e076cb785fca37c963354e50649ef3c01cf28908def7da44e8a6bdb14abd7d6e

Analysis

user interaction
yes
max time kernel
899s
max time network
865s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 13:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
main.py
Size 25KB
Sample260627-p9a37aay91
SHA256 e076cb785fca37c963354e50649ef3c01cf28908def7da44e8a6bdb14abd7d6e
MD5 c946714964199c335cfdbbce4577be6d
SHA1 81592a7a737fe223504788137ada8303e7cf763e
SHA512 5b281caf4d69f29f23b7e45a5fab1679b51098cd81e97a8afaf7b62f31880d8db2188079012281b67c5793de1a93aa6ec888501a084d2f2b711b7e2760ccff55
SSDEEP 768:fbIlkcLVCd4RL7+Htk+IjHYrrVhJhRjtmr2fOlMfnhes:zIlkcLVCd4RL7+HEORBuMfgs
TLSH
T118C294129CD62C3253438864EDA2D8567334789B068D20B1BAAC55FC1F0CB6EB5F79DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3484	msedge.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1986191977\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1348746205\domain_actions.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_2052636724\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_217655710\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_522959636\arbitration_metadata.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1367686814\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_363996110\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1651073541\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Sigma\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1373935067\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1329842398\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1986191977\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_404179501\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_2052636724\extraction.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_729331084\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Analytics	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1395550519\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_404179501\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1651073541\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1651073541\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\TransparentAdvertisers	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_2052636724\automation.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_2052636724\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_376716874\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_729331084\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1367686814\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1348746205\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_217655710\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1598863665\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1986191977\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_217655710\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_415385153\kp_pinslist.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1329842398\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_729331084\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Sigma\Content	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Sigma\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Other	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_415385153\ct_config.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Entities	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_376716874\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_2052636724\classification.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_217655710\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Sigma\Cryptomining	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_729331084\safety_tips.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\CompatExceptions	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Sigma\Entities	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_376716874\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_376716874\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_363996110\crl-set	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Sigma\Fingerprinting	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Sigma\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_415385153\crs.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1651073541\v1FieldTypes.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Sigma\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_1373935067\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_415385153\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5848	msedge.exe
5900	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270389427772128"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{F24258E6-3D25-4085-BF04-0B6C5E1E3E7C}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-537605601-1362463912-856654178-1000\{1371EA7D-3F61-470F-8A78-D26EDC52B493}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-537605601-1362463912-856654178-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
5572	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3484	msedge.exe
3484	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2380	msedge.exe
2380	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4200	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4200 wrote to memory of 5572	4200	OpenWith.exe	91
PID 2380 wrote to memory of 4480	2380	msedge.exe	93
PID 2380 wrote to memory of 5900	2380	msedge.exe	94
PID 2380 wrote to memory of 2460	2380	msedge.exe	95
