e7e751e5e8110f1a9f3c75c8274fc5afbbb5729590f9674624b37eb91da46bff

Resubmissions

27/05/2026, 13:15

260527-qhd67sgt611

27/05/2026, 13:11

260527-qe56hset2j4

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/05/2026, 13:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
costume2.svg
Size 2KB
Sample260527-qe56hset2j
SHA256 e7e751e5e8110f1a9f3c75c8274fc5afbbb5729590f9674624b37eb91da46bff
MD5 809e92f43df2c639fc88e63ea6879ce7
SHA1 737f48b1b170c310bbfbc5fd07635d3ab1a6379e
SHA512 d42d67eaa5448e2ad3c7a88d6778666716ee5b0fed951a5b876f806e9c8733239e503e7196e1087e2d7219bbed9f6ab444c55239a3d4d5089ac34e87510f6507
TLSH
T1F451FF51F3492F3AF0B50664E3EC7A12216C51C78286BD16BA230436945A86F19BB7E8
MD5 SHA1 SHA512 TLSH

Score

4^/10

adware discovery spyware

Malware Config

Signatures

Drops file in Windows directory 13 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1553579708\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1553579708\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1250614276\LICENSE	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1553579708\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1250614276\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1250614276\sets.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1250614276\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_841468554\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_17393763\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_17393763\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_225645177\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_225645177\nav_config.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
684	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 29 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\IECompatVersionLow = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\CVListXMLVersionHigh = "268435456"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPMigrationVer = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\IECompatVersionHigh = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\GPU\SubSysId = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\StaleCompatCache = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\IECompatVersionLow = "395196024"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\VersionManager\FirstCheckForUpdateHighDateTime = "31256042"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\GPU\Revision = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\CVListDomainAttributeSet = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\Main\OperationalData = "13"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\CVListXMLVersionLow = "395196024"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\GPU\SoftwareFallback = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\GPU\VendorId = "5140"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\HomepagesUpgradeVersion = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\Main\OperationalData = "9"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\VersionManager	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\VersionManager\FirstCheckForUpdateLowDateTime = "1972089288"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\Main\OperationalData = "8"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\GPU\DeviceId = "140"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\IECompatVersionHigh = "268435456"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\StaleCompatCache = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1"	iexplore.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134243611311376559"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1636999435-3883760687-346127294-1000\{484EA3C9-E600-4F7F-9483-9C2A9B4AC5F2}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1636999435-3883760687-346127294-1000\{0A6FE55C-3234-4AD9-BB06-770F6650FF55}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
488	msedge.exe
488	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4732 wrote to memory of 4744	4732	iexplore.exe	80
PID 4744 wrote to memory of 3752	4744	msedge.exe	81
PID 4744 wrote to memory of 684	4744	msedge.exe	82
PID 4744 wrote to memory of 3204	4744	msedge.exe	83
PID 4744 wrote to memory of 3204	4744	msedge.exe	83
PID 4744 wrote to memory of 3204	4744	msedge.exe	83
PID 4744 wrote to memory of 3924	4744	msedge.exe	84
PID 4744 wrote to memory of 3924	4744	msedge.exe	84
PID 4744 wrote to memory of 3000	4744	msedge.exe	86
PID 4744 wrote to memory of 4924	4744	msedge.exe	87
PID 4744 wrote to memory of 3000	4744	msedge.exe	86
PID 4744 wrote to memory of 3000	4744	msedge.exe	86
PID 4744 wrote to memory of 4924	4744	msedge.exe	87
PID 4744 wrote to memory of 4924	4744	msedge.exe	87
PID 4744 wrote to memory of 2532	4744	msedge.exe	88
PID 4744 wrote to memory of 2532	4744	msedge.exe	88
PID 4744 wrote to memory of 2532	4744	msedge.exe	88
PID 4744 wrote to memory of 3772	4744	msedge.exe	89
PID 4744 wrote to memory of 1156	4744	msedge.exe	90
PID 4744 wrote to memory of 1664	4744	msedge.exe	91
PID 4744 wrote to memory of 3772	4744	msedge.exe	89
PID 4744 wrote to memory of 3772	4744	msedge.exe	89
PID 4744 wrote to memory of 1156	4744	msedge.exe	90
PID 4744 wrote to memory of 1156	4744	msedge.exe	90
PID 4744 wrote to memory of 1664	4744	msedge.exe	91
PID 4744 wrote to memory of 1664	4744	msedge.exe	91
PID 4744 wrote to memory of 636	4744	msedge.exe	93
PID 4744 wrote to memory of 636	4744	msedge.exe	93
PID 4744 wrote to memory of 3852	4744	msedge.exe	94
PID 4744 wrote to memory of 3852	4744	msedge.exe	94
PID 4744 wrote to memory of 2232	4744	msedge.exe	96
PID 4744 wrote to memory of 1908	4744	msedge.exe	97
PID 4744 wrote to memory of 2232	4744	msedge.exe	96
PID 4744 wrote to memory of 1908	4744	msedge.exe	97
PID 4744 wrote to memory of 4792	4744	msedge.exe	98
PID 4744 wrote to memory of 3352	4744	msedge.exe	100
PID 4792 wrote to memory of 4584	4792	msedge.exe	101
PID 4744 wrote to memory of 2100	4744	msedge.exe	102
PID 4744 wrote to memory of 2100	4744	msedge.exe	102
PID 4744 wrote to memory of 4504	4744	msedge.exe	103
PID 4744 wrote to memory of 4504	4744	msedge.exe	103
PID 4744 wrote to memory of 3388	4744	msedge.exe	104
PID 4744 wrote to memory of 3388	4744	msedge.exe	104
PID 4744 wrote to memory of 4580	4744	msedge.exe	105
PID 4744 wrote to memory of 4580	4744	msedge.exe	105
PID 4744 wrote to memory of 3056	4744	msedge.exe	106
PID 4744 wrote to memory of 3056	4744	msedge.exe	106
PID 4744 wrote to memory of 2516	4744	msedge.exe	107
PID 4744 wrote to memory of 1820	4744	msedge.exe	108
PID 4744 wrote to memory of 4952	4744	msedge.exe	109
PID 4744 wrote to memory of 2492	4744	msedge.exe	110
PID 4744 wrote to memory of 2492	4744	msedge.exe	110
PID 4744 wrote to memory of 1592	4744	msedge.exe	114
PID 4744 wrote to memory of 1592	4744	msedge.exe	114
PID 4744 wrote to memory of 3428	4744	msedge.exe	115
PID 4744 wrote to memory of 3428	4744	msedge.exe	115
PID 4744 wrote to memory of 2344	4744	msedge.exe	116
PID 4744 wrote to memory of 2344	4744	msedge.exe	116
PID 4744 wrote to memory of 4996	4744	msedge.exe	117
PID 4744 wrote to memory of 4996	4744	msedge.exe	117
PID 4744 wrote to memory of 2000	4744	msedge.exe	118
PID 4744 wrote to memory of 2000	4744	msedge.exe	118
PID 4744 wrote to memory of 2000	4744	msedge.exe	118
PID 4744 wrote to memory of 1696	4744	msedge.exe	119

