9b6009381175f55a346bbd826f79734ab607e17790ef2822e33db63c3eb17275

Analysis

user interaction
yes
max time kernel
319s
max time network
363s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AMD_INF_Patcher.exe
Size 78KB
Sample260511-pr5vvads8j
SHA256 9b6009381175f55a346bbd826f79734ab607e17790ef2822e33db63c3eb17275
MD5 904c421c3251debaf2bf1cb3a76a0d9d
SHA1 3ca2f3d155652326a0014f50c237265c384ea62e
SHA512 1b511d862072cd7cf143fb77776ebf368338bbc35ce12fa52b059fdade0e3728075a8103f713242cd71f5fa8b8484c728c7f892ebe736b4fbf68c8a3eed73f99
SSDEEP 1536:80lYhtC3WqCpqjBnQWPiiGGzZaPaL/l0HLv5jcdlX1bo351:80lYhtC3rCpqjBnQWPiiGGzZaPA/l0rN
TLSH
T1C87309557688C535C6BB0A39AD665800EE7701BB4212C240BEDC62DFAFB37198733F96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware defense_evasion discovery execution spyware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
161	4168	msedge.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\id\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\128.png	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_1988_179905840\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_104_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\cs\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1988_1833254623\_locales\te\messages.json	msedge.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b.exe:Zone.Identifier	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
6360	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6664	msedge.exe
4168	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies Internet Explorer settings 1 TTPs 8 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\ITBar7Layout = 13000000000000000000000020000000100000000000000001000000010700005e01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Internet Explorer\Toolbar	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Internet Explorer\Toolbar	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\ITBar7Layout = 13000000000000000000000020000000100000000000000001000000010700005e01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser	explorer.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134229768402139790"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\0	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\WinPos1920x1080x96(1).top = "278"	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\WinPos1920x1080x96(1).bottom = "919"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\WinPos1920x1080x96(1).right = "1884"	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-600123060-2148212387-2211176695-1000\{F9884707-42EB-4CA0-91F8-BF611AC2D6D0}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\MinPos1920x1080x96(1).y = "4294967295"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 0100000000000000ffffffff	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell\SniffedFolderType = "Generic"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\MRUListEx = 0100000000000000ffffffff	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\MinPos1920x1080x96(1).x = "4294967295"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0 = 50003100000000003e5ca033100041646d696e003c0009000400efbe3e5c152aab5ccc642e0000001e57020000000100000000000000000000000000000088995100410064006d0069006e00000014000000	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\0\NodeSlot = "3"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1\0 = 5600310000000000a55c202b10004472697665727300400009000400efbeab5c1b65ab5c35652e000000e4b502000000120000000000000000000000000000001206e6004400720069007600650072007300000016000000	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1\MRUListEx = 00000000ffffffff	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1\0\0\MRUListEx = 00000000ffffffff	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	AMD_INF_Patcher.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-600123060-2148212387-2211176695-1000\{C863F80D-FF1F-48DC-8109-82F5CFE24561}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0 = 78003100000000003e5c152a1100557365727300640009000400efbec5522d60ab5ccc642e0000006c0500000000010000000000000000003a0000000000b6186e0055007300650072007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003300000014000000	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Generic"	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\MaxPos1920x1080x96(1).y = "4294967295"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\MRUListEx = 00000000ffffffff	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\MRUListEx = 00000000ffffffff	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\MRUListEx = 00000000ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1\0	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	AMD_INF_Patcher.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1 = 5a00310000000000a55c152b10005061636b616765730000420009000400efbeab5c1b65ab5c35652e000000dbb50200000017000000000000000000000000000000e51aca005000610063006b006100670065007300000018000000	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1 = 19002f433a5c000000000000000000000000000000000000000000	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0 = 8400310000000000ab5c1b651100444f574e4c4f7e3100006c0009000400efbe3e5c152aab5c1c652e000000265702000000010000000000000000004200000000001cb7a50044006f0077006e006c006f00610064007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100370039003800000018000000	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\MRUListEx = 00000000ffffffff	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\WFlags = "0"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\0 = 5000310000000000ab5c6b65100042696e3634003c0009000400efbeab5c1b65ab5c70652e000000c2b50200000018000000000000000000000000000000969d9f00420069006e0036003400000014000000	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1\0\0	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1\0\MRUListEx = 00000000ffffffff	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\1\0\0\0\NodeSlot = "4"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	explorer.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b.exe:Zone.Identifier	msedge.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
7132	explorer.exe
2828	explorer.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1316	AMD_INF_Patcher.exe
1120	msedge.exe
1120	msedge.exe
6360	powershell.exe
6360	powershell.exe
6360	powershell.exe
7108	msedge.exe
7108	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1316	AMD_INF_Patcher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	1316	AMD_INF_Patcher.exe
Token: SeRestorePrivilege	4408	7zG.exe
Token: 35	4408	7zG.exe
Token: SeSecurityPrivilege	4408	7zG.exe
Token: SeSecurityPrivilege	4408	7zG.exe
Token: SeDebugPrivilege	6360	powershell.exe

Suspicious use of FindShellTrayWindow 29 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
1988	msedge.exe
4408	7zG.exe
1988	msedge.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2828	explorer.exe
7132	explorer.exe
2828	explorer.exe
7132	explorer.exe
7132	explorer.exe
7132	explorer.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1316 wrote to memory of 6120	1316	AMD_INF_Patcher.exe	78
PID 1316 wrote to memory of 1988	1316	AMD_INF_Patcher.exe	79
PID 1988 wrote to memory of 4748	1988	msedge.exe	80
PID 1988 wrote to memory of 4168	1988	msedge.exe	82
PID 1988 wrote to memory of 4472	1988	msedge.exe	81
PID 1988 wrote to memory of 4472	1988	msedge.exe	81
PID 1988 wrote to memory of 4472	1988	msedge.exe	81
PID 1988 wrote to memory of 3752	1988	msedge.exe	83
PID 1988 wrote to memory of 3752	1988	msedge.exe	83
PID 1988 wrote to memory of 5400	1988	msedge.exe	85
PID 1988 wrote to memory of 5400	1988	msedge.exe	85
PID 1988 wrote to memory of 5400	1988	msedge.exe	85
PID 1988 wrote to memory of 3356	1988	msedge.exe	86
PID 1988 wrote to memory of 3356	1988	msedge.exe	86
PID 1988 wrote to memory of 3356	1988	msedge.exe	86
PID 1988 wrote to memory of 5968	1988	msedge.exe	88
PID 1988 wrote to memory of 5968	1988	msedge.exe	88
PID 1988 wrote to memory of 5968	1988	msedge.exe	88
PID 1988 wrote to memory of 1768	1988	msedge.exe	89
PID 1988 wrote to memory of 1768	1988	msedge.exe	89
PID 1988 wrote to memory of 1768	1988	msedge.exe	89
PID 1988 wrote to memory of 372	1988	msedge.exe	90
PID 1988 wrote to memory of 372	1988	msedge.exe	90
PID 1988 wrote to memory of 5304	1988	msedge.exe	91
PID 1988 wrote to memory of 5304	1988	msedge.exe	91
PID 1988 wrote to memory of 5260	1988	msedge.exe	92
PID 1988 wrote to memory of 5208	1988	msedge.exe	93
PID 1988 wrote to memory of 5240	1988	msedge.exe	94
PID 1988 wrote to memory of 2756	1988	msedge.exe	95
PID 1988 wrote to memory of 3272	1988	msedge.exe	96
PID 1988 wrote to memory of 2756	1988	msedge.exe	95
PID 1988 wrote to memory of 3272	1988	msedge.exe	96
PID 1988 wrote to memory of 3272	1988	msedge.exe	96
PID 1988 wrote to memory of 4880	1988	msedge.exe	99
PID 1988 wrote to memory of 4880	1988	msedge.exe	99
PID 1988 wrote to memory of 4880	1988	msedge.exe	99
PID 1988 wrote to memory of 5868	1988	msedge.exe	100
PID 1988 wrote to memory of 5868	1988	msedge.exe	100
PID 1988 wrote to memory of 3728	1988	msedge.exe	103
PID 1988 wrote to memory of 5844	1988	msedge.exe	104
PID 5844 wrote to memory of 1440	5844	msedge.exe	106
PID 1988 wrote to memory of 5584	1988	msedge.exe	108
PID 1988 wrote to memory of 1720	1988	msedge.exe	109
PID 1988 wrote to memory of 1720	1988	msedge.exe	109
PID 1988 wrote to memory of 3636	1988	msedge.exe	110
PID 1988 wrote to memory of 3636	1988	msedge.exe	110
PID 1988 wrote to memory of 3636	1988	msedge.exe	110
PID 1988 wrote to memory of 1120	1988	msedge.exe	114
PID 1988 wrote to memory of 1040	1988	msedge.exe	116
PID 1988 wrote to memory of 1040	1988	msedge.exe	116
PID 1316 wrote to memory of 6360	1316	AMD_INF_Patcher.exe	118
PID 1988 wrote to memory of 1264	1988	msedge.exe	120
PID 1988 wrote to memory of 1264	1988	msedge.exe	120
PID 1988 wrote to memory of 7108	1988	msedge.exe	121
PID 7108 wrote to memory of 7024	7108	msedge.exe	122
PID 7108 wrote to memory of 6664	7108	msedge.exe	123
PID 7108 wrote to memory of 6652	7108	msedge.exe	124
PID 7108 wrote to memory of 6652	7108	msedge.exe	124
PID 7108 wrote to memory of 6652	7108	msedge.exe	124
PID 7108 wrote to memory of 6460	7108	msedge.exe	125
PID 7108 wrote to memory of 6460	7108	msedge.exe	125
PID 7108 wrote to memory of 4844	7108	msedge.exe	129
PID 7108 wrote to memory of 5208	7108	msedge.exe	130
PID 7108 wrote to memory of 1668	7108	msedge.exe	131

C:\Users\Admin\AppData\Local\Temp\AMD_INF_Patcher.exe
"C:\Users\Admin\AppData\Local\Temp\AMD_INF_Patcher.exe"
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://amd.com/drivers
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://amd.com/drivers
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x344,0x7ff9f29ac188,0x7ff9f29ac194,0x7ff9f29ac1a0
    3⤵
    PID:4748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1772,i,9393320054651661686,7946197434020005445,262144 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
    3⤵
    PID:4472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1516,i,5510625634287430103,5862693038401838438,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:11
    3⤵
    - Downloads MZ/PE file
    - System Time Discovery
    PID:4168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,4255252173660606486,9802374235211936966,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:13
    3⤵
    PID:3752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3528,i,11495202927264372681,11254312128040854635,2097152 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
    3⤵
    PID:5400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,16429502156649243432,13532756327557925385,2097152 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
    3⤵
    PID:3356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,12616434563144178013,9026204097278344058,2097152 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:1
    3⤵
    PID:5968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5268,i,6815528443852082118,12599378009294590136,2097152 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:1
    3⤵
    PID:1768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,8625287480597629787,843374507292414318,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:14
    3⤵
    PID:372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,5425740219870101247,10548098567288437918,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:14
    3⤵
    PID:5304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,12338357741464070174,5316081504795237960,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
    3⤵
    PID:5260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,2674402153580549790,16524760217263957207,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
    3⤵
    PID:5208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,4803891239099325959,1003088404808589424,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:14
    3⤵
    PID:5240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,11082012846242758425,16871339667799333647,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:14
    3⤵
    PID:2756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6604,i,6771506131343425553,8263266992077534029,2097152 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:1
    3⤵
    PID:3272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5300,i,8390278915339735037,3269124553337816985,2097152 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:1
    3⤵
    PID:4880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,11294865049812282233,13586768227400641833,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
    3⤵
    PID:5868
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7348,i,8507927722150991096,10206100655730811816,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=7364 /prefetch:14
    3⤵
    PID:1480
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7348,i,8507927722150991096,10206100655730811816,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=7364 /prefetch:14
    3⤵
    PID:3728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,12971158614863328776,17727006839197881339,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=7368 /prefetch:14
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1128
      4⤵
      PID:1440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,17509024354212267727,3609872797477765915,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:14
    3⤵
    - Subvert Trust Controls: Mark-of-the-Web Bypass
    - NTFS ADS
    PID:5584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,4394485732971145783,14954442124526320476,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
    3⤵
    PID:1720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5740,i,10734948882542243287,3442291024170286253,2097152 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:1
    3⤵
    PID:3636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6696,i,1136125330940541706,5866291305013813211,262144 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=888,i,6833051803910652427,14664947871946733454,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:14
    3⤵
    PID:1040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,10617737873937835617,14657696926649860040,524288 --field-trial-handle=2328,i,10203373406342553115,11351562403155689690,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:14
    3⤵
    PID:1264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:7108
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2b0,0x7ff9f29ac188,0x7ff9f29ac194,0x7ff9f29ac1a0
      4⤵
      PID:7024
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,1138602060219337511,7162860440201065799,524288 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:11
      4⤵
      System Time Discovery
      PID:6664
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,2792075969506703232,9600094591212128909,262144 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
      4⤵
      PID:6652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,8997433650748875972,6150123522839479797,524288 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:13
      4⤵
      PID:6460
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,12887492771092926360,2046366677669895569,524288 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:14
      4⤵
      PID:5288
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,12887492771092926360,2046366677669895569,524288 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:14
      4⤵
      PID:4844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,3689972586692955617,15757821113183006827,524288 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:14
      4⤵
      PID:5208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,14779425799718608013,10512473521730331101,524288 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:14
      4⤵
      PID:1668
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,7821469914004339728,6665131309337766917,524288 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:14
      4⤵
      PID:6036
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4908,i,17721773180276768191,16775926807466958803,262144 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:10
      4⤵
      PID:3380
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,16601707030800096717,11262843457449246723,524288 --field-trial-handle=2284,i,15029000031338455379,17877934556276465538,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
      4⤵
      PID:752
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:6360
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe" /select,"C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\Display\WT6A_INF\u0200434.inf"
  2⤵
  PID:660
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe" /select,"C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Bin64\cccmanifest_64.json"
  2⤵
  PID:1812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1760

C:\Windows\system32\WerFault.exe
"C:\Windows\system32\WerFault.exe" -k -lc WATCHDOG WATCHDOG-20260511-1339.dmp
1⤵
PID:5700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1284

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:488

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\" -spe -an -ai#7zMap14756:162:7zEvent13671
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6556

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:6572

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2828

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:7132

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:5544

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:2068
- C:\Program Files\Microsoft Office\root\Office16\Winword.exe
  "C:\Program Files\Microsoft Office\root\Office16\Winword.exe" /n "C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\Display\WT6A_INF\u0200434.inf"
  2⤵
  PID:6300

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
1⤵
PID:4888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f67ebea6d44a838311ffcbd4b101d74201fb902961a5b02260ec1289e99a6a7f
MD5 ad3cbc359f9ecb22866c5d2ff05c5feb
SHA1 8e7f4e041a3acf54f56ce76b365aadba3d33aac7
SHA512 181317bcf7c4121416d7ea1f3a742f435954037036c30314e4bc1113c3ac836c9c7982e9223e1d208432e1c5291d6cd1b20720146d531e569447eceb7a70559e
TLSH
T13BD02333359D705BE22E82315113E7152755565579579D05F359C44CCC7D4DD13C11D3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d8c0ebc33f7882ac8aaa0f941413384749c7672a7744de3485d53f3d7a832ce
MD5 fb7d9391eb1040937b5c31ff61febe79
SHA1 0be0bde544b492ac590e441f96bf8d0a378d3782
SHA512 d4a405f080afee18100d407e824cc3366114b1acd56307d247bc25ee87ffaba37406581a2dfcfe9320df4d014582f86fd300e9f67a54b4fcd2e471e1358c493d
TLSH
T1AED0804425F15CB6D046C57115457B053955D6A79E539B1A35F36C784C4300115511F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec08a2bc05c39a487752b975267871490ffaa8818c0eed8e165e81ab5a6873c3
MD5 58cf755a3271ca58861584d80b5a25dc
SHA1 5c39bfec58cdcebc4e39d0b1787f11aaf3c66454
SHA512 0ec7eaacb08b781a12a54741aec6fd1f3d51c4569ac2843e119fb14c0b5bce7aa27508c4ffd2550e0f94af6fb991a84b7822e5db844c1a70d47df97a6de6fb6e
TLSH
T1C5D023773A6DB4D6F71A93319413D70516A152D17D1BAE09F361C41CCC2A18913851D2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 888c2cd66a22a4fdb4c087097a98f59003c75a1a5f561f20e9e681cd52eb6cd4
MD5 1502a1316230ba442775eff117b2fe56
SHA1 6254e267e36d833f2e17c5e36e170ff7307f7daa
SHA512 cbf5133c6329f1ff904492925778ad69bc7cc08d8fd016ec2bb94c57c41e1dd88d5fa8453e770ab269aa2928c9ac9ab94430c55bd535bfbf4d9ebfed8d54f1f4
TLSH
T18DD023773A6DA4D6F70693319413D70516A152D27D1BAE0DF361C41CDC2919913851D2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 71f86f37b013034051fae2e3307728bc40653c617383d6aa85219dd8ea093ca3
MD5 2ee9c9062df63fee32f65bc087b93005
SHA1 2874f6b34fdb5f9ff64aed6e38005f7940050b27
SHA512 99729f971f840d780b0e5404260284b048d532cb0dbd20969536cacd61a2d2c52568d6b9d96f6f0168b93eaa3c7236b49d8aafb6138d1b1fcbe89990c6af5af3
TLSH
T1AFD08C4821F66CBAD09ACA7219057B0A2959EAA79E93AB2A39B36C784C4300115911F7
MD5 SHA1 SHA512 TLSH