PID 2380 wrote to memory of 2460	2380	msedge.exe	95
PID 2380 wrote to memory of 2460	2380	msedge.exe	95
PID 2380 wrote to memory of 3312	2380	msedge.exe	96
PID 2380 wrote to memory of 3312	2380	msedge.exe	96
PID 2380 wrote to memory of 6104	2380	msedge.exe	98
PID 2380 wrote to memory of 1224	2380	msedge.exe	99
PID 2380 wrote to memory of 6104	2380	msedge.exe	98
PID 2380 wrote to memory of 6104	2380	msedge.exe	98
PID 2380 wrote to memory of 1224	2380	msedge.exe	99
PID 2380 wrote to memory of 1224	2380	msedge.exe	99
PID 2380 wrote to memory of 2800	2380	msedge.exe	100
PID 2380 wrote to memory of 2800	2380	msedge.exe	100
PID 2380 wrote to memory of 2800	2380	msedge.exe	100
PID 2380 wrote to memory of 3492	2380	msedge.exe	101
PID 2380 wrote to memory of 3492	2380	msedge.exe	101
PID 2380 wrote to memory of 3492	2380	msedge.exe	101
PID 2380 wrote to memory of 2724	2380	msedge.exe	102
PID 2380 wrote to memory of 2724	2380	msedge.exe	102
PID 2380 wrote to memory of 2724	2380	msedge.exe	102
PID 2380 wrote to memory of 2780	2380	msedge.exe	104
PID 2380 wrote to memory of 2780	2380	msedge.exe	104
PID 2380 wrote to memory of 5404	2380	msedge.exe	105
PID 2380 wrote to memory of 2812	2380	msedge.exe	106
PID 2380 wrote to memory of 5404	2380	msedge.exe	105
PID 2380 wrote to memory of 2812	2380	msedge.exe	106
PID 2380 wrote to memory of 3164	2380	msedge.exe	108
PID 2380 wrote to memory of 432	2380	msedge.exe	109
PID 2380 wrote to memory of 432	2380	msedge.exe	109
PID 2380 wrote to memory of 5156	2380	msedge.exe	112
PID 2380 wrote to memory of 5156	2380	msedge.exe	112
PID 2380 wrote to memory of 2320	2380	msedge.exe	114
PID 2380 wrote to memory of 4228	2380	msedge.exe	115
PID 2380 wrote to memory of 1956	2380	msedge.exe	116
PID 2380 wrote to memory of 3484	2380	msedge.exe	117
PID 3484 wrote to memory of 5696	3484	msedge.exe	118
PID 3484 wrote to memory of 1872	3484	msedge.exe	119
PID 3484 wrote to memory of 5848	3484	msedge.exe	120
PID 3484 wrote to memory of 1872	3484	msedge.exe	119
PID 3484 wrote to memory of 1872	3484	msedge.exe	119
PID 3484 wrote to memory of 1972	3484	msedge.exe	121
PID 3484 wrote to memory of 1972	3484	msedge.exe	121
PID 3484 wrote to memory of 3052	3484	msedge.exe	124
PID 3484 wrote to memory of 5412	3484	msedge.exe	125
PID 3484 wrote to memory of 2544	3484	msedge.exe	126
PID 3484 wrote to memory of 948	3484	msedge.exe	127
PID 3484 wrote to memory of 2732	3484	msedge.exe	130
PID 3484 wrote to memory of 2732	3484	msedge.exe	130
PID 3484 wrote to memory of 6080	3484	msedge.exe	131
PID 3484 wrote to memory of 6080	3484	msedge.exe	131
PID 3484 wrote to memory of 5900	3484	msedge.exe	132
PID 3484 wrote to memory of 5900	3484	msedge.exe	132
PID 3484 wrote to memory of 5012	3484	msedge.exe	133
PID 3484 wrote to memory of 5512	3484	msedge.exe	134
PID 3484 wrote to memory of 5512	3484	msedge.exe	134
PID 3484 wrote to memory of 5052	3484	msedge.exe	135
PID 3484 wrote to memory of 5052	3484	msedge.exe	135
PID 3484 wrote to memory of 2516	3484	msedge.exe	136
PID 3484 wrote to memory of 2516	3484	msedge.exe	136
PID 3484 wrote to memory of 3948	3484	msedge.exe	137
PID 3484 wrote to memory of 2488	3484	msedge.exe	138

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\main.py
1⤵
- Modifies registry class
PID:5140

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4200
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\main.py
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:5572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\BlockUnpublish.mhtml
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ffbc9dac188,0x7ffbc9dac194,0x7ffbc9dac1a0
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,13597418329384365913,6940187825742694844,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1964,i,16607579725675299210,10659201204237571281,262144 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:2
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,9162408103438428417,1102590997487650493,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:13
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,14446646594399818088,14121840697094579965,2097152 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3004,i,825880770488076430,13920400089406798855,2097152 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,14516446855220580483,3338239434278304019,2097152 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,295258565407077570,10051305939768292270,2097152 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:9
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5128,i,291505598000994107,9824610056426100804,2097152 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,14451168690884101859,7741217440792141123,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3856,i,2176602734723059077,5970055323272480697,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,1881606740631841782,12316425761300830060,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:14
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,1202478030897332938,10591463448178118422,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,1202478030897332938,10591463448178118422,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,4808152821248233770,1609642164749711138,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:14
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,2505292047742093062,12345558612305370215,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,14098776712873947578,15440195972856030940,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=1292 /prefetch:14
