hxxps://www[.]buzzclan[.]com/

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/04/2026, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.buzzclan.com/
Sample260429-tmkrbsdv5x

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4460	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2086444496\domain_actions.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\el\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\ar\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\sv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\en_US\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_625139906\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\tr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\mn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\msedge_url_fetcher_4460_1037795366\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_104_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\en_GB\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\or\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_1564363402\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\iw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\si\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\kk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\ca\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_1927065612\regex_patterns.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_1564363402\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_1927065612\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_1927065612\v1FieldTypes.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\is\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\cs\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_1927065612\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2086444496\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\te\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\et\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\uz\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2140154296\_locales\es\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2348	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134219526589078723"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{3C11C972-5160-4C24-8B8A-6D4F05C1F9FF}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5224	msedge.exe
5224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 4388	4460	msedge.exe	84
PID 4460 wrote to memory of 2348	4460	msedge.exe	85
PID 4460 wrote to memory of 4556	4460	msedge.exe	86
PID 4460 wrote to memory of 4556	4460	msedge.exe	86
PID 4460 wrote to memory of 4556	4460	msedge.exe	86
PID 4460 wrote to memory of 5616	4460	msedge.exe	87
PID 4460 wrote to memory of 5616	4460	msedge.exe	87
PID 4460 wrote to memory of 2540	4460	msedge.exe	89
PID 4460 wrote to memory of 2540	4460	msedge.exe	89
PID 4460 wrote to memory of 2668	4460	msedge.exe	90
PID 4460 wrote to memory of 2540	4460	msedge.exe	89
PID 4460 wrote to memory of 2668	4460	msedge.exe	90
PID 4460 wrote to memory of 2668	4460	msedge.exe	90
PID 4460 wrote to memory of 3468	4460	msedge.exe	94
PID 4460 wrote to memory of 3468	4460	msedge.exe	94
PID 4460 wrote to memory of 3468	4460	msedge.exe	94
PID 4460 wrote to memory of 1852	4460	msedge.exe	95
PID 4460 wrote to memory of 1852	4460	msedge.exe	95
PID 4460 wrote to memory of 4668	4460	msedge.exe	96
PID 4460 wrote to memory of 4668	4460	msedge.exe	96
PID 4460 wrote to memory of 4668	4460	msedge.exe	96