Submit Download

22831340-2d08-4f3e-9e1a-0adbfad09512.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22831340-2d08-4f3e-9e1a-0adbfad09512.tmp
Size 414B
SHA256 0e94aa03e6fbfc22c7345cf696983bc5de19f99d008f616ce0604d63d062f49e
MD5 2fb256255d1ed9e75d6b35b7fae79553
SHA1 70bfbe82c23bda38a1d5a472e2ec5c267a6e88a5
SHA512 7c72ae111f533d5f44ba8dd926d1451d65418da85eef30996001f2aedb75e25f88396cf829c00459c6071d2897643d0a712626f9eb16c56bb403c3d32d1b246f
TLSH
T14FE02BAACD369C3708FD471961010B85F76553271640555F3A3D920C8F7063F45E6D1C
MD5 SHA1 SHA512 TLSH

Submit Download

5d6442a5-e019-473c-b814-492539e076ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5d6442a5-e019-473c-b814-492539e076ed.tmp
Size 15KB
SHA256 fa3c9bee70cc49def0ad7b0ff2adb3b9bf7a494f77649a4f6c5297ba3b0a1986
MD5 db7fc83d234fd4045d44c67950a8ea2d
SHA1 d0faa22f18e2fe79ded21fc747f875982b66fa67
SHA512 1d781702e15342ff4706937ae624dfe5106a46db57f66c8ddcb190ad34189664d0b3f306f3c2629b9dbd85dd6c225f8d0b276944b0de7276241b0161624cd95b
SSDEEP 384:sxZX11R/fGszAajFrLTJx/bP/YSaiXfjjK:sfnR/fhAEFrf/b3YSaiXa
TLSH
T15D62D856693899778CDBD619FA45BF53D6F51563E1804E489AFCCB0C00E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 be1767e83f8db657559e80a2e4dddbf10f9fc202f9e6d18038b8ddcd1907f0e5
MD5 11e2f360f7d1b49345de23751118f825
SHA1 e16f6cc335068029f2e7f19e5f7c92680e9cfefe
SHA512 6f87328c6a25d2cc63f6e0a7b7f666cbfa7421c129ba68fe48bd8f0a15d8bc1f06606882b5d7fefb5fb39eff68597627692d872b4ac5a884f495ac76195f80c5
SSDEEP 384:zMAF4bdgPNBr+DBOdxO6tQofj6BDS63c9k27RHlS8nz7vlyZ91D2h2UUpFo:gb+NGCj6BDSHFFNzlyZ91DLp
TLSH
T17F13D33D7AFC2D22CFCB413C0C1F1AF92BA9C922D6C56A17A6727159665E35E380E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 520KB
SHA256 a7b9d7fed8ea70558b5c2c80a4cf17ff85ac3e3e020c0ae219f264971ddd799e
MD5 05fafbbf7fef2d91bff10b5f8f266342
SHA1 d7d2cd2f118253541988532a1c813e14719318da
SHA512 e217d2bab1704ae67a47e7102fae7e587c575f2a4f62bc4d99a1728be189fd685e2a25394dc8296b3522327c33c48144b1c70c40d7161565f1f629a32d6c788f
SSDEEP 3072:1TsbxkKGWNzwZ5txUFffUuciM1SrIVIm:1TsbKJWNKjpS8um
TLSH
T15CB4A2F71860A02ADFA802F5E2033A3DD27B041D6DE5ECEAE5384CD51D65B31B6B9E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 55d7cdd8718e8f4a676d4fba8e820591fe90034cc0eb918f57c8ddb49a2d0868
MD5 7b0362cc5c2d6e40e92eefdaa33ee432
SHA1 fb57643daa494c253267b65e237f404b74bf4b21
SHA512 c80946cdb8dd284de3ae959a932fdd74a2f7410ab186ae62af5da5b0b06c9d6bf1b45198635e39ea66eb9520de2091463198adb2a84a3c2988ea639267c0d9b1
SSDEEP 3072:Ub5mh+HQCFGOtsF7Lz0P5y4x0HaJPmVvnrZAmt3SI656wmO:O50CFGOts5EPc4x4aJPmVZAISIutL
TLSH
T18D258DEE9B382C86DE6B4970B4E0EC23BCB411C2BA15E1D34C58C59487963C567DB2ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 fbd11be646934cea8126945365531a5dd4083a1d1353d02c033943f7821a3404
MD5 460ef1b34436efaacb34721fa41aa938
SHA1 9441e48dc1b9bca7d1f4fca574d60bced084d09d
SHA512 c04cfc829966f5a1b89cfee86d5e279c5f48ec92d1bc744c861e89c4cc72cec38d8985f1982095a0db129abe0287036b19acb3ef9e6fd52b4c48dabdd0d918c0
SSDEEP 49152:LDnaal/ou2Ud8q6tcBNrcDl5X23QaYAqFXgJ:fPt+UeqS7DlNkYAmX
TLSH
T105868DEE8B785C83DE678A70B4E0ED177C7422C3F995C1D38558C19806963C1BBDA2AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 61KB
SHA256 5069ef4c5764b09a2283b7cd8d32bd4cd9fa0e4553054855ec0ea3715c960ca2
MD5 808c898bef05228fd684c35dc499eb8c
SHA1 998a1df9efe1154a56e10c75508810cf2ee79ad4
SHA512 b7079d28fd0e7beb4950f42f5c3e4265eb6c89ecffc336c07cdb98837d351b3eb924efc267c5b4b6ae8b107a467a7300a55edebe6117b9b5c63704c622787895
SSDEEP 1536:El875VXZyJ1iQ0BL0Fxebzhxkor/v5pCBhxD+cM:El8TXZyeluxe5xjv5pCQ
TLSH
T1915302E0C215DC7CEDDEE5ACFD666B6A8431FA94FB4646AC92AC0CF6C0027316582835
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 37KB
SHA256 fc8e3b78cdb0453e1d34cb4f7316cb146e9225ba5bd054fafae92366508a9c71
MD5 4d7332f5bbdb5c347fc6641c6fd73ed3
SHA1 512085329db14cc87d3fe5e36a9d18dc77a3342a
SHA512 2189e12729db921b1a772ad87664f55ea9c66a7f123d13fd722ffbba7330bcb66e0da941ef99e3e384b5728388c74448a4776fa0be001287c587ba2304342548
SSDEEP 768:t52EwDX24lHa+YX7SyIdxwOOr7lA5eKaL8q5R3dfd6lcT:t5kREHIdxwOONbKab5rV6g
TLSH
T10003F221628C47AEDA191D1D22B16BE9B74BC9EB9FB50DE00DA179769643952C223840
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 57KB
SHA256 2b205842b02d84790894833c94237cf5646e9df5a708514689fffa98ea9f66c9
MD5 aea80f40c160e2c2046bd212fd1951af
SHA1 0b8c00012bd8deb7f1dd881a83504c73f9f674d5
SHA512 aa9526644d32902256ced7e33575fea51038e5949b82feff2a120371e06b1c69662731b3616c42b0bab660934de84b2dd3229d8a1162d55bc3633f8af131877d
SSDEEP 1536:nfTeH2gr0gxay6BtOHlgUC9OQImfko564ErNplC+H6L:beH28Lx6tOHlgUjQN5QXhv4
TLSH
T18D4302984B1678B6D6A673C006D81AE4BFCC0322FCAD5FD58457D29B83554CB28F4CE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 109KB
SHA256 e415942338b67487348af83c810efef43973a654ca2d1e54dc442a4ca90b5b5c
MD5 05392845381c0becbc98a752ea050328
SHA1 4815bc3f4a92e1b275d951351607797c2e2fe22d
SHA512 fa5602ec6af6db0f9be4e46d702c6a46643da56b71404e46aff41ef61ae00f6dda5287a0a048d31f3cdb77c2480fd5e85b52146483454780c94aa3e530355105
SSDEEP 3072:YybOe2O0dneugTb8R9lbiMzntj9b9pok/JV:xbOFNDgTW9lbiG9Gk/H
TLSH
T154B3122D760AA1C2937985D063BD5992A17C1150D4803A80F56F1DA638EADC7AE3F9FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 177KB
SHA256 b4e8779d843a52457328a9cd2e5b3b4b39fa95240750100a2c30ffdf5aa9be5c
MD5 b5f2912458d23b6ed731abdc5da8b398
SHA1 8f4b6d6f38c16b26536a508337437c22bd68738b
SHA512 591a6f6fa532b443931f97400dd5f4070a73ff77eab5da17857d3a94efb760df7f937c423a57ffdd04deadb93e311c2f46a73bc832773d76192c36930080848f
SSDEEP 3072:1GrjQPBDUjrYPUqbt0uLTCu95VODAvHkYw78Zg53L1/CFZubpAejbUyluizVeu:1GXaDMr5qbJT995VODYE/8Zg53JaFkb1
TLSH
T13A04125638D16A4C08A2F9DB87110CC0CBF6764BB98FC6965C3C79A44A506F31AFB937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 c8629c6f8cf8130c6073668b3ce55c8768bcf2fbb2f0e479eada818161d6be77
MD5 554c356c0c60c61dbab663d8f8ed545b
SHA1 74f4d1c4b098ef84a553a6eddf62c107e8e7347c
SHA512 c8f661e58911b003aea21fa3c15343679aec88c6a0b0f72ea9aa6e1f52d0919f98817926fee7e19b2152de210affdcdebf05b0d84f36bcb412c1cf74f6cf5df0
SSDEEP 192:sec+3SelhVpCN+DFWesfkXxSbtPpj9yUPfBrLEiO:sp+3PlhVS+DFofkXxSbRpj9yUPfBrYiO
TLSH
T12FD1B4B131F30810EFD6D13085D004B4363A59A47E230E663BC5477DF96EBAE3562ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 b169281c980f4731e87b55dbe5d909a7014dbcf8d1a009546a28e7d3016ef154
MD5 1673c305c1a4c7d8df5791e99a39a46b
SHA1 969e4d2e717d8c85ddfc1587b0fc4143f5b67e44
SHA512 16cfa60d57360103d5e2c70dec0ddcaab02481f91ba97a4adac0993937aa61fbd690df610a9ec0b49ffdf95e5f785edef5b19147b89a984b390bbc959a69ee33
SSDEEP 192:bec+35RlhVpCN+DFWesfkXxSbtzpj9yUPfBrLEi5:bp+3blhVS+DFofkXxSbNpj9yUPfBrYi5
TLSH
T171D192B131F34810EFD2D03046D004B4363A59A47E270E663BC5477DF96EBAE3162ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 570B
SHA256 99def1b557f19f04c1affc6f247d0451f33fc10ec42e73792223c3215ac98be6
MD5 d4ba0ae0bb0b9faff3da6f35fdbc3c8a
SHA1 fb3e9dec7f35a9b1d94e54a5659dd0de484055e7
SHA512 86fd07c34b9abd4c52ba19eae291936f92bc6d38a75c021edc1dedbc15617669876180cd99f959c62476d82ec6bb9f5fe4c6cb4d82cb037efb76d99a4d3d9c51
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 e77964e82ca4cccea219a413c34917a576099fedb5b64f9036c2dc5d66abcce3
MD5 e827fb5e30cd4d9a36195c2bb6ca9528
SHA1 ae72788157ecbaca3fd2e299f4f9988773d6a305
SHA512 eabb3c518b3edf321361e3113bdb1d66924811c3305840e4d488bf27730321bddc7a08263736cadb02034671e0f160b6a0242f9d261d76fa96873537004f9df5
TLSH
T1EDE07D9404DEC329A09AADD783F96F08C3D0B82AF28C3D463B5AC8907101241F2CF28D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\af\messages.json
Size 908B
SHA256 b40bde5b612cfff936370b32fb0c58cc205fc89937729504c6c0b527b60e2cba
MD5 12403ebcce3ae8287a9e823c0256d205
SHA1 c82d43c501fae24bfe05db8b8f95ed1c9ac54037
SHA512 153401ecdb13086d2f65f9b9f20acb3cefe5e2aeff1c31ba021be35bf08ab0634812c33d1d34da270e5693a8048fc5e2085e30974f6a703f75ea1622a0ca0ffd
TLSH
T1FA11C004E5625D3F42F5E1D6793EB342D21006B65150DCBA7CBCD51C4FB2D12518AF88
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\am\messages.json
Size 1KB
SHA256 3d0361a85adfcd35d0de74135723a75b646965e775188f7dcdd35e3e42db788e
MD5 9721ebce89ec51eb2baeb4159e2e4d8c
SHA1 58979859b28513608626b563138097dc19236f1f
SHA512 fa3689e8663565d3c1c923c81a620b006ea69c99fb1eb15d07f8f45192ed9175a6a92315fa424159c1163382a3707b25b5fc23e590300c62cbe2dace79d84871
TLSH
T1C221D805E0E8BB1F0F2E9B02B4352B4AD1A45D6A41406CB5F72997AC7F3DF1788D6618
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ar\messages.json
Size 1KB
SHA256 abd0919121956ab535e6a235de67764f46cfc944071fcf2302148f5fb0e8c65a
MD5 3ec93ea8f8422fda079f8e5b3f386a73
SHA1 24640131ccfb21d9bc3373c0661da02d50350c15
SHA512 f40e879f85bc9b8120a9b7357ed44c22c075bf065f45bea42bd5316af929cbd035d5d6c35734e454aef5b79d378e51a77a71fa23f9ebd0b3754159718fceb95c
TLSH
T186217BB1A73094728526DE0BF1F13264D5B1AD73A143FC21385B45088BE3D23A68EBB8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\as\messages.json
Size 2KB
SHA256 01b549ef285c94b31891997c7d5728bee7b56040f8847f279fc46e5cc262c4e3
MD5 ccebda0ca2d2ce0ea65b7cc8651175e1
SHA1 1510e686a9e94ada32bd62b9fc5d8950850fda2d
SHA512 6a345812ca8d5e9f8bcffd96acb435e8576d26b376e1de39b0ce0687c115da8ad2832cbb42cf0f36534514db7e8291f6c5130e9351ec87557a0bf1f79f328846
TLSH
T19E51A219B0E5FE88060D6495DC3074FD5A8C598A01701A3A9D8FDACB7E2E17DC16FAB1
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\az\messages.json
Size 977B
SHA256 628145f4281fa825d75f1e332998904466abd050e8b0dc8bb9b6a20488d78a66
MD5 9a798fd298008074e59ecc253e2f2933
SHA1 1e93da985e880f3d3350fc94f5ccc498efc8c813
SHA512 9094480379f5ab711b3c32c55fd162290cb0031644ea09a145e2ef315da12f2e55369d824af218c3a7c37dd9a276aeec127d8b3627d3ab45a14b0191ed2bbe70
TLSH
T1D311CB08D09E2C1F823406263CBA3302F51506EC5040BCBFBA68E12C6FFDD538AC1B98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\be\messages.json
Size 3KB
SHA256 ddf16859a15f3eb3334d6241975ca3988ac3eafc3d96452ac3a4afd3644c8550
MD5 68884dfda320b85f9fc5244c2dd00568
SHA1 fd9c01e03320560cbbb91dc3d1917c96d792a549
SHA512 7ff0fbd555b1f9a9a4e36b745cbfcad47b33024664f0d99e8c080be541420d1955d35d04b5e973c07725573e592cd0dd84fdbb867c63482baff6929ada27ccde
TLSH
T1E351FFD2D0B5169C39C838D7E779BCDD34986E80D124EB3BDC3D1ADBD20C601AA91B29
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\bg\messages.json
Size 1KB
SHA256 ac4a8b5b7c0b0dd1c07910f30dcfbdf1bcb701cfcfd182b6153fd3911d566c0e
MD5 2e6423f38e148ac5a5a041b1d5989cc0
SHA1 88966ffe39510c06cd9f710dfac8545672ffdceb
SHA512 891fcdc6f07337970518322c69c6026896dd3588f41f1e6c8a1d91204412cae01808f87f9f2dea1754458d70f51c3cef5f12a9e3fc011165a42b0844c75ec683
TLSH
T19B21485199539CAF0225F16FB8083E0578A640BE3F518AC23078592E3FF583507D6B5E
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\bn\messages.json
Size 1KB
SHA256 1dbf38e425c5c7fc39e8077a837df0443692463ba1fbe94e288ab5a93242c46e
MD5 651375c6af22e2bcd228347a45e3c2c9
SHA1 109ac3a912326171d77869854d7300385f6e628c
SHA512 958aa7cf645fab991f2eca0937ba734861b373fb1c8bcc001599be57c65e0917f7833a971d93a7a6423c5f54a4839d3a4d5f100c26efa0d2a068516953989f9d
TLSH
T10C312724DC5E58BB90E1CDD627587320E1235E9A8752F71EFC1B82496E7DC3C0C99EA8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ca\messages.json
Size 930B
SHA256 d6e65238187a430ff29d4c10cf1c46b3f0fa4b91a5900a17c5dfd16e67ffc9bd
MD5 d177261ffe5f8ab4b3796d26835f8331
SHA1 4be708e2ffe0f018ac183003b74353ad646c1657
SHA512 e7d730304aed78c0f4a78dadbf835a22b3d8114fb41d67b2b26f4fe938b572763d3e127b7c1c81ebe7d538da976a7a1e7adc40f918f88afadea2201ae8ab47d0
TLSH
T15A115B15D5D16D7B02B191537E671342E17416B42701D88B7A3C82185FB5D42A2CBFE8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\cs\messages.json
Size 913B
SHA256 21ae66ce537095408d21670585ad12599b0f575ff2cb3ee34e3a48f8cc71cfab
MD5 ccb00c63e4814f7c46b06e4a142f2de9
SHA1 860936b2a500ce09498b07a457e0cca6b69c5c23
SHA512 35839dac6c985a6ca11c1bff5b8b5e59db501fcb91298e2c41cb0816b6101bf322445b249eaea0cef38f76d73a4e198f2b6e25eea8d8a94ea6007d386d4f1055
TLSH
T1F6115C0ED0E22C7B127882623C77A311F6B484E21208986ABA7CE0498F75C5644D6FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\cy\messages.json
Size 806B
SHA256 a482663292a913b02a9cde4635c7c92270bf3c8726fd274475dc2c490019a7c9
MD5 a86407c6f20818972b80b9384acfbbed
SHA1 d1531cd0701371e95d2a6bb5edcb79b949d65e7c
SHA512 d9fbf675514a890e9656f83572208830c6d977e34d5744c298a012515bc7eb5a17726add0d9078501393babd65387c4f4d3ac0cc0f7c60c72e09f336dca88de7
TLSH
T1EB01B1571F203FBAA70FD587FE933525086ACFCA5488541355D8883E032A71935E6232
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\da\messages.json
Size 883B
SHA256 48847d57c75af51a44cbf8f7ef1a4496c2007e58ed56d340724fda1604ff9195
MD5 b922f7fd0e8ccac31b411fc26542c5ba
SHA1 2d25e153983e311e44a3a348b7d97af9aad21a30
SHA512 ad0954deeb17af04858dd5ec3d3b3da12dff7a666af4061deb6fd492992d95db3baf751ab6a59bec7ab22117103a93496e07632c2fc724623bb3acf2ca6093f3
TLSH
T145114C58D0A66E2B073B4266B4223B11E26402FB4152DC5A796DD51C9FB2C1351DBF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\de\messages.json
Size 1KB
SHA256 36ac525fa6e28f18572d71d75293970e0e1ead68f358c20da4fdc643eea2c1c5
MD5 d116453277cc860d196887cec6432ffe
SHA1 0ae00288fde696795cc62fd36eabc507ab6f4ea4
SHA512 c788c3202a27ec220e3232ae25e3c855f3fdb8f124848f46a3d89510c564641a2dfea86d5014cea20d3d2d3c1405c96dbeb7ccad910d65c55a32fdca8a33fdd4
TLSH
T15A11AB46D2A24A2F42F7967370793791F72441BB8240AD5B786CE61D6FBA8530186F38
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\el\messages.json
Size 1KB
SHA256 37ca6ab271d6e7c9b00b846fdb969811c9ce7864a85b5714027050795ea24f00
MD5 9aba4337c670c6349ba38fddc27c2106
SHA1 1fc33be9ab4ad99216629bc89fbb30e7aa42b812
SHA512 8564f93ad8485c06034a89421ce74a4e719bbac865e33a7ed0b87baa80b7f7e54b240266f2edb595df4e6816144428db8be18a4252cbdcc1e37b9ecc9f9d7897
TLSH
T1493126DEF0691D6E90226253549DB0BAEB911CA87305EEDC363CCA253BF84710D32A5F
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\en_GB\messages.json
Size 848B
SHA256 ab5cda04013dce0195e80af714fbf3a67675283768ffd062cf3cf16edb49f5d4
MD5 3734d498fb377cf5e4e2508b8131c0fa
SHA1 aa23e39bfe526b5e3379de04e00eacba89c55ade
SHA512 56d9c792954214b0de56558983f7eb7805ac330af00e944e734340be41c68e5dd03eddb17a63bc2ab99bdd9be1f2e2da5be8ba7c43d938a67151082a9041c7ba
TLSH
T196015506E3406B2B0372B12774613201F67001EA1200ECBF7A7CC42C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\en_US\messages.json
Size 1KB
SHA256 102b586b197ea7d6edfeb874b97f95b05d229ea6a92780ea8544c4ff1e6bc5b1
MD5 578215fbb8c12cb7e6cd73fbd16ec994
SHA1 9471d71fa6d82ce1863b74e24237ad4fd9477187
