hxxps://gizmodo[.]com/download/gta-vi

Analysis

user interaction
yes
max time kernel
899s
max time network
730s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 04:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gizmodo.com/download/gta-vi
Sample260628-ep3mlae18j

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
796	msedge.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-hub\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-notification-shared\pt-BR\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-notification-shared\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Notification\notification.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_229134736\Mu\Advertising	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_229134736\Mu\Staging	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-fr.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-ka.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-shared-components\pl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-shared-components\th\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Mini-Wallet\miniwallet.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_567884518\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-be.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-ml.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-sq.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-und-ethi.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_272582538\Part-FR	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-ec\da\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-notification-shared\ru\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-mobile-hub\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_229134736\Mu\Social	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-gu.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-uk.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-hub\cs\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-hub\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-tokenized-card\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-tokenized-card\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1414612648\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-af.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-ec\hu\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-hub\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-shared-components\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\wallet\wallet-pre-stable.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Wallet-Checkout\load-ec-i18n.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\wallet-webui-708.de49febeeb0e9c77883f.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_567884518\product_page.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1007907655\Microsoft.CognitiveServices.Speech.core.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-notification\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-shared-components\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\wallet\wallet-checkout-eligible-sites-pre-stable.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-mobile-hub\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-notification-shared\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-shared-components\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Mini-Wallet\mini-wallet.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_602919183\crs.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_217573969\male_names.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-ec\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-notification-shared\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-tokenized-card\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_229134736\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-mul-ethi.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-mobile-hub\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-tokenized-card\ar\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-cu.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-hr.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-ec\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-shared-components\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-tokenized-card\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-ec\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-notification-shared\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-tokenized-card\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Tokenized-Card\tokenized-card.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Wallet-Checkout\load-ec-deps.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Wallet-Checkout\wallet-drawer.bundle.js.LICENSE.txt	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5936	msedge.exe
4728	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270932828375489"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3730367222-316663987-825798519-1000\{14034AE4-549C-488E-848B-B5EF42FDB8EB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
796	msedge.exe
796	msedge.exe
2484	msedge.exe
2484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
6524	msedge.exe
