F44DBE0601BF156AA8AC
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5	92F9F7F28AB4823C874D79EDF2F582DE	2D4F1B04C314C79D76B7FF3F50056ECA517C338B	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_1	data	D0D388F3865D0523E451D6BA0BE34CC4	8571C6A52AACC2747C048E3419E5657B74612995	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_2	data	0962291D6D367570BEE5454721C17E11	59D10A893EF321A706A9255176761366115BEDCB	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_3	data	41876349CB12D6DB992F1309F22DF3F0	5CF26B3420FC0302CD0A71E8D029739B8765BE27	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\index	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0	D1B76F4B66A594CE24BB39845FCF9372	CB295840A596E0B6BA2023A05DF7D6A35300593B	2C14B09438D1CFCDFC72295BE028D73142401D2048140411C630F7C84DADDC10
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG	ASCII text	830E883518B666F4D4EDE954247E2EBA	9E766919E80C0742CB5A7AE70C7820C71518926B	88D62AF54CE844B215B12A8965DB6601EAB0A1ED6D4856640FA1AD232EBA0763
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6	23D78EE87C3AACB3178A3BB19AF0B773	FE8B6606F82AC1D9398C01B1BC266C8EE78C0868	EEFD2411E2071DC6B0FD5BEA0C2325FD611E28C03EB1214EBF87DC29783A3D73
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log	data	039931A40D6255545A282AC264D93A41	CC34534CF370A70C0D8A0250EC070FDCE88E631E	35182807BDF48544A18309C1BF30EB3DED8129F4DC1AEEA496480C68E21088F3
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG	ASCII text	C3657C7E3DD8F6364B15EA39D6FB5AB5	DC4EADD2A4EEE774747A6D021A1C2CE4678F1F46	41E87C5A95A818D32A0740E123CC4AA318B5181D996FF7A917975A1217207324
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json	JSON data	3B5409E6F199BE32F19E9E8933F466DE	E0EA47C8FCFF1D6EC971D679E775EB98CD9C4F54	D43D83D0E427D3FD34175EB6C9973559FFAFE0CE66B4C96DB50E11BDBFAC88C6
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log	data	BF097D724FDF1FCA9CF3532E86B54696	4039A5DD607F9FB14018185F707944FE7BA25EF7	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG	ASCII text	C56E2C28B9B1D6FD2E52D8DB368DF37C	613F990AE3D630D0F7847E07F28FDB4E694E76A1	4DB3ABBAC0816BFAE70EA023009E8F0A9DBBC2F25768C9A3F04CA86DC56881B9
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG	ASCII text	7AAA4BBEBCCB19C3DB04F789512AF3AE	33859792ADB3E7F34D12A5647F9CAC1942F0011C	CC27CA16A61F62DE75C18154554E0331B0ADEC1598E45F1DE644ADC2D00B6117
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log	data	826B4C0003ABB7604485322423C5212A	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG	ASCII text	E423635E1138F8CFF842A6A11D0A3D93	37EF4AB756F92FE25441DDBE665DB7404DC1548E	9137B2A16412522126E5CAE85716F47943BC6DFF35DDF4A663B35A3A59DA33E1
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json	JSON data	5D1D9020CCEFD76CA661902E0C229087	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Favicons	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 15, cookie 0x8, schema 4, UTF-8, version-valid-for 2	65575C8CA0ABC92E31FA0BE1A312009D	C1A98524C4F2CE4D25F05A8B5F42AE9609E59A3A	C63584523C6D06019BA206D7B76599B4A115B5C46F9D30E68F7C04A29E6E16A3
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0	CF89D16BB9107C631DAABF0C0EE58EFB	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\index	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0	F6D9D66CEA13C907390910F081C1716E	5EFAA2B6E082D22A73A9E7EA459290160E845A24	1274F4804C1C41CFEB3B5C6970BC048D4865D03E15846F55EE1EA58857B1CB00
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2	0C3476BE1B9386C74EEBD32EEE762DA0	8D7962145CAD33303850144BCF88665678F22D4B	CB3E8601C947F60D52410E25A92C324427B00747DFAFAFB32CF5CE9BCC1E6B8C
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7	C56CB521213D33D29039DDCCFC050250	90244F1A705EA11CE4A587392BFEAA6DD94B8E19	4F9657C845B0D0432F84DF9BD24742E3AAFD96AD93922F1C15484891C3A23766
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG	ASCII text	4FF9634AAAAB7E397E314E06AFB5D371	79F51F37174662D3066ABB2B4B2581B93B1A2A74	D679101488A01498F59ACA0964F23A18FFC667154D61601F4264BCD73716FC6F
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log	data	4FF627053D623DB5234912E1A2F2007C	B6E32BA049A92D4F3B8CED338BEC86464C9413D7	0F857CD8D9F33D5584BAF83C4EBCA79B0C0CEEEA1306B8A3D5487F8E0C56AAA1