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,13952028019802061847,17484706362048129124,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,8496929050698683721,16688856231206800597,524288 --field-trial-handle=2592,i,9102008767879477476,591804302586479065,262144 --variations-seed-version --mojo-platform-channel-handle=6972 /prefetch:14
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:3484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffbc9dac188,0x7ffbc9dac194,0x7ffbc9dac1a0
    3⤵
    PID:5696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,10422007284303938181,7499784865041271639,262144 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:2
    3⤵
    PID:1872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,1328844068724882444,17014238471710909140,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,10680980055665482395,17249424782359022017,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:13
    3⤵
    PID:1972
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,15603615801263655544,11201224989486144314,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:14
    3⤵
    PID:6008
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,15603615801263655544,11201224989486144314,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:14
    3⤵
    PID:3052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4800,i,1183655686538604819,5674323148577074760,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:14
    3⤵
    PID:5412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,13945183871332616841,12887798285192656402,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
    3⤵
    PID:2544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,2311608144860499909,12292732955531551292,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
    3⤵
    PID:948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,6615752737225395025,14485181890818407781,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:14
    3⤵
    PID:2732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,17921849367390699316,14991476843855818907,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
    3⤵
    PID:6080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,16445207743766957379,5259904892792090242,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=624 /prefetch:14
    3⤵
    PID:5900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4868,i,15577176956333649996,14579423784358800974,262144 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=624 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,18189556769699641574,2030360407928795351,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:14
    3⤵
    PID:5512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3208,i,12731405288805245286,3494100840543151906,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:14
    3⤵
    PID:5052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3440,i,13526703865295497227,16279888155214437056,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=3848 /prefetch:14
    3⤵
    PID:2516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,9671957993745307164,1905860755728222489,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
    3⤵
    PID:3948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3224,i,13312192834004436483,15105892985796945040,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
    3⤵
    PID:2488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,7963836182349959145,12203220782614715251,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
    3⤵
    PID:5276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,9903680212497841875,3738456653242461422,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:14
    3⤵
    PID:2788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3900,i,18243872138832124701,5467817533072281371,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
    3⤵
    PID:620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,4340733427845307173,10103630716020546447,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
    3⤵
    PID:2856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,3122000590060725573,5511393754032835674,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:14
    3⤵
    PID:1148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4584,i,17513129046468874326,14775437911046154393,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
    3⤵
    PID:5460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,15004502274743284057,12700553718961974442,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=3276 /prefetch:14
    3⤵
    PID:4648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3228,i,5508097316259457493,7041312986892297820,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
    3⤵
    PID:1356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,9456598295995994546,12437703732835575236,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:14
    3⤵
    PID:4080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,8737299967662629113,1725706513173976537,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=3972 /prefetch:14
    3⤵
    PID:1052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,15565182090030751460,17085852746576659567,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
    3⤵
    PID:3916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4584,i,36654232966993597,3293002769172541938,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:14
    3⤵