PID 4460 wrote to memory of 3832	4460	msedge.exe	98
PID 4460 wrote to memory of 3832	4460	msedge.exe	98
PID 4460 wrote to memory of 3808	4460	msedge.exe	97
PID 4460 wrote to memory of 3808	4460	msedge.exe	97
PID 4460 wrote to memory of 1476	4460	msedge.exe	100
PID 4460 wrote to memory of 2792	4460	msedge.exe	105
PID 4460 wrote to memory of 4820	4460	msedge.exe	106
PID 4460 wrote to memory of 1644	4460	msedge.exe	107
PID 4460 wrote to memory of 5000	4460	msedge.exe	108
PID 4460 wrote to memory of 5000	4460	msedge.exe	108
PID 4460 wrote to memory of 5068	4460	msedge.exe	109
PID 4460 wrote to memory of 5068	4460	msedge.exe	109
PID 4460 wrote to memory of 5672	4460	msedge.exe	110
PID 4460 wrote to memory of 5672	4460	msedge.exe	110
PID 4460 wrote to memory of 5672	4460	msedge.exe	110
PID 4460 wrote to memory of 3188	4460	msedge.exe	115
PID 4460 wrote to memory of 3188	4460	msedge.exe	115
PID 4460 wrote to memory of 3188	4460	msedge.exe	115
PID 4460 wrote to memory of 6032	4460	msedge.exe	118
PID 4460 wrote to memory of 6032	4460	msedge.exe	118
PID 4460 wrote to memory of 752	4460	msedge.exe	120
PID 4460 wrote to memory of 752	4460	msedge.exe	120
PID 4460 wrote to memory of 2792	4460	msedge.exe	121
PID 4460 wrote to memory of 2792	4460	msedge.exe	121
PID 4460 wrote to memory of 2516	4460	msedge.exe	122
PID 4460 wrote to memory of 2516	4460	msedge.exe	122
PID 4460 wrote to memory of 5224	4460	msedge.exe	123
PID 4460 wrote to memory of 4796	4460	msedge.exe	124
PID 4460 wrote to memory of 4796	4460	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.buzzclan.com/
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fffa3f1c188,0x7fffa3f1c194,0x7fffa3f1c1a0
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,7833371653189601181,17630098107700696821,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,7188012220895845028,908737573301384071,262144 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,17524359383329240169,9804046113956475386,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,16845218590114931796,10637384215773360399,2097152 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,3035415655006322661,2200014577725811033,2097152 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4960,i,7645193989633235189,11733094722685610038,2097152 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,623369605679277528,11481506296047737608,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5720,i,8326981604437422409,8660951932351893424,2097152 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,12113563438426589597,7117903199262269642,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,17354088324624956203,14549268985393124523,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,5710605670934780246,16006264808408128803,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,5710605670934780246,16006264808408128803,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:8
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5644,i,8924920136919239337,3903946817961213742,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,11027814488235066878,17900638469506339146,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,3369600951283839003,7946931471594169086,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6920,i,8852177768495585546,8059066228371992530,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7028,i,4827290941196884747,17045671660943024254,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7148,i,11477106967325017211,16376246576648091041,2097152 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6956,i,15671975492845858617,9205122660859288312,2097152 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,2670783976084520168,13136113791526282672,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6708,i,9859138702927751841,5228793534186767300,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:8