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG	ASCII text	876BD9002BD3C5BE2E87F95F12ABBFE4	91A3BC1BD0D8673045636CC3C30C1E4028DB3FFC	D07BDFA8031D4A8CAA00A7F758C479BDFB059977EE20E7A69C6D7B7B08A26367
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network Action Predictor	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 11, cookie 0x6, schema 4, UTF-8, version-valid-for 4	00CC4D0DEBE7380CACF31A4898346C01	F38260A484558FC30B01B43860F5840EA0A58C4A	CD62F760DA4043F64742EADC50B6C918CE6CC1131F042F78955253C0AB899B98
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4d4f8743-1c45-4974-85e0-529317b8c52b.tmp	JSON data	807419CA9A4734FEAF8D8563A003B048	A723C7D60A65886FFA068711F1E900CCC85922A6	AA10BF07B0D265BED28F2A475F3564D8DDB5E4D4FFEE0AB6F3A0CC564907B631
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\7aa4a10b-9a15-4d86-b2ec-5d31a9d7146e.tmp	JSON data	20D4B8FA017A12A108C87F540836E250	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)	JSON data	807419CA9A4734FEAF8D8563A003B048	A723C7D60A65886FFA068711F1E900CCC85922A6	AA10BF07B0D265BED28F2A475F3564D8DDB5E4D4FFEE0AB6F3A0CC564907B631
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)	JSON data	20D4B8FA017A12A108C87F540836E250	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3	46EDAE9A257690D0F0113262903FC779	3743EBAEA077D0970A30B40EA36135C8EAB0BDAC	A17EE4A87C39F35505B7CF9715E0F63F87F62DDDD9956569774AE6664B3C4BA1
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)	JSON data	61DC33A6CDD3A4F497B6844B034F7CB4	9A089A8D36F2CC23B28839F2ACB1277DFE038DEE	400B17DD4B6197FF541B32C91945E2C7FDEE269D3477979A006E7633973B472F
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF2a713.TMP (copy)	JSON data	61DC33A6CDD3A4F497B6844B034F7CB4	9A089A8D36F2CC23B28839F2ACB1277DFE038DEE	400B17DD4B6197FF541B32C91945E2C7FDEE269D3477979A006E7633973B472F
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF2e332.TMP (copy)	JSON data	61DC33A6CDD3A4F497B6844B034F7CB4	9A089A8D36F2CC23B28839F2ACB1277DFE038DEE	400B17DD4B6197FF541B32C91945E2C7FDEE269D3477979A006E7633973B472F
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF30acf.TMP (copy)	JSON data	61DC33A6CDD3A4F497B6844B034F7CB4	9A089A8D36F2CC23B28839F2ACB1277DFE038DEE	400B17DD4B6197FF541B32C91945E2C7FDEE269D3477979A006E7633973B472F
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)	JSON data	81BE2227F2C1B40B91B3264E32FC8077	EEC053640F20B692DBFF37FCAAC5732B3A4D9F7F	C426AAC68D8BADB4CEB2FD5FC721FE260486AFBAE488038B9D918801527C9136
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF2b26e.TMP (copy)	JSON data	81BE2227F2C1B40B91B3264E32FC8077	EEC053640F20B692DBFF37FCAAC5732B3A4D9F7F	C426AAC68D8BADB4CEB2FD5FC721FE260486AFBAE488038B9D918801527C9136
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF2da87.TMP (copy)	JSON data	81BE2227F2C1B40B91B3264E32FC8077	EEC053640F20B692DBFF37FCAAC5732B3A4D9F7F	C426AAC68D8BADB4CEB2FD5FC721FE260486AFBAE488038B9D918801527C9136
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log	data	1FF876DB2B3AF98AFF77B0A45D308FA0	25B31972E1D5C7D23164F1705AD0101078BD4C04	61D8E57E9F04DDE97D4E4A44052430749D112A8C499329961E726567E1E9F191
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG	ASCII text	3C609543878E30612054A2620682BB05	36270469631E11A72C6F6D63D1B6CB1941B2599F	B152668A9C70E299031531253C0FF5511CDB9501747FBD64700E076C1C92362D
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13376860688233152	data	13D2C6E706E1A57F77E9BD29251B929A	2B78B57CDC3AE26836D80809FE22FED9B0DB8EEC	16A5C3F9B5276E000311199256EE0974F11F7E2CE3A7976298967CB3DE7CE590
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13376860712389412	data	3B6B69CC3AFB05FF05AB218B942C6949	E2CD0E9F86805A7C6F8C3C001CB6688B3A104D71	9EEC2D8CF16C08D9C8D342791E14E825A48F259A8F49392263FEB2818B14A6EA
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1	3AA00D3E6D96328B40C61F36372794AE	9AB92198B4C1AC656FA1923207BEFE48E6578745	B0CE18E0C5EA1F16C658C855D98A806ECA7D9A8F1C953D9C100AA6742BACF142