SHA512 e698b1a6a6ed6963182f7d25ac12c6de06c45d14499ddc91e81bdb35474e7ec9071cfebd869b7d129cb2cd127bc1442c75e408e21eb8e5e6906a607a3982b212
TLSH
T161210707DA04AB37827A6136BC656685F33007EE2201E86F7DBCD50C5F229A791A7798
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\es\messages.json
Size 961B
SHA256 2008f4faab71ab8c76a5d8811ad40102c380b6b929ce0bce9c378a7cadfc05eb
MD5 f61916a206ac0e971cdcb63b29e580e3
SHA1 994b8c985dc1e161655d6e553146fb84d0030619
SHA512 d9c63b2f99015355aca04d74a27fd6b81170750c4b4be7293390dc81ef4cd920ee9184b05c61dc8979b6c2783528949a4ae7180dbf460a2620dbb0d3fd7a05cf
TLSH
T15C113A43D5929D7B19B28261B4776312F5A406F52D80E8CB7D3C85382BA9D06E0E7F8D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\es_419\messages.json
Size 959B
SHA256 90a560ff82605db7eda26c90331650ff9e42c0b596cedb79b23598dec1b4988f
MD5 535331f8fb98894877811b14994fea9d
SHA1 42475e6afb6a8ae41e2fc2b9949189ef9bbe09fb
SHA512 2ce9c69e901ab5f766e6cfc1e592e1af5a07aa78d154ccbb7898519a12e6b42a21c5052a86783abe3e7a05043d4bd41b28960feddb30169ff7f7fe7208c8cfe9
TLSH
T177113D46D9D15CA715B68166B5775312F66406F52C80E9DB3D3C803C1BB9C06E0EBF9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\et\messages.json
Size 968B
SHA256 cc31b877238da6c1d51d9a6155fde565727a1956572f466c387b7e41c4923a29
MD5 64204786e7a7c1ed9c241f1c59b81007
SHA1 586528e87cd670249a44fb9c54b1796e40cdb794
SHA512 44fcf93f3fb10a3db68d74f9453995995ab2d16863ec89779db451a4d90f19743b8f51095eec3ecef5bd0c5c60d1bf3dfb0d64df288dccfbe70c129ae350b2c6
TLSH
T1F011BD14D1993A2F4633627A746A6B02D85593F00441CCAA39ACD39C6FBEC1691D6F1C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\eu\messages.json
Size 838B
SHA256 a41670d52423ba69c7a65e7e153e7b9994e8dd0370c584bda0714bd61c49c578
MD5 29a1da4acb4c9d04f080bb101e204e93
SHA1 2d0e4587ddd4bac1c90e79a88af3bd2c140b53b1
SHA512 b7b7a5a0aa8f6724b0fa15d65f25286d9c66873f03080cbaba037bdeea6aadc678ac4f083bc52c2db01beb1b41a755ed67bbddb9c0fe4e35a004537a3f7fc458
TLSH
T19801C2075213EDA6CF69A376FD13B4417B954E412E47710370AED608328FC2EA1A7375
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\fa\messages.json
Size 1KB
SHA256 7c4c09d19ac4da30cc0f7f521825f44c4dfbc19482a127fbfb2b74b3468f48f1
MD5 097f3ba8de41a0aaf436c783dcfe7ef3
SHA1 986b8cabd794e08c7ad41f0f35c93e4824ac84df
SHA512 8114ea7422e3b20ae3f08a3a64a6ffe1517a7579a3243919b8f789eb52c68d6f5a591f7b4d16cee4bd337ff4daf4057d81695732e5f7d9e761d04f859359fadb
TLSH
T1CD218E49A1786DB34122851372F23516C673AEA55101FD80B969472D0F3BD235E8EF2B
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\fi\messages.json
Size 911B
SHA256 2d752a5dbe80e34ea9a18c958b4c754f3bc10d63279484e4df5880b8fd1894d2
MD5 b38cbd6c2c5bfaa6ee252d573a0b12a1
SHA1 2e490d5a4942d2455c3e751f96bd9960f93c4b60
SHA512 6e65207f4d8212736059cc802c6a7104e71a9cc0935e07bd13d17ec46ea26d10bc87ad923cd84d78781e4f93231a11cb9ed8d3558877b6b0d52c07cb005f1c0c
TLSH
T162119046E0426E6B4276912638623202F2F005F61180DD5F39EC876C0FB9C0672DBF6C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\fil\messages.json
Size 939B
SHA256 f51eeb7aaf5f2103c1043d520e5a4de0fa75e4dc375e23a2c2c4afd4d9293a72
MD5 fcea43d62605860fff41be26bad80169
SHA1 f25c2ce893d65666cc46ea267e3d1aa080a25f5b
SHA512 f66f113a26e5bcf54b9aafa69dae3c02c9c59bd5b9a05f829c92af208c06dc8ccc7a1875cbb7b7ce425899e4ba27bfe8ce2cdaf43a00a1b9f95149e855989ee0
TLSH
T1D8119C16E240192B93B2846279E52501E2E001FA2F40A85F7B7DEE496FF7C12509AF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\fr\messages.json
Size 977B
SHA256 0518287950a8b010ffc8d52554eb82e5d93b6c3571823b7ceca898906c11abcc
MD5 a58c0eebd5dc6bb5d91daf923bd3a2aa
SHA1 f169870eeed333363950d0bcd5a46d712231e2ae
SHA512 b04afd61de490bc838354e8dc6c22be5c7ac6e55386fff78489031acbe2dbf1eaa2652366f7a1e62ce87cfccb75576da3b2645fea1645b0eceb38b1fa3a409e8
TLSH
T12B113808E9602D6F0E725233BA257253DA7001E67340D9957A2CD60D4FB5C6AE2D3FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\fr_CA\messages.json
Size 972B
SHA256 4caa46656ecc46a420aa98d3307731e84f5ac1a89111d2e808a228c436d83834
MD5 6cac04bdcc09034981b4ab567b00c296
SHA1 84f4d0e89e30ed7b7acd7644e4867ffdb346d2a5
SHA512 160590b6ec3dcf48f3ea7a5baa11a8f6fa4131059469623e00ad273606b468b3a6e56d199e97daa0ecb6c526260ebae008570223f2822811f441d1c900dc33d6
TLSH
T13D11BD08D961397F0A7251327935A252DD7006E5B300D9CA3A2DD20C4FB5C97E2D3FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\gl\messages.json
Size 990B
SHA256 0cf098dfe5bbb46fc0132b3cf0c54b06b4d2c8390d847ee2a65d20f9b7480f4c
MD5 6baafee2f718befbc7cd58a04ccc6c92
SHA1 ce0bddda2fa1f0ad222b604c13ff116cbb6d02cf
SHA512 3da23e74cd6cf9c0e2a0c4dba60301281d362fb0a2a908f39a55abdca4cc69ad55638c63cc3befd44dc032f9cbb9e2fdc1b4c4abe292917df8272ba25b82af20
TLSH
T1F8119E56C9C15C3B05729162B16A5213EA400AE12D80E4CB3D3DE63C1B68C55E5EBF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\hi\messages.json
Size 1KB
SHA256 d2d1afa224cda388ff1dc8fac24cda228d7ce09de5d375947d7207fa4a6c4f8d
MD5 98a7fc3e2e05afffc1cfe4a029f47476
SHA1 a17e077d6e6ba1d8a90c1f3faf25d37b0ff5a6ad
SHA512 457e295c760abfd29fc6bbbb7fc7d4959287bca7fb0e3e99eb834087d17eed331def18138838d35c48c6ddc8a0134affff1a5a24033f9b5607b355d3d48fdf88
TLSH
T18831270CDBBDF67F18BC789631591A33D2A537B4B3D05617B588B2DE4E61C3110AB612
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\hr\messages.json
Size 935B
SHA256 73e6e246ceeab9875625cd4889fbf931f93b7b9deaa11288ae1a0f8a6e311e76
MD5 25cdff9d60c5fc4740a48ef9804bf5c7
SHA1 4fadecc52fb43aec084df9ff86d2d465fbebcdc0
SHA512 ef00b08496427feb5a6b9fb3fe2e5404525be7c329d9dd2a417480637fd91885837d134a26980dcf9f61e463e6cb68f09a24402805807e656af16b116a75e02c
TLSH
T1B5118C1580B56E6F817A82B378B4B302F5B442BD11808D777A3CE12C4FBAE2195C5F2C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\hu\messages.json
Size 1KB
SHA256 958c0f664fca20855fa84293566b2ddb7f297185619143457d6479e6ac81d240
MD5 8930a51e3ace3dd897c9e61a2aea1d02
SHA1 4108506500c68c054ba03310c49fa5b8ee246ea4
SHA512 126b80cd3428c0bc459eeaafcbe4b9fde2541a57f19f3ec7346baf449f36dc073a9cf015594a57203255941551b25f6faa6d2c73c57c44725f563883ff902606
TLSH
T1A911C009D0A1692B91BB426739753705D21802FA2340ACDF396CC17D9F75F234497F79
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\hy\messages.json
Size 2KB
SHA256 0b16e3f8bd904a767284345ae86a0a9927c47afe89e05ea2b13ad80009bdf9e4
MD5 55de859ad778e0aa9d950ef505b29da9
SHA1 4479be637a50c9ee8a2f7690ad362a6a8ffc59b2
SHA512 edab2fcc14cabb6d116e9c2907b42cfbc34f1d9035f43e454f1f4d1f3774c100cbadf6b4c81b025810ed90fa91c22f1aefe83056e4543d92527e4fe81c7889a8
TLSH
T12051818A9F771F9C0E756DBBD434A78D28881DD101A7A71AD4C4CD8AF38B60D10D7A2D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\id\messages.json
Size 858B
SHA256 e3c86ddd2efebe88eed8484765a9868202546149753e03a61eb7c28fd62cfca1
MD5 34d6ee258af9429465ae6a078c2fb1f5
SHA1 612cae151984449a4346a66c0a0df4235d64d932
SHA512 20427807b64a0f79a6349f8a923152d9647da95c05de19ad3a4bf7db817e25227f3b99307c8745dd323a6591b515221bd2f1e92b6f1a1783bdfa7142e84601b1
TLSH
T17F11250696D1282F423652A374B63302F65102EA0A00A8AE7A7CCB285FBB81214CAF95
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\is\messages.json
Size 954B
SHA256 943e61988c859bb088f548889f0449885525dd660626a89ba67b2c94cfbfbb1b
MD5 caeb37f451b5b5e9f5eb2e7e7f46e2d7
SHA1 f917f9eae268a385a10db3e19e3cc3aced56d02e
SHA512 a55dec2404e1d7fa5a05475284cbecc2a6208730f09a227d75fdd4ac82ce50f3751c89dc687c14b91950f9aa85503bd6bf705113f2f1d478e728df64d476a9ee
TLSH
T13211274E72F46CADBF8DC261BC30B7EDC6BA06C00686D4D6528F164E117670922B2321
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\it\messages.json
Size 899B
SHA256 f41862665b13c0b4c4f562ef1743684cce29d4bcf7fe3ea494208df253e33885
MD5 0d82b734ef045d5fe7aa680b6a12e711
SHA1 bd04f181e4ee09f02cd53161dcabcef902423092
SHA512 01f305a280112482884485085494e871c66d40c0b03de710b4e5f49c6a478d541c2c1fda2ceaf4307900485946dee9d905851e98a2eb237642c80d464d1b3ada
TLSH
T15A118C45C5D3292B1A76A31334763205EA7502F66A80A94B7F6DC91C1FBBC43D086F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\iw\messages.json
Size 2KB
SHA256 bbb81c32f482ba3216c9b1189c70cef39ca8c2181af3538ffa07b4c6ad52f06a
MD5 26b1533c0852ee4661ec1a27bd87d6bf
SHA1 18234e3abaf702df9330552780c2f33b83a1188a
SHA512 450bfaf0e8159a4fae309737ea69ca8dd91caafd27ef662087c4e7716b2dcad3172555898e75814d6f11487f4f254de8625ef0cfea8df0133fc49e18ec7fd5d2
TLSH
T17E41669EC276678D0F386C779C34ABD914BB47D0349073268C1CD186B3A66B890ADDF9
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ja\messages.json
Size 1KB
SHA256 34ac08f3c4f2d42962a3395508818b48ca323d22f498738cc9f09e78cb197d73
MD5 15ec1963fc113d4ad6e7e59ae5de7c0a
SHA1 4017fc6d8b302335469091b91d063b07c9e12109
SHA512 427251f471fa3b759ca1555e9600c10f755bc023701d058ff661bec605b6ab94cfb3456c1fea68d12b4d815ffbafabceb6c12311dd1199fc783ed6863af97c0f
TLSH
T1CB21F67DC384293B153582B2B5A932C2F1559CEAE542B86A7A2CC1191F7AE6DD040FB4
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ka\messages.json
Size 3KB
SHA256 30898bbf51bdd58db397ff780f061e33431a38ef5cfc288b5177ecf76b399f26
MD5 83f81d30913dc4344573d7a58bd20d85
SHA1 5ad0e91ea18045232a8f9df1627007fe506a70e0
SHA512 85f97f12ad4482b5d9a6166bb2ae3c4458a582cf575190c71c1d8e0fb87c58482f8c0efead56e3a70edd42bed945816db5e07732ad27b8ffc93f4093710dd58f
TLSH
T119617E7D10FD36EEF6CED16A9C7165B6C8F70A900A45B439BA463B4B0D217306EB0925
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\kk\messages.json
Size 3KB
SHA256 548dc6c96e31a16ce355dc55c64833b08ef3fba8bf33149031b4a685959e3af4
MD5 2d94a58795f7b1e6e43c9656a147ad3c
SHA1 e377db505c6924b6bfc9d73dc7c02610062f674e
SHA512 f51cc857e4cf2d4545c76a2dce7d837381ce59016e250319bf8d39718be79f9f6ee74ea5a56de0e8759e4e586d93430d51651fc902376d8a5698628e54a0f2d8
TLSH
T18E61EFD2C1B6168C29D475ABE771BCDD24989B90E100FB37EC3D15EFE20C629BA91720
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\km\messages.json
Size 3KB
SHA256 a6118f0a0de329e07c01f53cd6fb4fed43e54c5f53db4cd1c7f5b2b4d9fb10e6
MD5 b3699c20a94776a5c2f90aef6eb0dad9
SHA1 1f9b968b0679a20fa097624c9abfa2b96c8c0bea
SHA512 1e8d15b8bff1d289434a244172f9ed42b4bb6bcb6372c1f300b01acea5a88167e97fedaba0a7ae3beb5e24763d1b09046ae8e30745b80e2e2fe785c94df362f6
TLSH
T13D51738855928B3AE6C786BE9C725F4444E733226B52D4BC9F8F3C0D5411A28ACDF867
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\kn\messages.json
Size 1KB
SHA256 30078ef35a76e02a400f03b3698708a0145d9b57241cc4009e010696895cf3a1
MD5 38be0974108fc1cc30f13d8230ee5c40
SHA1 acf44889dd07db97d26d534ad5afa1bc1a827bad
SHA512 7bdb2bade4680801fc3b33e82c8aa4fac648f45c795b4bace4669d6e907a578ff181c093464884c0e00c9762e8db75586a253d55cd10a7777d281b4bffafe302
TLSH
T18C41B70CAC7A6D3A5BE5016724AD203EDFF017D25D5847D2F49DEB442E61C2B4183E9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ko\messages.json
Size 1KB
SHA256 c52d9b955d229373725a6e713334bbb31ea72efa9b5cf4fbd76a566417b12cac
MD5 f3e59eeeb007144ea26306c20e04c292
SHA1 83e7bdfa1f18f4c7534208493c3ff6b1f2f57d90
SHA512 7808cb5ff041b002cbd78171ec5a0b4dba3e017e21f7e8039084c2790f395b839bee04ad6c942eed47ccb53e90f6de818a725d1450bf81ba2990154afd3763af
TLSH
T1BA113565A0A62D9F12B6C6437DA53601D2A060F653075456BE2CC90E8F359A251C1EB9
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\lo\messages.json
Size 2KB
SHA256 89082fb05229826bc222f5d22c158235f025f0e6df67ff135a18bd899e13bb8f
MD5 e20d6c27840b406555e2f5091b118fc5
SHA1 0dcecc1a58ceb4936e255a64a2830956bfa6ec14
SHA512 ad53fc0b153005f47f9f4344df6c4804049fac94932d895fd02eebe75222cfe77eedd9cd3fdc4c88376d18c5972055b00190507aa896488499d64e884f84f093
TLSH
T19051F2CF90B6EB1D2A0971AEE930994618BC09E28031B336CF7EC18A2D0E51DC79B751
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\lt\messages.json
Size 1KB
SHA256 5dfcbd4dfeaec3abe973a78277d3bd02cd77ae635d5c8cd1f816446c61808f59
MD5 970544ab4622701ffdf66dc556847652
SHA1 14bee2b77ee74c5e38ebd1db09e8d8104cf75317
SHA512 cc12d00c10b970189e90d47390eeb142359a8d6f3a9174c2ef3ae0118f09c88ab9b689d9773028834839a7dfaf3aac6747bc1dcb23794a9f067281e20b8dc6ea
TLSH
T1D811CC15D8807C3F4336729FB4A47705D96442B19110AC5534BCC20D4FBBC67908AF48
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\lv\messages.json
Size 994B
SHA256 0621de9161748f45d53052ed8a430962139d7f19074c7ffe7223ecb06b0b87db
MD5 a568a58817375590007d1b8abcaebf82
SHA1 b0f51fe6927bb4975fc6eda7d8a631bf0c1ab597
SHA512 fcfbadec9f73975301ab404db6b09d31457fac7ccad2fa5be348e1cad6800f87cb5b56de50880c55bbadb3c40423351a6b5c2d03f6a327d898e35f517b1c628c
TLSH
T12C11E10DD0D22E1B6E7580477A38B752D29490F56540DA4EB9BCCA5C2FBDC0B81CAF6C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\mk\messages.json
Size 2KB
SHA256 d0ae7739adea379b6390d1ee65699fc78d8649b7977503b062f34a52690a5744
MD5 5237e2a0ad375fa0f462b95eeb4b8cfc
SHA1 8fcf0fda66d275f70bd5ee2a491c797c2d0fe976
SHA512 4158ee0ab8e651c66720fd64a6414717d596ac9f642c3f50704ced9bb2b57d1add25b087dc9068a0094e9c05b51242af7bb77bd15ce2094be0796faf6ad21063
TLSH
T1FA51B2E390B3165C29C879DAE771BCED34987880D218D77FEC7E2787D20862125D171A
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ml\messages.json
Size 2KB
SHA256 22ca9415e294d9c3ec3384b9d08cdaf5164af73b4e4c251559e09e529c843ea6
MD5 4717efe4651f94eff6acb6653e868d1a
SHA1 b8a7703152767fbe1819808876d09d9cc1c44450
SHA512 487eab4938f6bc47b1d77dd47a5e2a389b94e01d29849e38e96c95cabc7bd98679451f0e22d3fea25c045558cd69fddb6c4fef7c581141f1c53c4aa17578d7f7
TLSH
T13741D0079131CD3F0EA152267B1E2F57C91B8EA1409B6A8B3D3DF2664D6AF2D0C86931
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\mn\messages.json
Size 2KB
SHA256 613d8751f6cc9d3fa319f4b7ea8b2bd3bed37fd077482ca825929dd7c12a69a8
MD5 83e7a14b7fc60d4c66bf313c8a2bef0b
SHA1 1ccf1d79cded5d65439266db58480089cc110b18
SHA512 3742e24ffc4b5283e6ee496813c1bdc6835630d006e8647d427c3de8b8e7bf814201adf9a27bfab3abd130b6fec64ebb102ac0eb8dedfe7b63d82d3e1233305d
TLSH
T14251EEE2D1B6574C2D847593E67AFDDD348CAD80D114EB3BCC7E2287E340278A592715
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\mr\messages.json
Size 1KB
SHA256 adeb082a9c754dfd5a9d47340a3ddcc19bf9c7efa6e629a2f1796305f1c9a66f
MD5 3b98c4ed8874a160c3789fead5553cfa
SHA1 5550d0ec548335293d962aaa96b6443dd8abb9f6
SHA512 5139b6c6df9459c7b5cdc08a98348891499408cd75b46519ba3ac29e99aaafcc5911a1dee6c3a57e3413dbd0fae72d7cbc676027248dce6364377982b5ce4151
TLSH
T1B631030DFB7AF76E0DBC7D6A31280E33D1A555F1C3D4885B7564B2CA4EA4CB0018AA92
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ms\messages.json
Size 936B
SHA256 2824cf97513dc3ecc261f378bfd595ae95a5997e9d1c63f5731a58b1f8cd54f9
MD5 7d273824b1e22426c033ff5d8d7162b7