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6664,i,12404616009709548464,4790530888200853421,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,17780829656583416573,4970975979683370391,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=7236 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7176,i,2285981144524590778,13699791808271739116,262144 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,11989993102770266104,12842287155411856036,524288 --field-trial-handle=2180,i,12414527785005909339,12338446037014632035,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:8
  2⤵
  PID:4796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4460_1564363402\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4460_1927065612\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4460_2086444496\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4460_625139906\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 030978901609c12837a9b1afdcd1ee9f12ef19339fd94725f17a7cdb1e945f36
MD5 35e76198d1c2c61d3c2a49119ba65747
SHA1 a5ae8329c9e762bed0a3d6bc5584e8faf6d26a77
SHA512 8b21ab6c5e29ab0ea7652b7adadb04a05eb734a52faa779252fbec4acd45079c7ad3f83f36227a419f0a59fc94eb1cf408bcd782459cf4691b6eb727be746fd3
TLSH
T136D0800925B7DC74D059847018977B4D7555CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 827caedd6ba67a465e2378da508ebf9f7e5dc38b9ff3d1086fe8a0b10ad23634
MD5 6a7649ad8529021b8a0bf012adb69564
SHA1 bc6cb8e64c0f5c84a887a19005280de2e2ff95dd
SHA512 316ecd29696eeae0002f91778818c1c4166e5bbf8440eddea3560a6ea0fb49f25e4e33c48c2d7c73eb08507c015f5aa7eb4187e6558ebdc4cd44c5bd980d8c3a
TLSH
T133D0800529B3DC74D055847018D77B4D7665CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0f915a07ab52f0fff1e44b9a8afa1b58bdf5c9fc2c6229a585e48d611d567505
MD5 275341aa9122336212def97729bede5b
SHA1 903e4421d0c59a66ae57c93163ddd64c1f450cf4
SHA512 bb6389dad5604f8cc3f3a6ef12fee149b4132fcee9c11513d66fce2ca92c781deede20084e80e7e8c0444dd23201320e15775af55777621e7df75903555a3c54
TLSH
T161E02BA5C872AC3B08FD1B5850640642E78513476B81484F3E3DA30C8FF5D3B458AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 61KB
SHA256 5bbf2d6a32f1838c40b0a7e7c6713bf9c3a7b5c3162dd211eaf792f566c2979b
MD5 8a1233ce514440144cdb99f63bb37a00
SHA1 90c6240781ede7ab4f3b61c429cb9abf59433eb8
SHA512 9647843c19db4910b64e80919c409839709593d06833875e44426390d4a1651f3567148550d3a255e9af03f2a64e1ed2056976360e704a55c9fa2b6b70d10bb2
SSDEEP 1536:Ggh5Yxh04m7Nlfum8YXZpglpbswEsG/Ivbok+qOlW05:GqM0vNVp8SkEk+/W05
TLSH
T1835302579D9DCC2A407DCFBD0084E11FA62C028E6DA16AE06970884D6ADFE40DAE7FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 164KB
SHA256 3bbb0df89b8dbe8001e8c24de4e2d1693f94997b29f007a7bda22a9802832768
MD5 a3d7d331957546ae10ad69bb44b83a04
SHA1 d1a227a182628c48649912e8bcd9251113e9c783
SHA512 614c9697605efd52116765e6f53792304c536aa9953fd9309ba4912476d016be360dad69dacf8d14e5de19f73c8619a37f3a380e3ac84fa0d17058d89246f0e2
SSDEEP 3072:N4geYVqJbc9ydAQpiOlqADfSVjExEGii5BqDW9:zeR4yuQc4agXiCBim
TLSH
T11DF312C32FC565663613692DF728F3C136464437973E06F5EB662A82196C2284CA93EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 31KB