6524	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe
6524	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 6524 wrote to memory of 4284	6524	msedge.exe	90
PID 6524 wrote to memory of 5984	6524	msedge.exe	92
PID 6524 wrote to memory of 5936	6524	msedge.exe	91
PID 6524 wrote to memory of 5036	6524	msedge.exe	93
PID 6524 wrote to memory of 5984	6524	msedge.exe	92
PID 6524 wrote to memory of 5984	6524	msedge.exe	92
PID 6524 wrote to memory of 5036	6524	msedge.exe	93
PID 6524 wrote to memory of 2564	6524	msedge.exe	95
PID 6524 wrote to memory of 2564	6524	msedge.exe	95
PID 6524 wrote to memory of 4124	6524	msedge.exe	96
PID 6524 wrote to memory of 2564	6524	msedge.exe	95
PID 6524 wrote to memory of 4124	6524	msedge.exe	96
PID 6524 wrote to memory of 4124	6524	msedge.exe	96
PID 6524 wrote to memory of 796	6524	msedge.exe	97
PID 796 wrote to memory of 7024	796	msedge.exe	98
PID 796 wrote to memory of 5624	796	msedge.exe	99
PID 796 wrote to memory of 4728	796	msedge.exe	100
PID 796 wrote to memory of 5624	796	msedge.exe	99
PID 796 wrote to memory of 5624	796	msedge.exe	99
PID 796 wrote to memory of 6520	796	msedge.exe	101
PID 796 wrote to memory of 6520	796	msedge.exe	101
PID 796 wrote to memory of 2504	796	msedge.exe	104
PID 796 wrote to memory of 1504	796	msedge.exe	106
PID 796 wrote to memory of 1504	796	msedge.exe	106
PID 796 wrote to memory of 6220	796	msedge.exe	107
PID 796 wrote to memory of 6220	796	msedge.exe	107
PID 796 wrote to memory of 6236	796	msedge.exe	109
PID 796 wrote to memory of 6236	796	msedge.exe	109
PID 796 wrote to memory of 4932	796	msedge.exe	110
PID 796 wrote to memory of 4932	796	msedge.exe	110
PID 796 wrote to memory of 4804	796	msedge.exe	111
PID 796 wrote to memory of 4804	796	msedge.exe	111
PID 796 wrote to memory of 916	796	msedge.exe	112
PID 796 wrote to memory of 916	796	msedge.exe	112
PID 796 wrote to memory of 5492	796	msedge.exe	113
PID 796 wrote to memory of 5492	796	msedge.exe	113
PID 796 wrote to memory of 1356	796	msedge.exe	121
PID 796 wrote to memory of 6304	796	msedge.exe	122
PID 796 wrote to memory of 6768	796	msedge.exe	123
PID 796 wrote to memory of 4428	796	msedge.exe	126
PID 796 wrote to memory of 4428	796	msedge.exe	126
PID 796 wrote to memory of 908	796	msedge.exe	129
PID 796 wrote to memory of 908	796	msedge.exe	129
PID 796 wrote to memory of 2484	796	msedge.exe	130
PID 796 wrote to memory of 6328	796	msedge.exe	131
PID 796 wrote to memory of 6328	796	msedge.exe	131
PID 796 wrote to memory of 7156	796	msedge.exe	132
PID 796 wrote to memory of 7156	796	msedge.exe	132
PID 796 wrote to memory of 5196	796	msedge.exe	133
PID 796 wrote to memory of 5196	796	msedge.exe	133
PID 796 wrote to memory of 4720	796	msedge.exe	134
PID 796 wrote to memory of 4720	796	msedge.exe	134
PID 796 wrote to memory of 5964	796	msedge.exe	135
PID 796 wrote to memory of 5964	796	msedge.exe	135
PID 796 wrote to memory of 4936	796	msedge.exe	136
PID 796 wrote to memory of 4936	796	msedge.exe	136
PID 796 wrote to memory of 5236	796	msedge.exe	137
PID 796 wrote to memory of 5236	796	msedge.exe	137
PID 796 wrote to memory of 3352	796	msedge.exe	138
PID 796 wrote to memory of 3352	796	msedge.exe	138
PID 796 wrote to memory of 5108	796	msedge.exe	139
PID 796 wrote to memory of 5108	796	msedge.exe	139
PID 796 wrote to memory of 6704	796	msedge.exe	146
PID 796 wrote to memory of 6704	796	msedge.exe	146

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gizmodo.com/download/gta-vi
1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe2785c188,0x7ffe2785c194,0x7ffe2785c1a0
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,13420234348533884553,15845192945831005764,524288 --field-trial-handle=2412,i,5019240295956036880,1928122794993351709,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,475678112273955769,8499791037098320488,262144 --field-trial-handle=2412,i,5019240295956036880,1928122794993351709,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:2
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,11492077142518686526,10157849089715652657,524288 --field-trial-handle=2412,i,5019240295956036880,1928122794993351709,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:13
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3676,i,7976170286704161276,16861925968871256562,2097152 --field-trial-handle=2412,i,5019240295956036880,1928122794993351709,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3672,i,17491063081416896974,1804886217589868443,2097152 --field-trial-handle=2412,i,5019240295956036880,1928122794993351709,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x238,0x268,0x260,0x270,0x7ffe2785c188,0x7ffe2785c194,0x7ffe2785c1a0
    3⤵
    PID:7024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,14659323742486990247,17486707875529929262,262144 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
    3⤵
    PID:5624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,5461103261891868150,17759666048569811254,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,1978383627721154739,5160935094715532927,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:13
    3⤵
    PID:6520
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,7371934922917625380,17217372486078761273,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:14