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log	data	B65C4A805D827B9CB4F96F59AF48D7FB	823A918F2E10B4D36AFBB4B170BE673E699AD264	CEABD11E384C23F976FECD1B7E5F84526859ED98D2A908265EF79D08210283DE
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG	ASCII text	E6A14C11D32403FC19019E388E7C7961	4B59EB2F87A3DB29F738E6EB561CAAC46F5C5414	D2AA2EABB6035F411E80796D09D3DEA626D5926E00786AFE612C8275F06C788D
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1	data	F50F89A0A91564D0B8A211F8921AA7DE	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG	ASCII text	AE1FEBBF04EFAD2FC3FB070ADB300A4E	0DDC49CF8ADBCB9C2C4F51398AB84C8B45C119E0	41BAF63151CF6D1D906367044DCEBF687061359D7F46172A9DE03C64C896BE22
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log	data	69449520FD9C139C534E2970342C6BD8	230FE369A09DEF748F8CC23AD70FD19ED8D1B885	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG	ASCII text	0BB1CAABB806A167D165264C47281755	0396096A59DC0564F594F66753CAB49EB0E1C0EF	3168446E1FA20A55414F4A401B2597E42DA7CD21164F8E6079D3A6018B45C5EF
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG	ASCII text	03746DB1E96E26FCD225AB3F17DE72A2	B55889F4FC54957BD9E4586F1634DD6A6D34A313	D49045C566E355A043455561699E05ADDDC9CAF8F8E568ACE042B4CDB8C8F55E
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links	data	7A3B675494C58BCFE23E26F254FE61AF	4AA7802982F45BCBFDA85D5DCC994C8F6F50BA9D	C74F249CCBF5F7BE76D8B7FC689A91E657CC7EC9EFEE1BE657BD16E441232C82
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 10	74FF271EF013A707499B2590E6FFDA1A	EF07165A4110123D20A4031AB172882CACCEBBA4	3C1E840CE3EAB7BC746F334BE8A9AFD037B8827A615E8FB9A39F71B8C576B05B
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1	981F351994975A68A0DD3ECE5E889FD0	080D3386290A14A68FCE07709A572AF98097C52D	3F0C0B2460E0AA2A94E0BF79C8944F2F4835D2701249B34A13FD200F7E5316D7
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json	ASCII text, with very long lines (3951), with CRLF line terminators	07301A857C41B5854E6F84CA00B81EA0	7441FC1018508FF4F3DBAA139A21634C08ED979C	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c95c46a9-3876-4d39-83f3-626efc7ce56b.tmp	JSON data	19E3A2C4A9341B46915DC40716393D54	DF108F319D4E9506AEC5122B4147804F63F32692	88218E72F174F8CD3B5E38DD68F9AF708737AD0B935E945EDE6F0B86CE5A1282
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1	98643AF1CA5C0FE03CE8C687189CE56B	ECADBA79A364D72354C658FD6EA3D5CF938F686B	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\e74fc067-c6ea-4695-b82d-2678de889abe.tmp	JSON data	6046DE453DF1EE45DEEAC08C99B10213	1586A7BE359D35EF6034B01833D4DE37CAB73DA4	3D518681F4BF2C95894C8BFB250EAE02B70B03CB93EFD9BCB540C519D914B768
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm	data	5BD2880ECBD452F91747546CC93447D6	9DFEB71CEE1BFAF7534A9DC64B6ADA902C28FFD0	DCF61F1C5057BC22D6C576DB94CE833D1DB96F20A0215B7DABC34EFAFAECACBC
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal	SQLite Write-Ahead Log, version 3007000	DE161EFF2594026558FD6756E1829F3C	F2198D3076FBEC1D6C089C7199A51109A6417153	A753AD70E4CC70F19B897A9E232852E34A63C1C5A0D281A858C0A0A3923BBC33
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log	data	0BF6A30225A7AFBB95C37433363F67BF	34F4A2DC8C8D789898111C481887678F1E3AE529	F3BE4F84773F7D522BCDC5625D4A0153B48C496A9D44DBE0C74AD93BE555F500
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG	ASCII text	BAD59516473F52651CF696334C72C828	98806E41EF05924E1B8C1D3DAFD541C35B5A3FB3	AD3A5382D330B2CF0E22452BC6B2C5D339303F8B6A6CCA8064F8B97E1C7A5D53
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log	data	3BE72D8D40752B3A97028FDB2931FABA	A27EA4726857A948F0A4B074062B674469A9A371	3C18553C8C3F7E801855F3579AC57F3C156D783BBA27FB35C6D2FB6CB89BD902
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG	ASCII text	8818E9708EC44457DFC5336AC60A0462	C20F0138CFF068C0DECDCF9BE2618C6F157A8336	0CBA71E025F718ABE66C1D87DA62F1CC83D2798F5272E870486E5283EBEB7209
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser	data	A397E5983D4A1619E36143B4D804B870	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version	ASCII text, with no line terminators	BF16C04B916ACE92DB941EBB1AF3CB18	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)	JSON data	71434378664EA2C8DA0B064A08C1B58F	A501CED127DED203E5BF080AABD1292AC0DF1319	DAEE69556BC1F1156C811536ABCD74AE5580D6ECCBC18B0D2D542DA846F3A1DC