SHA256 6c18d579fd87c3776be068b762cbc83fde3acb543d49eabd3ade842eb987e887
MD5 fdf9c509a8095ffa556117f486a94a8d
SHA1 d8a316f7cbfa46e69876c925e58fbf7b7c1abf0d
SHA512 1da75065bac5582eb357a34e82887838f2e7acfa53df36a7a6a32049aad18d26cbe15b12de3987803a3747677e0e222a964444f0bbca3163c686469729ec667b
SSDEEP 768:3kEJ6k5UQdhzhODqcJnoGp9OFjIWQhvOWXFgHV8zpKjFOpiPyWwL6W:Ik5UQdhzhO+cAjIvvO9HOKj2iPyiW
TLSH
T1D7E2E1A8DA90DC3BDF6653F4ADE7105EB1FA7BB4897108E1DE12FA6D89D12C0C4144E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 195KB
SHA256 8b943e90718958b4d9095e69fad535c22c5b4e2a69cfde0254e4d763c59dcb50
MD5 a2c80b0f23d173dad4850e4c2de9e022
SHA1 3fa4cbfd6cafca774ea6b67f6ffd8068a8b7cd8a
SHA512 158762dc8f65d9ce635cf976924e18533ded61462ef9e94e856e27ac5f33940025f2ba2231292a406772c244572b77f2b9abbd74f929f22e7bbee4477e2965b0
SSDEEP 6144:7KEK86YhIUGFS+iMq7XHS/rnSpXpSbQ9u5ArJDhpBuPYx295:TzhSM+iZXwnkXpX9MsJDPBuwQH
TLSH
T15014230EE80188C24C3725144B75EA0A85D85B54D4BFB949F7AAAA46573D8F3B4E0B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 133KB
SHA256 8d4d29042c23b5fcbed3af690421776de0f8ad3d308d66e24a9d80bcc8ccb522
MD5 dbf1fc91f1beec2915123257ea4d58ef
SHA1 d2a6d5d31334f6d0831f1c17d26e23fe0aa6a8db
SHA512 72e9ccb5ce2d88aac739b513b95dfb7667cf80b617510aafeb2c72345c7cdc3459b7002c4a46afd967afc1e3cab091e078ea9cb6437550b4c7990009799128a2
SSDEEP 3072:6uGMxS/+gbEUbwrT4pZT630r3OhDkLWJZYa3se4YuOzf7ThRvu3jzJ8Va1I:9AmAZ230r3rLOSa3YOzf7NdYz6WI
TLSH
T1D4D312268B70B42D28C791B85F30768B56D866C34FE151688CBADE541B7FF8C836436E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 128KB
SHA256 a922b231f3d6c754c7434fd33138e60952a178c0316516fe295b617848d38173
MD5 ea1285ca29e74ac50bb13945f312c712
SHA1 6bf2754860af12baec3c5d262ba5ad43ffdf0da7
SHA512 103138a4f1c666b31823b49ede63c301a11dc4f091fbb17fc0d22d13777eb5f46ff307e39fc9e2087bdf6aa878178ad908f3b348161f7bac705a5908dcebb445
SSDEEP 3072:ZiMDQuaWnRw0sOTEj9fAp1b8UIoZtbm0mfPo3ehn2u:YMBaWnRwGEj9op1b8UnZt4fPaehn2u
TLSH
T1EED3124BDD47315A3B4AF0CB0A382FC1CD27ABB57A50C2729D5787EA1F668476893483
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 152KB
SHA256 5c30f6fa05698282a70942c9c24e9c8a0370d0b02f3dbab5c8f7c10c296a93a5
MD5 40686be8ecc03b5ce3030bac400f2e32
SHA1 3fef3d5c2b7f2cba63c5a4f999f5609cc07d31b3
SHA512 99a5b9276b8054108ad109947a99fbd1d8255bc952b7e727529e3ff25f75e98222f536b660b35ba3723065ceb868f35839d00c2590adf579a90dab9eff791fcb
SSDEEP 3072:32pLz3I7VIcEY6vk2vE6pfOjKiU8OgI3C5m+jPR1w3p8zBeidC5Gaa:AzY7mq2vNfOj2rgI3CkUcKzBRWa
TLSH
T1FFE31204E45FF00581C9EA8DBCB692C99F52D812C99F963915FCFB2ED9FDD52808281E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 72KB
SHA256 fb617ede818dc1ca5ef085e6d3190538a0a215a9d8c1e2ea514beeac96a66b70
MD5 f9a9aa12877c243b997f102c664d956d
SHA1 fdb5d1c7d07517817656fc5f900afa1126a8221d
SHA512 52e0a4f71e0286dbb4dd699da621494b3249ac85e19ea8941da54406bd0fe2cd08eaef8ceb4790920fd8dfc36461728087ad03817ef359f1d214001e83854a2b
SSDEEP 1536:UMn637qXNvTMnCimYPT5kEjLclRzObY+bLOLN5nMW7Qd3w:UK6rw9wCimiTdWzOs6OBJF7Q1w
TLSH
T15E7302D530701367684F2123EA1E671E35903E03FAF8EE5151776A09EDC8469EF67B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 25KB
SHA256 daaf2addc0f4e5366668d292c5bad10a10dbb083741c4877a2fca082aae3e250
MD5 4de1488e10beccae9989955e92294d10
SHA1 2c7d69d8da3b7b36229fc5485bdcfc75ea12dc2c
SHA512 9f2ddf435eb448afc277636ac9843bb5512d3964fcd5c67bf024e275d190ddf195982e9fc22a660f9ceccf5e1f381d0c202a7d7c9d0e4f9c89776a9b69533284
SSDEEP 768:mIPHgmX6UfUGvbx1BHWf/jlLBVIz94ibkJT1iIMCSiA:N1KAUNfql4pmiA