    3⤵
    PID:6072
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,7371934922917625380,17217372486078761273,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:14
    3⤵
    PID:2504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,63278264801585661,8682411748348191449,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:14
    3⤵
    PID:1504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4688,i,17984246118093034852,5110668476786636409,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:14
    3⤵
    PID:6220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,8418339062689285668,13504745854403728011,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:14
    3⤵
    PID:6236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,12684994629159010502,5128320584748432320,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:14
    3⤵
    PID:4932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,64262134585323800,5673046117433819893,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:14
    3⤵
    PID:4804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,17852584129912779867,15443814750826194426,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:14
    3⤵
    PID:916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,10322962300280354710,6576379600068936334,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
    3⤵
    PID:5492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,8274721183234858249,10106383704832917405,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
    3⤵
    PID:1356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,9469717568518488153,2009025329823036989,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
    3⤵
    PID:6304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,16553413979229349760,10036221946234089802,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:14
    3⤵
    PID:6768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4652,i,11921473479664670597,13362208111723476258,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:14
    3⤵
    PID:4428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,196279095982369424,7988661319457274937,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
    3⤵
    PID:908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=816,i,16537295562054484721,12277988913228141889,262144 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=816,i,2299592913964444060,14069968999710285211,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:14
    3⤵
    PID:6328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17401032584681139399,3606512019062423422,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:14
    3⤵
    PID:7156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,547296417454574941,12892560085447211220,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:14
    3⤵
    PID:5196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,2647114923126512634,347072824191080259,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:14
    3⤵
    PID:4720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,5712551029301416120,8182577934982673638,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
    3⤵
    PID:5964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,6378774771085727723,11773508274716839682,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
    3⤵
    PID:4936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,13075205665978599716,4741931592862478484,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
    3⤵
    PID:5236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,15668796638576885993,9583009634453621302,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
    3⤵
    PID:3352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4100,i,13055118625176813150,12020463936299167922,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=3876 /prefetch:14
    3⤵
    PID:5108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2836,i,5688483341425306714,425706651947627527,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:14
    3⤵
    PID:6704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4624,i,8200120284508190728,17324196314713174313,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:14
    3⤵
    PID:2952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,1565508182347137575,11954780654040047987,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
    3⤵
    PID:4900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2872,i,15477447944758215000,62605201247044033,524288 --field-trial-handle=2364,i,9613764107524996544,1710446301666702450,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:14
    3⤵
    PID:6300

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:996

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4108

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6640

C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
1⤵
PID:3372

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:7044

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 35266fa3d70023fb7bd146f2423b8d723df305fd8dd053bc808d19a4feeb2bf7
MD5 d399b74630dba676eda617f3d571b0b9
SHA1 8c11dc3d3fbbba1b841a4e4704f1447ed1bd9d9a