    PID:3812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4108,i,13900879744537591928,16440071331184452773,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:14
    3⤵
    PID:5876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4108,i,16181853598813110337,8372536902758407626,524288 --field-trial-handle=2104,i,16189649775005281635,8978315983699304826,262144 --variations-seed-version --mojo-platform-channel-handle=3972 /prefetch:14
    3⤵
    PID:3592

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4836

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1432

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3644

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff19e848916f9346514f95113e3d80cd569935b36d785719b19d90f9f740fbd6
MD5 5ab41182d14eb22e7143c63d2e18b77b
SHA1 ca8c747e1a5e38b0f0a08b492fcea6d3a75865c2
SHA512 bbecb67f89826ee2bd219f14bbc8ca87fb260f8a22bd2d52b6ccdb72d47a4b58eeb897a42a6e591bd4e75fe870419162172353d5d3ec7f1fb0fbc7b5dc6adcf1
TLSH
T1AED080757B467B11D58F0472D424E271A737455135D296057170C10E55602D1FFCA0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5f46172781024fe58b7a7d87a406b81679d17de445e9e90110d33f5747ecc226
MD5 08a5ef0e8eb4590a7f0e6f821698071e
SHA1 1b756aceae48cf2649d310d7ab4883595c2e5bde
SHA512 95c72989df00c3caf1230ca41b6dcbc24f8a592c45202f7b16044b8d574fe569d4db8614652b0d1695d3fe1d795b07ea334de5b4fa9dcbb9d27de40a55592586
TLSH
T155D080757B467A11D58F0476D424E271A737455125D296057170C10E55602D1FFC90A7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 403279c5b5b1aedc10c04c608213ccda9e9120cf9c5bc733a23c5fe835a4abaa
MD5 10cb9f43428f6e14a39aad86ada24b01
SHA1 f2773f57305161081129eba41294c437c49c07b3
SHA512 f3cb0461cad283fa80d7551b5e09c5fdb091c1eca87ff13491cfc04250b382b8b97ca998f531e91ca70016b8b832532d6c9cacad72ed575a1a626364b529d6b6
TLSH
T11DD0232879397FD1D13D1077D0304340FA751153375653456160440D8D755C25FC76E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 32bd03b7374ff11182d15e698a3a14ea15bba0a0a471fd252501d547d5ba9a88
MD5 347c80997a3c14db2f840424d033a8cf
SHA1 91222f26c649cadbf82b95c9a9a32559ae8eb1dd
SHA512 3953cfdc756b3585c07248c202197946d3964c3bb306f83d7f42d21d6be44c68fa168594330bd90bc7646b2a0d8edc18668eac4b7d9cf9c38b1968e5cc626337
TLSH
T179D023AC31093F00C13A0073D0128310BBF10012374A610252A0000C0C747D60BCB0B7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f4c2ec34f167ce0d076e863040e8dd09351e61e96532b36d4cc9b185b365343
MD5 49e7c6da55bf22fab98fd5f87cdda757
SHA1 3f1f898051ab0e171ce2deff8e22ac4ea0bb6ad7
SHA512 fd41e42004f84a4f960c51128fe1b1ff646c54041db27eef7b55b0b747567b089e2a65a4b1ccba776d72e3dc5661ef43786980958d0e33c27277defdc7a127eb
TLSH
T154D023A831093E00C13A0073D0128320BBE10012334A610252A0000C0C747D60BCB0F3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 528f62d051d3e70b7749e5d50c9a8fbb4bd778ff5a2497259d5b62a311e2e317
MD5 267f2b4541b272f624846b0af4f4fad6
SHA1 aa1ceacfc2dda905c1ba9f557143a63400af1170
SHA512 854f8b058c71cb7c6dc68fd4562c937459bf281296b25a29db88ff54102b96fbbdb363b8054f7a8d1c69267f203933d409c1114ba8c2268da4d2cf01bf4c287c
TLSH
T1A9E026459282FBA512C0A847C84C73BBC110F28E998FC69E3318F4D9E643E028A1E0A4
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 274B
SHA256 37aafd884522b9041654e95b8e82fb8451839d834f01ffa00c1b005debd3addf
MD5 9a3f22433e5beaf240474e9070faaadc
SHA1 7a3fa2e4eb5bce4654ba65a419c52c929ce65004
SHA512 113f5f84c4b5eaf99bd345551b09fb206e80f79b5da7a71c85931f63683e2829271fb2aa8d323229ba0f80caa90fc613cb59555ea700237e4e313a00fcf23071
TLSH
T14CD0C2F9A88C688FE3E52AFD8262B0400F6442D29416DE020125F9C132549F41F52170
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3f17459912862bfddef2bfc95f06702bdd02c447085940e1dac618e648a0c939
MD5 e4105db7fb9ced7756402bbe323c98fa
SHA1 16f64170040e63e9af46e9ff04f1f498ee03bab4
SHA512 e28a2c5e56c3b4091a11030022435a7bc658ed895a2d8f4513e105b17e4d3ea60a1788ecc0446518188a54ecded29956bc85228f90d5e6d3d19442cab3940ca2
TLSH
T1D4E02B9AC830DC3704FC575961141795E74417AB7742990F3B3C91088FB1A3B459582C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 7d45e9f04357b52b2a4e95753080b0a6fa5551aadf4534ab4351758c1fdb7578
MD5 c307aa07a54623bec043839b62ad61ee
SHA1 88d9a5787a7d35c51d31bd54866aa9f4fe46ebaa
SHA512 317ea8e467566706541d0b212e8669aac18a71b02d506374b500a8ec2752ae5b56b27bb58e6151871d440ea6c86bd74e461be267d253ce34913f6f10e20d958f
SSDEEP 384:Qll4SqRrRwASR+VCGZ0iyQ1/3002R2F2pu6fl14b:Qv4hRrRwASR+VZZ0iF1/32RPpu6nM
TLSH
T1B7133BBD774D6D96DBCA4A3C125B6F7A1373E7B2F9D0631B47313A7186223120A2E904
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 01e8093e3e9a426ef004d97f7bbe4d533dfe0fa8abe6d3773936663254d24cb7
MD5 5654e03d09ab55f0a2d982ae859943e4
SHA1 fa8d4fff1d7c781143f184ea7ff7b975f135ea43
SHA512 efa62d50fdf5cf263f1a7a555c6c7d817423247623f9b2fa7c1a2db149637beb965002794b8613235fb1158dcb953167d0222111afc5b3e1f81e5bbc99c13b85
SSDEEP 1536:wZALFEL/rmL/o6eOg5CbsXnrI2Z7bnLIUd+QqIhCaRHL/FL/sL/h:wIFEL/CL/lg50C7bn09IIgL/FL/sL/
TLSH
T1A6446EF70951A00BCBA842F5E2133A3ED177464E7CD1F9E9E5784CD52829B31B6BCA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 cb53f9621380ba2b22f58d8d0b5f3b5e704c7d9d18792aee16d18de5e0bb9e25
MD5 ad5c30b0c0e7ee4abf4344939ba2d6f5
SHA1 0ebb97a7e3d88a21ed9d9f4bcaaef72ff9564710
SHA512 4117f346727402d9da7b5b995f8a627e7ed9a948465258528c8c8b8305433128ac622bc498232da033d4ab45f226950405f5e71582acbc604b15413c91697350
SSDEEP 12288:Y7Ng0v75NVceH6BbZ8OZLToq2fNbjSNUQwFuSgqVCWxHbZ8Rd45WxdzuuWhy5l1c:iBehnPjJ4hbxZVZO3LaahBDd3R+w2or
TLSH
T1D2166CEDCA6858C3CD63AA30B5F0E8577C7413C3F994C1D6C898C584027B7C5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 25bcdc61ccda9cd1a5e8f95de21483682c96bf60e51655f5c9e4cdd4531a9318