SHA1 eadbe9dbe5519bd60458b3551bdfc36a10049dd1
SHA512 e5b611bbfab24c9924d1d5e1774925433c65c322769e1f3b116254b1e9c69b6df1be7828141eebbf7524dd179875d40c1d8f29c4fb86d663b8a365c6c60421a7
TLSH
T11F115B0EC3A5283F407652A770E86701F98406AA0F40ED9F3D5C9F384FBA9926681F58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\my\messages.json
Size 3KB
SHA256 243befbd6b67a21433dcc97dc1a728896d3a070dc20055eb04d644e1bb955fe7
MD5 342335a22f1886b8bc92008597326b24
SHA1 2cb04f892e430dcd7705c02bf0a8619354515513
SHA512 cd344d060e30242e5a4705547e807ce3ce2231ee983bb9a8ad22b3e7598a7ec87399094b04a80245ad51d039370f09d74fe54c0b0738583884a73f0c7e888ad8
TLSH
T1A2812B2CA82E25EE5BCF46C11CE24C5F84B31CB0466DFC6C96B62A474A027E83DE165D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ne\messages.json
Size 1KB
SHA256 729cf12e1ce062efc5eda3796ca6d7a29b1c52aabb0ac4889d6fa6aa88ad9526
MD5 4291b668707082a28738168f2d84d0a3
SHA1 dbebedc946705efed87e59e7b4988eaa7e05dcce
SHA512 8f25c7baa768d6dd17a3ac21d03d7649954500074f33ea190c8dc6e905450b5a6eee576d292db924501ef11018c2463e9c3058a288ed59db61b0c51569524faa
TLSH
T1D141A44DEBB8F3DB05BC785B361C1E36D1945B704392554BF8B8B2C74AB0CB101D5A96
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\nl\messages.json
Size 914B
SHA256 f3fe1ffcb182183b76e1b46c4463168c746a38e461fd25ca91ff2a40846f1d61
MD5 32df72f14be59a9bc9777113a8b21de6
SHA1 2a8d9b9a998453144307dd0b700a76e783062ad0
SHA512 e0966f5cca5a8a6d91c58d716e662e892d1c3441daa5d632e5e843839bb989f620d8ac33ed3edbafe18d7306b40cd0c4639e5a4e04da2c598331dacec2112aad
TLSH
T125112C15DA526E3B42E19162746A3343EAA002FD0149F8AF796CD96C4FF2D12019EE68
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\no\messages.json
Size 878B
SHA256 21ceff02b45a4bfd60d144879dfa9f427949a027dd49a3eb0e9e345bd0b7c9a8
MD5 a1744b0f53ccf889955b95108367f9c8
SHA1 6a5a6771dff13dcb4fd425ed839ba100b7123de0
SHA512 f55e43f14514eecb89f6727a0d3c234149609020a516b193542b5964d2536d192f40cc12d377e70c683c269a1bdcde1c6a0e634aa84a164775cffe776536a961
TLSH
T1E011CE00D1927C2F077AD27675357322E26004B95A10ACDA7A2CD95EAFF7C8210D1FDA
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\or\messages.json
Size 2KB
SHA256 4fa7d3ed5b6003b4b0b3d1cedf0a7dd6489b96311b4bc320e8a3dd16852d59d9
MD5 2c38f78a74ab24d6aeec34fc890fdf11
SHA1 6bcd1873e513962c511a5eeb5e96dfe7f0b1daec
SHA512 2b0bda5283272e6ac62652a64e8756fe74c0866db5d82e7188d456d6f9a60e0883023c339e265c10758256f4e46c43df98bb41a6d758321e8b6385c288e7990c
TLSH
T1C85130C3B371354A15F8B362D53AA4FE298AACF05373C2AA5DA91BDFC2073509713621
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\pa\messages.json
Size 2KB
SHA256 bbd37d41b7de6f93948fa2437a7699d4c30a3c39e736179702f212cb36a3133c
MD5 97f769f51b83d35c260d1f8cfd7990af
SHA1 0d59a76564b0aee31d0a074305905472f740ceca
SHA512 d91f5e2d22fc2d7f73c1f1c4af79db98fcfd1c7804069ae9b2348cbc729a6d2dff7fb6f44d152b0bdaba6e0d05dff54987e8472c081c4d39315cec2cbc593816
TLSH
T19A51DAC7E7B27964150AB074D23ED4CE5B924CE48051E2B7BDE72AB9C2CDE7382102A0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\pl\messages.json
Size 978B
SHA256 e00ff20437599a5c184ca0c79546cb6500171a95e5f24b9b5535e89a89d3ec3d
MD5 b8d55e4e3b9619784aeca61ba15c9c0f
SHA1 b4a9c9885fbeb78635957296fddd12579fefa033
SHA512 266589116eee223056391c65808255edae10eb6dc5c26655d96f8178a41e283b06360ab8e08ac3857d172023c4f616ef073d0bea770a3b3dd3ee74f5ffb2296b
TLSH
T17B112729D0D21E7F4675967379F63301E9A044E62600DADB7A2C801D8F7AD5604DEFAC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\pt_BR\messages.json
Size 889B
SHA256 e1e271d195f102684616637aa6a899ca75817ebd557868ae0d6150a12bfa856b
MD5 aaaa87feff00f6bfec8a3f2e7a247713
SHA1 52708fba117af3bfe109e49804efb852ab688bbf
SHA512 28fdd66f924b70d893e625ad361a6e3fac952de8840c1d19309fa7ce8cf8ea7769bd7fcf94b20413c6b1888d7f5282b4625431bea8662524de78d6dbe166eb2a
TLSH
T14C115923E6636D3F03318223B0792701E6140AF21E45DC8B7D6E884D4FF1C429083FA8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\pt_PT\messages.json
Size 914B
SHA256 e93b8e7fb86d2f7dfae57416bb1fb6ee0eea25629b972a5922940f0023c85f90
MD5 0963f2f3641a62a78b02825f6fa3941c
SHA1 7e6972beab3d18e49857079a24fb9336bc4d2d48
SHA512 22dd42d967124da5a2209dd05fb6ad3f5d0d2687ea956a22ba1e31c56ec09deb53f0711cd5b24d672405358502e9d1c502659bb36ced66caf83923b021ca0286
TLSH
T15E117A29C593153B07369123B5796702F6580AE72540ECCB3E2C890C1FF5D16E1D3FA4
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ro\messages.json
Size 937B
SHA256 085787999d78fadff9600c9dc5e3ff4fb4eb9be06d6bb19df2eef8c284be7b20
MD5 bed8332ab788098d276b448ec2b33351
SHA1 6084124a2b32f386967da980cbe79dd86742859e
SHA512 22596584d10707cc1c8179ed3abe46ef2c314cf9c3d0685921475944b8855aab660590f8fa1cfdce7976b4bb3bd9abbbf053f61f1249a325fd0094e1c95692ed
TLSH
T112119C05D1524EEF0A7142A3B8703A81E13584E66544AD9B796CC92E5FB6C0381C3FCC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ru\messages.json
Size 1KB
SHA256 c0a776448a258efd47065bf3f4b45260d1b4cb431d57ecc97995e122249081f6
MD5 1ca9a6bd3d62b1abec854ff1864e10b9
SHA1 f8a3351adee093489c19fad2d46ef2ce532718dd
SHA512 81ff14cb54e01cc17cdb55a0c3a315001a12e91028606b49f7d46af3b57bba3ea10d75f6c1753fa59e1297a79a92efbff623b02036fa8102b5b93e665b6e666c
TLSH
T17B214611D54A78FE123AB537FC047E02B8A240BE3E466A9535382D2F3BF541502FB719
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\si\messages.json
Size 2KB
SHA256 54241ebe651a8344235cc47afd274c080abaebc8c3a25afb95d8373b6a5670a2
MD5 b8a4fd612534a171a9a03c1984bb4bdd
SHA1 f513f7300827fe352e8ecb5bd4bb1729f3a0e22a
SHA512 c03e35bfde546aeb3245024ef721e7e606327581efe9eaf8c5b11989d9033bdb58437041a5cb6d567baa05466b6aaf054c47f976fd940eeedf69fdf80d79095b
TLSH
T18C51029EF0B6FF9A5A3592026C71E4A9048E9F9015F010BBD8CAC1CA6C0DD3CD66F953
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\sk\messages.json
Size 934B
SHA256 903060ec9e76040b46deb47bbb041d0b28a6816cb9b892d7342fc7dc6782f87c
MD5 8e55817bf7a87052f11fe554a61c52d5
SHA1 9abdc0725fe27967f6f6be0df5d6c46e2957f455
SHA512 eff9ec7e72b272dde5f29123653bc056a4bc2c3c662ae3c448f8cb6a4d1865a0679b7e74c1b3189f3e262109ed6bc8f8d2bde14aefc8e87e0f785ae4837d01c7
TLSH
T15E117A0AC0922D6F463D4661B8723245E3E889F60648E8AB7ABC900A4FB1813949AF49
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\sl\messages.json
Size 963B
SHA256 aab9cf9098294a46dc0f2fa468afff7ca7c323a1a0efa70c9db1e3a4da05d1d4
MD5 bfaefeff32813df91c56b71b79ec2af4
SHA1 f8eda2b632610972b581724d6b2f9782ac37377b
SHA512 971f2bbf5e9c84de3d31e5f2a4d1a00d891a2504f8af6d3f75fc19056bfd059a270c4c9836af35258aba586a1888133fb22b484f260c1cbc2d1d17bc3b4451aa
TLSH
T12D11BD2498B22D2F1C76D16F74B53302EA10057D5445588A3A1CB7180FB6D52D5CEF28
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\sq\messages.json
Size 950B
SHA256 8558d3adaec20033c83b2e5c4c8121f969f531ae779c15181e65a2f7954ebc6b
MD5 aa1bc08cf49cbc6a8cb8e6a04c4f1a4a
SHA1 9c06fa875d0a6d5ee4a1bcca25424cbe55d97a28
SHA512 5d99f7c5fbf724563e2b0f64e297f415219feba376d48b1c0fe752da198d4a5b61e05244226c3ef3bf38288df97761397a08206fbb84e0909875a9f2e3e1c542
TLSH
T120119B0184611EBBC272516739653201E2A011FF11D4EC6EBA6CDA1E8FB2C3640A6E0C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\sr\messages.json
Size 1KB
SHA256 4e8b69e864f57cddd4dc4e4faf2c28d496874d06016bc22e8d39e0cb69552769
MD5 7f5f8933d2d078618496c67526a2b066
SHA1 b7050e3efa4d39548577cf47cb119fa0e246b7a4
SHA512 0fbab56629368eef87deef2977ca51831beb7deae98e02504e564218425c751853c4fdeaa40f51ecfe75c633128b56ae105a6eb308fd5b4a2e983013197f5dba
TLSH
T1A321295199AB6CAF4226E01BB8047D05B9AA41BE3F1654C5326C2C1F3BF147807D7B5D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\sv\messages.json
Size 884B
SHA256 64b1e422b346ab77c5d1c77142685b3ff7661d498767d104b0c24cb36d0eb859
MD5 90d8fb448ce9c0b9ba3d07fb8de6d7ee
SHA1 d8688cac0245fd7b886d0deb51394f5df8ae7e84
SHA512 6d58f49ee3ef0d3186ea036b868b2203fe936ce30dc8e246c32e90b58d9b18c624825419346b62af8f7d61767dbe9721957280aa3c524d3a5dfb1a3a76c00742
TLSH
T10811C246D4612C7B0F3A922B31753306E26402F91290DC9A75BC842CEFB7D1750DBF1A
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\sw\messages.json
Size 980B
SHA256 0d20680b74af10ef8c754fcde259124a438dce3848305b0caf994d98e787d263
MD5 d0579209686889e079d87c23817eddd5
SHA1 c4f99e66a5891973315d7f2bc9c1daa524cb30dc
SHA512 d59911f91ed6c8ff78fd158389b4d326daf4c031b940c399569fe210f6985e23897e7f404b7014fc7b0acec086c01cc5f76354f7e5d3a1e0dedef788c23c2978
TLSH
T18D119B71E430287B42B5026735E83721F3D5C6B11554AC877A2C9B9E5F32C4701DBF54
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ta\messages.json
Size 1KB
SHA256 6282bf9df12ad453858b0b531c8999d5fd6251eb855234546a1b30858462231a
MD5 dcc0d1725aeaeaaf1690ef8053529601
SHA1 bb9d31859469760ac93e84b70b57909dcc02ea65
SHA512 6243982d764026d342b3c47c706d822bb2b0caffa51f0591d8c878f981eef2a7fc68b76d012630b1c1eb394af90eb782e2b49329eb6538dd5608a7f0791fdcf5
TLSH
T18F418FCF813DFE8B1EA3145F2329135562547156C02AF3A23C7C5E25D9ECC9ACA60ABC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\te\messages.json
Size 1KB
SHA256 026c164bae27dbb36a564888a796aa3f188aad9e0c37176d48910395cf772cea
MD5 385e65ef723f1c4018eee6e4e56bc03f
SHA1 0cea195638a403fd99baef88a360bd746c21df42
SHA512 e55167cb5638e04df3543d57c8027b86b9483bfcafa8e7c148eded66454aebf554b4c1cf3c33e93ec63d73e43800d6a6e7b9b1a1b0798b6bdb2f699d3989b052
TLSH
T12F41B0017622EA25DBE702B37528F608495817D262C5E72D3E7FA74BFF57C2D0083A26
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\th\messages.json
Size 1KB
SHA256 d147631b2334a25b8aa4519e4a30fb3a1a85b6a0396bc688c68dc124ec387d58
MD5 64077e3d186e585a8bea86ff415aa19d
SHA1 73a861ac810dabb4ce63ad052e6e1834f8ca0e65
SHA512 56dd389eb9dd335a6214e206b3bf5d63562584394d1de1928b67d369e548477004146e6cb2ad19d291cb06564676e2b2ac078162356f6bc9278b04d29825ef0c
TLSH
T13D313373A2425DEA6421231332653381F61CACAA3B63FCD1B959200E0BF1B168413FEB
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\tr\messages.json
Size 1KB
SHA256 b9066a162bee00fd50dc48c71b32b69dffa362a01f84b45698b017a624f46824
MD5 76b59aaacc7b469792694cf3855d3f4c
SHA1 7c04a2c1c808fa57057a4cceee66855251a3c231
SHA512 2e507ca6874de8028dc769f3d9dfd9e5494c268432ba41b51568d56f7426f8a5f2e5b111ddd04259eb8d9a036bb4e3333863a8fc65aab793bcef39edfe41403b
TLSH
T1DB116A44E0D3281F8A74170F35AA2256E59507BA3220FC9936BDC50CEFB595640E3B68
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\uk\messages.json
Size 1KB
SHA256 9fa26ff09f6acde2457ed366c0c4124b6cac1435d0c4fd8a870a0c090417da19
MD5 970963c25c2cef16bb6f60952e103105
SHA1 bbddacfeee60e22fb1c130e1ee8efda75ea600aa
SHA512 1bed9fe4d4adeed3d0bc8258d9f2fd72c6a177c713c3b03fc6f5452b6d6c2cb2236c54ea972ece7dbfd756733805eb2352cae44bab93aa8ea73bb80460349504
TLSH
T14721BB1599553CFF0226A32FFC447A00BCA501BA2B129B6B35A86C2E3FF5416026AB59
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\ur\messages.json
Size 1KB
SHA256 5da836224d0f3a96f1c5eb5063061aad837ca9fc6fed15d19c66da25cf56f8ac
MD5 8b4df6a9281333341c939c244ddb7648
SHA1 382c80cad29bcf8aaf52d9a24ca5a6ecf1941c6b
SHA512 fa1c015d4ea349f73468c78fdb798d462eef0f73c1a762298798e19f825e968383b0a133e0a2ce3b3df95f24c71992235bfc872c69dc98166b44d3183bf8a9e5
TLSH
T110217BA1E5F41B774331C467E0A77E20D3760E634240F6997929464A8FB64035B8AEBC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\uz\messages.json
Size 865B
SHA256 1eba3f2228c3e838a666f85ba3ee42c1d62c98a51287c5cf1de3fcd204c3bc4c
MD5 043e661611bed481ea3d1734a792c5a8
SHA1 1b3deccd3128081cada2bc88244609c36f2c4f8c
SHA512 43a716864098252bdeabda2d121302d9085bc610c03c3f27a37f519318c6994ea959123775c3bbcb808d6502dcec4f91a9bcb09b7e629bfb341c6b165d7bd072
TLSH
T18811C244F0A19E7BC37182A335552A01F29001B55640DCBA7E3C7A1E4FF6D2266C3F28
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\vi\messages.json
Size 1KB
SHA256 597c5f32bc999746bc5c2ed1e5115c523b7eb1d33f81b042203e1c1df4bbcafe
MD5 773a3b9e708d052d6cbaa6d55c8a5438
SHA1 5617235844595d5c73961a2c0a4ac66d8ea5f90f
SHA512 e5f906729e38b23f64d7f146fa48f3abf6baed9aafc0e5f6fa59f369dc47829dbb4bfa94448580bd61a34e844241f590b8d7aec7091861105d8ebb2590a3bee9
TLSH
T10811C004A7B9243B417C8A37B56C7202EB61D5EECE80DC863ABC913C6FB78519455F9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\zh_CN\messages.json
Size 873B
SHA256 c047235c983d3dcf835d4ecc1c9270c6262a09a5acadf093d87e709c0a23cae7
MD5 de9899623560d8a6f389cb0726abfa7c
SHA1 3edb7a2736cbd8808b5ba3b77734bc0e54797ca5
SHA512 4b34ddfe9c94b651ff6926ef15bda94f8f72a106ad9f81d2a937731f2fc9566b66c70fb4e7006769ec13f17492c552af8d0449b3a8967b045d3e71a31e7c9fad
TLSH
T17B11AF00D2A0797F06379253752AB243F1F155B460249C9E7D6DD54C5F71C53125BF58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\zh_HK\messages.json
Size 1KB
SHA256 30f44cfad052d73d86d12fa20cfc111563a3b2e4523b43f7d66d934ba8dace91
MD5 524e1b2a370d0e71342d05dde3d3e774
SHA1 60d1f59714f9e8f90ef34138d33fbff6dd39e85a
SHA512 d2225cf2fa94b01a7b0f70a933e1fdcf69cdf92f76c424ce4f9fcc86510c481c9a87a7b71f907c836cbb1ca41a8bebbd08f68dbc90710984ca738d293f905272
TLSH
T13E2149EEA2456AAB47BAC1CAFD283D4FC5930E602063D173C0FC698C370692D5DA6864
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\zh_TW\messages.json
Size 843B
SHA256 f94c6ddedf067642a1af18d629778ec65e02b6097a8532b7e794502747aeb008
MD5 0e60627acfd18f44d4df469d8dce6d30
SHA1 2bfcb0c3ca6b50d69ad5745fa692baf0708db4b5
SHA512 6ff517eed4381a61075ac7c8e80c73fafae7c0583ba4fa7f4951dd7dbe183c253702dee44b3276efc566f295dac1592271be5e0ac0c7d2c9f6062054418c7c27
TLSH
T100014C64D2A0387B4136D16375A83352E19C52F50404BCD6BB1C9D8CCFB5C1A01FAF58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_locales\zu\messages.json
Size 912B
SHA256 ec78ddd4ccf32b5d76ec701a20167c3fbd146d79a505e4fb0421fc1e5cf4aa63
MD5 71f916a64f98b6d1b5d1f62d297fdec1
SHA1 9386e8f723c3f42da5b3f7e0b9970d2664ea0baa
SHA512 30fa4e02120af1be6e7cc7dbb15fae5d50825bd6b3cf28ef21d2f2e217b14af5b76cfcc165685c3edc1d09536bfcb10ca07e1e2cc0da891cec05e19394ad7144
TLSH
T1F611C0C543D25FC9472E83577B15B0112BE60BB562C23A73E9E9321D18578B57907F38
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\_metadata\verified_contents.json
Size 11KB
SHA256 6e7f425854ad23b4a516ea6d49bc620ae0f800212eb55af7c385006f43f510a2
MD5 3df50be3952bb8a517e4eb24f62a2bcf
SHA1 0abfb2ba917c162ab93734572cc35086e2628cf5
SHA512 06acbc50a6fd32ac70d5f98d05d478650eaecbde771f8b0f39e6281be540ca5d0df7636e3b9ac192cfad5a25b04ad55d9767ecdd9ddeb5c1f3f9c2af5f92142f
SSDEEP 192:RBG1a5Ma9+PqITEPc6R+ZdmOp+lbONd/jUmkD2mLLpPwcgT9QrWB95nTfd:e5xn3Bol8U1m5
TLSH
T191327669DC4D708DBC16FB758B6A79B69B48C9C9A14D2E1E13D34C603CF7A4988A30DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offscreendocument.html