SHA512 d85162c523b242814c1d99bb43ffc9893117982eb34d9389d94e6606ec4854e935d2057e0b89827bc05ec4670b76deb5c1ceaa77d0b30f1781c6fcdd1ea91de1
TLSH
T1CBD0A7113A3D78D2D13823758522426069595A53A362820A7999984DDCB90D4A6C1D97
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7250e4ddb51fa53ec8c4b9199831864f7ff3c5cca1fbf2e4e5086ae0576d31e1
MD5 d67d9caab78f31b2ab2ae61fc88b12e8
SHA1 c439af9d2a4c79b1936d0b654cdf2b2a6da22a5c
SHA512 f8e3ffb5bbcb1740ce2b25ded24b3be72c6285c98433cf97d12acea2ff455dd8da18d81f9348060457962fde88e3e33b5654dc94e329100848cdec215f571788
TLSH
T1C3D0C0513B2DB402C1241330882343706D09C503E332C10635BD140CDCDA4C4A3C1547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fbfdc6639449912c7c98b931d8190c5dc58f3c2a0bf5687e437a1f10d8fb4d03
MD5 0648a8cda5509f4d21f145a8d2e85107
SHA1 0098998314a76ff86c61b0ea846ab42ba2d245f1
SHA512 d12c9f38e4b1be9f515149cbec2d53104d76f99eb87ea993bf787c888cea28fbc81e79244b64386a0c5a5111415c57c4251ad0e5528252f3302570bd3971bd56
TLSH
T1C1D0C0513B2DB402C1241370841343706D09C503E333C10639BDA40CDC9A4C4F3C1543
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 fc31b8b84b9df8e16a15de6122cd5128368a7e1dbc985c9d5c6a4c71b4af1274
MD5 9a6f437e4538a0f5f7a5b203c5c15768
SHA1 37b602ac17ba9dbcdce04fb4f7adc35090c3d14c
SHA512 8d821245c2330b75bf2917df963ef06b09654fe54d6ae688ed4ddf5f455704bfdac55a882e84a7b3d424d75fc338b4798acc5276ef3f44ec246b7832808cdf6f
TLSH
T1D7E0D856DAC0D2A6428DB94B8DC49325C241700E934F947D33D5E28D5A00750A3DD29C
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ee2eadec2fb341cdca37f4fe0c61b03e1a3fd43fd9bb61558cca3968ee732152
MD5 4d347c5cae50861b038b5bfd15a23ecd
SHA1 f96e01cb6034554859e79a4b0c9ea5acc58a9314
SHA512 88e099e616ccc300f8f4e803f073e4e508d8c3680601e76364eae907f51f95f45fafa756cdfd68ea6d104264d8058fb19bf4503ea755000a10af485bcd44f881
TLSH
T17DD02BABFAEC9E4EC7E40ABE57A5B8000B880292840B9F1300387EC03495AF02E25030
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 823c1d26da591a1d995ff2869d473ac0a60391da56561fe776ae7d8fe8ccb2e3
MD5 20ca8eae116151eea9bef3ee0d639894
SHA1 b228f8bd57cf3ffe6f0afe84d522fe3f67fb9265
SHA512 5de8f946afc0143be159482d212b880fd45b4a8b23fabf5b20b8e52eb7d05ef759b84476786b9f211fcfbb478e12110491e547081c18c13c9e162639dbf2ca50
TLSH
T190F0CDB6D931AC3718FC1B2960A54B4AEB5113173750845B3A3D860D8FB577B468581C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 037541e0da214a7e6b5586ff94a057769ecdd446621e53b52520292af7173970
MD5 6f16393fe70ae8a06548b4824732d4ca
SHA1 cf24abd09efb2a67e0a2cfc9084e9f3bf65e5c81
SHA512 6c7bbaae2a21637ce7f28cde35d3c9c65b788d03a05ffbd456b6640d4570405a5508ff3439d4e0381cb8b13ddf9d93cdb6508724e43956f7f97be8987f23b15b
SSDEEP 384:WSFtErCrfzCRYaEIjQO9fq96YHywsJVjwzH1S5rRAqGS22/Bep6:FErCrfzC2O26YHLsJVEzHs58qBe
TLSH
T18C13A23E72B6AC19DAC2157E198F1FB12774DF30C1C800638BF9B1B57A1AB566C4E225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 7a52d66c6ef4b7e9ec9086b5993dedfad931c4ecef161808fb0662c8b56ce6cb
MD5 cefd7b9c31191e01eafb16c9a23a4747
SHA1 a5375344a8c1932b5a42957cdf15f33314f84010
SHA512 e6857a0200a15b32276dbcd793e2346c7e6feb810d91676c7098d99d3e95d945a358ec593bb0cd542c124e3aa1f46493945d43b4ef6e848b40c47ed811a7e84e
SSDEEP 3072:ocYCL/kL/4UP/txX5L/0L/+L/pYySEDQh:ocnL/kL/4UHtp5L/0L/+L/aaD
TLSH
T16544A3FB1951B00BCBA842F6D2033A7DD177425D6CD1F8E9E6780C852825F32B6BDA94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 e3186de73984017a1ee89c6612e89bbd611b8ff80383e13a9286957249796c02
MD5 1645bd0d41fa4f1004071f210efdc25a
SHA1 1645498aa6fdcf70c8721056a9c46385be5672a2
SHA512 53e29b604de0da41d4e474cc266fa6145d20751ebca5aeb29aa3d645f8109b09d4ccf707ae9e7bda868dbf11727ef1a0928f9fc07fd70ffc85a492ed526d1f60
SSDEEP 6144:OQcOJaMBhFHozrUHuWRPwNe1lKx2x7JPI2pAt51GZ:OQNo23HoUHhAdu
TLSH
T13F254BDECB682D82CF6BC670B4D0D80B3E702083B69DD0D39941C5A957D2BC576E92AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 664db29ff395ca22be86c62c08e0ac420951417f548ebd12d0a9f34079b5b25e
MD5 a240af7a6447f6f97a80ab432c33a242
SHA1 9a07a377768b8b32c158acb0da0a83f80c824e15
SHA512 5594d94a8bf9831bd789446699b4b8a1b7ea9b6b66626fa9a228491f11fcb86fa147e33ab1fc5b17c2f6db1cd6fbf44d12e04ae8d3bab9f30b6b5c6ba6efdf17
SSDEEP 24576:Gz03YYRiQaAgXxi7XtIZrRP10ZMn2nzb+11HZWLLakoipKDfrn1:GA35RiQXgXxiD60ZM2K/8aXr
TLSH
T185865CEDCAB858C3CD639930B4F0E9877C7413D3F994C1D6C898C584016BBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b2497ca686bcf3272ca2d233064a93a3558ed25cb20dc0843b4bb53d8739465f
MD5 6e0cb4d1dde9a77645fd52eeb3d12b50
SHA1 ef196cbc3f028b1a7034ccedfc13a520592accea
SHA512 b390aab021f4b2632d2b9f1aab07dc975eeaf2c24d9a0daab7af781f84bbc7ed974a8096f0b68bd5ae5732ca63dde2de9c0a4b6658ce31effb0ffaec21ebdc94
TLSH
T17871C590603129B0CBDB053751DB3ECBB3B2AC61D71BEE21D29A913C780B36AF465342
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585ce0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585ce0.TMP
Size 3KB
SHA256 7b5e7812059307d9ba8d11615af1d4e4d19ac63bafcc5fb72e1a0b17d14d949d
MD5 cd3b737d6e0e5df7e1d4bfd64d00aa6a
SHA1 44c67d49a88541cfb030dcbe6a6f4fbdcb1b4d6f
SHA512 1cea0e2bf04b97c15e727f5e5a9f9c5b7a617e303ed179f414c407393ef826445623b1621f32ec5c8219da478aa39951ca06aaa38e5d46094b450d71759bde84
TLSH
T19361E541217529B0CBEB053752D33CCBB7B2AC41C71BEE06D2DAA13C780B360E862382
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 494ae4ff991a535e277ab9891fedfeb9b18b138949d16b5f10851537d7f374d3