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF272e4.TMP (copy)	JSON data	71434378664EA2C8DA0B064A08C1B58F	A501CED127DED203E5BF080AABD1292AC0DF1319	DAEE69556BC1F1156C811536ABCD74AE5580D6ECCBC18B0D2D542DA846F3A1DC
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2a82d.TMP (copy)	JSON data	71434378664EA2C8DA0B064A08C1B58F	A501CED127DED203E5BF080AABD1292AC0DF1319	DAEE69556BC1F1156C811536ABCD74AE5580D6ECCBC18B0D2D542DA846F3A1DC
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2d140.TMP (copy)	JSON data	71434378664EA2C8DA0B064A08C1B58F	A501CED127DED203E5BF080AABD1292AC0DF1319	DAEE69556BC1F1156C811536ABCD74AE5580D6ECCBC18B0D2D542DA846F3A1DC
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 8	D8827DFCAFAEFFCC68F2C8C5581BECCA	AB8AFE220039BB64DAFD39CD1F013162D33A7467	DB95E81B88A859341D32D822BBD1B535710095127C51A740EBD60157944B3DBE
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings	ASCII text, with no line terminators	48324111147DECC23AC222A361873FC5	0DF8B2267ABBDBD11C422D23338262E3131A4223	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14	JSON data	BB57A76019EADEDC27F04EB2FB1F1841	8B41A1B995D45B7A74A365B6B1F1F21F72F86760	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings	ASCII text, with no line terminators	177F4D75F4FEE84EF08C507C3476C0D2	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1	JSON data	EB75CEFFE37E6DF9C171EE8380439EDA	F00119BA869133D64E4F7F0181161BD47968FA23	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris	ASCII text, with no line terminators	6A3A60A3F78299444AACAA89710A64B6	2A052BF5CF54F980475085EEF459D94C3CE5EF55	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468	data	3A05EAEA94307F8C57BAC69C3DF64E59	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic	ASCII text, with no line terminators	52E2839549E67CE774547C9F07740500	B172E16D7756483DF0CA0A8D4F7640DD5D557201	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371	data	BE5D1A12C1644421F877787F8E76642D	06C46A95B4BD5E145E015FA7E358A2D1AC52C809	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982	raw G3 (Group 3) FAX, byte-padded	E9C502DB957CDB977E7F5745B34C32E6	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache	ASCII text, with no line terminators	B6F7A6B03164D4BF8E3531A5CF721D30	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_	JSON data	16FD5E8C40CB741145D3F916D63E9649	0D64ACB1F3E9D59835EC9A23B175F3E7568D1CB0	699FD3660799B48BD0302D648A9FE2AFFACFD793EE9369C25751185506924A72
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations	JSON data	E9E365607374115B92E4ABE4B9628101	D5054EA9B22317DCA83801EB3586017BFCC0E2A8	5CD2C4D9F13524923046198C92213691539407E04FA520CDAE9EADE1BAD3D91D
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\a96d9b72-8628-454b-9a0b-ab62135ca0de.tmp	JSON data	71434378664EA2C8DA0B064A08C1B58F	A501CED127DED203E5BF080AABD1292AC0DF1319	DAEE69556BC1F1156C811536ABCD74AE5580D6ECCBC18B0D2D542DA846F3A1DC
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\b66d613d-c875-44e3-b250-3345d4ae2860.tmp	JSON data	4DD9FCA07907DF77930947BA31764FDD	324A3E3A1EDC65FDB79CD6EF090AD910AAF402E8	6FA4E3E77C60481BEC6748B92D2093D00F84EF3FE0E5EE35F495324F252919B7
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres	data	35AEF7D942876AA69B7513A15D395483	8B88E5BE5D36E30964B778DE95A0697EBD94B4A6	3BB71908D089EBDCFC104BE171FD784A8AC8F7290185387EC66EFEBD3DDD6246
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres	data	71825DB8D15728BA3E05B4470B9BAB95	6C74EF2DDD2322EDE473DA5011F4000557672ADE	3E19C39B6E080F63F92FBC1E4E5D65F891495A24A5C94BE3F4AA81057DEFAC6C
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres	data	7CEC26C01A0C16491BD9AEF19F4B1BC0	1D95FA53B6841BE06A08E536AE3D54E3F95CFB31	E569E22E34A369720499741E5296124228582D931D2E98E1AF14D4602724248B
C:\Users\user\AppData\Local\Temp\49ff8c1f-31e6-4154-8403-5fd37a0c36a7.tmp	Google Chrome extension, version 3	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1	9B73F46ADFA1F4464929B408407E73D4535C6827	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