TLSH
T1ACC2E133F0BB554E07B44E058A702189FC78AD36944676459CF2453F8F59862FECDAC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 42KB
SHA256 d5d6135789fb4552b8a6f90ca5f78fb5b4d03a9a2f323ba0c3bb4da4fbde15dc
MD5 29384527835ddefb66ee0e7f44fbf989
SHA1 4d768641048c177242fea4a17e47324e0a75ee90
SHA512 af90dfa22fe6fab466ad5d536e4880a4306d7bedc70aff96859eb8c970faad37d11c67051733e183b03d8b3029cb649439fd0f3968d8993f7c5039acff334078
SSDEEP 768:GU11RTleNeIhSwm6EkUBqZz6w09UllmKchbiwFC+rCzUmiWJhpvWjfs9TwO:x11u9Fek1R6w1hmbiwloUkJhwqcO
TLSH
T1A713F2CB712933E9AD133947B6490B403031F4EAF5F949B547201E26BA9933E09F7E46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 108KB
SHA256 b29752c753aeb9255155e6f3290b2495ac775313e5060d816c963e38508778de
MD5 06dad8fa27cf9e63ae33459bfee39e45
SHA1 8e1bae020f0fcd56657e3d6434943251276b0154
SHA512 a0ee4e77fbdd95ab5e7f2855cf7eed46e41b5ffdea966b5c81da99a3a1812afd4f788f6984d067896ac0203aeba1845fdf04e0180b8a447e06f0b99f7cf2ec70
SSDEEP 3072:hFqLQaw03Hp4BbaQvzLk9Z+87VbPa3BptF:KvDsTrCZH9PyBpD
TLSH
T180B302967B32827E52442DEECE0D035907CA7AC5CAF53808233335DE9E59D06837DB8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 22KB
SHA256 432fce1fc85406623ad93f82497b4aa6134076833e93f3b84bc0ecc24adf2154
MD5 e1151d55c6ddc9953f136b93a7caf010
SHA1 887b3bedfb4f518cda41182a54233cd05fc77c18
SHA512 83d8619274358bed1a5be02a8447e57d0de456b73379dea2b78ae0f1c8d4a5044b4cb9511f6318665443b36ca6f6e504ca57c176fc980e2e689061ec9dac6637
SSDEEP 384:065zlreaX7yJBX2tS4CquU5GcAdcekeuryesTeIQIN29bJt/YkVwvbb+Il/QwXq:0WHltS4CqrgRye1u95IQ6CtAkab7l/Ql
TLSH
T17CB2E113406D1CF616DC9E6E0991F825813290260FDD3B2FE78B96124606F95EDA7FCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 25KB
SHA256 ad079ad372969e175398504bc9b7c859023a2e9a2cd9f9453900a5af7d067399
MD5 7b18f72d685de734018a516972aadbcc
SHA1 acde7fc940e0b0f1b9bb8eb873d3e6b912e9091a
SHA512 567ef17e9a8421e52cbea5268d5c3695337975bd6fbaaba0a6453769e4cc05e101a38d1d15fdc1195c954005788bfa904837e26d279e1a9e02f5fbdd982c054b
SSDEEP 384:7kP/8LOZ5P/Oyov+K2DP3HHeSLA/gDHOby9FJZoueDlUigXrS55pBoakrI3ud1Be:oPfZ5nOPNSP334gDXeik55wrGmBWVb
TLSH
T1B6C2E17E9C4C8B5E5E4834A1190043CCDD6157AF45A5609C73BFAF0A5504FAEDBC8327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 41KB
SHA256 594aac9893c964165841ea61730aca0eda5760e6e5cf968182e6655700c51326
MD5 3f23d080d1af97db4688c7e2f8e46544
SHA1 0000c812f36f60729d25c1b77d65d7adbaebc79f
SHA512 3186c7ef93d2e6a1cd29d6755288af7789e33eed661b5961792e5f82f3e11fec30d1c218841408c1056ff4c9215a138efacccdc957f1d771ab59080bd63d98a5
SSDEEP 768:Swfd4KWpg0Yb6z49iHwUjjUQGUDksgosl2SH/tNXlksS9VQbwUnSEnt:Swd4Fwb6z49AwUjswkzxlbNXAQcVEnt
TLSH
T1FE13F131CCB3A2D543BB3E298CEA4B47DA38368643F015B8325C66AA91C765B34F8D45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 133KB
SHA256 408069637716d85fb941cc534c137b58c9ca50df69a3ba66aa10aa42c9f9c858
MD5 783e7cb2e9ed0a8863e383510d66fd9b
SHA1 0f18cba1eb60ee18bd84609a57f636e927b89840
SHA512 bfadaafa6b1e0d8cde09629ce9a2aac539bb528e7498da75071cbe49bea5338432dced6e96ad76cdf5fcde5458c4df8a668ae11262690caa21e307a1c442cbe8
SSDEEP 3072:Mb7p/w9Hd1i3KyQi7jSJi2c1IAfFwRFHauY3zDlpQ7Ct:Ui2HtGAf6RpauQ3lpQ+t
TLSH
T1DFD31227381E173B511AFCD9CDAC4B563BD9F46450E43E0557F6089AF8184E26BACD88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 58b98204db37f5f4a4fb40e080eebf0ecb3dc170849a3847eb8f107a8e503fa9
MD5 e10be94284d9c338be9773821c5503ac
SHA1 a7b7c105eb592c7a064ee3b02901f4fe0190b951
SHA512 a4e3baefb914ce0e7c6e3f3c34b5e93df78e685ef3c8fb024fe879b2592f6eebe7b3373891ab73d41f587aa4bf4ee54005dd59ed2854d3365c0edede31f15cd5