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\costume2.svg
1⤵
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "file:///C:/Users/Admin/AppData/Local/Temp/costume2.svg"
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x2f0,0x7ff9fca6c188,0x7ff9fca6c194,0x7ff9fca6c1a0
    3⤵
    PID:3752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1648,i,1736242390634768823,13403734115163759429,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:11
    3⤵
    - System Time Discovery
    PID:684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,16102646592229062445,14799896451753318019,262144 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:2
    3⤵
    PID:3204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,16389891535123307678,13541362950528512773,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:13
    3⤵
    PID:3924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,10512275704165547797,1667471761843238777,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
    3⤵
    PID:3000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,13259902547334460551,9763193586104627177,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
    3⤵
    PID:4924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,12631786956949798806,15521409202345240185,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=1576 /prefetch:1
    3⤵
    PID:2532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,9968251117007107161,14432723186410804448,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:9
    3⤵
    PID:3772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4244,i,896328636504744146,13216142039555864525,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
    3⤵
    PID:1156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4300,i,15688017736800453629,10053908501970930526,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:9
    3⤵
    PID:1664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,7993123607079864810,10655301358397045489,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
    3⤵
    PID:636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,8097743933621014519,851968974554556024,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
    3⤵
    PID:3852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,3028345123227981921,4982871103467140231,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
    3⤵
    PID:2232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4632,i,4800285030305454390,14332820471227250947,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:14
    3⤵
    PID:1908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,5213844122829441970,303565400759590695,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4792
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1128
      4⤵
      PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,8864202803414160162,5823143779993835874,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:14
    3⤵
    PID:2704
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,8864202803414160162,5823143779993835874,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:14
    3⤵
    PID:3352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,4883440295212463698,3192907707268500800,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
    3⤵
    PID:2100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,9160875109644830030,11988405064427354269,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:14
    3⤵
    PID:4504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,6120485490425145095,4310514502099855616,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
    3⤵
    PID:3388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6724,i,12432922681596195414,17615756361762072704,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:14
    3⤵
    PID:4580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7016,i,8004298837427205964,10687360297962472969,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:14
    3⤵
    PID:3056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,1157489887600245101,6122847136986353299,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:14
    3⤵
    PID:2516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,152155423300121648,8430808602397650577,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:14
    3⤵
    PID:1820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,10473201239987572089,8651331660567956374,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:4952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,13236118796879293270,2032250701611291201,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:14
    3⤵
    PID:2492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,6090197999760539206,451143299776885873,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:14
    3⤵
    PID:1592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,17458128303784159009,3570573906177498604,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
    3⤵
    PID:3428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,11056605323137282043,11483937865407433828,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:14
    3⤵
    PID:2344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,7544129090349169492,6467708448854528643,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
    3⤵
    PID:4996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=4960,i,6786833838971264369,11839547091136445359,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:1
    3⤵
    PID:2000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,3865533886763991208,962633254399277374,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:12
    3⤵
    PID:1696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,1580095636578677020,14305576128625932738,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
    3⤵
    PID:4944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6300,i,3778177632923247929,7410744121043257574,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:1
    3⤵
    PID:3908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5748,i,5944694124943807559,15199535612344796093,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:1
    3⤵
    PID:1364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=6572,i,4199762143380051066,15824523235426203034,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1
    3⤵
    PID:4052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=6524,i,14005248486200502701,3034650426908413139,2097152 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:1
    3⤵
    PID:3896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7416,i,1924050030074901241,1950722175375683131,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=7328 /prefetch:14
    3⤵
    - Modifies registry class
    PID:1572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7912,i,12703547066464183714,5522576182594823906,262144 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7920,i,6297615290079912119,139490099633205916,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:14
    3⤵
    PID:3432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,11121154082331314431,10705542930251185589,524288 --field-trial-handle=2108,i,5894714392827232890,11980926781989561083,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
    3⤵
    PID:4856