C:\Users\user\AppData\Local\Temp\a39b235f-49cc-4d1e-8785-217f39282cbf.tmp	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3	37CF67E6E5D3AE47CF40406A1E8BE94F	2A6F868ADC761DB9C03869E238BEA0D67D1FE6CE	B4B4DBE335296D0CCF9C659D671A54C2FA06F8B4E41228CF03E1D21F7C8F9D03
C:\Users\user\AppData\Local\Temp\badb731d-fdc0-401f-bbf0-b093df821d80.tmp	PNG image data, 342 x 126, 8-bit colormap, non-interlaced	A96BE32BF33CCDC6C0B4137ECB5FD563	2CDDF8A54326A15323660D44FAD9C0DC485C8D12	A6B4FC12406A93652C8856AAA158CE23A3D119B9E6FCFA01ACECB568B0BE001C
C:\Users\user\AppData\Local\Temp\cv_debug.log	JSON data	786CF9AA62E9ACFA45278E5F05194899	DA5E86BC4AF8AC960CBCAA4232A35F0D09DD9218	B27112CFE23C9F810FD1B70A33219EF4092E4C5021F9C14F5AB51C3AA8916F22
C:\Users\user\AppData\Local\Temp\scoped_dir7908_794241801\CRX_INSTALL\_metadata\verified_contents.json	JSON data	738E757B92939B24CDBBD0EFC2601315	77058CBAFA625AAFBEA867052136C11AD3332143	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
C:\Users\user\AppData\Local\Temp\scoped_dir7908_794241801\CRX_INSTALL\content.js	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators	3D20584F7F6C8EAC79E17CCA4207FB79	3C16DCC27AE52431C8CDD92FBAAB0341524D3092	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
C:\Users\user\AppData\Local\Temp\scoped_dir7908_794241801\CRX_INSTALL\content_new.js	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators	3DE1E7D989C232FC1B58F4E32DE15D64	42B152EA7E7F31A964914F344543B8BF14B5F558	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
C:\Users\user\AppData\Local\Temp\scoped_dir7908_794241801\CRX_INSTALL\manifest.json	JSON data	E805E9E69FD6ECDCA65136957B1FB3BE	2356F60884130C86A45D4B232A26062C7830E622	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
C:\Users\user\AppData\Local\Temp\scoped_dir7908_794241801\a8219943-6bcf-4835-bb50-6494a53e7b47.tmp	Google Chrome extension, version 3	78E47DDA17341BED7BE45DCCFD89AC87	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\128.png	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced	913064ADAAA4C4FA2A9D011B66B33183	99EA751AC2597A080706C690612AEEEE43161FC1	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\af\messages.json	JSON data	12403EBCCE3AE8287A9E823C0256D205	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\am\messages.json	JSON data	9721EBCE89EC51EB2BAEB4159E2E4D8C	58979859B28513608626B563138097DC19236F1F	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ar\messages.json	JSON data	3EC93EA8F8422FDA079F8E5B3F386A73	24640131CCFB21D9BC3373C0661DA02D50350C15	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\az\messages.json	JSON data	9A798FD298008074E59ECC253E2F2933	1E93DA985E880F3D3350FC94F5CCC498EFC8C813	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\be\messages.json	JSON data	68884DFDA320B85F9FC5244C2DD00568	FD9C01E03320560CBBB91DC3D1917C96D792A549	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\bg\messages.json	JSON data	2E6423F38E148AC5A5A041B1D5989CC0	88966FFE39510C06CD9F710DFAC8545672FFDCEB	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\bn\messages.json	JSON data	651375C6AF22E2BCD228347A45E3C2C9	109AC3A912326171D77869854D7300385F6E628C	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ca\messages.json	JSON data	D177261FFE5F8AB4B3796D26835F8331	4BE708E2FFE0F018AC183003B74353AD646C1657	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\cs\messages.json	JSON data	CCB00C63E4814F7C46B06E4A142F2DE9	860936B2A500CE09498B07A457E0CCA6B69C5C23	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\cy\messages.json	JSON data	A86407C6F20818972B80B9384ACFBBED	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\da\messages.json	JSON data	B922F7FD0E8CCAC31B411FC26542C5BA	2D25E153983E311E44A3A348B7D97AF9AAD21A30	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\de\messages.json	JSON data	D116453277CC860D196887CEC6432FFE	0AE00288FDE696795CC62FD36EABC507AB6F4EA4	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\el\messages.json	JSON data	9ABA4337C670C6349BA38FDDC27C2106	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\en\messages.json	JSON