MD5 09068432daa982e82ac3c266d65d01ff
SHA1 b35c4781b9551173a54fd653009af80b60a5f569
SHA512 0119b05ee1493df3b0ecab07dda175671e117257f3287c618bdf6b3e77f137c9a7d1617149a40b30d84d6e887a16b94eb0866903ff58900d7ace3f7e652ecafa
TLSH
T1F9613C31E0EED9A5E7E209FAE0DD208F3377E476B1AB1D11039CBCB89906370B05A124
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bf4f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59bf4f.TMP
Size 3KB
SHA256 8236a9afe34a47b9ac13e9fdc5ccea11605c9dbcf3313e66dbe99501d47f70c1
MD5 30cf3d1fc686513eadc8726cd154b621
SHA1 fef10673f9aa7a39bb5cf379a978b17679a29132
SHA512 1f520f28c5b761710cb32c01048d76031f4a1f3ce9216eaf513adcf9823933372479c0f0be2a9409c86dddf123448f475601145dec569bd251e89ff5c4c3935d
TLSH
T174614E31E0EED8A5E7E209F6E0ED208F3377E476B1AB1D01039CBCB89906370B05A124
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 6719055185698fc3e9f9f51199daf811f6fb534c52ff101cdb8403ad556d1fa9
MD5 8849f073102c9371679d2ee1cbda86d0
SHA1 cc77e2db4ab5f0a0ad0836e63c8ffda645d5a7c8
SHA512 8218d31910762c2937e713eab981f519d6aa2ebeaa7d726950b9c2930f1a7b7cb04ca7976d9309fb2e5b7967de4146991caabeb3d86aed5332130edddde23a8d
SSDEEP 3:MsEllllkEthXllkl2zEkl1V/:/M/xT02znz/
TLSH
T12544041C7FC00C05C50010304011C3540370DD10051157C7347514335DD55400C01500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 18b2f4102b589d478700a9245d450446ec51f29ed9de09616218cd23ae988e33
MD5 383c859c6339b0a869c508540e96d3d0
SHA1 50a06bc72e532e6341f567e56e080f5d7bbc54f6
SHA512 3e09d87006dd6ff6256a0b2f2fecb84ee3ef745f0527a99761d103dc7405f4053736d488c11a979e17421f98682f6ac053911a03855b5b3beeb64fc328e3f76b
TLSH
T184E0D894D4C7E32D5A107596422C7708C185F89BDE966E07A784C8C07707702F6856CA
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 76ae17892e65fa7d4ee4ce6be1b26c974c5b8826b084345cfe10315c787b7dd6
MD5 d463a67e319b2da1aba5d3510a33d920
SHA1 4e8c7fb444cffa1ab253546a396a08213cdc5975
SHA512 192ffc9d5b1a565d8977bbc529714a6b2d89947d373895a64d696105b7abe9514e72f0a0d8c8c931dd7f7aef0866236dc97bff8e2d81a4a4dec90515c4fa965e
SSDEEP 24:TLJHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfjyMnW5L06FtIsNVqYpp:TtD4jJ/0UC+lf5xWxLFOMVTpp
TLSH
T176E2A0CC3B11F511C4ED733DA1D2C9E05EBCA82C4A49B1B152389C768C626A2F49E61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 ee726bcc9ad7325ebf7217088585263b1767db2c712e35493fa96642eed4bcf8
MD5 87adcebb47ca5108a954fda738d00a73
SHA1 b62057e1aee0b498a24d83a1ff387c53e81daeaf
SHA512 4b9ac14e41c4bb34f54f6c3c4cbe5a99acf18296ab551d8c01ffff1c4556c8cc0501935ab345589aa8105e45506ddc31b630a3552d8e766502b2e0c68c8164f4
TLSH
T129E0200444CBD29D5025E5D3C37C7B0E82D07806E6843A456B4CD8946202B41E645168
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 375d53b2e1b350b0f6a48fc0ce61b6005812b07983d94c8084f997891898a985
MD5 caaf1b562b69ab721c0a6afe871bee14
SHA1 ac0524baf0f7793eed7f23bb3fdeabc8f14dd012
SHA512 5fcb9b51559c1317ed8f233ca37ac9249bb4354d09203ec8749be3677f7ee251d49ea57825cb7f81162f99dfea6f52953986c6fab29333ae0eef8187fad7c99d
SSDEEP 96:rBWktejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/17kbbEOVpZf24JkMfXSFR+CFq:rBWrH+bF+UI3iWGVoWN3qL/sVVV63
TLSH
T1B924114E5F352722CDBD913668E744A35C7DF03F871326DA6C6114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 55683c4321e3348863b2c5b98c76eba5cd9ac78223561609b999b1e381789d2a
MD5 82985639f977dd23edce82104fa997c6
SHA1 cd786f1c3d8abf18a4518f60d6012c43f44d1437
SHA512 b76917bb2b58c51908b8b2a56b18faf5781b2502d299f8fc62d735d5724cebd04aa8298d1a156fbae8c543864a9da4e9c8f437ce5d9b97ee1a2338d050aa1248
TLSH
T128E0D86088CED26E5305329B433D770CC3B0F50ADA89AF062B4CE850B502548E7C11C5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 f86a016de58fe10ece868ff2fe3c5038735320cb8a03294b80b9dea9f628fe67
MD5 d630a5b427eb9b9cad6d58b35ee8cc0d
SHA1 4d4d7f41ca8830b102b63e49e689dcc39cb1211b
SHA512 b316b899eb2d4c977cfacdd8b6342802f774f0590b8108389595e22ca7d6888cfb15a405a9760885e2d3d5f3b6b59cd8ba58b60f673a62401d8ab457c7a09638
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAwn+oIwbVLvpBG:qDeMatha9RAJALBBG
TLSH
T15CB2CE4D1F346121C1F04B76EDD489672E7C211DD373665A9E1860F28DE355BF6090AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 211f539a6365cd9ebb864b47284e08b3d65ed87a6f903a35ae0f04336138fd1e
MD5 92719bfa743a0acb4d4cab406c0ccba9
SHA1 42e10837be3713e7ddd8b9d8f178d32104a00b7a
SHA512 e8ce951b68d010382844aba7bfda0f6517fc3dd8f911e36f9035121e08254ed4b06d56dd4cdba246f2e4ee31126409083d5d83fb71228776ee4ce043db1bf656
TLSH
T13E41BBF3C2E8856D8A1195F0BB186E2BCE1D0914832C3D9AC9E4AF1BA3E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 4a8ccdab37705f52dccbcaaea2e158220bd4d5178395e293206b28aa0cd8b66f
MD5 b1a263381cbd6b7c197052745aa4efad
SHA1 51d0570184f5e91dccae484b1e3df36009d0062d
SHA512 c7c6ad03b7a4052894b2d0bc948b0ad270033ca01f0d4e9fc877584e43be2634176d34f2c3c9a6602989328c3162c4536e6ea9379fe620b89498bb3639313df0
SSDEEP 48:TaIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBdlQ:uIEumQv8m1ccnvS6OX7i6cf6CnFrJq4g
TLSH
T1BBF2CEFF07276206D99448B0E4009BCEAF16004F47B6B6DC66D447E3F7A20E2B5B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 21ba35199a7faafe3a6d4e3af6c9994dc6a285c30cb6be19141895093aac09e4
MD5 40f85df3f6c2a28e1be83802b2f7986a
SHA1 879c6b52f33ab08a90607e578c5d886a07bb21a3
SHA512 69eaf81908482891c702fbe60fa5b873ef28b2404f3ee989b7fcf7b411dfcc216357af1ce1b75d04b145e3dcc467bf7f4647e274de78f77239d5d0e1ca33a39c
TLSH
T11BC0229298F8E0332028883D0A80ACC0BBB5C0340002C4F3F9F983BCB0C12F76A0203A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2887f30401be83775dbc51ba957b183094e3f03dc137d069cc92f2c761c0ddde