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\offscreendocument.html
Size 97B
SHA256 b9fa2d52a4ffabb438b56184131b893b04655b01f336066415d4fe839efe64e7
MD5 b747b5922a0bc74bbf0a9bc59df7685f
SHA1 7bf124b0be8ee2cfcd2506c1c6ffc74d1650108c
SHA512 7567761be4054fcb31885e16d119cd4e419a423ffb83c3b3ed80bfbf64e78a73c2e97aae4e24ab25486cd1e43877842db0836db58fbfbcef495bc53f9b2a20ec
TLSH
T132B012EE6C03C10004551E8A38E092146412638870D1A1445CDEE0334D4075C9C0B44C
MD5 SHA1 SHA512 TLSH

Submit Download

offscreendocument_main.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\offscreendocument_main.js
Size 115KB
SHA256 f6b3a786b1178d0d853f37559c83a4b5e40e2af451dca20af583137416af8416
MD5 5c3d8dc7447cc707f8da55f8c3b7d2b9
SHA1 1ff4cf8647c578a29a7b75c56d3dad86fce729a0
SHA512 0c09e9b71e0721e45ea3cc8797eb1e9b2bd2d762c0939eeb63b4bcb2c2508d4f09c5dd8c54fd51fa422d621a848367219f3bde8ab10a9e9a3dbb5e5fc22433ce
SSDEEP 1536:bdcu4XPM3pxqVv3AZWN4pI6PfRYPCf/JKIcAemoa1mAXC+4UKSomSWmmqekWdsXU:SApA34cmI6Pf3JKICnaPXC+BmmxkQbN
TLSH
T1D7C3FACDB6A574624363A5F5002F010BB23AB8AAE44C81E8F189D9E97DB446D4377F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page_embed_script.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1988_469735495\CRX_INSTALL\page_embed_script.js
Size 339B
SHA256 e9bdab7a401dd22885c7a7a8bb9c55f27783807a64402e62b39758c7fdccb345
MD5 19280b929163e1c79f981de8804826e6
SHA1 aa0b31d2ba9609100a914b70943cfdee3eff8708
SHA512 0cdcdadf3d04aac9bb15ee1d074879e1042816c1ecbc96e0cc6a23d4eab29231f7e85aaa66c985dd7a209ec0b707906d1866508b12a83a67c227ea971cfd6e14
TLSH
T12EE04F070F095929F0BA890EEB133A03AB3541106C35954F26CE0451BB4339BD1192AC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\_locales\gu\messages.json
Size 1KB
SHA256 fe8218df25db54e633927c4a1640b1a41b8e6cb3360fa386b5382f833b0b237c
MD5 bc7e1d09028b085b74cb4e04d8a90814
SHA1 e28b2919f000b41b41209e56b7bf3a4448456cfe
SHA512 040a8267d67db05bbaa52f1fac3460f58d35c5b73aa76bbf17fa78acc6d3bfb796a870dd44638f9ac3967e35217578a20d6f0b975ceeeedbadfc9f65be7e72c9
TLSH
T12C319890D2B4E4B614E69B7FA0AD2230C6705363D1162206328CD90D8E22C5B3CFABCF
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 e6aacb18192158a01badc853c32058625510c8168ea6b79a3ae5adc57c05f541
MD5 32862756cf454ea1e8f993c6beb9b68f
SHA1 5accecc5ff92b2d1bbf2ddd5067f1189d8ffb054
SHA512 08ecd95a029a31ef4d65f5d5211a25f03f939b42b08a5633107a87e628a9917e22d89b9fc199d2f1e1747fba7a531f1391f2d911eaca999b498511b2d87198a2
SSDEEP 48:uzBmw6QU1PzIVk2fLJorug5NXFyZHVk7pBB:6BCxIDfF4uQVyxIX
TLSH
T1999250939E74BC13EF1659793D2B2839EE37E1189FE2CC9830144824ECB861684751AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 9e85e25beaea3026d40683781fda7b69b95c850a3f63c9358dd1522265badc71
MD5 83451aeae1114006451a90f263290bb7
SHA1 5218047fd2fb5dab6e4f64d74c391724bc56ca0b
SHA512 425a4ad62de96f5a16fbdad2856302ce455fa18d1d27ba1dff53aa4d6cd5825c51f37cf7ca2b21aad6eba7e8f26205a5a6111ae7819d204768c24c23655d3ab1
SSDEEP 192:0+C620+G83uxXBBK31GkSJoDNYeEJH7DNspUy:0+12a83uFBBQ1GkSwYr7DNspUy
TLSH
T15F14641F9F313612CD7D81366DE744A35EADF03B8B53A5D9686108B4CEF2652A02C4AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 4KB
SHA256 91b89dde38dd52aa8cd6b73e45585f74dc44afe6a7589f59b9220c628b094357
MD5 6f0e135816f5c9a50243ec07766e6e3e
SHA1 1f1e1bf42aeeffeec557ccc873ffb4e1aa957435
SHA512 f166f4fd4b82e379cd9fb72c2fcb2f3842ed81173e83bdc1802244ae6cfb819a4d25e4bf2a39f2c2b9a97c33434d791a28b1353221f2891eb876fccc0313e1ca
SSDEEP 96:+F0wGWH+tB3Kex5EWWCQLcfzwqCJ0iPS91dt66dPH0o:YxlH+bJipCQLcfzwJ0iPC1dt66dPH0o
TLSH
T1F491CEFB4039D539F30B89F66A53B71C92A7A12DDCC8FFEADE24662C04710754926943
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 33206a0935ac5ef44d2e42f924b67a2e452569b24528d17e4c3c513ee0eac45d
MD5 42ec3482023c37ad456d8b41dbc1b266
SHA1 d23a43ef82f468267e82295a233701cb645124ed
SHA512 ddd4651ffc2d3bb7c46613df6110699bbe5bd996a216f64798ed2ee3fd0d6359aa84f3c4169e03cf3c244072b855aab303c64a2f58b4c694f25e6a4cb58f2f9b
TLSH
T1D2E0D8A248DFC29A514865CB43297F0CC3E13926E68DBF056B15DC81B402044A6DB5C5
MD5 SHA1 SHA512 TLSH