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1820

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

610e236e-1490-43ad-9a69-3a49a9a02f01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\610e236e-1490-43ad-9a69-3a49a9a02f01.tmp
Size 19KB
SHA256 799187202bbd34d6b244cbe86454bd089d763cb72e34f3da7a0c10ab29660ff0
MD5 b8ae7b9f28ee3eae04a17c595e7047c2
SHA1 2150610ce13b8ee4610812971308de2d1f40726e
SHA512 fa298a2f8606229eb74bd2080652f97bddcd6ff8bbeffd8684533bfb124919ebb44964036c98a85080dddace3efaa176267da56eb0202741a2eea3b14d1bf9e2
SSDEEP 384:nutNnNnb9a8N9AswSXMJ5OXiZHar/E5s+N+4hVo9dYkPju6:ujZb8/+8Nw/E6iLhsYkPC6
TLSH
T18A927E316938ED6B4EE79745F00777639F7810EB9A842F99D4D85F0E02DB2DC170A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da6c5d254765c139d88192f3f87e3d379a910f8e52b353e7ac5ddf08b3a1c1e1
MD5 92ebaa360a8cb89cce73739366d6c2aa
SHA1 54f15e16201d7ea62a290d02deaa9c8de7711281
SHA512 c367b21abf536f170820cab99bc5dfe90a29c2a9a6843a258c59b6bccc5f76b38b3b445ed981e71abf0ba91dad8e9c9507735c111b9ef5a78c34203ff9c73eb4
TLSH
T174D02B643B0E7041DB01003188118380116C50461073D30370F8004CCC8648053840C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3b442494723fd224268df79958ea0f6d02b8bba5bea3b3ac773cd572188d3a54
MD5 744bc3e383e66c5e221c69d7866979a3
SHA1 a89cee038cab1b053cd20cf1ba1a2467efcfef52
SHA512 62751edb16ad3ba8ef9ff81ec4a923799479a4deb5a75300cbebc6ae373e5658010fe133cf354458f41695b960e04c278e50b65bb42bcb75fd101221aac3c409
TLSH
T1B4D02B643B0E7041D701003188128380116C50461073D20370F8004CDC8544053840C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 57KB
SHA256 2747644ba821da5e2e77993408a94682b8ce42b30660f816e0ff07366c0ff66e
MD5 8395a757edaaa154343b98f88b096256
SHA1 49557acaba0650e0a2b3c32133042129d5a77a50
SHA512 ea9b05e8c9e2de126db5342b024a9b96f0f0716c662aae7f3a1f3cd5957e8cfb0bb7b55737eca982e5bff7cdf0989ca067e20acd42b193a538414e1be67af473
SSDEEP 1536:lrjx4c+45YMN6l3higUAaiBQ277QE+EpNQNUW:lXOjS5gUpg9QE3pi9
TLSH
T14B430277D7E1499E2750E4EF073AD1F9CF859E07A1DA0E2096C98D3238B6937A10069E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 646KB
SHA256 61e762d7dc34235f1068f093f2670e01cdeb87b366328bc643794166fb6d1b5c
MD5 0d2f3a2e617b6e686c5280aa350215d4
SHA1 e260aadef9892bafac39f0dbd26aedd5f6e6cac8
SHA512 af776d3543081f86b182af0d0710fc020f99636fc1db3b2b5a218f2aa8990cf59ad935f246ea0a35af0f3dd5c5591f034d71e052e912f13a53f9162ef2dc5a1a
SSDEEP 12288:+g/RDc3zNUOX1y6xQSMh3yfIfYH0W9ft38x1aie7ScvNLfyHvr88tip:LMNUK18Nyg40Kl8xYie7SK4Hv7ip
TLSH
T18BE42321ABAE95535C151BF23CCC43F172FA45B402A2AD18F948983134ADA69FCF477E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 22KB
SHA256 a714c27683064e544b8223edd10038c798cbdc5a885cb2e29848fb9d63e18c18
MD5 41329f19225f74034a7c037e133dd3e9
SHA1 251b9d30edfb6f90261d24429656bc56f3981c5d
SHA512 5ac871c9a58b21c450e3ae0673059ea216dd4dddddc0e8e9bdebbdd741d19e8b78735511d5e9a924a95f7455d87520c7d9f4cffe63a0cb477adc1bc0eeac0c0b
SSDEEP 384:gLZXQ078BWdnMqnbb4kKdEj0yHy8AHwoWJ4Ca8iLaw+9f9yxdTcnfCuQnB:An8ARMK6dEpEHwoG43bx+9f9yzYfpu
TLSH
T197B2D0410CD6AF4EAF754D60771C38C13A068A1584A89BB78AF1C33D6CA44ED929FEC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 34KB
SHA256 c18b72dbe9b389d04fa1e3c738b15b0438726edfa2d5151e24bf2123d4954d55
MD5 05afa4cceb3612d17f4b25aef39680f9
SHA1 4c77f3bb3b6a35e5af02bc653868ec90039d258d
SHA512 598437d4514e6b1fec42c3603acc3f3300ec03d44c51119fb2eb4c1aa94aee24c826071ba0237fd5a321498634c4951d69ad02c4bc12b04aa81e581d6692c740
SSDEEP 384:4izZMlnpRik1usM3sNzQpwjSPuxNEq/jsvwpz89AI6d5OmY9kK2OS7uIyQNoLJfh:4MRiELI4uUvw982Iu5OmY9F22SoLJf6C
TLSH
T1E4F202205FA0EA31E4F35A0F1DD2C86265CE40ABD76B708BD8177A1FC056504B72B634
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 04150d951a1f93c5e5cdfb237be4e0cabcad33f71ad043a4b649efed571d4c83
MD5 df93326b4098681ddd73a1239d24da9a
SHA1 8e82d0c4550dd73afecff91c98cc288309e18022
SHA512 3c49ade3d438601db5ac76745f93c35de56377501f943b442d32cef38d9069fdd8be811ffd9629e8d023ea0ed067d034b8fb15aa080c577f2c27a2399bf31526
TLSH
T1C871F55130DAA66DFB21223CBCD21A173CBD8C89F9278E1602D476B0F236F6CD214E09
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 a1d5f3a2b0663f1073514567f4dafc5033e3d046953304be9c28d66e842debff
MD5 8a873118e4636462eefe24d3b63d5a2d
SHA1 3c02f0fcf53a8fb48425709a8ad04afbedcfeccd
SHA512 9e71193eace0945b32dfff67c703aaa6dff62770bd04ac77a4ad094e7c9c97d034cc63b70c7afb46fbf93f38a58f9759dcc0688cad4351a54b6b6f82e65a9214
SSDEEP 96:JIWMMym6Gf+Pf1hGgh+YirFXuAtYq59viYRthLIn2TK:2+yCf+Pf1hGg/uky196mhLqj
TLSH