MD5 fdbd63dd5959b5785ebbe7eba8f4566c
SHA1 35757f54beac46ba10aedd520fb2fd5b9f8e3122
SHA512 626db6a9869736db27ad2a1330b171d522c78fc3c68c8c104c7bdbdb560fb275e46e68e3a470881451e77426220d11c892b29078900377af67486a11a6599fe3
SSDEEP 192:sxRiRgyM/jK1Ml8JiA/fvsxWpVXF4ZgIjazoA8p49/g6+WNIYQpwLE4gmIgDJnJ:sxRiebA/fvsxWvXFGgwXo/5IKjj
TLSH
T11662C915A934997BCCDBD20DFA557F53D6F81433A2905E48AAFC8A0C41E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 3663feb3e60b6a6c9734d5fc4ed4bfcedf120a3ef958ae6a7bfbd167724e21a4
MD5 8ceeb5a2a646904fb7540f7381ddb0c2
SHA1 a1232c4df6edfe7f2af2719856851e057246db09
SHA512 20dbff726a54afd390f5ca7d1ba291cd8683953b251c8420d49dc17c12c53d7b3bcbffae469110568c7328978ba3c9043c8f2bd933e5ff8b340f059d87cb5f9b
SSDEEP 384:sxRiXbA/fvsq2WvwT/GgwM4dNu/5IKoTR:surA/fp2YwT/BwQ/5IKk
TLSH
T16572D915A9349977CCDBD21DFA967F53D6F81123A2805E44AAFC8B0C41E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 362e8989e5f2aaf279d064b8593d349708a9fba45428d22258a26f42d9855a4c
MD5 8c36afc4c965e8634e92fbbf979fe371
SHA1 51ebc0c448142a02a5b1c69435d35d26fd721b9f
SHA512 6fa1d6dd4cde1332340bffe66ee2b4a5d2ba1831751a376ab1479957684538d5302fca7261da8fdec3358f892126eb4b294574d65e29d5438970def9c8469dbc
SSDEEP 192:sxRiRgyM/jK1Ml8wcA/fvsog4ZgIjazoA8p49/g6+WNIY4pjAGmIgD7nJ:sxRieCA/fvsogGgwXo/5Is5
TLSH
T12062FA15AA349977CCCBD209FA517F53D6F81473A2905E48AAFCCA0C40E7ADD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4e79f548bea26b43dfa122ef3c7c4a619770b414f9705f0f466f1d504fd55234
MD5 e5407b2863e2b564e56ac63e51ddb2a0
SHA1 54a5a59bda565c00784993d03c9096ddfd758f8e
SHA512 0363df96eaad427f2e7bb7f1ee1b706eba107b40b0f9c004325ca6768ebdacc5050b2958319fbc676cc4c671eeb9c1d1888e19d3190179773a6d19dd231d33d0
SSDEEP 192:sxRdRgyM/jK1Ml8wcA/fvsrg4ZgIjazoA8p49/g6+WNIY4pjAGmIgVnJ:sxRdeCA/fvsrgGgwXo/5IsD
TLSH
T16152FA156A349977CCCBD209FA557F53D6F81573A2905E48AAFCCA0C40E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 f2697d1f9a8fe0ca42f73b7cde56a406b12b153c4dd760bb88c352052a85a9c8
MD5 e457596794b7cd93d96062e6089f6445
SHA1 27eb25a8506b19a08ce93f17a442b99c615eda9d
SHA512 aa95299f8fa5dca935ea9d6a9d813d1d7e8c3c693f10e72d0baa0b066e31e198d7ce4c533b4d3428b4ace6b3ae312424ee0448c060749903179f309fa9dc1b63
SSDEEP 768:Nmymt/7pLuL7YpWgvHfSv8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjS3Lxg1roRLHwN:Nmymt5E7YpWgvHfSvu1jagS3NgORLHv+
TLSH
T1C8E2EC3B680CCB7E4F844AADEC29BD9A6DD801CF5A98CD5447EA840C03C67FB511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 e39590f754ed34d63482f39a25293b83d1435ec23bf73a6a618c4cbc47746590
MD5 8a12e8756da96502c1773a468b9e31a6
SHA1 917fedc589127baf88db45e22386c2840b8f6670
SHA512 99cc966e183691155b6aa5007eadc4f8695919f4376294fce98b17764cc533c775f898ae814aadfc6d9a5dd9b86f1c67a25a4e2d7539540158b6c1bc90ee758f
TLSH
T1D8E04F5445DAF679606561430278E30DD2A4F41BDACE3B062F89DED06283A44B993295
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 a68d0dfe316e995b2e533e0e283c17a82349aece0f1e7e7e754eb233a666a4a7
MD5 0d05e9fcdd30aeee80527cf15df6fac2
SHA1 fc693ae28aa95be279d33ccb1806a81e46ccf3f8
SHA512 1164934c46b74d4caae807270795f2e56406eb060427b11d7705e5e0cc1a1e625766265a68327ee8b2abba348924d7d4d5644868906cc9e3f3c0976398ba3bd8
TLSH
T196E0D87057CAE76B714664874338F30EC3A2F846DBCD2A153F0CE584634B644F683664
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 22748f5ff00325f095a8e1bae2a707fa2034a005dda39a059841bc9e3ba0eb38
MD5 3185601bf17b15530e7d0fbbfc601811
SHA1 135f06c413b8c266df4226aba9290e8523a70605
SHA512 66d1ae96baed24f335848c12532e0ae0be9e7e950378e964db117ea7543daf69bddeb16cc04e58b31cf20fae5c875ad4b2ebf2afda34599b5bea38e0b1afb2bc
TLSH
T100E0267496CAE739A100A183437CB70E83F0F88E9BCE3B4A6F0CA444A246610F3E6190
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 914db3b654826aeae0e1af6a4326d7cf1ea8427d04e5121a550bc2cf3a911ec3
MD5 c05288072cd029a9731816f453a02cf6
SHA1 ab8fcfbcbad82db634588d0c42959b7fb6d54998
SHA512 bb2110d0d0440d51948fd2d62868897942d42df6b0a0381192e31e177f439fc2fc24808752bc4e9135cbff4bb5b97b6081b25e6241ede8e3fd393577a8cfa2c0
SSDEEP 96:KIxSKyAaWPyKQEWml6KWENYT+iwy+TjuhilKTK9Kl8TJI2:YBhBZJQ
TLSH
T101B13A4576B667003CBD640882A4942F5542316B356AA83F7BBC30E62F67F085EFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 beee11ba85678d8b1a625e965dbd88566f565075895f3e042d0b935e112eff1b
MD5 d2eb3804c7682c4031e77804024209c8
SHA1 536055dd20cc075b986d2e8ce7243e26a977c866
SHA512 bdfe068e7c50db3bc2e4d472b394b5cc34ee76e118a4683ea787c54841a63babecfa31be600d7f27cbc3419a8af514d27d7e666231c5be2938f1e880ad016b32
SSDEEP 384:DNrRZyCSDnxTICzMEhIKyll7svbFKfk7:xFZJSDniFyI1l7svbF9
TLSH
T13E44640A7B747001EDE6D9725CB080771E3CB16ECF22A6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd186a2e-0c3a-4740-8a54-0d898f67895b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bd186a2e-0c3a-4740-8a54-0d898f67895b.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 adceadabf3059e597c0f95c850817a4478357efaa4786d1e9dcc418daa398bd8
MD5 c7d80b89a9f6fb25897ebdaf11c222af
SHA1 7ae509f210c8cdc46289b8d4225d60a4f3ecb7f9
SHA512 c31c1ee5277e3d1e51b45417ed421f74028d94287de4555690ec3dd45bc20b51587a057282c57157ff53f93870ed04b207a0314cf3d54b81834035e5f64c1626
SSDEEP 192:xQoIII/b/MIM5IYcY8/Ob2AsTl8T5Q2suHl:xQoIII/b/MIMuBwb/s5B2s
TLSH
T1174274AA16051B77C0AF5B3613678244DBE948820172712E31676C0F8EF3ED7A3D92F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 f5415337eae4d499bac87b4a498c1196c5840552d1164661b307d6458c203141
MD5 dfd78d02f7f3f0e124b80857ae1479d0
SHA1 13dcc8280ee203b5cfdab90904847a51174afd2a
SHA512 9e61960280cf112e92a2e02fa7104b750d09f74804ba8de899ff4aedde5babd52b09ac9ce52a978181176307cffbe4612828e583832834aae55fffac7fb7cd9c