SSDEEP 96:LvI63HHrnBqaLdDI0rhKp0zWyyV2+flzu:bI6bnS0rh7Wy3sg
TLSH
T120A1B51E9A989265EBE80CB0EBDD1B5C36308B1C418F0F4276F95FBD698E791D04DA1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 09e2516a8c57c6f3e5435bcdb4912580ba569bb088749ffdbcaa95d1f56e4778
MD5 82bfaff797e2e8be408655485b6c09e3
SHA1 370da0cddd4e7554e8027abf796785acd0b1c94c
SHA512 c1eaad7c6f95736fc4910e4da30a1897295c220e80bea8ce263455dbd4fab9e1c45ef19149edb3d5dc719eb64fc675e795af1594301443d2fc5db33a46d3b662
SSDEEP 48:M3XOn9CicHg+yCNPmHs5MpJ4H5JuQsYXb5ire9pkOwmTuzw/yyR/32+q6lMkyL7:2UYHHNPBqmLdDb0rcKp3z6yyV2+flXW
TLSH
T14991C61EA9999269EBD80CB1CBDD1B2C3630871C408F0F16B2F44FBD5A5E792D04D61C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58daea.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58daea.TMP
Size 3KB
SHA256 8015a40314c763f071c41c7235b420a6dbdd5c25044b36e1e32c2f65355510c5
MD5 a55a64f33ec3d7ab3e55e1954e059c40
SHA1 6d1119a0985d83e77c54068ef6a54a28414871cb
SHA512 2639e5d79c5176a94b9ccbf92c4b4e2a7d9d73e055276fc5a5df3d41297e585af2f69379af69644a081a40e6b20302b97f1194adf37c4331936514aea4c2ef0c
TLSH
T19561921C62958561EBD84CF0EBEC276C3A30472C418F0F1532F94D7D9A0EB62E0C5A1D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 1120418d33d7919c571bddaf991fb50d52ceed38ea26bf65887e8a8ebe52cfac
MD5 678ccb2e393acf2f3cac7c8df9a3662e
SHA1 8e6e132e9ecad3ae6085c518c4e8e09109e00437
SHA512 67ef4d0b7d9c2c64401a7ddc656b416d3669ab5d8997be4eca57b36c0571ad9101ced47326c61030f64e674f9c982723344a40e8324ca04cce1f70538b22b91e
SSDEEP 192:D14XPneaY5QLQyNJ2oMhh7uVRX8mj6o6TMaiCUc41RJy0unQyKbi9+sChOU:D14XPneaY5QLQyNJ2oMhh7uVRX8mGo6c
TLSH
T13F1281A7C7F8893DCD2165F07A1A6E1FCE1D0920D3283D2A88F99F5797E5470E501A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 1f4fe0dca49c28e9b30c096edd49ae4b6403a07f9f7d29677bcee4c13dbc1828
MD5 9266eb5dbbe70979a4e09e955b897d2c
SHA1 b88ddc7564aec297a8b4036cc7c51d51e9eb7587
SHA512 14ef1d20f618606b354e06484e24137fcd4e5d64bdc99bd3ea42539f48751a798550b5b8240204f36751be76a05d050df18dc46e0e341198c357d4593b96ab45
SSDEEP 192:D14XPneaY5QLQyNJ+MhhBiCnuVa+SQyKPKw4Wt9znXHvmj6o6TM9I6OOU:D14XPneaY5QLQyNJ+MhhBiCnuVa+SQyS
TLSH
T1CE0280A7C7E88D3DCD2165F0761A6E2FCE1D0920D3283D2A88E99F5797E5470E501A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 19505b71088f52e6df55655c3d25592342b41580dab38d07bf2cff12ad6c6e00
MD5 b682e9eb0c3806f8da04d3e1d68724b2
SHA1 e66ae63d3a4a2f8c10ed8a374c15f41c42ae9976
SHA512 3d1d69499007170823805fde55cae1b07f5c5502be356fb2b31b3b2bfcd7622aa835fe7d744723276a3ed26d5ab9b29cf9b91794b9cd7628ea5e4374081ec9bc
SSDEEP 384:sxZMQqeZ/fosveZi6oZCyHbu63K/xPVGvmANk:skXeZ/fDeIVHbtYWmn
TLSH
T14282D856A9344DBB8CD7D22AF554BB67D2F90522D2904E84BEFCDB0C00D7AED6106C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 6ef34cf2accad29aa53b4a2c910a1b25405e4fdb77ba9225628dfed51ecb6e4f
MD5 0392256dc0ff9c0e7e49a47bcf8404a4
SHA1 255c6e438c75a72a6f24d4d5a78e89dd573010c6
SHA512 a281ae9072c0a57a84834251c03270ec7f48d34f9ce63e42ec495e4e84766b89a152a670cfc034d02dedf094e7b8649bedf169004a222cfd5fd329b9d8bd12a1
SSDEEP 384:sxZsQMZ/fos/8ai6oZCyHbv6/8xPV/mAjM:sUNZ/fz8NVHbIWhmn
TLSH
T10972D746A9384DBB8CDAD219F545BB67D7F90563D2904E48AEFCDB0C00D6AED2102C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 739444bcbeed38235f32ae11a9bfc8afa4da2029608e5ff3ea74387f4a9c4db9
MD5 056dff1646870dcca16526286a5c48ce
SHA1 2efa4a940cef86507cf687966e508f9d859f8653
SHA512 ef1f97f243b02715b29486c07def2e70f5950e0f11fc8e3da159e7c979579a057848d0ffe336e7c49d4a9053adc99ee061fa6b97bbb60037e192fce254fd2d17