T17AC18071E0C5BA38FB151238B9D64A06383DB874F8178E0603D07DB1A473F989105F5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58898e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58898e.TMP
Size 3KB
SHA256 6e036a6122b997a6a3c32d2e9c642ae658f2e90a2c6104cae2fe9de143e0ccfc
MD5 c34d7b133888132a9c80aa242b671edf
SHA1 00be64d97c80b5117b474325fc814e87450a2517
SHA512 e93872b50ad9a448d84e2d88c484f6c5b71839b7eeb53152d61505f2b39662ee989864a4f134f004608b8b435039f16092493b22a66939364f816509906dd8dc
TLSH
T1EE71F65171CAA66DFB21223CBCD20A173C7C8C99F8278E1641D47AB0F236F6CD204E09
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 163KB
SHA256 8fe7e97f9c9f1f31270ce7edfd4c727768ec87cc75579c0abfbea05ea456d41a
MD5 965a2e457c42fecadafc68fbbd7b0be3
SHA1 830b07c266001dde89615b2967856a705b3ca592
SHA512 1a99b9df38b35593a42764a479b087499f91b6f02ffab400416750c830cb0d19abe64ebec78b1221a68565e31873ffd3805541a115a6acfe059246a8177343e9
SSDEEP 3072:7lb+QCbpREK9CDW+3oFos5Q9L2LWhHzdj3W8ApBvw0NOROfE:wEBdw7E
TLSH
T1E5F32B0E2DE9779BC904817518224F6A67FDED08188C618FF5CABA1CF1F6A542374E1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 17KB
SHA256 add15b6d498331280a0a2d740ea8db8ac56c7db370627a57604f66d817f99f4a
MD5 8be0364c39141aaea5df02db14a0af6e
SHA1 a07d88f5a71120042bfbaa19ed76abdbcbd00da7
SHA512 e82c240247e77a735ad1ddd71589350f12cf4026818d0b8adddc95f2da4813b7bacce1c1c9cc4b975d0a6f06bdc01c0119060a90e517e281dbde61d598c4dadd
SSDEEP 384:l6Ti3ejvwgvIUE/GV6WtE2VnQaYkxuOMxJeOI3CSBVJAD:8T49glVrtPVnIkxBcJe/yiJAD
TLSH
T15C829EB76EE8C0CAC075A27AF0FD034D7E22AD0B3085E0EC1682321C69766F7156DE56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000012.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000012.log
Size 145KB
SHA256 e559ce53752724c7a24c14fc8a9c939e386b860014c64a9a4924e4081cd2583b
MD5 cd02e4937ff6b8a92ec9dea0ea269deb
SHA1 c7d7719bb3741ddcff59fae7953349233532838a
SHA512 619c0ae1aedb2f7b6f65eecdae3d24b49fafc08e36ab24eb03f46eb11a33a9413e07ee728234528289edd969c150ea94539620fe2039a9f5344659794a8a510c
SSDEEP 3072:/Dh0A3A3s/uKqfvumd7YWWwZ11tBP898TVDEwYcg1Q:7W+rG
TLSH
T1D0E37634E066D789F12E87F70F2E5907D236D9C499643096B5A33E0C31BBB442E91B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 12KB
SHA256 74eb7ccf7b6c4d07a32478e023bcfe3c6828b48abd4870f1e0ef78f698776cbd
MD5 be6d952f0d8ef6de296c638509bc491f
SHA1 4b98c4c948464f20dfc47f61f8fc76a8d0d4d82a
SHA512 924ce7f20b2a14e07592d303fc7ac2702defd54b3a080435d1a474396293e671ed42414f850b727e4d951c4fab85c23c1cda688bf767a9995746ffa5e49e8308
SSDEEP 192:bCA2bokeWtlrlSn24kaVC2TsvYvdFXCa68cFNiWyKk9ofE3btJeOSJSLqLG0K7Sc:etE2VnQarxuOMxJeOI3CSLdf2
TLSH
T1EA429E567EE5C49BD4B1F236B4FA23483E22B40A3115D1AD9A83102C5437FEB157DF46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 5KB
SHA256 c480959f0717f1fb7ad2dbb0688e2cfc33d543db3a762cc67ba7972cb13ec8ad
MD5 22eb7b5977e51c0cd81dc5199b900e00
SHA1 afa370e32f0bc9a914ab32da4b41628ef238f3e3
SHA512 f4f8425178c0f7a012e224c9d800ed786b5e41ef571fc69c598846c60f8e9797a7f10939fe6252825da5571c527d738ae210b7e20112dd3b284286c736c4d340
SSDEEP 96:remKfmKC37T2TJ3i1vJEHmRt9K8X6SQlyDfQEau:rBLidQJEHirKdlExP
TLSH
T1B8B16CC70A4A64AA11C2D2A2C7BDF045CDDC6108574CDF1CAD4EF28F27F2917D66A1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 984B
SHA256 ed418ea6e477725cfe2f655e01567104f686003f74a5db722db6e1a15a7e851d
MD5 0f77b7e1499af8e8a47db484f181bda9
SHA1 4d881917b7f17e83bdb3d831dc072935667adffc
SHA512 ab244e6d2257471ec3b6432ba5147b68feadb18cc2cec821ace63bdb847881adcd23f43f109833a5de8599ecc7a2d59ec1d4af743d99645c61462deafdea3bf8
TLSH
T1281123A1EBE84841F9BA0EB5563E344A7B6638CD1C3BED0F5216205F81B3E40CC30A2D
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f9771f755d23e05b60f29a6af54e32dce563ba122e016068207de23f99622ae5
MD5 594824e6e665bdc4f45938e7d12fb9f3
SHA1 183ad8298cae693dd28a0fbd221e2f1c9123740c
SHA512 4755d88e19d590fc56d6a56a7d9e7e02feffc049cb638b5d5ba9c536b1e0261cfa9395c505aee368e4f10165bed5a8a83503438ad39a83cf5b0ac37ecb099462
TLSH
T17B41CFF7C3E8866D890196F4BA147E1FCE2D0914832C3D5AC9E4EF5B93E2471E141A5E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 d83e99f30ba133f4b7bfd1deb7da38fb42bc6ffe344dfba22fc08d1b3058929d
MD5 370d1c0b752211c58fbd278d0dd2aa21
SHA1 68d0aaaad62be4fda4e9f4ac907ddce09dd1be57
SHA512 9f129484c34090604f193179dc51e41f3b1d9c3476bf4253844d2b49cb2ae7883630becbc7f47405b9b64bd8ab2984149db6928d70615f52377b6c05c85f2766
TLSH
T1E5D023532B1031F5557C5D915159EC4FC33700241543D9D511F06C5E053156D4D07144
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5a0948.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a0948.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 10dbe8e70c288914f033804f77793d0753f2db96069ae026bd711c7c110e9084