TLSH
T1DFE02054F4C5F25F75356087023C634DC2C07C47EE852A09AF44C4446106E00F6C91D1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 040c4af48ec7241e41c89fd8b20b1f8fa0fc1c55a928f43d3114fbc042f72267
MD5 4731b6936ebcc1d35342582d1daed479
SHA1 8502b1fd3e20fb4fdd1f51ef7ed59a611837efeb
SHA512 c184162f9bcfab3b520e06499907edd31510c6db2063017ade63ce8e144e75651b3ed0f428a3300909fe5e99b8cb117c2700346e50a33bbf9d6ee9cb5c1b8ad8
TLSH
T146212659F330C108D54A827D507E97660338E8938FB8ED0F54BA20793E75B051E8B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 915f8ffca1e52ff2358397029fa2536a59ffbcfb51399fe949d91ec59bd46612
MD5 b30ef3e66e47dbb802ecba6666a4fc38
SHA1 7a2f50204f677cf796a3b0d6e71bb92d3981ea01
SHA512 8dde45a14185e2c34243e3407b389f2e9c98c26d50fd6dd15ce08e49591df9e78b642300225c83e32e00b44b24367e6b0a89c7ee9693a4cf811003bc53819140
TLSH
T1DBE02054E5C5D6EF601564C70279B38F93917C47EF8C3F492F08CC446206645FA46165
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 5eca56ade46df1e2c144d33c9c2287372b2391967c31a57d7a7bb74318746cca
MD5 310d0825aed4db1ff8fd354db446d4be
SHA1 0e65cf49c4d7469777be81a8cb1d9b2438f5fd55
SHA512 9d0f89ee13cc596eeb3a76a632dce154f71e56b451293e8194c4e29eec16c438b1f79556f02831ce715c18cbe968ba5880f593d0a9f7c3afc7890faf8293677b
SSDEEP 3:MsEllllkEthXllkl2zEel3m+l/:/M/xT02zN3F/
TLSH
T11944040C7FC4140DC51430304431C7540371DD1105115747357714137CC75410C00510
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 2e7174d39fb54ad8cdc162dd731d87d8df4d00d60da4e0561ed01a4ceeca161d
MD5 c02153bcf941df8c6f924a13121528fb
SHA1 2a1ebba24bb5a596d95690fd435a4eee2a45f9ef
SHA512 3ea546a2b951407ea64b6dd795126be6041bb077fa37d6eaa07ab1d93548fd35b217ab0d84bd6334eef15783ad696da66fa7a7b88ffb47e042330e6adbe0c06f
SSDEEP 768:sj+9h3VofyjfI7ffA7NpespIRM0UmkTziwjgzSFwn12bfc:r9h3GfYfOfiQsZ0UmYlKyc
TLSH
T1D8F2AE31A8254E634DF6DA8D7A47374BAEE0026381C41A48D9D89F0D85C779C275FA2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2bfeaf7c6a04b959744640b8108bf3f3aa65a47262d5e2f80b292990868437ad
MD5 1e93c29c12c62963373e5ad74e187997
SHA1 18ae625d301fd404502d4178b32953359fb8487c
SHA512 3220bb7bcfe20768b764bf63699709bb4680c714741443c5224d7e1c656e7662ba5368aec16ebd1df526c67b3382b18f9af015e7fe0f1a44b7e908f50bf09f00
SSDEEP 768:Gj+9s3VofyjfI8A7NpespIRM0UmkTziwjgz5DGKOheYxn12bf2:V9s3GfYf2QsZ0UmYMGKQeGy2
TLSH
T1B1039E75EC245D7B4DFAEB4D260B370A6EE00137D1D41958DAD84F0DC1A369CB30796A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 688333631bcdf0b49d87351fc938e83557192905c3687a99b18ab0260c16adfc
MD5 83578862a618a35feab6d1cb7a3a6cc5
SHA1 42237c94616ec839a0c790ad95cd9e0097b48761
SHA512 05cabfe78404c6c3bbd03e512e864569002a9c94bc0511ee106fdd2f20c0d6acb4c6ffcbde2ed4f839b5759b35d7730d47f46f64efb8bb7cffdbc9aeac5854ad
SSDEEP 768:3jaeqD4MlshiLdMmf37DfyjfIpA7NpespIRM0UmkTziwjgzGMnApXLPQTU:3qcjhIdMo33fYfDQsZ0UmY0nKXD
TLSH
T18C03BF3698605EB78CB7E68A264336576FB00253C2C43BC8DCDD5E0D42976DD530B96B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 65123f569f04e267a461317eac158831b1b03002c847f4256708cf3dbf9aaeff
MD5 0f9b9e3a06450cca6b8d72ff5636f27c
SHA1 70e43affdd102da572edc31d9b9c5349ee6fa03b
SHA512 8af561b9f6cbb03310f96306435a06e6e46fe4a3f078c46f09c634a48a36eb02574e9d91a48e3dd711a43676677a622a8455bea9447bef7fbe940bc2564456af
SSDEEP 768:TjaeqD4MlshiLdMmf3MofyjfI7fIA7NpespIRM0UmkTziwjgzSFnApXLPnTP:TqcjhIdMo3rfYfOfdQsZ0UmYlnKXn
TLSH
T17113CF7298648DA38DBBE649664736976FF00263C5C42F8CDCE99E0C41872DD274F92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 57KB
SHA256 0f8aec0ba026de275c2c7a3302dc448e1fe3b211df37c1bc7fe58b361cf4e4c5
MD5 db369210b44bc6efc1a389bfa1d5b138
SHA1 2b12edf6ee0ee0bb6ed198252eeb727d83492d42
SHA512 18824475f0dc1206e00d04e410bb9cadb802a522c43d074e84d8383f692781c5ee842c78ff17ab0981e60fe6f5250166a5858dc7eb4586814ec1e05fb7fc4809
SSDEEP 1536:F9s3tQsZ0UmYBmGwa9kUToQmdswGKQe3y2:FktPrLm/aTyFGKQeC2
TLSH
T13C43B07ADC618D7B9CFADF89730A760AAED00163C1D869C8DAD85F4C40932DDA307966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 0d4dd0ebdf7fa7332e69948d1ada4c1b6b7c1ffa09326d2593dfb2191502272e
MD5 23f6e3e9f529f17ffbbbad5dbd58f5fd
SHA1 9083a23d30d9ed29e9de7e6c8c0cd60967a2be01
SHA512 5df76efc05a10c6d4ed1f176d5449f497172a2f5dadef7c29d2d299623b6d5e61b1ead97f9ce5b131c45e024673d839272a1425cfdce0a0737cad57a25f4022c
SSDEEP 768:Dj+9s3GofyjfI7ffA7NpespIRM0UmkTziwjgzSfM9T2wn12bfc:G9s39fYfOfiQsZ0UmY/42Kyc
TLSH
T1E5138D79DC204D7F48EEFB4D260E261A6DA40233C1B45958EBD84F4DC1B265CFB4B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 28c5d1f76e7898013a3467fd1a08dbcbca9f4e745b96f3b8638b477810e0102a
MD5 23366c712b5f016d0527bb71a28fb154
SHA1 6e576f329cd99caa12f993307a69caa6c11ce5c6
SHA512 695f614ded490be9332830302129afae8ed376b8458747ec59320de99e97faaf4e59d6566012328179032ec76375b52060ea745860fe1944b1f0cb0e2048fd94
SSDEEP 3:MsEllllkEthXllkl2zEelTjX:/M/xT02zN3X
TLSH
T18544040C7FC41405C5341031C015C35513F0DD110533574334F104135DD75440D00C00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

6d7f211a-8ddc-4f0b-a75a-bbef9a2fbe0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\6d7f211a-8ddc-4f0b-a75a-bbef9a2fbe0c.tmp
Size 1KB
SHA256 7ae3abeff1a7ac2b396b3e38dc9d2900c37a4fa3623cd6a74cdc34b502978149
MD5 d7023fa4d2528dc28cb0aaefeff697bf
SHA1 a9d914b66ca62916a33ca38b55ff971687cec7f8
SHA512 a12e587ee1c0f13ff6b3da22343b7611d6985799073cd0898decd626042b0e3a69747a3419b461a74ae1dee8d439eef7f39e61fafbf6bc2d3be40d501161b36b
TLSH
T13221FEE26D6E1AC2D1BE0EBFE0873AEC54D8D21AF1D4347A1888ED94923D91E154187F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 a5548ca519cf47ecb420c8f1299a8a50517fa463459a704ef2ff17c4db35117a