data	07FFBE5F24CA348723FF8C6C488ABFB8	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\en_GB\messages.json	JSON data	3734D498FB377CF5E4E2508B8131C0FA	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\en_US\messages.json	JSON data	578215FBB8C12CB7E6CD73FBD16EC994	9471D71FA6D82CE1863B74E24237AD4FD9477187	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\es\messages.json	JSON data	F61916A206AC0E971CDCB63B29E580E3	994B8C985DC1E161655D6E553146FB84D0030619	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\es_419\messages.json	JSON data	535331F8FB98894877811B14994FEA9D	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\et\messages.json	JSON data	64204786E7A7C1ED9C241F1C59B81007	586528E87CD670249A44FB9C54B1796E40CDB794	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\eu\messages.json	JSON data	29A1DA4ACB4C9D04F080BB101E204E93	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\fa\messages.json	JSON data	097F3BA8DE41A0AAF436C783DCFE7EF3	986B8CABD794E08C7AD41F0F35C93E4824AC84DF	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\fi\messages.json	JSON data	B38CBD6C2C5BFAA6EE252D573A0B12A1	2E490D5A4942D2455C3E751F96BD9960F93C4B60	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\fil\messages.json	JSON data	FCEA43D62605860FFF41BE26BAD80169	F25C2CE893D65666CC46EA267E3D1AA080A25F5B	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\fr\messages.json	JSON data	A58C0EEBD5DC6BB5D91DAF923BD3A2AA	F169870EEED333363950D0BCD5A46D712231E2AE	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\fr_CA\messages.json	JSON data	6CAC04BDCC09034981B4AB567B00C296	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\gl\messages.json	JSON data	6BAAFEE2F718BEFBC7CD58A04CCC6C92	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\gu\messages.json	JSON data	BC7E1D09028B085B74CB4E04D8A90814	E28B2919F000B41B41209E56B7BF3A4448456CFE	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\hi\messages.json	JSON data	98A7FC3E2E05AFFFC1CFE4A029F47476	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\hr\messages.json	JSON data	25CDFF9D60C5FC4740A48EF9804BF5C7	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\hu\messages.json	JSON data	8930A51E3ACE3DD897C9E61A2AEA1D02	4108506500C68C054BA03310C49FA5B8EE246EA4	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\hy\messages.json	JSON data	55DE859AD778E0AA9D950EF505B29DA9	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\id\messages.json	JSON data	34D6EE258AF9429465AE6A078C2FB1F5	612CAE151984449A4346A66C0A0DF4235D64D932	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\is\messages.json	JSON data	CAEB37F451B5B5E9F5EB2E7E7F46E2D7	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\it\messages.json	JSON data	0D82B734EF045D5FE7AA680B6A12E711	BD04F181E4EE09F02CD53161DCABCEF902423092	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\iw\messages.json	JSON data	26B1533C0852EE4661EC1A27BD87D6BF	18234E3ABAF702DF9330552780C2F33B83A1188A	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ja\messages.json	JSON data	15EC1963FC113D4AD6E7E59AE5DE7C0A	4017FC6D8B302335469091B91D063B07C9E12109	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ka\messages.json	JSON data	83F81D30913DC4344573D7A58BD20D85	5AD0E91EA18045232A8F9DF1627007FE506A70E0	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\kk\messages.json	JSON data	2D94A58795F7B1E6E43C9656A147AD3C	E377DB505C6924B6BFC9D73DC7C02610062F674E	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\km\messages.json	JSON data	B3699C20A94776A5C2F90AEF6EB0DAD9	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\kn\messages.json	JSON data	38BE0974108FC1CC30F13D8230EE5C40	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ko\messages.json	JSON data	F3E59EEEB007144EA26306C20E04C292	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\lo\messages.json	JSON data	E20D6C27840B406555E2F5091B118FC5	0DCECC1A58CEB4936E255A64A2830956BFA6EC14	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\lt\messages.json	JSON data	970544AB4622701FFDF66DC556847652	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\lv\messages.json	JSON data	A568A58817375590007D1B8ABCAEBF82	