MD5 c3788801f9cc53b07f0a6a0860d64435
SHA1 fefaeccf925851474bfff71ccf39a370110b7d00
SHA512 0052a28b004058da2c658525f6b86b9e7321d426b0166503b8515b815bf3ed2b02f60b36d5558fffe7e348802471d2fa21a51e883c3a00b0300059fd68fdf409
SSDEEP 192:sxZFRByM/jK1Ml8Mci/fNsd2Oi0ZtIdpy2/W6+WNGY0sidrIg4J:sxZFt0i/fNsAOY5/bG5dc
TLSH
T13D52D706AA346977CCCBD209FA55BB53D6F8156292940D44AEFCCA0C05E6AED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 8f1372534f832a6cc2b29ef6e975d8ced4faec07c0de530b27c14fa268022e2b
MD5 d8602f2748f94905cc605545c72d02a2
SHA1 e4daabcff117472417eb2a1f7b98522bc6df71b5
SHA512 92cf35047ba9afc1a706b4746b0e62982280e9e59cef28fc4768f62611f670ce2a63ee83834b3235dac1c85b032a2cc0854719200ccff1a569f68f0ed9a20592
SSDEEP 192:sxZXRByM/jK1Ml8M8cB4i/fNsx2Ji0ZhRdpRBoSNWMs/W6+WNipm/Bg0sPdrIg5p:sxZXPEm4i/fNsUJrls1/bx/7enQM
TLSH
T11882D852A62489778DCBD218F931BF53D7F904639A550D58AEFCCA0C05EA6FD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 4e81a25e8087ae26f7a02f2da3b72061b7e71404a45483ba95ab7436846f1223
MD5 778f4bbe5a500367b337360955d0925e
SHA1 4104b6337950e07e137b0442f7275acc040fa5c6
SHA512 ee8901139a2ea4582ba3ecd056ef7fcea75707cf98c9f28a1e6f14e88196d7b2b6f4060421672994f676960f49f19020ef98021fee4ef0da0a84a6be0ccd36e6
SSDEEP 192:sxZXRByM/jK1Ml8UQU8cB4i/fNsx2Ji0ZhRdpRBoSNWMs/W6+WNipmUdz/BLlh94:sxZXPqvm4i/fNsUJrls1/bxC/PunQM
TLSH
T1E682C953A5248A778DCBD618F931BF56D7F9046399940D48AEFCCA0C04EA6FD2612C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 9ad08f29e6061ad6dc42928445a291042e702be6b11d2d3d504fab230c03691c
MD5 ff0a229c14d56ef97d6c7cbd3faa1a93
SHA1 14aba07983618bf98f48d5f86b602aedbf15509c
SHA512 e3b549e70dbf6103ff7b90dad99b31c32b72f728e4e4498bd8ae1013ad23c9dfb0ffaefa681190483813585512cab859b40cb95b6594ba11eb4bd850174b6880
SSDEEP 768:o3/Xh8dF2q+7pLuLXwkWRmwcQDw8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3wG3gjLt:o3/Xh8dF2q+EXwkWRmwcQDwu1jaKwG3+
TLSH
T17F032B7B2C0CCB7F4F844E9CEC26BE9A6DE802CB9698895047FA450C03C67EB55160DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\74d33a11-f757-4f01-89a6-251feec5c93d\index-dir\the-real-index
Size 2KB
SHA256 d4260b9314df562546741ae56b70f25acb0ddc49b662144f32e6f52b0daeca42
MD5 10c45fb3d5068069541b84c85ca732de
SHA1 88a916c40112bde3fb4ef1b4a1867684b06a83dc
SHA512 e5d467ae660d0d1b56ed5b599de14a101a2d11881d8226b7260225a4f7ed6d32b8f444fcc5c284a17d2b8a41f7eaad6c3f102792551185ecd56f25e233978568
TLSH
T15541634DC890A7ADEC7451FE2EA415F293752D28FC68C35281A4F6B23403AA817879FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e092.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\74d33a11-f757-4f01-89a6-251feec5c93d\index-dir\the-real-index~RFe59e092.TMP
Size 48B
SHA256 59b75c23f043be2d0e8e51a7892027e8f67167a806657056c9d33c21051057a8
MD5 338e1f8d62e80b93d98430bb8ee0a50e
SHA1 a466f8140ea046191292028b1d70e04c0406db37
SHA512 2faeaec29e8e5af12678fc5fe4c49548e2a06a8f903ee7370c03a498da565fe382a148426bdc833fcaf8add2e5bc32189e936dc03b4c28a7676188850a74037e
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ab46b0a0-9fc1-4e72-b7ca-80a9df6ac748\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ab46b0a0-9fc1-4e72-b7ca-80a9df6ac748\index-dir\the-real-index
Size 576B
SHA256 0fb6fe9e3c84faa6a3404fbccef9116abd9a6d33613b8b1068842f4d88eafc4a
MD5 9f55a75d566ab30c08890f23ec7e1b5b
SHA1 c8aec4f1dc1ecd6ba9a7f24033b429e823b07a4d
SHA512 b018d16b348b8715d610456c97092f94c65dd3a5b837e5a961128fcffc1cc80395734990270d2c0e05289dc303594b47d13a8b4e7f3c3af1266fe4acc08c09a9
TLSH
T1CDF0AB1A75408649EF347AF003335000563CD8465B5B6B8320E9B226AA9FB41CCD6214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3b45.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ab46b0a0-9fc1-4e72-b7ca-80a9df6ac748\index-dir\the-real-index~RFe5a3b45.TMP
Size 48B
SHA256 3b1c548cf6c70c869d5eeab259ddf37b429fb80aa3fdb580b4a78ef5a6507af0
MD5 753dea1e714b157673688609c52034cf
SHA1 44684e250af385a026430d759c7ba1e12379b8a1
SHA512 e1c74ebf160ab2b9f39fcc202ad4928e53f80661470bbcd897c3dd3556fcdc6e713b8ea5af8320dba8af55e35be6e6a9f9d8f3f507f369de902fbe3b17889ec5
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 98b3f2d1d403ce19fdb2ceeff72c0bea78452276204f3a938b020c7c02221bab
MD5 2dd467b863f2561a1db76a871a2b4ff4
SHA1 ed75e84a5f38c5d3856cf39523b65eafc37d7122
SHA512 cf5bfd840aff60b7518483cd5428fe573d0b9b2b7212d0b8f6a278960ecc2832059425826cb94c487aff4e9dba9b94d002d8b2cbe6585e467be1e225206a5874
TLSH
T1BFD0A9A2F633E44A1A35AB84203C169E803BAD48D880C8E8A848B09238F8603C403A35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 50f5bf2f0fc11594f29a65d7f024aa305c7d9bc3da75ae421d6bd0af341e00dd