Submit Download

3660046f-ebe5-4701-8eb0-80dde6b5e831.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3660046f-ebe5-4701-8eb0-80dde6b5e831.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 c954817c2c26ba72bc6b06f1c907d1aaacc43ac274ab970e4ea820d30d22b817
MD5 e8969d9e30cc443985e7a8463f856472
SHA1 1a29233c61389b20aea6ed97464c2b141b80bef9
SHA512 0689812b53b53cc6803224195ccd0b903ab6353fa7f561ab41b1591d33a85df64a3c4eb8b56d17b8410df05f7887091303c3707b5815e1ab68377c804f360bd8
SSDEEP 96:D0Ok7J46au0/zFlM9gaj6/3HTbRYbhsEbmPcBe42ju4WrWsxFGwOv:D/k7J46au0/xlM9gaj6/3HTNYbqAmPIO
TLSH
T1DDC19EF783F4456DCA1265F0AA19AF2FCE190452437C3C4A89E4AF0BA7F25B1E150E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 44c6b995edab500173eef6cd1c3542240b3be3829a6d68773d97cc2e5b2a8907
MD5 03c1f48ea0cc8f94dd691d71eb7c674a
SHA1 f879fab9cf0f2cc0f145b7be27f8cfe1e9afa18d
SHA512 d9071f25ae91f23489a7ca70ec3552f0bcbf693e93d04440898d0b3fa290e39410c3973479e39b56a3dd5f42ce01d4cddfacc5fb214d74e68909e795d15528dc
SSDEEP 96:D7OtvJF3au0/zFlMAFAgaj6/3HTbRYbhsEbmPcBwB4We42jbv:DitvJF3au0/xlMmAgaj6/3HTNYbqAmPk
TLSH
T104B1AEF783E4456DCA1265F0AA19AF2FCE1D0452437C3C4A88E4AF0BA7F25B1E140E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 ebce89b4bdbb92dae5aa892e31a6ada54c53b64bbc74a0c016f0a364a98cb3f9
MD5 429c063ffa2ee1cb81a4b21319bd1619
SHA1 2955ca1959c1cf00b758f42a208c2a62802e0663
SHA512 c4c31fd4b0d62117860447381e3d9f9287fd0c852ea0418df3627747e05cfc31ac3888328f13e6c02bc2c470d8c53453b29d4a9c68255ce7a739ac4ce9253728
SSDEEP 96:D7OtvJF3au0/zFlM9gaj6/3HTbRYbhsEbmPcBwBe42ju4WrWsxFzv:DitvJF3au0/xlM9gaj6/3HTNYbqAmPIS
TLSH
T1C1C18DF783F4456DCA1265F0AA19AF2F8E190452437C3C4A89E4AF0BA7F25B1E150E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 e47257cfa08d615e5e43f1e258ee9b19c2150131ffda08fae205ba6750f4313e
MD5 9e3bd579c9e60396e43a5e9594021134
SHA1 4000ba1dadd65db0116c62303f939dcb5d204539
SHA512 d266e55ad5dd78671a5fb4c7b39bd3f6b15b4f64b6521f67c652f8358629f686fd8fc4ce565bf102ecced4a575b12d0cd410e94080701b5a80b62daad0d8d2f2
SSDEEP 96:i/IEumQv8m1ccnvS6m0sBbjw9xbb2AWf2EnFazNK74g:i/IEumQv8m1ccnvS6jbin
TLSH
T1C7F2DEFB07336105DD8448B0A0059FCEAF12405B47B6B6EC66D447E3F3A21E2B5B9786
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 41b7bbfacbda4720a0107f824a52c76af4b408cf287019795f9cb455d2e3b371
MD5 7c7f6c0d827b1847fb96a75b2a8a18ca
SHA1 019aa01ecdbb9b626ff203bc5b6d19e2089d0a52
SHA512 29a64e722f5251224ed8b4865aabe6b0196be5eaeb7488ce9ac11ba3b431dc9919ed245aa98be855421fe3e16fa60cc76e9fae16d8fb5ea5a9d87427e18214bf
SSDEEP 384:sxZ3nqsR/fGsMWv5dxtH+13Tcf/bCtqYo2iuifud:sPqsR/f2Y5djH+s/bqqYjiuis
TLSH
T14982D856A534997BCCDBD61AF645BF53D6F5142292900E88AAFC8F0C00E67ED2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 fb0ddbead33ae9ef5d9a1786f011e2e7c0107ff4d1214aed5e0567df55213a6a
MD5 cb324871ea8137ba8c7df00d7a5de22a
SHA1 606dac9f52c21f256bf2838f0dc3279817aeea13
SHA512 5e350f8690976da129eb652e3dd578f0521839dae59f5891ceb124deb8df8a2d67045b1ff2e586b498af91ec3c08643508700025e7f72ee6e83a5855540e16fd
SSDEEP 384:sxZ3nq6R/fGsDdxtH+13THf/bhtqYqEiXf2d:sPq6R/fFdjH+Z/bjqYliXk
TLSH
T1CA72E756A5389977CCDBD21AF545BF53D6F55562D2D00E88AAFC8B0C00E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 43c5c9153289a4be678684758afa3b6fe09287a5783cff9db01fa0e6814280b8
MD5 786506d31c469e7c767adc6f2316185c
SHA1 09c64b2f8f25fc3a637cd73a1f6fb959d258b98b
SHA512 01849c6f1d6c4cb3db37d2e7ad7bfdbd29c6b4004068a2a9d7b662d18af80e9d1929b191a3c276f84d4da3c23bf8cfebc11e6ca3975db0be2caf06df3701a0be
SSDEEP 384:sxZ3n4R/fGsDdxtH+13T3f/bKHqYfiXf2d:sP4R/fFdjH+1/bYqYfiXk
TLSH
T13A72D856A9389977CCDBD619F645BF53D6F55163D2900E889AFC8B0C00E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 cdae9bc7b6697df9f7f778105951cc609f7364b647a4be474e6a67f08c68239a
MD5 b2dde571136b5fc71c0b60ad1f48b538
SHA1 29641084f368bfd86d91b044838491dc9e49ab22
SHA512 1e76f8a157c0408a96313fbe28d98b717cf35d294799585029250db5308df887590b3fd6397e13aef1957eaa2b52bcf0f6070528eaa7b291e9b13cc507b759d6
SSDEEP 384:sxZ3ntR/fGsDdxtH+13T3f/bB1qYliXf2d:sPtR/fFdjH+1/bbqYliXk
TLSH
T1DC72E856A538997BCCDBD219F545BF53D6F51562D2D00E88AAFC8B0C00E6BED620382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 228d1beef7fc1257e2613ccf0858e6dc88094a7b7ce2766dd7c285fcd2cabc93
MD5 51c187034a3bbe79bef77856997ffd73
SHA1 cf0f125330be739d5d2ce60d49089424fd99b7cb
SHA512 78a9233a5eff09e44a9528597a2a470daab82be5f76659138dd6ca77146a12918c29bc479baf0bd618461816c1d17faf6d7d42c5aff4b70980d86acaac06e953
SSDEEP 768:kA4so86s2LP7pLuLn4zWRmH9QWR8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3bU3SLlb:kA4so86s2LJEn4zWRmH9QWRu1jaKbU3y
TLSH
T1C7031D3B280CCB7E4F844E9DEC2ABE8A6DE8018F96988D5447FA444C03C67DB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 1bf8c1613cba5b3f9070ab00d49bdeba1404845791464e5d47e5f23ee068dd49
MD5 9083b6922d8273ff3b9e0c041a7f6fd8
SHA1 da00b506b542b3d4ca1b7b0d8eb0f5e0f5108a47
SHA512 0c5802ea8bd393385a31ccfaef5a78f647af0fcba64fc88b0e4cadf5985a83bd62fc6c1e1dca55932be45b4bbbadc65a0ed45bd059352ac708af3cb6b7519618
SSDEEP 768:kA4so86s2Dq7pLuL/HzWRmH9QWR8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3bU3SLlH:kA4so86s2DCE/HzWRmH9QWRu1jaKbU3q
TLSH
T132031D3B680CCB7E4F844E9CEC2ABE8A6DE8018F96988D9447FA444C03C67DB55161DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 f54a1d455dd49eeddaacfcae90015fcd3118b7117164301a2da73b7d54a24659
MD5 22f48b3599e9b6e7c21bce419f9b55d9
SHA1 3f6795fa53e47b6dfa4a6fd7d9b0f3fbde13c53d
SHA512 3284cf273c47dafece63b8ce6e2d9a099fb5c1f8410785327f207635645bc6d353ac8d4658df7c0c5ec6cd596966b8393eb2db82428afd15312563c4d1cbb19d
TLSH
T1C9E0DF5009CAC179615BBAD302259708C2E8B827E2CC7E462FA9C8806142904B9AB180
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 d32289f164d7abd5f2044e2ac99e2ced18b255fafeb019f2a59f8ecaf3045619
MD5 026e5f839eed50b814131e52c5f0eb2f
SHA1 371d98bfe5c709c25a05b9d3264abc6799b7ea57
SHA512 023f02b43b1665f079d3be6a10c7c97193ef2a7691b1939bc04f8ae05df4333fe01d84804f579d0376ddc6a022c8cb84da3fa0a3923f172747aafa52c5a39bcb
TLSH
T1DAB012883700CB46C0C40930C789CF917714F016A000051B8C0D8F944E992BAEF01CC8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 4750e2dfe7ea7166d7c366b561976b0340545bd44c445f216ec46f33df7a4c8e
MD5 42f9c21e7865ce0ccbaabd935ead25b1
SHA1 90e94bc30d7ecfd888b22db93a2e7a1f3c9fd332
SHA512 3d562ed8397109b807b4fa396d8ee078c112804d58fd03b1bc40ec27e8d6f8cfa29ea687a580600ffdf819c78993c1ec750a33fc485105e5b7b576be321773ea
TLSH
T191E0DF2516CAC63A61CB75CB6325E708C2E37923E6CCBD562F69E4C0A206584B28B280
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 e94aa29dc93d097ddfe9b2eccd85562a60c7457955f3e8f83028701594ede8ff
MD5 a9a92f37ee126f572412b13fc7715f88
SHA1 3bd4330f7e1fd731f3ff27954417ae769450b7d8
SHA512 dc10f5504ad666f82724f78074c3aed18796c352b96cd683ff2de56ca9fe36d8068eaf848d2dab00dc31ecc8c1cba941298f55d30cb7b7535cf318658e73bf05
TLSH
T163E026704DCAC6B96040B5C34364AB4CD2F1BC2BA3CCBE8E6718D8C0B501580F2EF281
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 026ac9b272ed4ba09407bbc106563a0be2598968993fb57746beba54f2bda635
MD5 f4bc38ba624802f239abaea6cf74c520
SHA1 dfbae8f2056ad4a7306423479790d0b0a5182a8a
SHA512 8411a6116a578517318bfebfb5aa3746689f8b50592baac12c496924ba6a8040fada2391b0b794b84f7817d64dbd1bd2ccc4997f4e46c6791002b253f50a1699
SSDEEP 96:KkGQKTyeupuKK8DF6KOkKeFGKWoJp+K6wKK6UKXqAugKHqC6S0KzSA+IK/qa2jSj:ubB91NPhfYXHkvl7X3S9r4dFr4x3tg
TLSH
T19EB24751757A13903A7E299A8595B87E52C231A37118E46B3BF900B60F6BE30CDFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c4d27cc1-9696-4ec1-86dd-bc4f030d500b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c4d27cc1-9696-4ec1-86dd-bc4f030d500b.tmp
Size 37KB
SHA256 615de041480fa16ce8041d552f52164c383c92d086049938aa3bbf3b695bd57f
MD5 00b279d37abfb709afa0222525fdd4e2
SHA1 f2a7d07569aa171b1abee032c2dc1de003104d84
SHA512 46ed12979cc4fa17c760d6a7b84c14a482aa655974aade856466301fa5960d9d7c9c3128af02002eba096b6315063df3735b65397dbcdbdc39f14966515ccdcc
SSDEEP 768:kD4so86s2+q7pLuL/HzWRmH9QYR8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3JU3SLlp:kD4so86s2+CE/HzWRmH9QYRu1jaKJU3c
TLSH
T1EE031D3B280CCB7E4F844E9CEC2ABE8A6DE8018F95988D9447FA444C03C67DB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3aa8bb3-6f21-4e8d-86b2-ee02b2bc8975.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3aa8bb3-6f21-4e8d-86b2-ee02b2bc8975.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