MD5 b2c40634bbfa57be0d4fad8adfbd6ccb
SHA1 6f8b9ba2f40d9aa42d217ed2bc6dbcdedd1763ad
SHA512 3cfbef4e4a4a7d8fa1530c69ea34fbc3b84627888361a9d201b21e6ead15f5d4e51fea8bc95edd07415b6d2d06a3c19beb1bcea3195e05a6d8af4939b95f77b5
TLSH
T1220110D29C7E26C2C5AA0FBFD08B26EC44C4A516F098747A1CCCF9D4823980E148243E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 142a7cc7a4933a976aae32a9d04e1758464486092207243f09edbbad51f1d934
MD5 95fe84d83629d03e0bc6e035f44a5cae
SHA1 2af304ef821c70f2d00b47a3e3872c17d33e40e7
SHA512 266ac6fd03731d757bebdacd0d27aa0326e022f9791d7892445f595285b17def95b722da875c974360a7567be530324d0d91a3310008958cbca0f09f04676301
TLSH
T14E0112D25C3D26C2C5BE0FBFD08776E844C4911AF19474BA1C8CE994827980E208243E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 757c40068c8b44526fedddbae76f4ef49d46e6f99e9c5b6ac7daee04f31c52bc
MD5 d3c09492385327b4a73e8682955af55b
SHA1 240fab0985703fee85cf6f4073e03764bdb8aa5c
SHA512 09a4d78749d0d19904aa74f079fa2811f4b5de2b62305c89fc775606945a876578959e3f95cfb06258b2450dae9c4ed8a80ecdef86debcfb139ef6a47615ec6c
TLSH
T15A11F0D25D6D19C2C5BE0FAFE0877AFD40D8D216F194707A1888ED54427991E114147F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 590065152acec5cf42dffc28eb04749514feaa899eb2ae04edce7d38a148fbda
MD5 30ae49636160992413baf749cf492c9d
SHA1 93edd7244143177356c931699cb8a266bad04660
SHA512 b986d2486431c75ee9ea0acd7d891c2d40042dfe9185910eedc52db52d68de586df47518bb97647f325416a600eb0e7b794c9d5db9242f3417882791a266829e
TLSH
T11E1114D25C7E26C2D5BE0FBF90877AEC44C4D616F194347A1C88ED94417981E154147E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 21075672ed04fcc0ad86c96036a015a0479bc539f9eb22ed2ee07d5f51ed51d5
MD5 a8b716843d7c8f9dba996daed984824f
SHA1 0c96d6d123c2416eb76b7da62e37d23071beadb7
SHA512 5d339045c75561891f8b131b85aa5713a39f0c762a24cffd19d9577849262e259f66a06264e6b97d4d7a2b39170891003f4bfd55c6f8d31f9da107ab6548e117
TLSH
T1DE21F0E15C3D2AC1D1BE0EBFF0873AEC90D89216F5D4347A2898ED94823D91E158187F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 2b7c607fd6a639934c6f7311f36aa760dd4a600f84b9f8e2d066832856488091
MD5 a36353281ee63c90e6d74b67255fe9ed
SHA1 f8aa66a70fe63c5f2aae1964243c68b3617d9c57
SHA512 9950368809a0ccd2b7cadae6c5ad4af6b981a19210a81b38ebe99aa0a683ffdc822d6bec67c6e4cf1ddbf1d47b71b7aeae4380c6552f5d5b6298fb649949ae69
TLSH
T1D3312FE25C2D1AC1D0BE0EEFE48B29EC84E8D216F19434392898ED94567D91E258087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 df444b5ed91161c5d2e84013e91e57a28fbbd1e4302590bddff64bc98663199a
MD5 cf37b72670448143ffb4009cf7ad060b
SHA1 e2e210f06fa8d4857fc11a37a890b02f672ed738
SHA512 5f6b4f3a776ba0f062d4fbbc5e594ca2af360bbdeaf0fcbb1d649d6f58cd39e668cad4551281c2374c3b44e3aa54648011bd878f27eb16660344550443d39f5c
TLSH
T18B3120E25C3D1AC1C4BE0EBFA08B39FC84E8D326F59474392898ED98563DA1E254047F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
MD5 2012d4de563c653f56f62ccbf46db598
SHA1 fb24881003593f1ceb79019e52ce5ee9e94c889c
SHA512 c03d6584395c1c97c75af7dc6df57df358d3957035521bb6833c538679683aebe0410bb12586472b84dc98111e703984dd37868464fa9c66fdafb423e763b555
TLSH
T10CF00E829C3E25C086E90F7FE44725F840C46517B0883879088DE9D8813A40F11414BE
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 98d9b184e4c7220b5aaf7ae412b0c1b3f32e3dc4933afcf852538b8082017b9e
MD5 c20138f2b92ee0645ce99eebc563daa6
SHA1 8e20392ea25dec3d3cef957c8ebbe1a0c589ea3b
SHA512 151098a27cb44d715d48210b12b95a9d1341beb7ca1de3096edc0434ba70c3d274e446604c7692d7a4d92af7b41872166747a30fd452fd0279407a6993fc02c0
TLSH
T15DF00CD28C3E21C2C5EA0F7ED04B2AF884D46507F0887439088DEAD4C17A80F118247E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 ae32d9950928870c88235c4c17204b62b83ed38c436c2dd65ff80e018454fd14
MD5 1242319dd708adac46dfcb9d40c77068
SHA1 dff7fdf5059dcaa1f995142f3980df184021fc44
SHA512 5d2bd511e97055ebc6b00ef355284a011fa67ec5483ad8ca69504713c30386e967955c27411472de128ed8661c16bd2a8289de30d9be2b75dc6ae33bcf2e2395
TLSH
T14B311FE15C3D1AD1D4BE0EFFA08B29FC84E8D216F594343A2898ED98567991E254087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0add355fd71179dc558d482547fb80c6cfbcaa5813d612165bb4c35ff09ecb04
MD5 ea55cc5a5cec8ad5664b71f898178dd4
SHA1 f5564c6cc824347754929284681b30b7d52db39b
SHA512 27bee352b0d4007234269ef9129480476557cf0dfaba0a85f3e44282fcab3c23c384e7f2e3aa14fa4658758889eec92a81ee2004e98034a57ea8a9a925922b76
TLSH
T19B311FE15C3D1AD1C4BE0DBFA08B39FC84D8D326F59474796898ED98463D95E254043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 329e811c7115c8d87835f10236f1e5972eedf6d592dff11f6c36c824e9a644ca
MD5 e1a83fbfaa65d5fb276d87055cadd444
SHA1 7ff011e6948a811a3e6eb3b6d05896ea81bac9ff
SHA512 9dadf1b73ff3807d0ce18cc1e9c705d1476e988f89abe83899b058000bd1c13cfe58d08a15fdbc215766ffd76ed0413641a6b28c37d89d98011ab93bff08482b
TLSH
T16F415EE15C3C2EC1C0BD0EAFA08B38FC84D8D226F594347A2894E998463D91E258083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 f96194c1aa41143ffd300e28d8ec2edfc0d56ab8e233db55cda888bb520e579b
MD5 3b7fd17132f06603e390887d337bbc2e
SHA1 64f199abe78df7c0c77f6c12352cfc3bb0503ff2
SHA512 09959615493c979e88bc5a1b5372643f9ff93a7438956f6e910e4fb99d0a41bedec22e368ffc00d338709bc0439285856bf72c19fba1055c2bbaa7300b3bc914
TLSH
T1634130E15C3D2ED1C4BD0EBFB48B38FC94D8D626F19434792858E994463D91D258043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2380_1808377610\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_217655710\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3484_265848719\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download