MD5 b6cd80053c8805bd4204ded579807bc7
SHA1 104b33a6aeb1d8934fc0a52162a4ef862a2daa6b
SHA512 1031fecf252c9cbe104a300a64dd0bb32507e25511401ace3151341d40e37c71a44e97debc888f10481ceca09afbb5a4b02420181c4cfed861d6d8051c448269
TLSH
T141E0D899B8C6C21E691038C24134570ED1C838C7D786BE071740CDC47706121B7C7946
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
Size 322B
SHA256 061abe0fc2aa57bcd316acf9b0dd9f3311e3b8a4472282bb14285ecb976aa8c3
MD5 aaa61459f3caca57c1e7937108da4eb1
SHA1 da62a4ca9e152f1a22df98bff656a7b68e0bf239
SHA512 ffbd03f83b9038bb4a82841c6ea5834aac391af0d8a83a7b52813c7a28c9495a87946fb7c44fb2f260369c0fc9c169b08e238e3f6d4ca856c377398c1ac72bd6
TLSH
T1A2E07D0669CCC32F516478E3C6A88309D390341EE3883F465F0D89447203705B2C6781
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log
Size 304B
SHA256 1f844da045ae4e4e56937a272b1c4679f12badfc99e892895bf61bcaea111fc6
MD5 e31621408f289cd9771b4a7bee72f0e6
SHA1 730336e9c21b7f4f753b1fd9c4cafb9d868be5e9
SHA512 a0fe5b23623294e52f151bac2e1d57ecdcaaad55297289ddf3657329e75744e6776ddf4421e5d7e89f899f72465181a9e33dd8e0ac64671678ab6126344a1f60
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG
Size 326B
SHA256 3a4b19b4301d85d84d5995eb6aeac3e6a60d95f20368d4d2023cd2bfe3079637
MD5 1a723c86b42e67407594843e0926f850
SHA1 75d9e62037b28086f0468298dbf499f2994f2e9c
SHA512 5b5d4d2647cc01e9e6f9383be62f59c39d707b576c7fbdf368a926b7795624fde2f10e3232bcde2ec2c79b29aaf78e9358d90b14eeb47f408c8cef779637c407
TLSH
T1B3E026085DC8C26A51247CA38A7A930DC2E03C1EA388BA065B09CE946301701A2C2B80
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 97b9f0301311660d57c61920f1acb6a40718fdf8a8e9de56cb4777a2bd8cb5d7
MD5 a114fbf7e7edca4a9d6b2064204bdbf9
SHA1 a1758992f9a8cf89bfb1fb2eed30d76d643e76d5
SHA512 ea4772acd8001594e8a0164103cf4d3478679803974713a2751a32d66d1b731722961eefcc2608078d670417401829b875cb0ba17d9efbc52b2be09dfd4dcf76
TLSH
T18FE026245ACAC26A95147893876D8308C2D0351EE288BB06170E89846281F43A2EB6D0
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 27d2173bc0cd3e6605d68329e73ae9ad88a2156798a810fbfcfd9491ed71118e
MD5 14a3c09d1dccfb44f8af89c282120df4
SHA1 602476b9670e1ccad2511790f68cd58eec37a943
SHA512 e759cc4c5a26c750d1bbb35f06b693296dc0fb079dec3f24a13e9421ae8f8e920220fae5f3a4dfc18515ec599f65aec10ce32c2f9648120d1ea5305deda0e925
SSDEEP 96:rmLStejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/UuFhbbEOVpZf24JkMfXSFR+Cw:rQ9H+bF+UI3iWGVoWN3qL/vVVV63
TLSH
T1B724F10E5F352712CDBD913668EA44A35C7DF03F875366DA6C6114B5CEE2642A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
Size 8KB
SHA256 a5b57c77df203e6bd6b275fdd4eb075039ef51c5bb6758b511ebd6f6394e65f4
MD5 9fe3afd52da9514aced65c9cf8fccfb4
SHA1 ea3d6f532afe4ba333e763a01f059176e24d7e9a
SHA512 fe4a7d9b190d30b2d0ede64f4014e6ce4744915d0209a329e854446cd273df4f92ea87ecb30e1593d651e3fea859943e62322e04d69a919708443239e4dcad78
SSDEEP 3:dn993lljq7A/mhWJFuQ30VkWUUtdwenqFtjE9SFcTpL0WWaV1vGrV9RUISn:B9G7/VkSd4FS99pLTB1eB0
TLSH
T14E021291165095B7F858963DB2C740D81F76390C5551D805800C8C510F016D8524445E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 803B
SHA256 9dbe8c4ee18ddcc045b7872c4763ce81f040b7d03ec7c86660ad5291c555692a
MD5 8cff31c933555e8c77f3fbe6543461c4
SHA1 3d22f9965f863077759b82f3f2180b1130454850
SHA512 9c6bd04e7e2525ae52e70d7fac39b1d91ea37da070dcadcd298320b5486982b6169450aa61c52d0a9a9f17ee6b7b1f168c55a9040abef4bb85ee2abac9fac35f
TLSH
T10A01C03B62316E5FE3035D70150073B85F17F10F5EC5E944C4D2506D8ED85B9A9464B7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 8489a8f1a3c975053939df76d8e122b9c2f6ef8825372ad0a5e2c5c6a76ad559
MD5 11abadf21c33c6c43e7c9f6820da46bc
SHA1 4bd739c08f5286f6c1fea820ae5fceafde213dbe
SHA512 066d5c162f11483aa3314b1b16ac36f6e0451ebe4ea1a7a5dd630b600cce4395b7e962ceb64af2bece5b358aff7933af80ab8c1154e492f143e8764796ee62fa
TLSH
T136E0C06698CDC29F3104304B4219B30CC3B4341ED68B7F051B089E84B10D105A7D11D1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 eed7ed972e237ffb8b307b3147a31cd0b3f2e858b00f67847455d472ebf5301a
MD5 5f9dce5015b507902d3a5056a272788c
SHA1 940c2c56a7fa594ca5b4138195b25ab746292d72
SHA512 5bf39faf98d0a4e23926cf5617d4d800da767bfa47d17e1d4a562f6ceb8dd0cbb12ef211de5027d5bda792fda634c9d920f37109b22d7700b20b19fad4ccc24d
SSDEEP 48:T32/LopFMaty423w/a9NUuTMHwilnGojWwUP10b:KDeMatha9CHJln2DPq
TLSH
T108B2108E2F307211C1B44B37D9D584162E7C211D87737A85AA5420B3CEA26AFF60607B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 fffcc276268efcae1b7c1d55712012d38eb4196160164e789bdc0152b86ee870
MD5 4255c00410deff61d89b8c2696c00106
SHA1 9e18b1651c032f4817b6b93ae395ff980832376e
SHA512 084c9f1d9fc49c1bbe0385edb73d048cbccc8106dc414da7ce00f6af4226958ee9b357938033424c272b73ac7f40f0223b96998df2834ae2b935cf12acf405e0
SSDEEP 96:D1bSdf1DWaVjhniGj6VwvGzBuCVu/uSpuylPu4uEguWgumuq+ucuGud:D1+N1DWaVjhniGj6Vr1TV6DpDlPn/gup
TLSH
T1C291BFF787F4866DD91192F4AB186F1FCE5C0825832C3D6AC6E4AE1B93E2471E14065F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 9583a4d38fb316560334d57a9d84de1e3da7d4b40d2ca467a2a0ebfda99a1510
MD5 88f88720bcfa3bfcb9c39e61b9fdb810
SHA1 8efb30971c3006302c06f7fedbff1ba773525828
SHA512 10880f02defb1c058c8a2bc8f9cae1870a8b3a8f9e4d9dda977cc4f60cb62081b9a5d18581a8515748133d33deb84ae4b7431e89ca5a37da9f831e8142a29d67
SSDEEP 96:D1bSdOQVjhnj6LGzBuCVu/uSpuylPu4uEguWgumuq+ucuGuPawcVvl:D1+wQVjhnj6y1TV6DpDlPn/gupz+hjau