MD5 be518b5da1e3aed682157bbf6ee6000b
SHA1 0e4958a44b02dfb10ad736291569c8db0a303a85
SHA512 774c76c01c1c3e9baa6af6804ed156e344ff34c14a29ca3cc511c40d0be97c464dd33024eb1f7a03f03171aa57b24001d62e2d8c43a54a8d012450354f1d3e3d
TLSH
T109D023E1C83174461AB47B85203C424D913DBD44CCC0DCEC9C08705236FC223D402E7A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 e7ad959ff5b4ee1816b38e6dc97c217dff481f4c158b302360c04e23840e0a05
MD5 8d360f39eb62c139d48168eaf9e5cbf8
SHA1 66585375c0788a3d47712207665e2e1c7b5ba5ca
SHA512 f0a0b3729c35314f352e0e2290c187478c3c6a78a4836e2d424769784da0f9a36f7b108bd7816bd99088e5a2235f3bc80890eb555ce535fd19771885c8932877
TLSH
T11AC09BF39C3195DB0DB59BC8303C575DD51F9588C8D4DCF8A54C600237A85179403626
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 bb7a94c0cf523cda98c8e2872fbdd35ef6a6e1a2358f372d0345984d14844fc8
MD5 37c0d0db3b008fbaae79b739ef360dc4
SHA1 8fc6fd555251b8253ecb86e3c609655155a19af1
SHA512 0d3bdfadf7c71025ef374d85dad332ae1d5f7e68a80effae603e5d29d18fbf923a2be943a1cbceaedabc8d714a26d9a84eecb4cff4f986559ed5755112e69154
TLSH
T11AD0A7A26DB1568605759FC9313CA59D925F9D88CC81CCB89A68701633B8917C512A35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 433cb8405f3edf3a72cf2f1f39f12b4e83b37373cce0103fdebb1dec7a3cec0c
MD5 215b7488b4ef8c8510e5c65d604e7a36
SHA1 bb62d7262d91f2da9f58a5bb7bf7dea49d7e2a94
SHA512 aed1b1f47fba6e26417b1fda42d1d864b4d06849ab078acb715289e81b8e8aed20f9459a7be344a859690b70c9f9bc6e654975b94d76016b52ca855bb1cc2bd6
TLSH
T13DE0F191E5B1885888378FC93531B1C5862E29484C40CC58854C300521B8A0AC111926
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 9a94dc904a4340456e0e8711f4ec59d9cb41af321309bcd06190668d273d5e78
MD5 8a10788a628da19ee539f19ef30c7690
SHA1 5f3e4fc1d809b0eae8b6e2b0a268085a30054a95
SHA512 3a35d06e846d011241b1621de0098029f0b1505365c97acbc95071287ddf3d2e97a56684b2c6e71463a89bf4289d4b2cdb36a13590c717901ad8cb6af40ebf53
TLSH
T199C09BF39431D55F0D75AFC8203C575DD55F5648C8C4CCF4B14C600135785179403625
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59d43e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe59d43e.TMP
Size 137B
SHA256 4e96d3b14c4585d949af51ca371ddb19360de099631f849ed9f3cc180e4efee4
MD5 f6cff08798628469baefc8e763d1b6a0
SHA1 9924be71aa15befd40c44f3747ef9da0e46891e6
SHA512 92ad0b006701cc0f0bf35dccdab4abc4685d3c48ecbad4e95c9989ebbec1b3872096085894594487384d172cee35f322a02ab66a02cf43a559600a1bf4e17008
TLSH
T1E3C04CA29432855A0B755BC42038564D952E5D58C8C4CCA4A149700235785179502625
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 71fb438fd3bfd64be65094c7251a1236d127c89563a15b1fcd4f2d786859131f
MD5 ae28ac6338a67fa0899888dbd466e63f
SHA1 bbaba3b7c1b7f24b49d977e50573d2371850950b
SHA512 cdf00af509267bd2d87c19b99cd6900e53d68fd7c0e6e2cbc595ae4c8a034692c1b88dd22b315cbcc60fef468a40ba725d4254f87932e905db0e602bbc643783
TLSH
T1C9B022EA0C28A083CC3C033C2080C2A0B03CCC20A33302C200F000F2E83BA80E0003C2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a34dc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a34dc.TMP
Size 48B
SHA256 64937bd91b6356c3adbce9287a7f88db2b69cf14632f4d4236f087936dd50d30
MD5 a630fd65d4df63068269f85befd23401
SHA1 556d480c8267c7a67bf3b2a06ad3a331715b6d6f
SHA512 e78dc285a38ead1a128554bdff38156f2ca735d383fcafb278de8216e547b46ca805a0e0e28110e01cca40abf2277600390ff323d752505ee558abaedb8011c2
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7dc862b2943433b9a671db82eecfb0e8099286bbfbd58a849e4a5a28b4cd0752
MD5 84c7478cf84e5905241084d985c81e9a
SHA1 a32d0e98b782c05ce89a6bfbb121e9a3330c276c
SHA512 dc5db18b7fe4a94114d07fe8535d044f6329774c0fec65ddbc010b28cdc724ef252d740cefb21839df9e884f3f5e7364f3304f3556a08dbfc06bac7f6a0ee8bf
SSDEEP 48:KMqIfKjqQXykaIfK7qknHIL3JFxkBFqPIq/kKjBrRkvX0YKJX5yC:KMqsKjqSXaQK7qoIgKdySR
TLSH
T12B91464571BA02033D7D790883518A2A4A5675A375B9F43B3BA948F92E27E210FFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c19c6c4f-bb52-4e02-942c-7687f4656cc2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c19c6c4f-bb52-4e02-942c-7687f4656cc2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
Size 3KB
SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
MD5 94406cdd51b55c0f006cfea05745effb
SHA1 a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9
SHA512 d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3
TLSH
T1F681BE27C5B58E2796F060119750E654F53D43AFA600C6AFB5FC825C2F373ECE88A4A8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 665231e35871796f21946eedb1d430d2710b72afe7283040c4d35dc1fb8e23a0
MD5 49580b8ef4029b36651de72187713d89
SHA1 0d373846d8be163bf9da7f567f029a86da68f576