eab13220-96dc-4e81-b05b-053dd0e52006.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eab13220-96dc-4e81-b05b-053dd0e52006.tmp
Size 15KB
SHA256 6c8ceebaecd00cf348c2aa3e7f3add04635c4506e87e067c5c11da6f811b6811
MD5 0ceb03f559b8787148df14b4685b9af1
SHA1 0d3c4f1769e99dfa847a1c76040b28d39254e4a8
SHA512 a824d926ba71b7111a49c8bbec15f3d65e09657bcc6f187228032469565bfe410a2d409cea2255167405936a9d75611967a252a6d89232a3d7950d7293dea3e3
SSDEEP 384:sxZXn1R/fGsDdajFrLTcx/bKHElfiXf2d:sf1R/fFdEFrc/bYElfiXk
TLSH
T1CD72D856AA3899778CD7D619F645BB53D6F51162D2904E489AFCCB0C00E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 21KB
SHA256 5634a1e81987f9e7513f592bbf47cf3d2afc56a077527a475c76a5e9a3c19073
MD5 8cf6e1b34bfac2f545cc1bfcbb2b2dd4
SHA1 279b9b94747fdccb718b7ff38b51a44c3a02f27c
SHA512 0337b81be6f0a0e76c777596502e29d7cd0e4ab8de7e3f3f9771f487e7643e3d359b01f5b9f81c27468d9069e88034fe9b3c62b4dc95cd43d16bf1e00849ae4a
SSDEEP 384:HRostgsQGKSaJMaJWaJbaJMaJSaJNPAlQkIIIrbrMIMCBB:xNt1QGcJhJnJ+JhJjJxAlQt
TLSH
T1BDA285B66FA51B33D66FAB752936978567E2FC004DE18A4C3020145C9CF232B89D4AF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 8a188d78c7db42bca7968922c382916882bab9fdb91966151c91a052e42e0187
MD5 225f88ccc129d2c6521ab06f37ce174a
SHA1 71b53c4a5db9f90efb5ea58736159fa2454872b1
SHA512 40f4892e139fa0e9f1c93047b44a66e916639402780c414e04469b53e714529997a5a3042b4bf5d19b24b0d1d436c294aad1c76eee99cee2372f49b2bcbe87f9
TLSH
T1BDE02620ACDAC57EA595A6CB02395708D2E83C2BFB9C3D0A2F21C884A00110CB2EF182
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a8e043eec351395f6875f2a50e7471ddd5f5351271f59fb448b2462921aaeefd
MD5 055ae957508a8b880f508bf7936f6315
SHA1 42c1ecad1981b8c1b3a746dbe4c44adb0dbef368
SHA512 a238d52803d07c660dd482004e40ae11c7c7e88eccc233d0a243bf3ac786cefc9126d62264a7ece88f23def8edd03cd93f63964cd64e559e0af5fd41341bfaf4
TLSH
T117219155F320C149D18A8A7DA02AE7361738E9169FFCED0F847924356EB6F001E8B6F5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 48fd8e6674c40705ad194ee8dda5d9fda772c193943c77544ca525dd1eca1fa9
MD5 a3294fd87765f3994a0a4af64c079381
SHA1 631529b468d1d40fdbde0abb007e002e6a7a7c0f
SHA512 d024f8f50e3be92c1c06c95b31795b79cefc0fe05679a98244d6531b9def26ef7e854b687eb975394a25ce0c61fc769422fd1786672d104179a50d1b44a059b1
TLSH
T17AE020206DD5C57F9151A6C303799B48C2ED3C27FA8C7E092F65CC84510114D76DF142
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 6f025da1275f11eecb7c5bdbac080922971ac001afc77e5468137b3316723b3d
MD5 736f940496de9109bbbdd2c2ffabd96b
SHA1 0e9c807b74d5b78b1adf55c58e9bb71bc59c8e01
SHA512 c15770032da68cc3408925d13ac8b8391c85e8f6153e06133b998ad7a2dad4d73413864d79625d1b7694bca2fb1ab5025bd5941a4362efb6dfa966654086334f
SSDEEP 3:MsEllllkEthXllkl2zEFll8FKXl:/M/xT02zRQ
TLSH
T19F44040C7FC11435C74410354015C3501371D4141551D7537C5105135CC55500C10400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 9621d5eb3dd7f5de678e3ba85cc7fafd5ea5109f8f81c058e891d61e6b2b6401
MD5 6d66947074084159b1e2f11f9737353a
SHA1 9b39a2beb585ce4e82d5777c28711ba7a0e307cb
SHA512 9b656a98b791e98cf3ba7fa85f70a5a47f4faeebc1369ec33b8aa81781043f1966522b15fa668cb05924cf645f8dee04082fd1ef5e0ba3030a9ca72dee80e202
SSDEEP 384:nM8iFxCcmyWCc58NLXW8TUNTUlIR5e8+IgPSY5DZE2VFf1Yq2hkP+lFYS/E639/r:EF4cpqQXWwgm8qTEEYq2hkoFYS/E63x
TLSH
T1CBB24B32EC69CDB7ACEA4A9AF71E7643DEE01163C9888ED8DAD94D0C00971DD170BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 d070cab894eeaa36e0c144fcf0dfb636f9a15eac7c434af8873d0eb0adbb3e2e
MD5 75415436176d0c67f7f91205580f261e
SHA1 f10798411b646d6e491d8e39e7876825dcde3659
SHA512 750b81561f678eb68f7326c8c1f41d42452758e935fc1107696e5f32acc090ed031c321700fddd7598bde09dd4276df30693d9ffc7c4f5058bda0cf6aa060b41
SSDEEP 768:cF4cpqQkwgm8qxEEYXAk1wiyKQdAkhkoFYS/E63hK:KqQt8qMAkvyKaAkhkoak3Y
TLSH
T1D8F24C7DECA5897F98EEBB89970E291299E40277C5B84598D7D51F0DC0B708DF30B806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 3df30b8e9a036b376b5d15d3ec5c637458396cca561680fc335e2f1ba06f657f
MD5 f617ceeec7798413daf2a43e73be625a
SHA1 9463caf48ff1191a3eb3ad1ac3ab5eff0df08de1
SHA512 e30ce9aa96d7abea89543d210144cd10c17603cc50e279bb04e52df82672ebe68d9d6503b7b95b7ce8ced118f02da29aa7c12d4941fc784ab38ec443f74070a7
SSDEEP 768:cFKcpW3wwgm8q5EEYXAk1FghkoFYS/E63hK:UW3J8qUAk0hkoak3Y
TLSH
T122D25C32ECA9CDA7ADEA8A9AF75E3A43DEE00163C58C49D8D5D91E0D00D719C270BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 5e19217738f7bd16db7d0fcdb9b07c6f022dfb3b648700b43c5233724516e814
MD5 8f3c81ba23b98d9b950b5db6d12a8afc
SHA1 2693a01b413556732e393f262687616b58cb16a7
SHA512 610e694abc8d989bbe990582a6b6a8a974d5b6005bc4e2bb8e9fdc9f6849975ef169b1f937b0662d5b186021502c49962a7d1a57624de8b902ce2d103bec3f5e
SSDEEP 768:cF4cpqQkwgm8qEEEYXAk1wiyKQdAkhkoFYS/E63hK:KqQt8qDAkvyKaAkhkoak3Y
TLSH
T1F0F24C7DECA5897F98EEBB89970E291299E40277C5B84598D7D91F0DC0B708DF30B806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 97d30704546a4767fe0256a1ef896891551d269a3f1271b61abf5c0596aa1450
MD5 6ab426e8cafe155f50dd2942736ebf36
SHA1 df43366101607163d814bd2b6a6fa3a3d51fa83c
SHA512 7a14cc568e493ed8a764b9dc7c68a3d95b9184a2b26ccec26ea87948fee5d1546f761e39312334676558d1c2b5e1b9bca46bfc60dd8152e23052420979386db4
SSDEEP 384:nKHiFavqMg38Nn8TUNTUlIxBgPSY5ovlOVFf1YGITzAraBDRYV/Vw1mREdUqrN1Y:TFayv3AwgGKlMYXA2lRYk1mmTY
TLSH
T1CBC24B36EC54CDABEEEA8FD9E7097A02DEE00167D98C49D8D5D41E1E00D719D230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 7fadf86716deea3f63d22d5bd9ddc39ddaeb3efa8b1278fbd48526f795f38e7b
MD5 df57debd813d7a2d7f83245c2999eb6e
SHA1 80bd70d7fa8e2273a0f1c610de8e51a3448afa6f
SHA512 11a11cf0a4245deb6a52305f74a89f703fa9decb6d0007fe524ab0d326f9426d4201eb397bc23899f03d36242ba6c0f444dd0ac400dfa53ac052a668654c30e8
SSDEEP 384:nM8iFavqMF38Nr8TUNTUlIRN8+IgPSY55pE2Yz4fJZelP5GITzArgvSOriggrN1U:cFayK3wwg38qpETOZWP5XAk1igkU
TLSH
T178C23C72E894CD67EDEA8E9AE71A3643DEF01293D9C84AD8D6D51D0D00971DD230BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0f7c197a544215109d945fc706789f2b90f3599c058db257c9ae3ea390d0bc78
MD5 4dd45c0483131d2d291c6a5377f7b4c7
SHA1 0baaba10db0cab42b50dd170f4bd95a97a4cbbcf
SHA512 b2d61f1c4bd9468dff4c75be781a9f3a73d99d261d735412aa3c603aee4ef919c991051da2ddcad2e792e1d82a4186b17f7777c42166f8d965ff0e73c1a402e9
SSDEEP 384:naHiFavqMg38NH8TUNTUlIxBgPSY5beQVFf1YGITzArgvSOrDgRYV/Vw1mREdUqM:jFayv3AwgGUeYXAk1DgRYk1mmTY
TLSH
T168C25C76E854CDABEDEA8ED9E7097A43DEE002A7C98C4AD8D5D41E0D00D719D270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 3467c9413f975316a9d50571c3f0787e574668cc275ddc22380f58375eaa2b8f
MD5 7522cdbd27f75fb5b5c1e3e41e795552
SHA1 61bacc9f92467e8521d426b19deb3c9161d40067
SHA512 6846cafca5961e2fa98d37ff8d1589c74b48585095071c7f74cbcee44f4b8e6796005a40b03f9a6ecd230fb5a7d8f5ead7175bd174c741a922db4e1c5e0e7521
SSDEEP 384:nMHiFavqMg38Nr8TUNTUlIRN8+IgPSY5qSE2VFf1YGITzArgvSOrzggrN1k+5vI/:NFayv3wwg38qlEEYXAk1zgkU
TLSH
T124B23C72E864CEA7EDEA8F9AE71A3A43DEE011A3C9CC4AD4D5D51D0D009719D270BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 1095cfadd764bfa479bd29dc986ee8e1d712f9ebe05e349936f937bb7f4754c5
MD5 56ab2c0f9d2e024091cf02093baab4d1
SHA1 e9706767dbb6d59f59a43665bb184308ed42ffe8
SHA512 7424b62bd036a53d097363639c0a9cee7e4e9da1e7130d19bfacdba5b273b595d620b8aa40cd67213f63c17edd2525fb258aebd8dd2b59a8edc9476c07736327
SSDEEP 384:nM8iFRvqMF38Nr8TUNTUlIRN8+IgPSY5JbpE2VFf1YGITzArgvSOrFggrN1k+5vk:cFRyK3wwg38q5EEYXAk1FgkU
TLSH
T105C23B72E865CEA7EDEA8E9AE71A3A43DEE011A3C9CC4AD8D5D51D0D009719D230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a621ab0974d24fe1053072243417a0787647ec7482f44185e45413195663f365
MD5 69b4323ec2b5c8542ae518014c02b3f0
SHA1 8d7686ceed34990d54549bb9f933e38293262e37
SHA512 fc1f4af832a2f0fb7381eb5a59bd34a1e19be664bb0566733c7f1b280f2e69dd329a3e2a9a95f41c71feac251e4f7ce69a06346e99cb27aadbd426b3453eddde
SSDEEP 384:n2HiFavqMg38Nr8TUNTUlIRygPSY5qXjVFf1YGITzArgvSOrDgRYV/Vw1mREdUq5:PFayv3wwgTEpYXAk1DgRYk1mmT1
TLSH
T1C2C25C76EC54CDB7EDEA8E9AE71A7A43DEE001A3C98C4AD8E5D41E0D00D719D270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 6fc20adb4427e324ec6a304547095d636eff2bfce988e1eed46bb137a1ec78fc
MD5 55e71b334f6b00ac0a3a0437dd8f4e15
SHA1 2398a6bd3148bb8693057b142e5c3936ef203aaa
SHA512 cbc8c4ef287c03322e456a702f354c3f00b27d3a87022cd5dc03368b3407e95c594f3ba7f9f9f812b3533347417f245f76a9d1b07d521830ad1cfdc4aece79f7
SSDEEP 384:nM8iFRvqMI38Nr8TUNTUlIRN8+IgPSY5JbpE2VFf1YGITzArgvSOrFggrN1k+5vk:cFRy73wwg38q5EEYXAk1FgkU
TLSH
T112C23B72E865CEA7EDEA8F9AE71A3A43DEE001A3C9CC4AD8D5D51D0D009719D270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 b15ad673b19bef292d12e520ec375c01f4eed19930ebd0001062b25e95599544
MD5 294cdfc8a026232091eba5bf3f127a4c
SHA1 236edb5ca174071af613dae5121186e30156c380
SHA512 39ddf3cffc453995afb85163974ca6e2b065c4e84c2b59095abaa1bb726ab12f567ac9bf072f0e64fe4a88a0c5374029bf9843145d372c4c6ad26012aa404110
SSDEEP 384:nM8iFIvqMI338Nr8TUNTUlIRde8+IgPSY5JbpE2VFf1YGITzArgvSOrFggrN1k+G:cFIyf3wwgm8q5EEYXAk1FgkU
TLSH
T143C23B72E869CDA7EDEA8F9AF71A3A43DEE001A3C9CC4AD8D5D51D0D009719D270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 cabfc263d069b8813968cceef658ed7dc0007c40e0a480d99aaa6aeeaec0a41d
MD5 6b4f2d9510bb5c2b12e5498849af3d4d
SHA1 6ff9bc851ac856ca51734efb47777949e5099f76
SHA512 0a193bb04e0e7835c17ac2f9de091cb7ee6098557f4125786d933d0fd694430a9fcbb270d9962a34182930559af832ef1d37eb10f322fb26777198224c8f5538
SSDEEP 12:TLyeSjPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3isuQQtydVFzbd/aUx9:TLyT5UOl0afDdWec9sJOpejB5fc
TLSH
T1C492AF636D352033E8DA8B7AF98349910EB8135EC9A7B848CDD04D620DB5BC1A2955FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 f6b8ae8057f18078ab5742f28b5f8f05da0c19bc53b3dd856288f099256143db
MD5 7551f10a1c82ddf587c7f407ec72a0e2
SHA1 c559097b6fac991fca0593860f455122b162d328
SHA512 54f987883501cebc45fb383a5594441d77937956b62f5eac48cd263dbe54c854850c268dae33c19bda6c82c9157d776c5ddcb51db7b524ed5b0dfd8bc8c048cf
SSDEEP 3:MsEllllkEthXllkl2zEFllq0Wtl:/M/xT02zK2
TLSH
T1B54404047FC00557C74410304013C7545370D4100751D753345104135CD75500D15500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

ModuleAnalysisCache

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
Size 62KB
SHA256 c5d3ad4cd4636c7de8fb90ac1d7780750a3e71166f03e5906765268336a1738d
MD5 9247009f4af1de35f845d8ddab93d974
SHA1 c465c2fee1d2998c327de74054f4a81acf1d9261
SHA512 773e718f4a3cb39644b538b66cec25928ddb5e21100774eb9a7c2ddec577ad0a6a4f467076b0e1de9d9389c77a96fff57addd47012644cf374eb2760005a0ae6
SSDEEP 1536:LflJd+h4iUxTYkzvHgfKQaUpeE711kDa5SUpQjNC+jH0jwjMXYo3BV3CNBQkj2z/:LflJd+qiUTYkzvHgfKQaUpeE711kDa5D
TLSH
T16B538392E9204E75E2E65F3EF15622627D30394690F8113211DC25EFA9878970B1FBFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_ushzpvag.0ai.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ushzpvag.0ai.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1988_1900970874\CRX_INSTALL\128.png
Size 4KB
SHA256 41b21cd721317759a1391ec66ec4606b1f1b0a66fc6542ec3e69f9a6ba9a60d3
MD5 a6e517fba00c44d26f516d2bc473042f
SHA1 bcedbf549056bfacff8820cac38713a1eacd95b9
SHA512 8c58b58a05b60420ff187c2dc8b71e019fc36cd6bcec050257b5532f131ba50ecd00fe2ca734805753a39f6911125d2d8684286207b1d1d039e862904279a145
SSDEEP 96:4niq7dWteEb8MsIhE+bf+rgEPQCGJxc4bOdpI0xeblJpzSkLqdsQ4pXnW3P:e97kteEnJEu+rxoi4b3RJpfhQ45nGP
TLSH
T14AA1AFFA12E3DA94303E91711B20659B4D7909385624364DDBB2AC7140C7A0D9B7CF63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1988_1900970874\CRX_INSTALL\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1988_1900970874\CRX_INSTALL\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1988_1900970874\CRX_INSTALL\manifest.json
Size 2KB
SHA256 4375dfec1feb4295bdee57adb32a4cbaf351904be807160eabe87ca692b2b5b2
MD5 a60bd7255f6a78622887303990f4b4af
SHA1 61d77694628cdaf7f5ace1332a01d05e79f13772
SHA512 96b411c6b37e927de84cd363e37d0203bd692cbe2cc1aea56780830f23889562a8a512a07316c2c0ca7909a43a7ab879d9e908421ba6e7b99fdbeba1202e2282
TLSH
T173516DFBBC10AC634BB08594991A710EF729735E45CFC4DBB2BC60734BE4CAA1D60598
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1988_1900970874\CRX_INSTALL\service_worker_bin_prod.js
Size 121KB
SHA256 ed3803ef5bac39e8b153d283695ee3562398e5d771a6c7fe5d1a85805672ab3e
MD5 aac97879e3f1c5a71cfb46b0fdbb29a1
SHA1 0cb02f7bbcbf207606888361be551e6d682c4c05
SHA512 8878736f8500a668e51e1f543ad7fe13eb7b4e19632918714dc64e952cb1f8400fa2026cfdac9ec757f4a285eacf6ce89f606a395500c56d2f2f39f8a64aa760
SSDEEP 3072:L3zCum5nHBRKbYK2ANj6a/4rxMwDLE2sk:LwB34GASx/DLETk
TLSH
T15FC3E9CCB7A574664363A5B6002F000FB23AB8AAE44C85A8F188D9E97D7446D4377F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.dat

Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat
Size 279B
SHA256 2b0afa46b32c531bdf7ff7b05d74c96de470a3003706cf1f3640ba17b768cd51
MD5 bfeeb4746fac97ca8eb4d2285c426a96
SHA1 6635739cd9dadb519e32f93cd492e63c605406ea
SHA512 b2e23201c13f0517ec92c57afbfba2a142ede96e621080b60d210d93eb4a628441773614b4f55740016e20274d3b2625fa03c2575e71642216e94eabe6f188d9
TLSH
T116D017176B12F3E51B7C16147C78DCC95BF34C60DAAC026841ED0C124DB5107380B43E
MD5 SHA1 SHA512 TLSH

Submit Download

fb3b0dbfee58fac8.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
Size 2KB
SHA256 74eea6d30cdf34402a903a3cc97f4e2161893c4e5c4f83826e128343826dea12
MD5 00e59d1791b06a271e5c0442f9fca218
SHA1 2b375072efa7e9ddafc14871d34bc2628f35a8e5
SHA512 a150290ff7e26215631f40d361fedc286774f092c4acdbf97186722c4df073c7e0f2f817106c75634eea3539d78a3f4a3a331bfd1e9c22f605c73255623a1f1e
TLSH
T1E151D0130A9B3F56E8D2037555364B66E7B03D4BFA50E50DE68C106A9E72D402E4CF3E
MD5 SHA1 SHA512 TLSH

Submit Download

whql-amd-software-adrenalin-edition-26.5.1-win11-b.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b.exe:Zone.Identifier
Size 156B
SHA256 fbe1998b952e224b63dfab335cb5d88d8fea341d5fce6eb732b76befb4d4dddd
MD5 19b9157b34eefe69878d4f356b5acd7c
SHA1 ad34ef522cb58acfb68f067c6c56445c48ad171c
SHA512 b98067c52352b0218e6c9758c78ccbee044804826f2bc8255260d91e3ea2b93406d19e9f1d53bd4166818acc8137d0654e42a1171e28aac7f131affb45cfb2e3
TLSH
T16EC08C93AC01CC6A2A25A2C04B9AE64DB6CF344448E284D4DC8040A6B4200BC80A4413
MD5 SHA1 SHA512 TLSH

Submit Download

cccmanifest_64.json.bak_20260511_133823_5F194522

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Bin64\cccmanifest_64.json.bak_20260511_133823_5F194522
Size 102KB
SHA256 5f1945228026054abf6a0818b19448bdc9ae85be869a8c75c62241165a00e64c
MD5 5ab2a7806357ef87932facf30cb1cc86
SHA1 6aa6a92c83482b5f623b36d845ff17df5b8ff042
SHA512 1c287589fa29adb68b50be27ef7654601baaffdc32a2b266163ac712138a9ad000597674ae860392854601a622e4c204679c91ceb137734bf123cf6014bc042b
SSDEEP 192:XKIGqxk+aYHqMhNftb5UPHEgD7hvVGF2iITEc6yVGfI1s4IbmOV3IBHizcE1jR9p:YV3tjwZOC+c0jyjd
TLSH
T1DBA33313CED1CEA55DBA509C30A526B2F0900FCBCB8B165AB5FF7C79EB2AD31050954A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RyzenMasterSDK.msi

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Apps\RyzenMasterSDK\RyzenMasterSDK.msi
Size 788KB
SHA256 f092c8b34759a41c30f6b46a367c606439f8ffc2d9be6ed4eef528e5fcef2b62
MD5 8114be2e5b9c16cd50dc181f04f1fe60
SHA1 e73baa216c3f52303c02995b7ab7b024c6686946
SHA512 0423eccc39fa23d68be4410acd4e5b95ebc4320c34524ccda10fc932591a068ff0a66dafdbf2b44577e660fce47fc44d7d67ccbe9960c1b3ad0fecd9b6b56915
SSDEEP 12288:E0CjVGc6LJ4/ED7t1wpt6BZzmGieDAdhRs3ZWtOrBtCI:XCRALJ48D7tSMB9mHTaoorT
TLSH
T1AE05AE03EA98017DD1A7D7789BA6CD02F7727C8D47B1A9DF0390B9660E71B909E78321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aie_reconfig_overhead_17f0_20.elf

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\ELF\aie_reconfig_overhead_17f0_20.elf
Size 1KB
SHA256 2fb370132beea6cdf1d910f045069775380f1e5232af693fe29494519bb90688
MD5 23fddf82d271caff1bff227cee22fa58
SHA1 7a2362286fc8b6094e853e13b2caad575a4becfd
SHA512 d58eb9da1a24001a4c0864ef9f7cafaecd6c4168438ad82c31f8beb4494c05d37bfdcadff91aa71b400b1114d0d2f6d5b6e561b17bbfe5de2db68772cb83e539
TLSH
T13221A296AA995E77DC2C1338E9CF432033BC998113E3C7036754933A1E173884EB6A56
MD5 SHA1 SHA512 TLSH

Submit Download

df_bw_17f0_20.elf

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\ELF\df_bw_17f0_20.elf
Size 4KB
SHA256 6b5498e9db3cbe31ee2f7cf874c479d484b621ba7dbc3dce56e2bf1b4ca04b92
MD5 44dccf0d441d0e8e2ad0731e7e2c07cb
SHA1 50124982df7b64e30f05039a3d0e9b40f4b7712c
SHA512 8d58526288d077480aeff8c6ff0e1b8856ea0b3e6b9f33339f000ed13af1e85deccdea46aa9788384fb9511fd0f266bed550f4c2ec2408333cee312b8789702b
SSDEEP 48:/KvHhe/w/RlO9azQjXJFbksUXaOWASQi/AVH9KuHc:/K0/wp8p9DNr/AVH9N8
TLSH
T121910B2A965A2EABD80D2335E8DF6B217F798A4917E3C3074664D33A3E273101F62745
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gemm_int8_17f0_20.elf

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\ELF\gemm_int8_17f0_20.elf
Size 2.0MB
SHA256 c63a60e6b868a118df8e789e14727f4252396367fe19fedb9df2c8d835f77af3
MD5 3b18036f9b149472ccbb59f265fe4120
SHA1 1a75999bbe97fb9acd192f8f2d1117dc9846df7e
SHA512 6d3398d0abd99481d74a2aa8b57167027cb2c256fc195378dc3a8bb92a4b3501151e1d2abda4c57e1af2c97be2f0a14a6c1d17430c6c7e3c8ee72f106e8384ea
SSDEEP 49152:ofDTXbvPjv7jfzPnjvTTHbv/Df7Dfjvn:
TLSH
T1F5A50775C601DF4BEC8C87B0CCDF1662BAB106CEA241D151D69DFA3AB7932A4EDE5900
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mobilenet_4col_17f0_20.elf

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\ELF\mobilenet_4col_17f0_20.elf
Size 808KB
SHA256 fa6d78afb9d4ea55f81016efc3b7531e47963ffa2dccc3a383f5194ff74d0a25
MD5 12ad9603217178101a41835bb85797e4
SHA1 6ba85ca3585bd35731726af9c51e7d430947a5ca
SHA512 f7139d067c581a1efd89384ac520fe8132c701f086f2330b25e6f14943752d4b5cbd1f59fc8f7c90db134bf72b6c396cc921c154d74be36c39394f6922bf4ab6
SSDEEP 1536:aKdCHu/6fuyGT3BYA3wl6KpKQ880f880qwhqdhDKhhV3K6I:aKdCHu/6fuSKQ880f880p3
TLSH
T140058741E7161FABC0CDD7B190DFA7227FBA8B0D97925A0B6732D6326F523008F1A645
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nop_17f0_20.elf

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\ELF\nop_17f0_20.elf
Size 400B
SHA256 fae8668d5c979e3aca4c76b3b0370f93a1dc11b77f91f7cc2d8d79598b3f5577
MD5 41b3b249ba363ae92560c06c3facf0e8
SHA1 f78a6d7878fd99f07ae5d12c2b520fb3b68cb447
SHA512 2f1677bf0cb0950c05c546a196bacb3b7dc76ff75a534e87c0e573e596c66d1c6aedd8f30890705233c8ee1d07663c364b97c1f64caa16debb1b890422ec6572
TLSH
T1B6E0222AD790A5E3C018323DF03343207F92E0EA83824B43B200921A0C462404CF3206
MD5 SHA1 SHA512 TLSH

Submit Download

tct_1col_17f0_20.elf

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\ELF\tct_1col_17f0_20.elf
Size 1.1MB
SHA256 e24959ca96039887c761aac68488e29dbd384c6417d18249aaee88f5642517a1
MD5 41b13c28a2e22f6f34348f7d97c45416
SHA1 0fa6181f1c1d32220cfebb970b5cdafebc787ccd
SHA512 0beb27dd0237bc9512187ce4c8ba4f53fef6dbebd2d1edbe7fd52b3199ddb57364d186e910af8de403002eccc13027e2bc580f4b755815c6996f9894c956c686
SSDEEP 96:BwnSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSJ:Bwkc
TLSH
T160350265C95D9E77F81C2B38F8DF4B143B64970913E2834312A5C96A2F173940DB2D57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tct_4col_17f0_20.elf

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\ELF\tct_4col_17f0_20.elf
Size 2.1MB
SHA256 a3e00757b9cd1edb5bab38d26a0f78e3403d468485e551858344568e65319af8
MD5 ad7c6374d6560080148094729823d851
SHA1 45c95671e0bea65b95c93f53269bb6502b0ed382
SHA512 d00aa3d81e7fbdb82c1d12dee3105a91eda10b18d00c309b382df5e1d8ba6d59680a1c8c64cf1c78e9eaa7fe32d176238b5af41bc09c4381ab6d0052795fcfa9
SSDEEP 192:WDwlV0BL8PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPJ:WDwD0
TLSH
T1E3A5A760C19E2E36F01D2739F5DF9D053F359B0917E683160691E26A3F6B7882E72C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gemm_17f0_20.xclbin

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\gemm_17f0_20.xclbin
Size 594KB
SHA256 19732a1ba406cb321521398ea25fc5248dfdeb52e3f7f9fdaf00ff9ccd77e982
MD5 9105952247f4988ae0c21e5e055b138b
SHA1 ecc3c23e0f6d56b307c6a51df30283945f2a774e
SHA512 1ae6981bec7868106493de6557fc6d2af8de5b412cb6046780f46e25c46e5986f1fda664e1c1281086bc52e191f37135d2c8137afe36a3206fd746bae796103f
SSDEEP 12288:THXnRdt9fr7LVhRpZHXnRdt9fr7LVhRpD:l
TLSH
T12AD43AC0FE839F25EC569370907D9E1C72B80B6966C34737F8BCB9E88EA61845E16534
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gemm_elf_17f0_20.xclbin

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\gemm_elf_17f0_20.xclbin
Size 452KB
SHA256 6f1b9594264c69f46ebe8c69b44da239796a90021e106a59bb6c32796f4600fe
MD5 1627a2123a0ce6336c261467b55c8206
SHA1 321cd7e707cfe2e107c6c0a2304370be508d1724
SHA512 950cca9e441425f3b34b5b6cac9cda98f8d714f44acdad68feb77a3b5b9393299e2b769dcae1d06ac0f20d370c7b8593a5007384b5a29fa3e2393b51fd70e886
SSDEEP 6144:mSon0U0ewwwm000+ooozJHXnRdt9fr7LVhRpF/:dHXnRdt9fr7LVhRpd
TLSH
T146A428C0FE935F25ED955370A07E8E2C72744B6966C34733F8ADB9E8CAA61840F16538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mobilenet_elf_17f0_20.xclbin

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\mobilenet_elf_17f0_20.xclbin
Size 3.6MB
SHA256 c86275003f299aeb3a34860c749ceef4be344051272e8f66a16b35b9ddd6d91d
MD5 08407990f7eee3f23c248136ce69aa65
SHA1 c103441cfa7dfa7ba9a83eed1a381bd67576a352
SHA512 ca0051728fd2403c16748f922c7a0669f8e21c6629cca6ceec0b1f4e672f0e19821b98596f13dbc46e60df5b24456c930d551de3bf5a7b3a9e601efecaaf27b8
SSDEEP 49152:pzzzizzzizzzizzG6RRRMRRRMRRRMRRU3:QRRRMRRRMRRRMRRU3
TLSH
T17D0649D4FED25F69EE444332E07E8E2925A15A38B5A25333FDBCBDD8CD82240AD16474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

validate_17f0_11.xclbin

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\validate_17f0_11.xclbin
Size 47KB
SHA256 05e6ac313f5a9764181fee8922f237eb6cc52e2621a78f07e5758e2ac7b6ef3b
MD5 250c46a58bec31facabfede22c8c6f1c
SHA1 07b07e1de17e0b94e30ff8fd36d21028b2b13b65
SHA512 6ed5ce4e35c7d138d00d51b7eba676bfdf512c171ea786028540049f46916a1fd1497c071190dcebebe04e55055059c0110aea9d55d9b6a768871c1429c9554e
SSDEEP 768:1ZfmYhUESaWsz/+fSYhB2Hwe5Ar5c2Hwe5Ar5z2Hwe5Ar58J:ndSUE
TLSH
T16C231044D5035C6EC49BB1B005CA9E872A7DD373C58C2C65BEACED384FF902A726991E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

validate_elf_17f0_20.xclbin

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\AMDNPUMCDM\WT64A\validate_elf_17f0_20.xclbin
Size 173KB
SHA256 6c61ea528602c436d6c3317325c62cd542591f7256024f72f4d22aaf6a28fc58
MD5 7a55e6da8cdc884cba58c4a91e36f35b
SHA1 51984042bebc87c3dbb26bda48be7b0205258345
SHA512 2791f10da8da48ae030f677e26fc44229982f93a85a08cfc2cb890e4101909a5fabbf4d0a6104a50994279574ceed7fd908c42230895450a7e34a4cbd586ee04
SSDEEP 3072:kSonu3lO3lu3lO3Hi3li3Fi3li3rW3t23tW3t23vi3di3di3di34t:kSon0U0ewwwm000+ooox
TLSH
T1F104EAC0D9931F26ED876630645A8F2C36358679A6834B23FCEEF8B8CB984491F5553C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

u0200434.inf

Path C:\Users\Admin\Downloads\whql-amd-software-adrenalin-edition-26.5.1-win11-b\Packages\Drivers\Display\WT6A_INF\u0200434.inf
Size 1.0MB
SHA256 3f65112d95972faa1f79572e121605afed609d40999fc83128336d4e07f25d29
MD5 736fd20f56ea91e38ef431e4ca254050
SHA1 15feb9f0d7a08af4842c84c07e323385e2d8e9b5
SHA512 1bbfdf521b37b3ad5e89d2124c1f3e2217c8e9b5f2d21de055da06208bd354c278258ee38f5ff033dcd796a8c5f0bf783b5c71f978a7a9be228689c25655c92b
SSDEEP 6144:/Vok6t1rbWt1h+GN4AzWRsx+bjwFCvXcNdyzWuDEJRLYWWFn5D2T95e6EHfq0AnM:/Vok6t1rbWt1h+Y/NZU
TLSH
T1F9357480BB627529DD9E0B836CFA73E13E469551B31A889C69F6C1C6D8482FD1F81F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7108_1692608610\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7108_1692608610\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1316-10-0x000000001C090000-0x000000001C098000-memory.dmp

Download

memory/1316-15-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-20-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-19-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-14-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-9-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-8-0x0000000002EB0000-0x0000000002ED2000-memory.dmp

Download

memory/1316-7-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-12-0x000000001F840000-0x000000001F84E000-memory.dmp

Download

memory/1316-18-0x0000000002E10000-0x0000000002E22000-memory.dmp

Download

memory/1316-17-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-16-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-0-0x0000000000400000-0x0000000000418000-memory.dmp

Download

memory/1316-630-0x0000000000E60000-0x0000000000E68000-memory.dmp

Download

memory/1316-11-0x000000001F880000-0x000000001F8B8000-memory.dmp

Download

memory/1316-2182-0x00000000268B0000-0x0000000026ABA000-memory.dmp

Download

memory/1316-13-0x0000000002E70000-0x0000000002E80000-memory.dmp

Download

memory/1316-2131-0x0000000023FA0000-0x0000000024116000-memory.dmp

Download

memory/6300-3150-0x00007FF9DDC30000-0x00007FF9DDC40000-memory.dmp

Download

memory/6300-3149-0x00007FF9DDC30000-0x00007FF9DDC40000-memory.dmp

Download

memory/6300-3154-0x00007FF9DB1F0000-0x00007FF9DB200000-memory.dmp

Download

memory/6300-3155-0x00007FF9DB1F0000-0x00007FF9DB200000-memory.dmp

Download

memory/6300-3153-0x00007FF9DDC30000-0x00007FF9DDC40000-memory.dmp

Download

memory/6300-3151-0x00007FF9DDC30000-0x00007FF9DDC40000-memory.dmp

Download

memory/6300-3152-0x00007FF9DDC30000-0x00007FF9DDC40000-memory.dmp

Download

memory/6360-2538-0x0000026CCB0F0000-0x0000026CCB102000-memory.dmp

Download