TLSH
T163A1BFF7C7E4866DC91152F4AB146E1ECE1D0964832C3C2ACAE49F1B93E24B1E18065E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 26c81474118ec6ef8138e1ff6a92cd276d4a20cfddfcee40238c928e46fb2f98
MD5 e12ff1b73daf5b98ac3a235edf8a2a11
SHA1 22b43e3bd0e910abbc5a86bade34c7cf498a3337
SHA512 7a676023d41c12003d713129f0022e71cc197838ad8db93d333697c17bd13f6c8bf724a125ad09e98ed697d4e85e56592c4ca550e6db73f8f5730a8e915267bb
SSDEEP 96:OIEumQv8m1ccnvS6KH76k5zxKoSuo4C+TkuW00PNstiYyL5iH8Okf3/2IYyCBv+p:OIEumQv8m1ccnvS6KMZhFlLSF2
TLSH
T1B1F267FB1637A209D44404F09144AB8E9F1A001B47B5B6EC77829AF7F2D61E1F1A475F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 2d55ce4a6a8f724a0ef67d7b5b44a3dec88ef3171154cb90e0935b43acdd1c42
MD5 9723e8d990d851cdd959a785adb29727
SHA1 640eda67edc28938f29c082e6fea9049e613ae7b
SHA512 4eaddb8acdae110f585bff0f90968f7c4ea5f09f40f6a64e7ffb936af45be80ea45e38076b604095b3a98b7435da82eb18bd5f1d94a67a68e86eb1411fbc4785
TLSH
T13021CE9BB17FE4AB303D097F1D017C45ADB6E436524278F8CA66C12CB0416FB0A26065
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0db2d2704513ae673f359511d9e1bf427c5b799f0db8dc58f9388416b85bcdee
MD5 ebea0358c7a142c1d597f117a9c7eedb
SHA1 ec7d1e440f2dac1359704a59c296a13851fe498f
SHA512 57549b3708d72c2937bae1384b7758b781af43f50346bfbab8344eaf4c813f9805815d40c57f875dcebd72dda30589e30d0fa47d8033566ea41b9e9e4fa19f8b
SSDEEP 384:sxR2Hwls/f+slWvKtz7QLcVx/5ys/9TDfpLjHn:sKHYs/fHYKt8cT/5p9HfZ
TLSH
T11072DA166938597BCCDBD209FA557F53D2F91523E2905E44AAFC8B1C01E76ED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 cd858b5e07df625d5928f4a1caaf04d26e04c8f6ddfad6da14cf5e2e5d69774d
MD5 2a137e936e7aa7bb778ecf4073ac0e12
SHA1 05e8f2f718a770967fc375000fe98eeff6fa8537
SHA512 f45d925951f4b16aa8d6f201b8bcf0810420e4b6d1dbaf9a84a0bba5f9309d1201dd00b51bdf5b798a6487617b55566c117b09c36262189581a9b3c3c3ae7156
SSDEEP 768:hDiNNidNi/ODiEWg5Niuf+Xi08F1+UoAYDCx9Tuqh0VfUC9xbog/OVZDisDXihNV:hDiNNidNi/ODiEWg5Niuf+Xi0u1jaCDO
TLSH
T19AC21C3B144CC77E4F844EADEC29AE976DD801CB9B988D4447EA494C03C67EF921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 924d923d28b8e43130f704ec915f8f34a0b7657ab20de180a122d63b2bfceee4
MD5 bd3b3d197400c9a626fa3640bf66e327
SHA1 e03c29882cfd07441813a67775aaf20dfb3d94ee
SHA512 919e5b3e6dc9ee03f7911bcc582baaf30c602915a16b94e5b710f411883379bea76b6395a75786a7a2d2b104913e59eaae4d07dea1d2a61909bd6edf04b571a8
TLSH
T1AAE026145ACCD27E61257193062A830DD2E8742BD2C83E462F05CF447242A05B1D2280
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 6fb3e54cd4cca49e402e4d1550e3b1a407eb3e3190030a7bf5befc0c468bbeb7
MD5 57037b5ada047e88fb130c68656bfbea
SHA1 e6727b335968970e4b773a5b803fe929975cdd61
SHA512 669d3505fb0bb955cf997a97867c084751fd954b36b4106ff0212292a7e267dc5644c6cd44913467f9a77d3690c65b3aef5c9e2a2789bf59a37b4e5e6f6d3153
TLSH
T1DBE0203479CAC36F615630974339D30CC1E27516E6CD6A252F0DDB44630664073C75C1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 b36230fb4f7ca4dcc2048371c8e2038b70cd02fb943ca297b96d76dbf27aa891
MD5 9d86f6977c7f1827c30ee00f44ae4ccd
SHA1 46bf6ad5d344142c3583150ddd5cf42d92c5aedb
SHA512 4e56f8067a24000b21a06f6feadd38c2cef61c60127c1ba7833eab6782d1377a405762541f00de077cb5d3cad04bcd403505ed3324b2591eed2ceadf448963d8
TLSH
T127E02674DAC8C33A6810B0D742669B0DC2F07C1E93C9BB0A57088984A201651B3E61C0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 ec6a9dc3878c91e70663740ad29dfb611893da4960104249884c613b95ee42fc
MD5 efc8873f8bcafc806d2ed85dd6731bfc
SHA1 215eadad54a2350eeb16e4fe842dc90218a400c8
SHA512 12d9be8deb2285ef014464ca688c3bfbfcd9ed737e2b84c4df3b8dbf8d850324cc17634db0c0ec65b22797b094a06ab17e638f29ccff9458dad6dd7d9daa1984
SSDEEP 768:TFUxVXrvC7WZd5J5PClV2Hlftp113RFJlbDNOz9B2J:qVtp113RFJlbDNOz9B2J
TLSH
T173B24810797E224138FD6908E495955F234230B3306AA93B7BBD64E60EA7E005FFDDE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 a70e597ea77c48893b4c4df30ab86e5fdea4a06cdeadeee5165de1ff85808262
MD5 48d9cd4a18469da4cdddaf8763ef3432
SHA1 dd3504f94a20d7776bf879cc9e4a83d7c6baf41b
SHA512 934c15d6d58123d4fd0e0ccb4384b4fd5da3c5bb3af61e945e74e04cae6cf2b36f1c8c292a9a8f270b6e01335dd546dfbe71bb421b4230e7cae2ab5e664573df
SSDEEP 384:DNrRZyCSDnxTIC3EMEhIKyll7svbFKfk7:xFZJSDniK1yI1l7svbF9
TLSH
T13644850A7B747001EDE6DD721CB080771E3CB16E8F22A6916DA254694DB3853A63D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 10KB
SHA256 83b39e33f7f862b2142a5ba9f76768188026c7bea0d806a00ae4d86c6165a8ba
MD5 282a0d91c0eace291d86d3ee50581440
SHA1 42abe6dfdcc343759aa7d305436b40d7961f01fb
SHA512 098901bbeaa746fa4b59964076e00b45a21cc690a726925418dc3bef73b27ac694c2fc3865a8a0f740e79a8e476eaebf5e91419391d756a325c32786ccec3f36
SSDEEP 96:pZvN89+TvgxZMQgOXVZeDWXWY1lDRseC5AWVrlipPsWWVelKlEJ/1hBBBBBBB:TJO5QAsrlipPrsKGEJt
TLSH
T1142223553F023F33C10D4AB722768B5143DAC0868276666E766A146E0DD763FC7CA1F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 4ffe84d234484394445c27baded2f44ecb90d70be7a14357e0ef453d6be6903a
MD5 5d443204f48f9599364a89e16fac209b
SHA1 d0c64ee781573497758753b355e2d505723bba75
SHA512 4fb5ca26810bd949d7ffa492d3c5a60cad89b502a965ee4ab637e155762d658cda196d673810bdb7e29625d029f981a8fa6a80454533bc6387bb4be4e3d2a872
TLSH
T1D1E02010FDC4C3DF602430C70175870DD384341BEAC46F093F01C9486502A5276D7551
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 7a5a0d2b1413e2dad9454add29cb40f8700f4819ff9505a689b02e23da13e2b9