SHA512 08f5d98daa66a5186c9324200d492efcd826fa0f44d802dc15dd097238547a3994b5655c43559fcefe6e324fe8f54c2a177b68a629a6d63aff3894b83e0b905a
SSDEEP 384:n3iFKtNnNnb9t8NE8TUNTUlIlVswSXMJ5OXi4AEb2lxfpz/E5s+N+AhVo9dYkPjP:yFKjZbbPwgp+86bUz/E6ivhsYkPC6
TLSH
T15BD2C4F198D78A3BD9AE4783A33E7E529ABCC09775885984F7C41E0CCD861BFC206815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e8893d90f189318c6be5b67283eafad4581d0056ed5c4307ad7bbd4d635a74a0
MD5 f01fd997c723e923bfcd78b61a5e130d
SHA1 c52595b8fb51e7638a8e6ce7572ebfcce065e671
SHA512 a4fe5618ca97739b25e2d10c49128a39ea5b19b037b8873ebe0562e7bb48b953d1399f8e9cb521bef9c294aced5afff5e05f5722a45b65bc4e034ac4629f49f1
SSDEEP 192:1GNe6t6H3BQmiUyCHBH72Qq/rUH5mJ+N+D9MKvU6:1GNe6MXf9R2Qq/E5s+N5wU6
TLSH
T15502E8347868ACBB8DA36F45B44777239F94216FABD55F88D9E81B1C01DB68C1306833
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7a537c85cf0b32fbd3d2aa7bd03f6d7b47ce2a3cd689b75fe24d2fde3033a053
MD5 43b0fd5d22401f86d39e8dc782f742cf
SHA1 fa82beb075f881a547f95bfcc4f40af23be9542c
SHA512 6de9e841c700d07693b64dde80c42565f3ba7971669815e5dc584c9547128f32a8f9fc69309449e5ea3f450b40c955beaf9428713a4d7e42cca6ed07c74e642b
SSDEEP 192:1GN46t6H3NQmiUyM072Gq/rUH5mJ+N+gi/9nc/8fU6:1GN46MXLG2Gq/E5s+N+hhU6
TLSH
T198121B30B868EC6B4D97A640F44777639F5420BBDE859F59E5E80B1C05DB68C2B0B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a7bce87e95380021f3f17362a509294c8f15a7f832946b7ce5bb9616daf49504
MD5 31c42d1c2f038baafa933095e5c285ea
SHA1 c4b3373b34da1d2c08ad0bc9d1463c4bc1a73dca
SHA512 70a587719027686a457a42f3e6f686c9dee597931f3a157447a0832e647f6a6c8eb0ec57c3e430bbcf7c464f2340d6f428ce4c3c1d3ca8642e3a4f21f8f0bf19
SSDEEP 384:nGtNnNnb9a8N9VswSXMJ5OXiZHar/E5s+N+4hVo9dYkPju6:GjZb8S+8Nw/E6iLhsYkPC6
TLSH
T1A7928E316938ED674EE79741F0077763AF7810EB9A841F99D5D85F0E02DB38C270A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f917024ec0bad181a6f77265b6899fcc79201c609ab5887fcd77f3f2b49882a2
MD5 bd4ca51cd86c9e4f68d0db34fefae5b9
SHA1 355717d74a7279e1f5e63a9c42f3cc781e21d108
SHA512 fd6d2d7a3379e2ad87cf6f841322d3d017636e287164c3a00fc08907d7f46f06fa8f02be1c22775c472a32a0dd6ba62447098903f676ddca0195744362bfc02d
SSDEEP 384:n8tNnNnb9a8N9cswSXMJ5OXiZHar/E5s+N+4hVo9dYkPju6:8jZb8/+8Nw/E6iLhsYkPC6
TLSH
T107927E316938ED674EE79741F00777639F7810EB9A841F99D4D85F0E02DB39C170A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 6dabe18b5e78a8b81e3830057898e72b34bbb185ba3a18ffacfc2a31a1a2af2e
MD5 9cde47ecb29bb381894d6865a0559d09
SHA1 2cf93be34040bc65ca027cffcd83c3bde349489e
SHA512 fa56b2cdb8afc460ff94f8187e3676f96d72f01f043de09016688ba8f5b21b19e140d6ee88b30bfaae12250dda906b5044496e8e026ced51ab18b029202f51da
SSDEEP 384:n3iFBtNnNnb9t8NH8TUNTUlIlVswSXMJ5OXiZMalDfpz/E5s+N+fhVo9dYkPju6:yFBjZbbuwgp+82sz/E6i2hsYkPC6
TLSH
T198D2B4F198D78A3BD9AE4783A33E7E529ABCC19775885984F7C41E0CCD861BFC206815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 14e463d63d406e3e05f4389916714fc4504202477a88f486b95c82ae18af2d9c
MD5 fcd9d8900dbe87596e34c64ad6f57309
SHA1 8692443b8ffb78b03337b8b609db3005db29f964
SHA512 444daad13ea2316c90f83115db7ca054c7b58fb5e47dfd9dbd9edc2f8398d50e2f2f12debcfe19c247b31d39fe4ee46900d9988aa96b27e1f85d6339258e90b2
TLSH
T105E00219D34142FEC07C43790457553455E1401001F642040901015034537506F30FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 10572feeda56f6a80bf6fbc2a067a870f9ada68d45ba17fbae3bc1ae79f32ec8
MD5 d2b72193ab657704f5da6bb8b3527c2b
SHA1 7e681e7ac9495bb820911e5a1815a78adb169cab
SHA512 182530d02269eef9063639c3ae508b035b3a1d90a239c50e9264f571f1e1f793d20cba42b523d9f372cba900af6ddfe4f7a6b55d4cd6450983411f0873308dd0
TLSH
T1C1E0022AD34142FEC07C437904575F345DE2502001F642040F2101583C737507F30FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a2462.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a2462.TMP
Size 392B
SHA256 96d95a5f7798f51d3237197ae9f8982a013edd3021535f113a783c123c7eff07
MD5 aabb9ed667409872fec083c83f54393f
SHA1 315a4353f1217bbb12ab5f1c7bac1077a5b0c128
SHA512 86431f7c3748c21e17a17ad0eca31185dbb8d667186e2cc1dd5f2f9e16856d384f91721d40a618d60dfd44bce578bbfe8a387190c3e4255ab4f98b1adc025f8c
TLSH
T1F6E0041CD140435FC03443350457553057F04000017743040501015034537507F10750
MD5 SHA1 SHA512 TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
MD5 bf165c172af1f75083dd4c7e8915ad0e
SHA1 2eb27e18672fd0a1816ab00d00078a570eb62711
SHA512 a58ad7ee2e18750242b9c5d53224218bef54ecd50e067170da12510559c455979fb0523044d4c23d5d5a523562165e471f95d939376df623bfdea9228ca25256
TLSH
T181F09ED29D7E36C0D6E50F6ED44B64FC40D89506F05CB579484CEAD8913950B254287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