SSDEEP 384:sxZMQMZ/fosveZi6oZCyHbanN/xPVCmANk:skNZ/fDeIVHbYLImn
TLSH
T15282D857A9344DBB8CD6D61AF544BB67D2F90522D2904E88BEFCDB0C00D7AED6106C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 c65bc8f9b3c489a8014c4664e44291772039aafa87055541f4794dcf5bb6af12
MD5 4a0e2827998dbaa4f057781ebf7ba5f0
SHA1 1a6ad03f30e06725fdb3a95a1552857e116a9088
SHA512 050cb03885364d41aba2e93f9b2a06fa06fde8b818076d0109c5862ae9d1261832169128b39651781a80f32077be7f048671e450261192e9eb0b2a9415e7d0f3
SSDEEP 768:DXgLiAo7pLuL/aeWvaSXq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBMKJLlhzCpUroF:DXgLiAUE/aeWvaSXqu1jasMKJLDOp/F
TLSH
T161F20C3B2C0CCB7E4F844A9CED2ABE8E6DE402CB9698895447FA444C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 6cd2331b529eb8b86b9b65d8bb6d0058a78f39235d2860ec701a314e834ef155
MD5 9488d4ea332756fff0e8f32de5c9b93e
SHA1 2fdba838ba3cf614b44fd27b734ccd0cf099e31b
SHA512 48463d2c8607c51a803dab864399b09d2c4a966e1bf1393e68d8561dbf80c0f4de53ea7958be1c9308d52c5751090791ddaa1f6e30c12e3a1aa8a7487bfe00a9
SSDEEP 768:DcgLiEj7pLuLn9eWvaSXq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVcMKJLlhzCpUrok:DcgLiEVEn9eWvaSXqu1jadMKJLDOp/Lw
TLSH
T152F20C3B2C0CCB7E4F844A9CED2A7E8E6DE8028B9698C95447FA444C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 2bb09d5ad10a767820f66e7dfb08f05b281f879b0d2a2e04105d097452358d56
MD5 834f18d733f856d932e24430fdbc5b6d
SHA1 9f9b5cc3d917e7263006dedb20f0ac3709d314c8
SHA512 dd3a1b5220d80c11dd111a4a4ad31522ed289327464e63c5dca1be0463816a002033e45d8ee6739b6b690cfd1d3fcd94e0a24747580457f3504136c8b4cd76e7
SSDEEP 192:kBhNHfIVfhRXF4B6W4KqV2j6Ok4pYLQobOyzcp/KLNz3BzRBo:krN/INhx+kcxKBzxzro
TLSH
T1C1B23911717B42D53A7E298A8595B42F26C2306330D8F93B7BB914A60F6BE20DDFD4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b9144dd0b14a1f351cdcea1dd7e1e1ae7f9108ec0c6b132f1804872887670428
MD5 c856d778568edb0d4d637a0219eab13a
SHA1 93394776ac3f67149bdc784bde65a58d06ce294f
SHA512 b9ab45ec995f696ffde1f55d2652ef3a8094a80b4f9dd13fed0d56fde2519f79439f33fc1ae3d9c67e30fa58270f470ee4ddd3f2e6f96abe1d591700065e6802
SSDEEP 384:nLiFavqMg3sNZ8TUNTUlIm2ZTPENg6OwfjYLzREzGendj3Ra43GrN1k+5vI+8:mFayv3wwgHzuYLWbd3RaDA
TLSH
T1CDC25B35E858CABBEDEA8FD9A74A7A03EEE00267D58C4AD4DAD81D0D00D71DE1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 321a708b99e046209c13e62c87cd1b864979cc32d1bf20bf74b9df512e884ec4
MD5 665b9b4dd627f000a218fbd655816c23
SHA1 7c341958b728936fbc51a75e0f3857567642355d
SHA512 981f270adf13c8f70a47a5dece4cec75a45ad86a4b042e145c08f103e591d7992b9014da2018e1cfb87711e5bd8358d935b881293b502405fd6439ba79a2a758
SSDEEP 384:nkiFavqMg3sNR8TUNTUlIm2ZTPGoFOwfjYLzREzGe13gR3Ra43GrN1k+5vI+8:/Fayv3swgHTvYLWSR3RaDA
TLSH
T142C25B36E858DAA7EDE68FD5B74A7603EEE04267D58C4AD4DAD81D0D00C71DE130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 5b851994627ef4f4ae0dcf1d3189193f59ee17ea34e4d7b2a7eb18b3da511aac
MD5 5c54fba347109cf1cf5f052daef0c17d
SHA1 ac8c5a7cbe26dcd8c4a69f46181c4c1113a21eca
SHA512 badb7228a4ad9e509de170799f36cc3f0da108579c2a455cc873e4988076cb42251032209beb74c1862311472f4b5a0b7e8243d568ef10d0b9620a38b1251a85
SSDEEP 384:nBiFavqMg3sNd8TUNTUlI4oZTPLqIOwfjYLzREzGe13iRUS4brN1k+5vI+s:oFayv3cwgt64YLWARUS4/I
TLSH
T1E5B23A76E8A4DAB7EDE68FC6B74A7603DEE01267958C4AD4DAD81D0D00C71DE130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5c2a9cc23e80a5b353699c2357e09118f594241745057cecc31b776a4a0fbf48
MD5 7dc64755f19bd758d56b112375d2a147
SHA1 4dd2e50ba5cf8353a97739fcf3e0e92872c6f60b