MD5 a7ae4e8145926678190121bd1d371a8f
SHA1 1b8b78cf0be5c69adf23d87286e3b9df0c3686c9
SHA512 d5dca8f1f01a96189454b8a7e21ba2c2d5dc16d94a897effb8ed690bcd0aee2bc1fa82c15c005ec4344cae9af68bfd7db86ba172cf049e3167aff6f1ec7a0879
TLSH
T105219015F320C508E14A827DA06A97310738E8529FBCED0F847930366D71F441E8BBE0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 83f25a4084f7e76cd94eda87f88cc3829f603b9d4e203eec0246b5dabe51fe79
MD5 706c83a687eb2e2b132d3f3c7b42d443
SHA1 c4fa58ee747134e21b74eeddc2069348cdd5ff53
SHA512 6183d9ac2cf6c2601bed70434a012a4d40c4ba4de2c152ebd6afd361a84551590fc69fa379f220aed3c4f3b79d4978cac97b7e3c73ec6b0febb4d97995c90fd9
TLSH
T169E0D850B9C8C3DF502034830575DB8DC295385BEAD46F052F01CE486242A8376D7551
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 d293915e1f8c77f4ec9500eeb75e4a1e33fbe42f2baf6d49dd1f307b42d0fc0d
MD5 94fae38fa4d5333b44222d936e3f8f82
SHA1 2d6779ffec227e888fdbff40f7ea7ff43ed4909d
SHA512 645126e0aee9116dc690d38baf8459665efb766ba9e1f90942802daccd5823734baae7824f17b3c02307cb93bfb10db50f1f89fa4b63e3c2215370d7c3ec6e33
SSDEEP 3:MsEllllkEthXllkl2zEflnkt:/M/xT02z
TLSH
T19B440404FFC00515D700113044F1C3501771D51005115FC374D1C433DCD75410C00100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 3594fd2b08be48ca5e543ff9020721190618fc1486509ecf7ae49e176c67f8cf
MD5 672daf6d3021908464b04c34d4d2396e
SHA1 64a4619ac06367ad53bacbfea3c3210468985258
SHA512 d29c160b1a67f37c8efb4324bfc976223212829ff93c785694ac9f155eac99aa3ba13613995172a788f2e90db75c3a4c662475d55803425549ea8d9949f730a8
SSDEEP 768:UF9j+9OTwgUu/4GF++CeYb3KZr4Kzydqvu:L9OCp53KZccyMvu
TLSH
T116D2173EDC61CA7F98EE7B88A70E391699E00133D5A889C8DBD81F4D81B759DF306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 086eba5b5289f4b099c1df75f24e7f825e2e8de048ff041c738f2389e8ff6ef8
MD5 e79b8dac679d4cf8221db12333c416bc
SHA1 a837fa5138d6ac87b35ffa44a94b7fd038868d27
SHA512 31bd256af4f6693674c2c06a6b7dabaeae1fe34341d66aafde2e3b85abd1d2fac074b4d57d2d45d3429a80bafd9a95dd3965dcbed52f66c50332dbaf021da2ca
SSDEEP 384:n5iF9tNn/s3n9S38Nq8TUNTUlIRAu6oY/4ZpYFf3y5fFE066FPy+1/zAvAi3KFKL:QF9j+9OrwgZA/to5fF+E7Fi6FKMXu
TLSH
T1E2C23A3ADC51CE7B98EEAF88A60A36569DF00273D5984AD8DBD85F0C41A31DD6307C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 4214ff5337a015e05b6c79f5416e81a68a507467cf04284dc7c5ddd7efc5a66f
MD5 bb65817590b7f924d69ea52dcdc3a3d3
SHA1 90c880891b4a08cb63619a0df311517cbfd43186
SHA512 8d128c7c331990e73e022261792b8e46c60d0fbd33a8a9442843a34286a40498f515f088ac67730ef369a653486a7a7460d0c34c8dbd7e0ece930db7544bd642
SSDEEP 384:nsiF9tNn/s3n9S38Nq8TUNTUlIRAu6oY/4RXfLFGFE066FPy+jC+FXaHGd9F7IzR:XF9j+9OrwgZA/4GF++CeKmdu
TLSH
T168B23A32D865CEB79CEA9BC5B75A7686DEF0116385C84ED8D9D85E4C00C72DE130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ef3e7499bd94c6db74be47aedd19e32d69f7073ef6282f31c6e4fb239e7fff89
MD5 84e55122b0141dcb7092d64d09c9c491
SHA1 71cd54d0226b32182f36da8ae86e99712bd6a58d
SHA512 44625c533a383371c9bde05f440e5b1c1f09fa51de16c37f7f8fac375c10a1a2b0017dfdf869d2fd347b890a04d6622d36a594a0d24a6554d839707b31d9a64d
SSDEEP 384:nZiF1tNn/s3n9Sd8N78TUNTUlIRBu64RjRXfLFGFE066FPy+jeITGT0I9aV8Lk11:wF1j+9YWwgijTGF+eei+0aaAvy
TLSH
T1ADC23A36DC64CAB7ADF65F99B7097B46AEE002A3D0D859D8DADC5D4C00872ED1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b0f8a0649e349c6eafc4f10b52e1c1ca9b02a2b943a337bd1223e014944d8675
MD5 e9fc7d6405498cf131ae50858a9fa149
SHA1 c683fa6b144c0086af2658cdde688cdba0d3ee9e
SHA512 404ca51b66db446ba421f0ddc52fda6fa2f4bd2105765098f45433cd4ae432b01fce930abc3ea6c68f1a9af63469fd1e3d4fe9003b8e7170394766d09cf235a4
SSDEEP 3:MsEllllkEthXllkl2zEflLl:/M/xT02zQ
TLSH
T1784404047FC10405C7001130C051C3503370F5104D315F4334F145337DCF5441C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 59e4535d87741a1faa44cbe3a8ec23cf8c004f99a8e2a4fa57d9ae2ac516eaa1
MD5 acd0f812c00374940b39e43b1b4413e3
SHA1 9be4351452e6cad41588bbad0f10b288684b3760
SHA512 2428fcc2609382f9e8d0ba7e604ae4fb4394375a6758ac598b662253af04706f3921b4eae793d5d28147b25987ffa8583db6edcdc46e9ff485d87158a3908acc
TLSH
T164312FE0582C2EC2D4BE0DAF749B38EC94E8D726F194347D2898E998467D65C658183F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 e42078fee7a36dd9f585067ea9a5b1dadb97b02de90a167fa4f09978c426b655
MD5 6fe60609d1d677a54540da6ed3bd5292
SHA1 6d166807f404111742e92f14899ac53d0772d9ed
SHA512 0ff83896fa0a5b4ba0584ef1e62c17c5209ef4b0857594da353ca5dbbd46bf5660585ed1491a216e76c9450465b6028e53fdc38d8639c441ff2a442ce544c574
TLSH
T16A416FE05C386EC2D0BD0E6FB09B38FC90D8DB25F190347D28A8E988453E65C648083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 916e8e38a66b7b86d4049a9bae1c674597a46ce68404be3bab9fed9ab680a4b0
MD5 1284c9bd6a4cbd13d82d0d4d3796afbc
SHA1 72d78246019bae13eb2b6a420975fbf766ea08bb
SHA512 a1f37ac9ba96e6648fd31e58a1a1baccd9db35ac08dd5f9aed61b832911cae019924503ada227ee42db59e6dab9bf053a11589588b72a4486c85a6c3543033d7
TLSH
T1A3412EE05C3C2AC1D4BD0E6FA09B38EC92E88725F590347D6864E988593965C648083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 ff799baabe2eda5b3795def41c8bdde3b9bddac264c5c1a56816cbb566edf671
MD5 f1fda9d7e7271d53b33b5ed58eece4b8
SHA1 fc971c1cd64405a2c031c6870aa877b64e6f2979
SHA512 54723967c4fdc0297518d7ad053bc3d1a3739b6b6eaa8cd64cc5f6098541dcfbc6cd39b55e7b6d5b8a34c5a63693da7e90ca12ab98dabb759220a10293313f07