14b072eb-5edb-435d-b819-08a1770023c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\14b072eb-5edb-435d-b819-08a1770023c2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

c2a7fc18-0dda-4fe5-855a-12a2191e4174.tmp

Path C:\Users\Admin\AppData\Local\Temp\c2a7fc18-0dda-4fe5-855a-12a2191e4174.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

e54f8537-3dc3-48c4-963d-4d3c8d11b1af.tmp

Path C:\Users\Admin\AppData\Local\Temp\e54f8537-3dc3-48c4-963d-4d3c8d11b1af.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

271f9a31-3953-4e77-af02-e84583c2aa85.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4744_1726725739\271f9a31-3953-4e77-af02-e84583c2aa85.tmp
Size 147KB
SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
MD5 a9f7675ff091bb15c88909424bab4a39
SHA1 90f753d8d7e4397de0f49631fcd9222a7f59148c
SHA512 ff1f89fb04ae9c9a4c6cf6b1475f5a77f1c4f90829acda95cb39889b6b15c3b4f0b3b822a668f8ec8520b002cc90dd397cc26d314ac8fd5f3e2c9826bd458df5
SSDEEP 3072:Ph3iICVe1DvTtr/3tOpPu8LdKBTJyU4AshzWnD7UVDvuZE4tkGL:PgTVWvTZPghwln0AD7UV8Eeky
TLSH
T12BE3E01D29E2846EC82B24F4BA4A718FC71ECF07910BE40F25D984A55C7474E17E2EED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4744_925097940\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1250614276\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_1553579708\manifest.json
Size 160B
SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
MD5 a24a1941bbb8d90784f5ef76712002f5
SHA1 5c2b6323c7ed8913b5d0d65a4d21062c96df24eb
SHA512 fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2
TLSH
T133C04C23ED18BABA12F587D40971DB43F7F0031B34E169463B39948C5F761B8925175A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_17393763\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_225645177\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4744_841468554\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download