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ml\messages.json	JSON data	4717EFE4651F94EFF6ACB6653E868D1A	B8A7703152767FBE1819808876D09D9CC1C44450	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\mn\messages.json	JSON data	83E7A14B7FC60D4C66BF313C8A2BEF0B	1CCF1D79CDED5D65439266DB58480089CC110B18	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\mr\messages.json	JSON data	3B98C4ED8874A160C3789FEAD5553CFA	5550D0EC548335293D962AAA96B6443DD8ABB9F6	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ms\messages.json	JSON data	7D273824B1E22426C033FF5D8D7162B7	EADBE9DBE5519BD60458B3551BDFC36A10049DD1	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\my\messages.json	JSON data	342335A22F1886B8BC92008597326B24	2CB04F892E430DCD7705C02BF0A8619354515513	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ne\messages.json	JSON data	B1083DA5EC718D1F2F093BD3D1FB4F37	74B6F050D918448396642765DEF1AD5390AB5282	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\nl\messages.json	JSON data	32DF72F14BE59A9BC9777113A8B21DE6	2A8D9B9A998453144307DD0B700A76E783062AD0	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\no\messages.json	JSON data	A1744B0F53CCF889955B95108367F9C8	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\pa\messages.json	JSON data	97F769F51B83D35C260D1F8CFD7990AF	0D59A76564B0AEE31D0A074305905472F740CECA	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\pl\messages.json	JSON data	B8D55E4E3B9619784AECA61BA15C9C0F	B4A9C9885FBEB78635957296FDDD12579FEFA033	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\pt_BR\messages.json	JSON data	608551F7026E6BA8C0CF85D9AC11F8E3	87B017B2D4DA17E322AF6384F82B57B807628617	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\pt_PT\messages.json	JSON data	0963F2F3641A62A78B02825F6FA3941C	7E6972BEAB3D18E49857079A24FB9336BC4D2D48	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ro\messages.json	JSON data	BED8332AB788098D276B448EC2B33351	6084124A2B32F386967DA980CBE79DD86742859E	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ru\messages.json	JSON data	51D34FE303D0C90EE409A2397FCA437D	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\si\messages.json	JSON data	B8A4FD612534A171A9A03C1984BB4BDD	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\sk\messages.json	JSON data	8E55817BF7A87052F11FE554A61C52D5	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\sl\messages.json	JSON data	BFAEFEFF32813DF91C56B71B79EC2AF4	F8EDA2B632610972B581724D6B2F9782AC37377B	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\sr\messages.json	JSON data	7F5F8933D2D078618496C67526A2B066	B7050E3EFA4D39548577CF47CB119FA0E246B7A4	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\sv\messages.json	JSON data	90D8FB448CE9C0B9BA3D07FB8DE6D7EE	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\sw\messages.json	JSON data	D0579209686889E079D87C23817EDDD5	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ta\messages.json	JSON data	DCC0D1725AEAEAAF1690EF8053529601	BB9D31859469760AC93E84B70B57909DCC02EA65	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\te\messages.json	JSON data	385E65EF723F1C4018EEE6E4E56BC03F	0CEA195638A403FD99BAEF88A360BD746C21DF42	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\th\messages.json	JSON data	64077E3D186E585A8BEA86FF415AA19D	73A861AC810DABB4CE63AD052E6E1834F8CA0E65	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\tr\messages.json	JSON data	76B59AAACC7B469792694CF3855D3F4C	7C04A2C1C808FA57057A4CCEEE66855251A3C231	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\uk\messages.json	JSON data	970963C25C2CEF16BB6F60952E103105	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\ur\messages.json	JSON data	8B4DF6A9281333341C939C244DDB7648	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\vi\messages.json	JSON data	773A3B9E708D052D6CBAA6D55C8A5438	5617235844595D5C73961A2C0A4AC66D8EA5F90F	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\zh_CN\messages.json	JSON data	3E76788E17E62FB49FB5ED5F4E7A3DCE	6904FFA0D13D45496F126E58C886C35366EFCC11	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\zh_HK\messages.json	JSON data	524E1B2A370D0E71342D05DDE3D3E774	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\zh_TW\messages.json	JSON data	0E60627ACFD18F44D4DF469D8DCE6D30	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_locales\zu\messages.json	JSON data	71F916A64F98B6D1B5D1F62D297FDEC1	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\_metadata\verified_contents.json	JSON data	250C48F4915DD4C0DFA7E7E021A4F066	092A98BF40D8C18280393BF3811A7DFA9A9FD326	26D9B129339E2E2EB8E0223E16DB3CF0EA220AC0799480D462C236E6A425665E