TLSH
T1104130E05C392EC1D0BE0D6FB49738FC94D8D725F194347D2898E894467D61C648083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 0fc0e9e1b4c4a7eeab3717dc2dd3aecb8cd8e126019761dc06c57509ab3813b1
MD5 5edcc9bc73caf1e95dcaef41a11545a2
SHA1 1e107eec593944f305902dbdb11758826da4722d
SHA512 b054d31b6f5d1b1d8f86537d8d6f28bcdc33bc793e5afff22a7fdadff9302c6b37e9d1eecb7deb9dcb7eb6da548a1478775bacb80ff15f78370c8f61da7c6d52
TLSH
T1734160E05C386AC2D0BD0E6FB0CB38EC91E8DB25F590347D2C58E988497E65C648083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 0d0ab760022ac0d111d90a9a63ff8792701d2c20eceb0ebc27c0a1bd46178602
MD5 a1ed68ba35f722e7763f9c3018749aee
SHA1 728e45618b9e7748e917cc392df5c2b6bf2668bd
SHA512 b191d1f07f01a101afbd80da9846c19cd07cc55518e6379ae3f0d69ebbf6f507743de8a01ca62fb96ea649e8a36f4bf3b97e7aa5467df87f9b73c62e976fa6cc
TLSH
T1DA4140E05C382AC6D5BD0E6FB09B78EC91E88B25F190347D6C68E988497E65C648083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 84d9c16906706014c077eaeade61150735c9a8cf98362b49e0bf93420c403c99
MD5 0b605252cbc1171914673db391d6b2b5
SHA1 4007fa979710712368fa96f9f6682bb9093c1f1e
SHA512 ed9ff39df30f30b788600df4b4e4dd5c328bd008b023e26bdf52993d8ee9486bfc7a15821051760a292a3beb45faee57eef10a774fd6d14f8574818730b5c073
TLSH
T16F513FE05C3C2AC1D5BD0E6FB09778EC95E8D725F4A0347D6868E988097A65C74C083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 e8f7447deb7f5fbeae04dd1121c5ea0a30397c2d7d02a0d50b21de453c69f7bc
MD5 39a81022d4106589d638b24209ce9d06
SHA1 ac6bb6ffccd06109b035cb50dbb92a491f88a64b
SHA512 62e6b30a0b76c0d58a3bd4d67f51c10da8262f17468ec2f6f5546ab661913d8ffbac53ba46409a44928ba6d61731f022c9b0febb695ed24d0eacec06b6ab6413
TLSH
T10E3141E1583D1EC2C4BE0CAFA09B39FC54D89325F59470796898FDA8563DA5D358083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 212d128f5082a46d0c090ad9587c80e4cb9a310d7260b2bf10c8ce1fb136d217
MD5 c7631707209f803ec978e440cff87930
SHA1 a100327f1968b0e9a8d88365a0c78284760201e0
SHA512 0a3d04db67768040692ac0a8cb08cf314c8ec72101c8c3f6675116980a903fb2da0822a0a01366359538b89a48ad7957cbf4a0c37ff7e69d7666d27a18c02ec0
TLSH
T18F3162E0683D2EC2C4BE0DAFA0DB39FC94D88725F59430792894FC94413D65D258083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 d5aaf27357bf41ae3bbe0ad79272cd2003289382bfd7dfa62ca1a4fe98d15420
MD5 ab22e9973f2ee78a6b48152861ca4485
SHA1 fb7b37be93615f133a5a3436a3f0bee0a91f485e
SHA512 6883ff0b0fdc3f338d474b85d479121d6729285ae19a45404e745a2a66bb2e1321aed891bb6d1095434f9b6e91f328ac3eb95cb08aecf223e379a8f5aaf8bd0a
TLSH
T180513EE05C3C2AC1D4BD0E6FA09B78EC95E8D725F5A0347D6858EA88197A76C74C483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 3592f50d24d00863af9935e4f933c2f037bd3aced8d4ef5d8115e804a83a91ae
MD5 0f4dc5d00b77d58ca7da1cbba2ddb693
SHA1 fa5b5da5274a992219f933d8dafde5a6179bda40
SHA512 6da7a583ad458a5060889b0ac91251afb036fb39422c3603a197a4ba85efe9493fcd7e91e76d56488e9b5b5e8dc78e2065dcbca38708d2296798a7107517e723
TLSH
T1A03141E0583D2EC2C4BD0DAFB4DB39FC94D89726F194347928A4F894423DA5D698083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 af599ebef8655ccff14613c3f6694b1e3129cfdc87fc28abe52787ed8d6dc3d0
MD5 d82ae672001053d970720cd387a593a1
SHA1 8726930e529806be6f21721c90917cd0dcc6efde
SHA512 03dfcaa539435d51374846b283d10c587f919f2870dd698c89da5a0d0c85e54c51ade6ec91a8a303a99d256cf440318a77beb7ab8bd609414e046a53652dab1a
TLSH
T18E2110E1682D1EC2C4BE0DEFA09B3AEC94E8D326F59470792898FD94523D61D258087F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 79321a7399a8c199ac1fd4b24e781edc35641ffa5197b14740050af72e870985
MD5 c696197058f991ca610b9e50205c354a
SHA1 66088f25095263e0fb668e27f7ed9c146f91cc2a
SHA512 9c87903dcb12916d0c54b3b5fdbb6f8dcee28e218348aeb6bdf0fde51809efe7748bbb991a9f3a11365dbeefd9fe5902827e2be9e254d04b41d8b4c2d75a06a6
SSDEEP 768:6QIOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:9xhaqLI1WcxKgdfHJHH
TLSH
T10763D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34fcdeb2-52bb-4965-aba7-c1ebb1103ae2.tmp

Path C:\Users\Admin\AppData\Local\Temp\34fcdeb2-52bb-4965-aba7-c1ebb1103ae2.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir796_490052780\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1356227858\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

miniwallet.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Mini-Wallet\miniwallet.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

notification.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\Notification\notification.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_1536784307\json\i18n-tokenized-card\fr\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_229134736\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping796_567884518\edge_checkout_page_validator.js
Size 1009KB
SHA256 04047fbad72cb02b113ee3a1f1823227aac74e1615fc5fa359d11776c727259c
MD5 21147b0280aa959a020d50a7d5738f17
SHA1 2e57c2a0e0b2c1f1cc78acf1a8fbb833c01b984f
SHA512 92db10d864968ee94156df795552867723aeb7ef03341e00c7f8cf11542a8443f83e1eb2487631ed38b441d4af751c8f4b3f99319312e50d8501df74263c01a4
SSDEEP 24576:cs4ymRAbsvvG3kJ6ARjiQixwaErg/OUfWEo0EQ1Xp8C9T0dK/vzHEiJsfaG81E9/:cs4ymRAgvvG3kJ6ARjiQixwaErg/OUfq
TLSH
T1B5252B84E1E2253466D74CB960B7D2C4B5DC04583399F1E8FA6C68CADB0F94723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download