SHA512 2b2443ca79d26eb81d73eeb17faf46c3faa99c6d80e1851755eb3f904d72b2dce299a49c2e6038cda9505609fa05eea7f18c07390afabe5944c5b9011a7a4fec
SSDEEP 384:nOiFrcXqn43sNd8TUNTUlI44ZTPwqIOwfjYLzREzGe13HROlQp4rN1k+5vI++:lFz43cwgff4YLWRRxsS
TLSH
T18AC24B36D8A4DDA7EDEA4FC6B70A7603AFE41263858C19D8DAC86E4C00C75DD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 c0fdfa4c843a1f939367fe12216c70217ce84d861da829bbfbb64aee11b6f1ad
MD5 27bcc81f032bc7c2a2e51451760e3a01
SHA1 4ad730b9d99afa85fac08e6952c8ceb1628fd021
SHA512 7093d1bd9992e3edc6934eaf204b6ccfc137db2dbad7c7035a02fc2faa90946fdd5b8aee9f4d36a9015f0f83e6e4399edb1f78f505261dbbfa1a97f19113a574
SSDEEP 384:nBiFavqMr3sNd8TUNTUlI44ZTPLqIOwfjYLzREzGe13iRUS4brN1k+5vI+s:oFayQ3cwgf64YLWARUS4/I
TLSH
T1E4C23A76E864DAB7EDE68FC6B74A7603EEE012A3958C4AD8DAD81D0D00C71DD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 525b75f5943b4a5d0ba4b79b00572569b21d2370c9aa1f7e8b5c9eae2e5a5195
MD5 cf9d04dc5f3d151678933b63ddb4df70
SHA1 beb5e2214df09c3fd132ed0ec591176210ad01c3
SHA512 89d39198455b1358c6262e671d87bee839cacd42000ecd32366847df47e12dfe56d727c67a8823c8f5ba9f1f73cb5823aca7f84486818003027b47d5f38f8111
SSDEEP 384:nNiFrcXqn2j3sNd8TUNTUlI44ZTPwqIOwfjYLzREzGe133ROlQp4rN1k+5vI++:EFzk3cwgff4YLWlRxsS
TLSH
T12BC23B36E8A4DDA7EDE64FC6B70A7603AFE41263858C59D8DAC86E4C00C75DD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 d4d3d367dbed92af02a9e922ff69c96f99ab9e97faf22c0c87626cbed108aa29
MD5 46827a1af8036ffe4592dca134cc6a7c
SHA1 fbbc69c584eedda43d64fb1acb1475265acfc1eb
SHA512 7c55a965e5d045447e40031c86e59d5f28d6eddabab63758427a789caea0398a3ad28171b0718c4481abd574eb37f124010a74a4623cb91c0df1912a57eaad33
TLSH
T173412EE05C3D2AD1E0BE0AAFB04B38FC84D8D726F568747D6858EA98473A54E254143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 991b9f93117701e57e14915af3d800c21ab5c8b22bca75c0cf6c3657bc746cad
MD5 9f84164a2f788947be2197708128730a
SHA1 b650f3952145efef5b953a44e6b3c7e7f063864a
SHA512 d92709570bec91940d799ebc02c78fc35c206bad0a7f326c2a454134c386b049c0d5b051acfc7b5a415abd4f458b614d260e89aa993b6353e648b3461783c655
TLSH
T19E4162E15C3D1AD1D0BE0A6FA04B38FC84C8D32AF168347D6868EE984B3E94D240143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 a9fe80091a31bea1d5685c9b9f79dd3a452cd09e36e47872155e3f8ebb7e7b6b
MD5 7ac15374f80a0cb754b493a401a27497
SHA1 84ae1436eabff50370719227f0c46119e4bbc304
SHA512 1051c33e5428491d61d522024494e0c8fc0f24ba75dc0e2533efa0066e1a4dfb1da7022ae852e56b2ac4b1cda1cb53af872e30b052ac02493ef7db922a03ccb8
TLSH
T1014160E0583C2AD1D4BE09AFA04B34FC84DCD326F568343D2868E9984A7A54D244143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 551b5d45674e685ce42bfad9fff59c2b88013f6b55f022edbc16b0f3c5331515
MD5 dfadd3bbcae128d4205fcb6c178f3aaf
SHA1 005be079c2cf9d7cc57b17192391298786f0cd6e
SHA512 ccca0bb1a5dda3e846892598fcdd5961f95b6b76e8677699fb846d206cef5b8a3a9e3dad59b6d18bcf83adc115474e843a457865545a24a5e42003b77e227ce1
TLSH
T15F4120E1983D2AE1D4BD0E6EA04B78FC84D8D326F178747D6868EE98463A95E640143F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e58c28e9ba570f9ff1550ec2af94f754588cb5ee58f6eafe3c24c12e2041e6e5
MD5 28310783af83ae292d89a9449245ea4c
SHA1 e75ad5fe436725c13bfe75222f14efcf26f5352d
SHA512 ea21693bf7832b9966ad2fe08f78c3f100e13ef9396148beda61117d8b7911b8d474cc30f62093c8a088d099ea296c62954cfe270b8f63aa351d2ce4817aa31e
TLSH
T1B7413A58ABFE0118B3B37F5B9BF6A86E487EB9762E06D05D10010E4E0663B41DC61B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1476-644-0x00000295055D0000-0x0000029505600000-memory.dmp

Download