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\dasherSettingSchema.json	JSON data	4EC1DF2DA46182103D2FFC3B92D20CA5	FB9D1BA3710CF31A87165317C6EDC110E98994CE	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\manifest.json	JSON data	236D2DD305D64C2B6ABD232ED53270DF	9F6885E95FBC4213631F0B0EA49C803D07D34136	2A4D526B9D1C8665427FB9E0DA58D16FDDE382DD74C1258941B18701EF7880C3
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\offscreendocument.html	HTML document, ASCII text	B747B5922A0BC74BBF0A9BC59DF7685F	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\offscreendocument_main.js	ASCII text, with very long lines (3777)	DC93A1045D1AD8D7ADD06B93B2FE79E2	CAFCC8DB7F8E3FD2F8C1EFAC7B385D7616F55EA3	D5CEB4449384CD2D7898C052B7B99417961880945FC4EAE80EBBAF8E24CC0A3E
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\page_embed_script.js	ASCII text	3AB0CD0F493B1B185B42AD38AE2DD572	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
C:\Users\user\AppData\Local\Temp\scoped_dir7908_812403493\CRX_INSTALL\service_worker_bin_prod.js	ASCII text, with very long lines (3782)	E8015AC436B33034EDF7DA060E853A04	62D0F6EB0E441158A1F56F6E0C70D3D229B57886	23C953E989FF4AF6126D4A3B2AD21B33A82512FC8768045C00F05940DE2C9978
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 17:37:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	6FDE6565C12A900CB8E53055C9B09353	57FE1199854ECADDC8213FE4D85D0C13E94ED5D1	2EC472416150E43FDD17048588882EC739351080F5599FDC5E01176C0516CB78
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 17:37:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	A26436E2BF006831414004B7390EC69C	4381D2623850F9787BAD3003E32EA7731A8EB117	0CDFE4A0CB6FECDE8D08A1D17643A9D471E71840AD2A9CA0FE13B879F09BE348
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	075B70AD47D7F88C20CD2056A31E6FF8	C359AE76E6279C7FE909496B866A135D418221F5	C0640A122ADFF586F4EC383398AD6F8A42B8798A8A56AE5C0FF39DDAA9DC9976
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 17:37:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	32FE9385325D2468FB60D8621AB17A36	CD1C66E988E68DD7DF4B8FC3DC4F829B1974399D	816F326022764A707B1A266960A3143DF40C0C0520FFB7B5074A52637D54A299
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 17:37:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	577812D01B0A3B2D510E44CB273F9CBA	7B9E9B007EF44F106598BD9E24169CEB983B9E2A	46431FDA8B5ABE0EAC183F4B05B4B22B2669A0FCC8A5556FA97B2C3567AD46F6
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 17:37:34 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	9FC2FC8DF62C8915671E895DCD24C386	7D1D9A808AD46A9EDE7FB58FEEDA86A875204BF5	CEB2E09565F37614A76B28109AFA489C65574C94567142E2FB8130F3AB9889D0
Chrome Cache Entry: 229	HTML document, ASCII text	ED02A36AF62CFCC74C19C582BFE9C030	0AB2A39E2E58C6A0237D1962B731615EA6DBDEF8	8B5A0788955AE0E6CAE6442012391C74B86E2C31634A55721C7BEBDB5CED65D5
Chrome Cache Entry: 230	ASCII text, with very long lines (5426)	A5FE969702F776F83E2BFF9140A2C701	753CFCFC9B614AB7C291C0602D6A30B82F3732FB	8443E389BD9C567DF7674E8FDFA502BFE29F1EE543ED36775CB44E8F740080AC
Chrome Cache Entry: 231	ASCII text, with CRLF line terminators	0C544100BE9EEE1C4FA2BACA5B51E3B2	E54099BB2C842EFC6D093178F959C3AA762F71E6	7574DF7474B5D2CC87CD9DE04682DA18206E7BA3ABF926C2F423A9E904C92487

ID:	1561561
Product:	CloudBasic
Start time:	19:37:03
Start date:	23.11.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
http://elizgallery.com/js.php

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report http://elizgallery.com/js.php

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
http://elizgallery.com/js.php